last executing test programs:

1m46.74253035s ago: executing program 3 (id=193):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x8, 0xc, 0x3, 0x5, 0x1, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x10401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x200, 0x1, 0x4, 0xa, 0x8, 0x3, 0xb, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x3, 0x4, 0xfffffff7, 0xfffff801, 0xd237, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0xb, 0x3, 0x40, 0xa1, 0x1, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x5, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x80000001, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x3, 0x9, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x8001, 0x97f82544, 0x8, 0x0, 0x9, 0x9, 0x80, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x3, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x8004, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0x5, 0x4, 0xffffffff, 0x1f, 0x100002, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0xffffffff, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x0, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000280)={0x0, 0x0, 0x0})

1m46.521117463s ago: executing program 3 (id=195):
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x603, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040890}, 0x804)

1m46.350784026s ago: executing program 3 (id=197):
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x7})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

1m46.05433353s ago: executing program 3 (id=200):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000040)={[{@mb_optimize_scan}, {@nobarrier}]}, 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m44.831942718s ago: executing program 3 (id=206):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4004)

1m43.704211265s ago: executing program 3 (id=214):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
clock_gettime(0x0, &(0x7f00000000c0))
ppoll(&(0x7f0000000080)=[{r0, 0x2038}, {r0, 0x8008}], 0x2, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x0)

1m43.366326579s ago: executing program 32 (id=214):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
clock_gettime(0x0, &(0x7f00000000c0))
ppoll(&(0x7f0000000080)=[{r0, 0x2038}, {r0, 0x8008}], 0x2, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x0)

9.55638306s ago: executing program 0 (id=921):
r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x28043)
r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0xd0)

9.420717222s ago: executing program 0 (id=923):
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)

9.087109717s ago: executing program 0 (id=928):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$inet6(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000900)="95", 0x1}, {&(0x7f0000000940)="84", 0x1}], 0x2}}], 0x1, 0x4000050)

8.89224244s ago: executing program 0 (id=929):
r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc19, &(0x7f0000002140)="$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")
r1 = syz_clone(0x1080000, 0x0, 0xfffffe81, 0x0, 0x0, 0x0)
r2 = gettid()
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r0, 0x68000000})

8.447274276s ago: executing program 0 (id=933):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000040), 0x10)
recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40, 0x0)

8.125633961s ago: executing program 0 (id=936):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8)

7.649833738s ago: executing program 33 (id=936):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8)

4.400341636s ago: executing program 2 (id=964):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r1, 0x2)
flock(r1, 0x2)

3.579432478s ago: executing program 4 (id=971):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x1, 0x1, 0xa, 0x1ff, 0x6})

3.533834168s ago: executing program 2 (id=972):
r0 = memfd_secret(0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r2, r1, 0x4, r3}, 0x10)

3.41371308s ago: executing program 4 (id=974):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x90, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)

3.097273625s ago: executing program 1 (id=976):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)

2.969432567s ago: executing program 1 (id=977):
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
fdatasync(r0)

2.423861034s ago: executing program 1 (id=978):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
unshare(0x8040480)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fstat(r1, &(0x7f0000001800))

2.423053734s ago: executing program 4 (id=979):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r0, 0x6)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4)

2.209544188s ago: executing program 2 (id=980):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r1 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@remote, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@local, 0x3507, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

2.208716237s ago: executing program 1 (id=981):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x10000, &(0x7f0000000100)={[{@disable_roll_forward}, {@four_active_logs}, {@background_gc_off}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@data_flush}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000f00)='.\x00', 0x1a1a438, &(0x7f0000000100)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

1.436281429s ago: executing program 4 (id=982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

1.429266429s ago: executing program 2 (id=983):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6)
fcntl$setpipe(r0, 0x407, 0x7000000)
fcntl$setpipe(r0, 0x407, 0x100000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x4004010)

1.295750251s ago: executing program 4 (id=984):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700)

944.533496ms ago: executing program 4 (id=985):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200), 0x0, 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f00000003c0)=""/216, 0xd8)

772.352269ms ago: executing program 1 (id=986):
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-'], 0x31)

461.988683ms ago: executing program 1 (id=987):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00006f0000/0x1000)=nil, 0x1000}, 0x3, 0x2})

393.322274ms ago: executing program 2 (id=988):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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")
r0 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0)
write(r0, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)

0s ago: executing program 2 (id=989):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00')
read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020)
lseek(r0, 0x9, 0x0)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

t device team_slave_0 added
[  100.289188][ T6491] team0: Port device team_slave_1 added
[  100.363026][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.388647][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.459461][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.577740][ T6636] loop1: detected capacity change from 0 to 256
[  100.595857][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.610499][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.689015][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.894276][ T5793] Bluetooth: hci2: command tx timeout
[  101.017875][ T6491] hsr_slave_0: entered promiscuous mode
[  101.036863][ T6491] hsr_slave_1: entered promiscuous mode
[  101.043489][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.081389][ T6491] Cannot create hsr debugfs directory
[  101.127300][ T6657] loop2: detected capacity change from 0 to 164
[  101.174473][ T6657] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  101.223316][   T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  101.249149][ T6657] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  101.276808][ T6657] Symlink component flag not implemented
[  101.297933][ T6657] Symlink component flag not implemented
[  101.328104][ T6657] Symlink component flag not implemented (7)
[  101.341805][ T6657] Symlink component flag not implemented (116)
[  101.430905][   T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.461269][   T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.509125][   T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.526379][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.584233][ T6491] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.613654][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout
[  101.614141][ T6491] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.619714][   T50] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  101.656740][ T6491] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.723379][ T6491] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.728606][ T6647] loop1: detected capacity change from 0 to 32768
[  101.758640][ T6647] (syz.1.266,6647,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.789713][   T23] usb 1-1: usb_control_msg returned -32
[  101.796655][ T6647] (syz.1.266,6647,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.812702][   T23] usbtmc 1-1:16.0: can't read capabilities
[  101.859520][ T6647] JBD2: Ignoring recovery information on journal
[  102.001771][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.026990][ T6647] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  102.107897][ T6491] 8021q: adding VLAN 0 to HW filter on device team0
[  102.164753][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.171927][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.226491][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.234392][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.389526][   T23] usb 1-1: USB disconnect, device number 4
[  102.605501][ T5782] ocfs2: Unmounting device (7,1) on (node local)
[  102.729381][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.973970][   T50] Bluetooth: hci2: command tx timeout
[  103.317600][ T6726] loop1: detected capacity change from 0 to 256
[  103.434643][ T6726] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d)
[  103.609803][ T6491] veth0_vlan: entered promiscuous mode
[  103.669133][ T6491] veth1_vlan: entered promiscuous mode
[  103.716261][ T6491] veth0_macvtap: entered promiscuous mode
[  103.744410][ T6491] veth1_macvtap: entered promiscuous mode
[  103.782052][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.828345][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.882733][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.926392][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.956049][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.997186][ T6747] netlink: 140 bytes leftover after parsing attributes in process `syz.2.284'.
[  104.006882][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.036617][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.083412][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.115109][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.151716][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.192503][ T6491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.213313][ T6491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.222038][ T6491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.250526][ T6491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.305672][ T6760] input: syz1 as /devices/virtual/input/input8
[  104.477259][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.502143][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.578728][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.607325][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.476230][   T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  105.496969][ T6786] loop4: detected capacity change from 0 to 4096
[  105.568505][ T6786] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  105.599720][ T6786] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  105.620185][ T6786] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  105.635342][ T6786] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  105.649999][ T6786] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  105.673384][   T27] usb 3-1: Using ep0 maxpacket: 8
[  105.685167][ T6786] ntfs: volume version 3.1.
[  105.699130][   T27] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.732841][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  105.753831][   T27] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  105.755125][ T6786] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  105.799734][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.803657][ T6786] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  105.820472][   T27] usb 3-1: config 0 descriptor??
[  105.848678][ T6798] loop0: detected capacity change from 0 to 1024
[  105.885544][ T6786] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  105.906684][ T6786] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  105.932783][ T6798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.963261][ T6786] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  106.032125][ T6798] capability: warning: `syz.0.297' uses deprecated v2 capabilities in a way that may be insecure
[  106.112450][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.352567][   T27] uclogic 0003:5543:0042.0005: No inputs registered, leaving
[  106.396374][   T27] uclogic 0003:5543:0042.0005: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0
[  106.631306][ T6811] loop4: detected capacity change from 0 to 256
[  106.644767][ T5953] usb 3-1: USB disconnect, device number 6
[  107.125620][ T6805] loop0: detected capacity change from 0 to 32768
[  107.161520][ T6805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.298 (6805)
[  107.163402][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'.
[  107.233236][ T6805] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.283886][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'.
[  107.304938][ T6805] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  107.351675][ T6805] BTRFS info (device loop0): using free space tree
[  107.381508][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.302'.
[  107.575734][ T6805] BTRFS info (device loop0): enabling ssd optimizations
[  107.582723][ T6805] BTRFS info (device loop0): auto enabling async discard
[  108.153558][ T5784] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.375551][ T6868] netlink: 'syz.4.310': attribute type 11 has an invalid length.
[  108.429802][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'.
[  108.531617][ T6874] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  109.472083][ T6870] loop0: detected capacity change from 0 to 32768
[  109.620589][ T6870] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  109.620589][ T6870] 
[  109.664822][ T6870] xtLookup: xtSearch returned -5
[  109.675573][ T6870] add_index: get/read_metapage failed!
[  109.746686][ T6898] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  109.746686][ T6898] 
[  109.803598][ T6898] xtLookup: xtSearch returned -5
[  109.813345][ T6898] free_index: error reading directory table
[  109.819284][ T6898] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  109.819284][ T6898] 
[  109.852525][ T6898] xtLookup: xtSearch returned -5
[  109.885481][ T6898] free_index: error reading directory table
[  109.903264][ T6898] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  109.903264][ T6898] 
[  109.923226][ T6898] xtLookup: xtSearch returned -5
[  109.934705][ T6898] free_index: error reading directory table
[  109.956147][ T6898] find_entry called with index = 0
[  110.019293][ T6870] ialloc: diAlloc returned -5!
[  110.472565][ T6927] loop1: detected capacity change from 0 to 1024
[  110.563491][ T1133] hfsplus: b-tree write err: -5, ino 4
[  110.578720][ T6929] loop2: detected capacity change from 0 to 256
[  110.605580][ T6929] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x50a6a7f9, utbl_chksum : 0xe619d30d)
[  110.663248][  T786] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  110.869578][  T786] usb 5-1: Using ep0 maxpacket: 32
[  110.887189][  T786] usb 5-1: config 0 interface 0 has no altsetting 0
[  110.915644][  T786] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  110.933189][  T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.951537][  T786] usb 5-1: Product: syz
[  110.961888][  T786] usb 5-1: Manufacturer: syz
[  110.971897][  T786] usb 5-1: SerialNumber: syz
[  110.992500][  T786] usb 5-1: config 0 descriptor??
[  111.424933][  T786] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  111.676464][ T6952] loop2: detected capacity change from 0 to 8192
[  111.720036][ T6952] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  111.758312][ T6952] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  111.784305][ T6952] REISERFS (device loop2): using ordered data mode
[  111.790983][ T6952] reiserfs: using flush barriers
[  111.798203][ T6952] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  111.800682][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'.
[  111.815456][ T6952] REISERFS (device loop2): checking transaction log (loop2)
[  111.843503][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.334'.
[  111.862224][ T6952] REISERFS (device loop2): Using rupasov hash to sort names
[  111.900850][ T6952] REISERFS (device loop2): using 3.5.x disk format
[  111.921588][ T6952] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  112.022192][ T6952] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  112.041153][ T6952] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  112.053001][ T6952] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  112.068059][ T6952] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  112.113468][  T786] usb 5-1: USB disconnect, device number 2
[  112.236614][ T6952] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  112.302408][ T6952] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  112.364673][ T6952] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  112.427720][ T6963] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  112.833360][ T6982] netlink: 'syz.2.341': attribute type 4 has an invalid length.
[  112.843342][  T786] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  113.054846][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.095019][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.114268][  T786] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  113.134494][  T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.145883][  T786] usb 2-1: config 0 descriptor??
[  113.582514][  T786] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  113.641040][  T786] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  113.780968][  T786] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE
[  114.054797][ T6991] loop4: detected capacity change from 0 to 32768
[  114.183593][  T786] cp2112 0003:10C4:EA90.0006: error setting SMBus config
[  114.224365][  T786] cp2112: probe of 0003:10C4:EA90.0006 failed with error -71
[  114.231807][ T7020] loop2: detected capacity change from 0 to 512
[  114.251220][  T786] usb 2-1: USB disconnect, device number 3
[  114.365372][ T7020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.411428][ T7020] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.604500][ T7029] block nbd0: shutting down sockets
[  114.738192][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.807958][ T7032] loop0: detected capacity change from 0 to 4096
[  114.816240][ T7034] veth0: entered promiscuous mode
[  114.847364][ T7032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.857384][ T7033] veth0: left promiscuous mode
[  114.994525][ T7039] sp0: Synchronizing with TNC
[  115.093653][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.319200][ T7043] loop4: detected capacity change from 0 to 256
[  115.326835][ T7043] FAT-fs (loop4): Unrecognized mount option "dmask=0100000L000000000000000" or missing value
[  115.626155][ T7054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.633825][ T7054] IPv6: NLM_F_CREATE should be set when creating new route
[  115.641091][ T7054] IPv6: NLM_F_CREATE should be set when creating new route
[  115.648369][ T7054] IPv6: NLM_F_CREATE should be set when creating new route
[  115.810299][ T7064] netlink: 'syz.4.360': attribute type 1 has an invalid length.
[  115.863239][ T5953] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  116.075109][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  116.095882][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  116.115977][ T5953] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.140726][ T5953] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  116.149012][ T7076] loop4: detected capacity change from 0 to 1024
[  116.169053][ T5953] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.194120][ T7076] hfsplus: failed to load root directory
[  116.206384][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.246322][ T5953] usb 1-1: Product: syz
[  116.276661][ T5953] usb 1-1: Manufacturer: syz
[  116.281288][ T5953] usb 1-1: SerialNumber: syz
[  116.373598][ T7056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  116.527984][ T7091] syzkaller1: entered promiscuous mode
[  116.538770][ T7091] syzkaller1: entered allmulticast mode
[  116.550810][ T7091] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 6
[  116.633782][ T7056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  117.274068][ T7056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  117.293863][ T7094] loop4: detected capacity change from 0 to 40427
[  117.315824][ T7094] F2FS-fs (loop4): invalid crc value
[  117.342657][ T7094] F2FS-fs (loop4): Found nat_bits in checkpoint
[  117.453733][ T7094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  117.506600][ T5953] cdc_ncm 1-1:1.0: bind() failure
[  117.536153][ T5953] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  117.554535][ T5953] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  117.584762][ T5953] usbtest: probe of 1-1:1.1 failed with error -71
[  117.614228][ T5953] usb 1-1: USB disconnect, device number 5
[  117.739105][ T6491] syz-executor: attempt to access beyond end of device
[  117.739105][ T6491] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.756872][ T6491] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  118.112484][ T7119] loop2: detected capacity change from 0 to 32768
[  118.148775][ T7119] XFS: ikeep mount option is deprecated.
[  118.220906][ T7119] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.347917][ T7119] XFS (loop2): Ending clean mount
[  118.367763][ T7119] XFS (loop2): Quotacheck needed: Please wait.
[  118.460840][ T7119] XFS (loop2): Quotacheck: Done.
[  118.762923][ T7141] loop0: detected capacity change from 0 to 8192
[  118.798645][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.809489][ T7141] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  118.834603][ T7141] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  118.859603][ T7141] REISERFS (device loop0): using ordered data mode
[  118.926987][ T7141] reiserfs: using flush barriers
[  118.976732][ T7139] loop4: detected capacity change from 0 to 32768
[  118.985446][ T7141] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.034758][ T7141] REISERFS (device loop0): checking transaction log (loop0)
[  119.056937][ T7141] REISERFS (device loop0): Using r5 hash to sort names
[  119.085527][ T7139] JBD2: Ignoring recovery information on journal
[  119.099376][ T7141] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  119.175559][ T7141] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  119.213498][ T5793] Bluetooth: hci2: command tx timeout
[  119.221903][ T7139] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  119.580599][ T7139] syz.4.381 (7139) used greatest stack depth: 17680 bytes left
[  119.707933][ T6491] ocfs2: Unmounting device (7,4) on (node local)
[  120.651926][ T7188] loop2: detected capacity change from 0 to 4096
[  120.673371][ T7188] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  120.704920][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  120.704931][   T28] audit: type=1326 audit(1752562521.897:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.0.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e929 code=0x0
[  121.411637][ T7214] loop1: detected capacity change from 0 to 512
[  121.446427][ T7214] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.403: iget: bad i_size value: 38620345925642
[  121.487381][ T7214] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.403: couldn't read orphan inode 15 (err -117)
[  121.550661][ T7214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.683610][ T7214] EXT4-fs error (device loop1): ext4_check_dx_root:2266: inode #2: comm syz.1.403: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  121.715584][ T7227] loop0: detected capacity change from 0 to 512
[  121.731881][ T7222] loop4: detected capacity change from 0 to 4096
[  121.739136][ T7227] EXT4-fs (loop0): Test dummy encryption mode enabled
[  121.784120][ T7227] EXT4-fs error (device loop0): __ext4_iget:5053: inode #11: block 1: comm syz.0.406: invalid block
[  121.833523][ T7227] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.406: couldn't read orphan inode 11 (err -117)
[  121.855157][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.926895][ T7227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.397685][ T7227] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  122.427469][ T7227] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.406: Directory hole found for htree leaf block 0
[  122.618420][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.799659][ T7261] batadv_slave_1: entered promiscuous mode
[  122.819688][ T7259] batadv_slave_1: left promiscuous mode
[  122.880222][ T7266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  122.918774][ T7266] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  123.301734][   T27] kernel write not supported for file bpf-prog (pid: 27 comm: kworker/1:1)
[  124.463384][ T5825] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  124.685305][ T5825] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  124.721090][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.754917][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.776496][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  124.813481][ T5825] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  124.826674][ T5825] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  124.845855][ T5825] usb 2-1: Manufacturer: syz
[  124.863554][ T5825] usb 2-1: config 0 descriptor??
[  125.060134][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'.
[  125.235632][ T7355] program syz.2.439 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.309632][ T5825] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  125.338181][ T5825] appleir 0003:05AC:8243.0007: No inputs registered, leaving
[  125.383674][ T5825] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  125.411619][ T7340] loop4: detected capacity change from 0 to 32768
[  125.447651][ T7340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.436 (7340)
[  125.567396][ T7340] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.610937][ T7340] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  125.657925][ T7340] BTRFS info (device loop4): setting nodatacow, compression disabled
[  125.707354][ T7340] BTRFS info (device loop4): max_inline at 0
[  125.719121][ T5953] usb 2-1: USB disconnect, device number 4
[  125.732943][ T7340] BTRFS info (device loop4): enabling disk space caching
[  125.764850][ T7340] BTRFS info (device loop4): turning off barriers
[  125.771304][ T7340] BTRFS info (device loop4): turning on flush-on-commit
[  125.800921][ T7340] BTRFS info (device loop4): doing ref verification
[  125.812806][ T7340] BTRFS info (device loop4): force clearing of disk cache
[  125.825732][ T7340] BTRFS info (device loop4): enabling ssd optimizations
[  125.832741][ T7340] BTRFS info (device loop4): max_inline at 4096
[  125.851930][ T7340] BTRFS info (device loop4): disk space caching is enabled
[  125.898047][ T7340] BTRFS info (device loop4): auto enabling async discard
[  125.915638][ T7340] BTRFS info (device loop4): rebuilding free space tree
[  125.962102][ T7340] BTRFS info (device loop4): disabling free space tree
[  125.997847][ T7340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  126.043429][ T7340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  126.391829][ T6491] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.751548][ T7368] loop2: detected capacity change from 0 to 40427
[  126.816217][ T7368] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  126.875221][ T7368] F2FS-fs (loop2): invalid crc value
[  126.918277][ T7413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'.
[  126.946337][ T7368] F2FS-fs (loop2): Found nat_bits in checkpoint
[  126.959224][ T7419] netlink: 300 bytes leftover after parsing attributes in process `syz.4.444'.
[  127.123270][ T7368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  127.553236][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  127.733040][ T5783] syz-executor: attempt to access beyond end of device
[  127.733040][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.756773][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  127.767353][   T27] usb 1-1: Using ep0 maxpacket: 32
[  127.793973][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.823254][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.855886][   T27] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  127.883144][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.914489][   T27] usb 1-1: config 0 descriptor??
[  128.274788][ T7440] loop1: detected capacity change from 0 to 32768
[  128.283603][ T7427] loop4: detected capacity change from 0 to 40427
[  128.298399][ T7440] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.454 (7440)
[  128.311991][ T7427] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  128.353457][ T7427] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  128.367744][   T27] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[  128.387614][ T7427] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x7ffff
[  128.411931][ T7440] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  128.426099][ T7427] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6
[  128.451814][ T7440] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  128.493044][ T7440] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  128.514367][ T7427] F2FS-fs (loop4): invalid crc value
[  128.530200][ T7440] BTRFS info (device loop1): use zstd compression, level 3
[  128.559270][ T7440] BTRFS info (device loop1): using free space tree
[  128.569879][   T27] ft260 0003:0403:6030.0008: chip code: 6424 8183
[  128.593326][ T7427] F2FS-fs (loop4): Found nat_bits in checkpoint
[  128.680608][ T7440] BTRFS info (device loop1): enabling ssd optimizations
[  128.714453][ T7440] BTRFS info (device loop1): auto enabling async discard
[  128.721231][ T7427] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  128.737821][ T7427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  128.884993][   T28] audit: type=1800 audit(1752562530.067:6): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.451" name="file2" dev="loop4" ino=14 res=0 errno=0
[  128.889905][ T7427] syz.4.451: attempt to access beyond end of device
[  128.889905][ T7427] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  128.968742][ T7427] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  129.008490][ T7427] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  129.031766][   T27] usb 1-1: USB disconnect, device number 6
[  129.142474][ T5782] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  129.612536][ T7487] o2cb: This node has not been configured.
[  129.623285][ T7487] o2cb: Cluster check failed. Fix errors before retrying.
[  129.630487][ T7487] (syz.1.466,7487,0):user_dlm_register:674 ERROR: status = -22
[  129.666361][ T7487] (syz.1.466,7487,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  130.438564][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'.
[  130.446145][ T7517] loop1: detected capacity change from 0 to 1024
[  130.460352][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.471'.
[  130.486937][ T7517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.538788][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.169836][ T7533] loop2: detected capacity change from 0 to 32768
[  131.245885][ T7535] loop4: detected capacity change from 0 to 32768
[  131.330398][ T7535] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  131.484589][ T7541] netlink: 'syz.2.477': attribute type 13 has an invalid length.
[  131.742557][ T6491] ocfs2: Unmounting device (7,4) on (node local)
[  132.026371][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.034947][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.365461][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.401460][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.679157][ T7541] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.688173][ T7541] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.698202][ T7541] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.707095][ T7541] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.897505][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  132.904207][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  133.491687][ T7579] syzkaller1: entered promiscuous mode
[  133.497280][ T7579] syzkaller1: entered allmulticast mode
[  133.794901][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.484'.
[  133.823214][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.484'.
[  133.850777][ T7587] loop4: detected capacity change from 0 to 512
[  133.886985][ T7587] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.496: iget: bad i_size value: 38620345925642
[  133.911768][ T7587] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.496: couldn't read orphan inode 15 (err -117)
[  133.934841][ T7587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.029869][ T7587] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.496: bg 0: block 5: invalid block bitmap
[  134.072850][ T7587] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28
[  134.086021][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  134.102139][ T7587] EXT4-fs (loop4): This should not happen!! Data will be lost
[  134.102139][ T7587] 
[  134.112661][ T7587] EXT4-fs (loop4): Total free blocks count 0
[  134.123666][ T7587] EXT4-fs (loop4): Free/Dirty block details
[  134.130362][ T7587] EXT4-fs (loop4): free_blocks=0
[  134.139033][ T7587] EXT4-fs (loop4): dirty_blocks=44
[  134.155351][ T7587] EXT4-fs (loop4): Block reservation details
[  134.177078][ T7587] EXT4-fs (loop4): i_reserved_data_blocks=44
[  134.270858][ T6491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.280272][   T23] usb 1-1: Using ep0 maxpacket: 32
[  134.302005][   T23] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  134.338850][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.371217][   T23] usb 1-1: config 0 descriptor??
[  134.416401][   T23] gspca_main: nw80x-2.14.0 probing 055f:d001
[  134.795428][ T7613] loop2: detected capacity change from 0 to 64
[  134.853664][   T28] audit: type=1800 audit(1752562536.047:7): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.507" name="file1" dev="loop2" ino=18 res=0 errno=0
[  135.158288][ T7619] loop2: detected capacity change from 0 to 128
[  135.206979][ T7619] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1)
[  135.308693][ T7619] syz.2.510: attempt to access beyond end of device
[  135.308693][ T7619] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[  135.332991][ T7619] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  135.353481][ T7619] syz.2.510: attempt to access beyond end of device
[  135.353481][ T7619] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128
[  135.436591][ T1080] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1)
[  135.448077][   T23] gspca_nw80x: reg_w err -71
[  135.452761][   T23] nw80x: probe of 1-1:0.0 failed with error -71
[  135.480215][   T23] usb 1-1: USB disconnect, device number 7
[  135.527241][ T7611] loop1: detected capacity change from 0 to 32768
[  135.546898][ T7611] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.506 (7611)
[  135.575616][ T7611] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  135.603222][ T7611] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  135.622816][ T7611] BTRFS info (device loop1): using free space tree
[  135.740710][ T7617] loop4: detected capacity change from 0 to 32768
[  135.756351][ T7611] BTRFS info (device loop1): enabling ssd optimizations
[  135.773319][ T7611] BTRFS info (device loop1): auto enabling async discard
[  135.793014][ T7617] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.841704][   T28] audit: type=1800 audit(1752562537.027:8): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.506" name="file2" dev="loop1" ino=261 res=0 errno=0
[  136.119818][ T7617] XFS (loop4): Ending clean mount
[  136.124634][ T5782] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  136.129154][ T7617] XFS (loop4): Quotacheck needed: Please wait.
[  136.188612][ T7617] XFS (loop4): Quotacheck: Done.
[  136.196652][ T7646] loop2: detected capacity change from 0 to 512
[  136.204774][ T7646] EXT4-fs: Ignoring removed oldalloc option
[  136.355250][ T7646] EXT4-fs (loop2): 1 truncate cleaned up
[  136.362168][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.625128][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.823341][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  136.883296][ T6491] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.023724][   T23] usb 1-1: Using ep0 maxpacket: 32
[  137.047463][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.073323][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.103262][   T23] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  137.121295][ T7655] loop1: detected capacity change from 0 to 32768
[  137.127951][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.145777][   T23] usb 1-1: config 0 descriptor??
[  137.200036][ T7655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.516 (7655)
[  137.279263][ T7655] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.320800][ T7655] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  137.348218][ T7655] BTRFS info (device loop1): disabling free space tree
[  137.366602][ T7655] BTRFS info (device loop1): turning on async discard
[  137.391324][ T7666] loop2: detected capacity change from 0 to 256
[  137.398493][ T7655] BTRFS info (device loop1): force clearing of disk cache
[  137.407377][ T7655] BTRFS info (device loop1): doing ref verification
[  137.417619][ T7666] exfat: Deprecated parameter 'namecase'
[  137.433496][ T7655] BTRFS info (device loop1): enabling ssd optimizations
[  137.442907][ T7655] BTRFS info (device loop1): using spread ssd allocation scheme
[  137.472363][ T7666] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  137.484805][ T7655] BTRFS info (device loop1): setting nodatacow, compression disabled
[  137.494135][ T7655] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512
[  137.518784][ T7655] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  137.579859][   T23] ft260 0003:0403:6030.0009: unknown main item tag 0x0
[  137.608842][ T7655] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512
[  137.650890][ T7655] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  137.663061][ T7655] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  137.679789][ T7655] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  137.702021][ T7655] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[  137.778339][   T23] ft260 0003:0403:6030.0009: chip code: 6424 8183
[  137.782218][ T7655] BTRFS info (device loop1): rebuilding free space tree
[  137.837186][ T7655] BTRFS info (device loop1): disabling free space tree
[  137.855912][ T7655] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  137.878485][ T7655] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  137.992857][   T23] ft260 0003:0403:6030.0009: failed to retrieve system status
[  138.007998][   T23] ft260: probe of 0003:0403:6030.0009 failed with error -71
[  138.032903][   T23] usb 1-1: USB disconnect, device number 8
[  138.061701][ T5782] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.781399][ T7698] loop1: detected capacity change from 0 to 512
[  138.841306][ T7698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.882346][ T7698] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.998692][ T7698] EXT4-fs error (device loop1): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.1.527: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  139.040227][ T7698] EXT4-fs (loop1): Remounting filesystem read-only
[  139.091249][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.520402][ T7713] loop0: detected capacity change from 0 to 16
[  139.526913][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'.
[  139.532546][ T7713] erofs: (device loop0): mounted with root inode @ nid 36.
[  139.553600][ T7712] loop1: detected capacity change from 0 to 256
[  139.583202][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'.
[  139.604088][ T7712] exfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff'
[  139.769647][ T7717] loop0: detected capacity change from 0 to 256
[  139.813057][ T7717] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.845788][ T7717] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  139.847189][ T7721] loop2: detected capacity change from 0 to 512
[  139.882530][ T7721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  139.914952][ T7717] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  139.922301][ T7721] EXT4-fs (loop2): 1 truncate cleaned up
[  139.936598][   T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  139.952689][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.125395][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.137726][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  140.148037][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.163244][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.216840][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  140.243186][   T23] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3
[  140.272391][   T23] usb 2-1: Product: syz
[  140.276731][   T23] usb 2-1: Manufacturer: syz
[  140.281346][   T23] usb 2-1: SerialNumber: syz
[  140.305838][   T23] cdc_ncm 2-1:1.0: invalid descriptor buffer length
[  140.322723][   T23] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  140.330074][   T23] cdc_ncm 2-1:1.0: bind() failure
[  140.565806][   T23] usb 2-1: USB disconnect, device number 5
[  140.643894][ T7724] loop4: detected capacity change from 0 to 40427
[  140.672250][ T7724] F2FS-fs (loop4): invalid crc value
[  140.703956][ T7724] F2FS-fs (loop4): Found nat_bits in checkpoint
[  140.806312][ T7724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  140.866101][ T7724] syz.4.538: attempt to access beyond end of device
[  140.866101][ T7724] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  140.951097][ T6491] syz-executor: attempt to access beyond end of device
[  140.951097][ T6491] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  140.993419][ T6491] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  141.117785][ T7734] loop0: detected capacity change from 0 to 32768
[  141.186441][ T7734] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.249255][ T7734] XFS (loop0): Ending clean mount
[  141.270844][ T7732] loop2: detected capacity change from 0 to 40427
[  141.373402][ T7732] F2FS-fs (loop2): Found nat_bits in checkpoint
[  141.553684][ T7732] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.612931][ T7732] syz.2.542: attempt to access beyond end of device
[  141.612931][ T7732] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427
[  141.644849][ T5784] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.793667][ T5783] syz-executor: attempt to access beyond end of device
[  141.793667][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.834346][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  142.147216][ T7764] loop1: detected capacity change from 0 to 2048
[  142.222266][ T7764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.324832][ T7764] EXT4-fs: Ignoring removed orlov option
[  142.342284][ T7764] EXT4-fs (loop1): can't enable nombcache during remount
[  142.357775][   T28] audit: type=1800 audit(1752562543.547:9): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.558" name="file2" dev="loop1" ino=16 res=0 errno=0
[  142.442506][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.647970][ T7774] macvlan1: entered promiscuous mode
[  142.674755][ T7774] ipvlan0: entered promiscuous mode
[  142.679584][ T7776] capability: warning: `syz.2.553' uses 32-bit capabilities (legacy support in use)
[  142.694356][ T7774] ipvlan0: left promiscuous mode
[  142.699959][ T7774] macvlan1: left promiscuous mode
[  142.739529][ T7768] loop0: detected capacity change from 0 to 32768
[  142.747790][ T7768] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.551 (7768)
[  142.805107][ T7768] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  142.854263][ T7768] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  142.899134][ T7768] BTRFS info (device loop0): using free space tree
[  143.091041][ T7768] BTRFS info (device loop0): enabling ssd optimizations
[  143.124114][ T7768] BTRFS info (device loop0): auto enabling async discard
[  143.248370][   T28] audit: type=1800 audit(1752562544.437:10): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.551" name="file2" dev="loop0" ino=261 res=0 errno=0
[  143.463954][ T5784] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  143.764635][   T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  143.782400][ T7821] netlink: 'syz.0.563': attribute type 1 has an invalid length.
[  143.813249][ T7821] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.563'.
[  144.240713][ T7827] loop1: detected capacity change from 0 to 32768
[  144.244964][ T7831] netlink: 260 bytes leftover after parsing attributes in process `syz.4.570'.
[  144.267553][ T7827] 
[  144.267553][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.267553][ T7827] 
[  144.282665][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.293203][   T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.315182][ T7827] 
[  144.315182][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.315182][ T7827] 
[  144.325972][ T7827] 
[  144.325972][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.325972][ T7827] 
[  144.336502][ T7827] 
[  144.336502][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.336502][ T7827] 
[  144.352659][   T27] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  144.354206][  T111] 
[  144.354206][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.354206][  T111] 
[  144.365183][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  144.385415][   T27] usb 3-1: SerialNumber: syz
[  144.395249][ T7827] 
[  144.395249][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.395249][ T7827] 
[  144.406125][ T7827] 
[  144.406125][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.406125][ T7827] 
[  144.416716][ T7827] 
[  144.416716][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.416716][ T7827] 
[  144.427217][ T7827] 
[  144.427217][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.427217][ T7827] 
[  144.437702][ T7827] 
[  144.437702][ T7827]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.437702][ T7827] 
[  144.483820][  T111] 
[  144.483820][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.483820][  T111] 
[  144.517549][ T5782] 
[  144.517549][ T5782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.517549][ T5782] 
[  144.539013][ T7834] loop4: detected capacity change from 0 to 164
[  144.546549][ T5782] 
[  144.546549][ T5782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.546549][ T5782] 
[  144.579259][ T7834] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  144.624208][   T27] usb 3-1: 0:2 : does not exist
[  144.634572][ T7834] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  144.647400][ T7834] Symlink component flag not implemented
[  144.653057][ T7834] Symlink component flag not implemented
[  144.670335][   T27] usb 3-1: USB disconnect, device number 7
[  144.677278][ T7834] Symlink component flag not implemented (7)
[  144.691588][ T7834] Symlink component flag not implemented (116)
[  144.729462][ T6231] udevd[6231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.896555][ T7838] loop4: detected capacity change from 0 to 256
[  144.922519][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[  145.016487][ T7840] loop0: detected capacity change from 0 to 1024
[  145.047466][ T7840] EXT4-fs: Ignoring removed nobh option
[  145.099549][ T7840] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  145.113365][ T7840] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.573: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  145.115424][ T7840] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.573: couldn't read orphan inode 11 (err -117)
[  145.135681][ T7840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.202747][ T7840] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.573: Invalid block bitmap block 0 in block_group 0
[  145.329573][ T7840] Quota error (device loop0): write_blk: dquota write failed
[  145.329685][ T7840] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  145.330867][ T7840] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.573: Failed to acquire dquot type 0
[  145.395472][ T7852] loop2: detected capacity change from 0 to 2048
[  145.440357][ T7852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.464780][ T6062] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm kworker/u4:13: Invalid inode table block 8589934593 in block_group 0
[  145.476619][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.948967][ T7866] loop1: detected capacity change from 0 to 1024
[  146.036341][ T7868] loop0: detected capacity change from 0 to 256
[  146.064060][ T7868] exfat: Deprecated parameter 'namecase'
[  146.106868][ T7866] hfsplus: xattr searching failed
[  146.112744][ T7868] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  146.484390][ T7862] loop2: detected capacity change from 0 to 32768
[  146.506244][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'.
[  146.528955][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'.
[  146.556242][ T7862] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.761723][ T7862] XFS (loop2): Ending clean mount
[  146.806894][ T7862] XFS (loop2): Quotacheck needed: Please wait.
[  146.906399][ T7862] XFS (loop2): Quotacheck: Done.
[  147.449721][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.514786][ T5825] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  147.735735][ T5825] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  147.772300][ T5825] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  147.833144][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  147.871874][ T5825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  147.893155][ T5825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  147.915068][ T5825] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  147.933447][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  147.950890][ T5825] usb 1-1: Product: syz
[  147.963165][ T5825] usb 1-1: Manufacturer: syz
[  147.982769][ T5825] cdc_wdm 1-1:1.0: skipping garbage
[  148.008934][ T5825] cdc_wdm 1-1:1.0: skipping garbage
[  148.030013][ T5825] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  148.043355][ T5825] cdc_wdm 1-1:1.0: Unknown control protocol
[  148.063681][ T7900] loop4: detected capacity change from 0 to 32768
[  148.093517][ T7900] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.596 (7900)
[  148.153649][ T7900] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  148.182494][ T7900] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  148.202721][ T7900] BTRFS info (device loop4): using free space tree
[  148.282340][ T5825] usb 1-1: USB disconnect, device number 9
[  148.327432][ T7900] BTRFS info (device loop4): enabling ssd optimizations
[  148.343457][ T7900] BTRFS info (device loop4): auto enabling async discard
[  148.459478][   T28] audit: type=1800 audit(1752562549.647:11): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.596" name="file2" dev="loop4" ino=261 res=0 errno=0
[  148.619358][ T6491] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  149.279514][ T7945] loop1: detected capacity change from 0 to 1024
[  149.294274][ T7945] EXT4-fs: Ignoring removed oldalloc option
[  149.329254][ T7945] EXT4-fs: Ignoring removed bh option
[  149.395096][ T7945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  149.456229][ T7945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.491194][ T7932] loop2: detected capacity change from 0 to 32768
[  149.541444][ T7932] (syz.2.603,7932,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  149.619500][ T7932] (syz.2.603,7932,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  149.713370][ T7932] JBD2: Ignoring recovery information on journal
[  149.870309][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.929559][ T7932] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  150.191465][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'.
[  150.201333][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'.
[  150.212373][ T7979] netlink: 'syz.4.622': attribute type 5 has an invalid length.
[  150.234068][ T7979] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.243321][ T7979] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.252042][ T7979] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.260938][ T7979] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.299453][ T5783] ocfs2: Unmounting device (7,2) on (node local)
[  150.518242][ T7985] loop4: detected capacity change from 0 to 128
[  150.545232][ T7985] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  150.560262][ T7987] netlink: 'syz.1.627': attribute type 11 has an invalid length.
[  150.583217][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  150.620305][   T28] audit: type=1800 audit(1752562551.797:12): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.626" name="file1" dev="loop4" ino=94 res=0 errno=0
[  150.790834][ T7989] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  151.223228][ T5832] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  151.414964][ T5832] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  151.426163][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  151.453321][ T5832] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  151.482803][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.519529][ T5832] usb 2-1: config 0 descriptor??
[  151.934016][ T8008] loop0: detected capacity change from 0 to 32768
[  151.966099][ T5832] kye 0003:0458:0138.000A: item fetching failed at offset 0/1
[  151.982751][ T8008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.634 (8008)
[  152.000117][ T5832] kye 0003:0458:0138.000A: parse failed
[  152.009984][ T5832] kye: probe of 0003:0458:0138.000A failed with error -22
[  152.023785][ T8008] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  152.055804][ T8008] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  152.067272][ T8008] BTRFS info (device loop0): enabling auto defrag
[  152.074427][ T8008] BTRFS info (device loop0): doing ref verification
[  152.081195][ T8008] BTRFS info (device loop0): use no compression
[  152.088077][ T8008] BTRFS info (device loop0): force clearing of disk cache
[  152.113221][ T8008] BTRFS info (device loop0): max_inline at 4096
[  152.129730][ T8008] BTRFS info (device loop0): disabling free space tree
[  152.240171][ T8008] BTRFS info (device loop0): enabling ssd optimizations
[  152.247575][ T8008] BTRFS info (device loop0): auto enabling async discard
[  152.255591][ T5953] usb 2-1: USB disconnect, device number 6
[  152.263392][ T8008] BTRFS info (device loop0): rebuilding free space tree
[  152.278580][ T8008] BTRFS info (device loop0): disabling free space tree
[  152.294210][ T8008] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  152.313410][ T8008] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  152.474554][ T8010] loop2: detected capacity change from 0 to 40427
[  152.497838][ T8010] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  152.522366][ T5784] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  152.526486][ T8010] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  152.558070][ T8010] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff
[  152.585635][ T8010] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6
[  152.624594][ T8010] F2FS-fs (loop2): invalid crc value
[  152.643011][ T8010] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.692382][ T5800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (5800)
[  152.922211][ T8010] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  152.937670][ T8010] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.984575][   T28] audit: type=1800 audit(1752562554.177:13): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.635" name="file1" dev="loop2" ino=10 res=0 errno=0
[  153.009439][ T8010] syz.2.635: attempt to access beyond end of device
[  153.009439][ T8010] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  153.107351][ T5783] syz-executor: attempt to access beyond end of device
[  153.107351][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.156905][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  153.483669][ T8049] loop1: detected capacity change from 0 to 1024
[  153.505137][ T8049] EXT4-fs: Ignoring removed i_version option
[  153.544581][ T8049] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  153.602129][ T8049] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.643: Invalid block bitmap block 0 in block_group 0
[  153.663289][ T8049] Quota error (device loop1): write_blk: dquota write failed
[  153.671029][ T8049] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  153.712360][ T8049] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.643: Failed to acquire dquot type 0
[  153.738911][ T8049] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.643: Freeing blocks not in datazone - block = 0, count = 4096
[  153.783065][ T8049] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.643: Invalid inode bitmap blk 0 in block_group 0
[  153.812358][ T1080] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[  153.831266][ T8049] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[  153.843288][ T1080] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 0
[  153.874490][ T8049] EXT4-fs (loop1): 1 orphan inode deleted
[  153.884773][ T8049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.969879][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.143951][    T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  154.363974][    T8] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9
[  154.378587][ T8077] loop1: detected capacity change from 0 to 1024
[  154.386264][    T8] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.398589][ T8077] EXT4-fs: Ignoring removed nobh option
[  154.417475][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  154.426477][ T8077] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  154.440793][    T8] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  154.459861][ T8077] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.653: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  154.489346][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.504979][    T8] usb 1-1: config 0 descriptor??
[  154.510691][ T8077] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.653: couldn't read orphan inode 11 (err -117)
[  154.576489][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.693457][ T8077] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.653: Invalid block bitmap block 0 in block_group 0
[  154.734179][ T8077] Quota error (device loop1): write_blk: dquota write failed
[  154.754340][ T8077] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  154.783474][ T8077] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.653: Failed to acquire dquot type 0
[  154.905371][ T8076] loop2: detected capacity change from 0 to 40427
[  154.942581][ T1133] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm kworker/u4:10: Invalid inode table block 8589934593 in block_group 0
[  154.956859][ T8076] F2FS-fs (loop2): heap/no_heap options were deprecated
[  154.964810][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.979971][ T8076] F2FS-fs (loop2): invalid crc value
[  154.988275][ T8076] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  155.000064][ T8070] loop4: detected capacity change from 0 to 40427
[  155.017984][ T8076] F2FS-fs (loop2): Found nat_bits in checkpoint
[  155.031512][ T8070] F2FS-fs (loop4): invalid crc value
[  155.057335][ T8070] F2FS-fs (loop4): Found nat_bits in checkpoint
[  155.166230][ T8076] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  155.199693][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  155.222495][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  155.262298][    T8] usb 1-1: USB disconnect, device number 10
[  155.323309][ T8070] F2FS-fs (loop4): Start checkpoint disabled!
[  155.354743][ T8070] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  155.620979][ T1080] kworker/u4:6: attempt to access beyond end of device
[  155.620979][ T1080] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  155.654085][ T1080] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  155.661057][ T1080] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  155.674316][ T1080] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  155.765623][ T8089] loop2: detected capacity change from 0 to 1024
[  156.053280][ T8087] loop1: detected capacity change from 0 to 32768
[  156.115222][ T8087] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  156.115222][ T8087] 
[  156.149017][ T8087] xtLookup: xtSearch returned -5
[  156.159121][ T8087] add_index: get/read_metapage failed!
[  156.188282][ T8087] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  156.188282][ T8087] 
[  156.213683][ T8087] xtLookup: xtSearch returned -5
[  156.223385][ T8087] free_index: error reading directory table
[  156.236565][ T8087] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  156.236565][ T8087] 
[  156.276339][ T8087] xtLookup: xtSearch returned -5
[  156.281312][ T8087] free_index: error reading directory table
[  156.313311][ T8087] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  156.313311][ T8087] 
[  156.369947][ T8095] loop4: detected capacity change from 0 to 4096
[  156.373809][ T8087] xtLookup: xtSearch returned -5
[  156.381263][ T8087] free_index: error reading directory table
[  156.425416][ T8095] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  156.433086][ T8087] find_entry called with index = 0
[  156.477377][ T8095] ntfs3: loop4: Failed to load $Extend (-22).
[  156.497545][ T8087] ialloc: diAlloc returned -5!
[  156.507139][ T8095] ntfs3: loop4: Failed to initialize $Extend.
[  156.616259][ T8102] batadv_slave_1: entered promiscuous mode
[  156.628835][ T8101] batadv_slave_1: left promiscuous mode
[  156.724465][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  156.859330][ T8111] loop0: detected capacity change from 0 to 64
[  157.339962][ T8115] loop0: detected capacity change from 0 to 1764
[  157.458753][ T8113] loop4: detected capacity change from 0 to 40427
[  157.545241][ T8113] F2FS-fs (loop4): Found nat_bits in checkpoint
[  157.618831][ T8123] loop2: detected capacity change from 0 to 256
[  157.735621][ T8113] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  157.819594][ T8123] FAT-fs (loop2): Directory bread(block 64) failed
[  157.829174][ T8123] FAT-fs (loop2): Directory bread(block 65) failed
[  157.880698][ T8123] FAT-fs (loop2): Directory bread(block 66) failed
[  157.895920][ T8113] syz.4.667: attempt to access beyond end of device
[  157.895920][ T8113] loop4: rw=2049, sector=53248, nr_sectors = 136 limit=40427
[  157.902785][ T8131] loop1: detected capacity change from 0 to 512
[  157.919792][ T8123] FAT-fs (loop2): Directory bread(block 67) failed
[  157.927082][ T8123] FAT-fs (loop2): Directory bread(block 68) failed
[  157.946769][ T8123] FAT-fs (loop2): Directory bread(block 69) failed
[  157.953728][ T8123] FAT-fs (loop2): Directory bread(block 70) failed
[  157.960260][ T8123] FAT-fs (loop2): Directory bread(block 71) failed
[  157.972406][ T8123] FAT-fs (loop2): Directory bread(block 72) failed
[  157.990942][ T8123] FAT-fs (loop2): Directory bread(block 73) failed
[  158.001086][ T8131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.037105][ T6491] syz-executor: attempt to access beyond end of device
[  158.037105][ T6491] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.049118][ T8131] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.066888][ T6491] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  158.126158][ T8123] syz.2.671: attempt to access beyond end of device
[  158.126158][ T8123] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256
[  158.127053][   T28] audit: type=1800 audit(1752562559.317:14): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.671" name="file0" dev="loop2" ino=1048622 res=0 errno=0
[  158.166776][   T28] audit: type=1800 audit(1752562559.327:15): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.671" name="file0" dev="loop2" ino=1048622 res=0 errno=0
[  158.194137][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.406447][   T28] audit: type=1326 audit(1752562559.597:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.1.676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d8d98e929 code=0x0
[  158.945824][ T8142] loop2: detected capacity change from 0 to 32768
[  159.002620][ T8142] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  159.157780][ T5783] ocfs2: Unmounting device (7,2) on (node local)
[  159.174809][ T8147] loop0: detected capacity change from 0 to 40427
[  159.230995][ T8147] F2FS-fs (loop0): invalid crc value
[  159.288083][ T8147] F2FS-fs (loop0): Found nat_bits in checkpoint
[  159.393303][ T8147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  159.450754][ T8147] syz.0.680: attempt to access beyond end of device
[  159.450754][ T8147] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  159.498584][ T5784] syz-executor: attempt to access beyond end of device
[  159.498584][ T5784] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  159.514614][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  159.553205][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  159.557405][ T8160] loop2: detected capacity change from 0 to 2048
[  159.597429][ T8160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.794903][ T5953] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  159.807021][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.843518][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.872178][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  159.904723][ T5953] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  159.933245][ T5953] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  159.941348][ T5953] usb 5-1: Manufacturer: syz
[  159.965545][ T5953] usb 5-1: config 0 descriptor??
[  160.156590][ T8173] loop1: detected capacity change from 0 to 2048
[  160.173773][ T5793] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  160.205017][ T8173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.366869][ T8184] loop2: detected capacity change from 0 to 2048
[  160.394846][ T5953] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  160.401074][ T8184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.402693][ T5953] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  160.449325][ T5953] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  160.461998][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.517518][   T28] audit: type=1804 audit(1752562561.707:17): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.692" name="/newroot/203/file1/file1" dev="loop2" ino=1346 res=1 errno=0
[  160.685443][ T5953] usb 5-1: USB disconnect, device number 3
[  160.753962][ T8188] fido_id[8188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  160.918209][ T8196] loop1: detected capacity change from 0 to 128
[  160.931871][ T8196] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  160.978745][   T28] audit: type=1800 audit(1752562562.167:18): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.697" name="file1" dev="loop1" ino=94 res=0 errno=0
[  161.023539][   T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  161.066890][ T8187] loop0: detected capacity change from 0 to 32768
[  161.097262][ T8197] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  161.104302][ T8187] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  161.221255][ T5784] ocfs2: Unmounting device (7,0) on (node local)
[  161.227849][   T27] usb 3-1: Using ep0 maxpacket: 16
[  161.273802][   T27] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  161.302868][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.345902][   T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.377255][   T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.395426][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.414313][   T27] usb 3-1: Product: syz
[  161.422999][   T27] usb 3-1: Manufacturer: syz
[  161.435667][   T27] usb 3-1: SerialNumber: syz
[  161.451216][ T8203] loop4: detected capacity change from 0 to 512
[  161.511283][ T8203] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #17: comm syz.4.699: iget: bogus i_mode (0)
[  161.539585][ T8203] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.699: couldn't read orphan inode 17 (err -117)
[  161.555007][ T8203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.717983][ T8194] loop2: detected capacity change from 0 to 1024
[  161.767382][ T8194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.846305][ T6491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.089951][   T27] usb 3-1: 0:2 : does not exist
[  162.139193][   T27] usb 3-1: USB disconnect, device number 8
[  162.204142][ T8216] netlink: 'syz.0.702': attribute type 3 has an invalid length.
[  162.220448][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.640744][ T8222] input: syz0 as /devices/virtual/input/input9
[  162.650723][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.798268][ T8224] input: syz0 as /devices/virtual/input/input10
[  162.891802][ T8218] loop4: detected capacity change from 0 to 40427
[  162.938256][ T8218] F2FS-fs (loop4): invalid crc value
[  162.978213][ T8218] F2FS-fs (loop4): Found nat_bits in checkpoint
[  162.988027][ T8231] loop2: detected capacity change from 0 to 128
[  163.018328][ T8231] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.146770][ T8218] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  163.232202][ T6065] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.346160][   T28] audit: type=1800 audit(1752562564.537:19): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.703" name="file1" dev="loop4" ino=10 res=0 errno=0
[  163.454303][ T6491] syz-executor: attempt to access beyond end of device
[  163.454303][ T6491] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.487007][ T6491] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  163.843473][ T8245] warning: `syz.1.714' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  164.150671][ T8242] loop2: detected capacity change from 0 to 32768
[  164.219046][ T8242] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  164.219046][ T8242] 
[  164.232924][ T8242] xtLookup: xtSearch returned -5
[  164.239312][ T8242] add_index: get/read_metapage failed!
[  164.259439][ T8242] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  164.259439][ T8242] 
[  164.281281][ T8242] xtLookup: xtSearch returned -5
[  164.290358][ T8242] free_index: error reading directory table
[  164.298320][ T8242] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  164.298320][ T8242] 
[  164.330791][ T8242] xtLookup: xtSearch returned -5
[  164.344180][ T8242] free_index: error reading directory table
[  164.350110][ T8242] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  164.350110][ T8242] 
[  164.369302][ T8242] xtLookup: xtSearch returned -5
[  164.374886][ T8242] free_index: error reading directory table
[  164.382315][ T8242] find_entry called with index = 0
[  164.394393][ T8256] ialloc: diAlloc returned -5!
[  164.769225][ T8260] loop4: detected capacity change from 0 to 40427
[  164.783670][ T8260] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  164.790900][ T8260] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  164.801938][ T8260] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x7ffff
[  164.810864][ T8260] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6
[  164.824646][ T8260] F2FS-fs (loop4): invalid crc value
[  164.834817][ T8260] F2FS-fs (loop4): Found nat_bits in checkpoint
[  164.923714][ T8260] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  164.930880][ T8260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  164.968366][   T28] audit: type=1800 audit(1752562566.157:20): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.721" name="file1" dev="loop4" ino=10 res=0 errno=0
[  164.993528][ T8260] syz.4.721: attempt to access beyond end of device
[  164.993528][ T8260] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  165.073471][ T6491] syz-executor: attempt to access beyond end of device
[  165.073471][ T6491] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  165.103240][ T6491] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  165.261299][ T8268] program syz.0.724 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  165.464320][ T8274] input: syz1 as /devices/virtual/input/input11
[  165.643444][   T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  165.760947][ T8285] vivid-002: =================  START STATUS  =================
[  165.770576][ T8285] vivid-002: Radio HW Seek Mode: Bounded
[  165.778003][ T8285] vivid-002: Radio Programmable HW Seek: false
[  165.785306][ T8285] vivid-002: RDS Rx I/O Mode: Block I/O
[  165.790882][ T8285] vivid-002: Generate RBDS Instead of RDS: false
[  165.797528][ T8285] vivid-002: RDS Reception: true
[  165.802492][ T8285] vivid-002: RDS Program Type: 0 inactive
[  165.809149][ T8285] vivid-002: RDS PS Name:  inactive
[  165.814683][ T8285] vivid-002: RDS Radio Text:  inactive
[  165.820222][ T8285] vivid-002: RDS Traffic Announcement: false inactive
[  165.827077][ T8285] vivid-002: RDS Traffic Program: false inactive
[  165.835708][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.837255][ T8285] vivid-002: RDS Music: 
[  165.847597][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.847869][ T8285] false
[  165.851873][   T27] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  165.865094][ T8285]  inactive
[  165.874851][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.877655][ T8285] 
[  165.880183][   T27] usb 3-1: config 0 descriptor??
[  165.888713][ T8285] vivid-002: ==================  END STATUS  ==================
[  165.943307][ T5953] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  166.131809][ T5953] usb 1-1: Using ep0 maxpacket: 8
[  166.139415][ T5953] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  166.150553][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  166.171996][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32896, setting to 1024
[  166.193195][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  166.223229][ T5953] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  166.242514][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.270173][ T5953] usb 1-1: config 0 descriptor??
[  166.304312][   T23] kernel write not supported for file /snd/pcmC0D0p (pid: 23 comm: kworker/1:0)
[  166.317864][   T27] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[  166.333853][   T27] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[  166.356682][   T27] cp2112 0003:10C4:EA90.000C: item fetching failed at offset 2/7
[  166.375643][   T27] cp2112 0003:10C4:EA90.000C: parse failed
[  166.402211][   T27] cp2112: probe of 0003:10C4:EA90.000C failed with error -22
[  166.544843][ T5825] usb 3-1: USB disconnect, device number 9
[  166.647973][ T8290] loop1: detected capacity change from 0 to 40427
[  166.668261][ T8290] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  166.679600][ T8290] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  166.690347][ T8290] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  166.701876][ T8290] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6
[  166.702525][ T5953] redragon 0003:0C45:760B.000D: unknown main item tag 0x6
[  166.713624][ T8290] F2FS-fs (loop1): invalid crc value
[  166.729996][ T8290] F2FS-fs (loop1): Found nat_bits in checkpoint
[  166.753794][ T5953] redragon 0003:0C45:760B.000D: item fetching failed at offset 7/133
[  166.784895][ T5953] redragon: probe of 0003:0C45:760B.000D failed with error -22
[  166.792056][ T8290] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  166.800077][ T8290] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  166.846654][   T28] audit: type=1800 audit(1752562568.027:21): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.731" name="file1" dev="loop1" ino=10 res=0 errno=0
[  166.883655][ T8290] syz.1.731: attempt to access beyond end of device
[  166.883655][ T8290] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  166.958674][   T27] usb 1-1: USB disconnect, device number 11
[  166.991683][ T5782] syz-executor: attempt to access beyond end of device
[  166.991683][ T5782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.013667][ T5782] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  167.138377][ T8303] loop4: detected capacity change from 0 to 32768
[  167.186118][ T8303] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  167.380077][ T6491] ocfs2: Unmounting device (7,4) on (node local)
[  168.196116][ T8343] loop1: detected capacity change from 0 to 128
[  168.223222][ T5825] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  168.433255][ T5825] usb 3-1: Using ep0 maxpacket: 32
[  168.440889][ T5825] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  168.480495][ T5825] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  168.503348][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.511377][ T5825] usb 3-1: Product: syz
[  168.533624][ T5825] usb 3-1: Manufacturer: syz
[  168.538487][ T5825] usb 3-1: SerialNumber: syz
[  168.577714][ T5825] usb 3-1: config 0 descriptor??
[  168.602843][ T5825] usb 3-1: bad CDC descriptors
[  168.622659][ T5825] usb 3-1: unsupported MDLM descriptors
[  168.753835][ T8359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  168.832006][ T5825] usb 3-1: USB disconnect, device number 10
[  169.001531][ T8354] loop1: detected capacity change from 0 to 32768
[  169.017080][ T8354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.754 (8354)
[  169.048055][ T8354] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.074229][ T8354] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  169.086728][ T8354] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  169.110821][ T8354] BTRFS info (device loop1): trying to use backup root at mount time
[  169.119263][ T8354] BTRFS info (device loop1): setting nodatasum
[  169.121541][ T8367] loop0: detected capacity change from 0 to 256
[  169.130801][ T8354] BTRFS info (device loop1): force zlib compression, level 3
[  169.139809][ T8354] BTRFS info (device loop1): doing ref verification
[  169.156441][ T8354] BTRFS info (device loop1): turning on flush-on-commit
[  169.176822][ T8367] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.184282][ T8354] BTRFS info (device loop1): allowing degraded mounts
[  169.200114][ T8367] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  169.201677][ T8354] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  169.224664][ T8354] BTRFS info (device loop1): use lzo compression, level 0
[  169.231970][ T8354] BTRFS info (device loop1): enabling ssd optimizations
[  169.245340][ T8354] BTRFS info (device loop1): using spread ssd allocation scheme
[  169.257281][ T8354] BTRFS info (device loop1): using free space tree
[  169.269432][ T8367] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  169.420379][ T8354] BTRFS info (device loop1): auto enabling async discard
[  169.536873][   T28] audit: type=1800 audit(1752562570.727:22): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.754" name="file1" dev="loop1" ino=260 res=0 errno=0
[  169.625319][ T8388] overlayfs: invalid origin (0000)
[  169.792680][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.194563][ T8398] MPI: mpi too large (107144 bits)
[  170.301241][ T8385] loop2: detected capacity change from 0 to 32768
[  170.362092][ T8385] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.761 (8385)
[  170.400518][ T8385] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  170.407488][ T8404] loop4: detected capacity change from 0 to 1024
[  170.428024][ T8385] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  170.464430][ T8385] BTRFS info (device loop2): using free space tree
[  170.489039][ T8404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.508452][ T8401] loop1: detected capacity change from 0 to 8192
[  170.522103][ T8404] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.542063][ T8401] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  170.605693][ T8401] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  170.622572][ T8401] REISERFS (device loop1): using ordered data mode
[  170.629509][ T8401] reiserfs: using flush barriers
[  170.656805][ T8401] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  170.678989][   T28] audit: type=1804 audit(1752562571.867:23): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.770" name="/newroot/121/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  170.713588][ T8385] BTRFS info (device loop2): enabling ssd optimizations
[  170.720562][ T8385] BTRFS info (device loop2): auto enabling async discard
[  170.750759][ T8426] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.770: Freeing blocks not in datazone - block = 0, count = 16
[  170.767014][ T8401] REISERFS (device loop1): checking transaction log (loop1)
[  170.837041][ T8401] REISERFS (device loop1): Using r5 hash to sort names
[  170.852837][ T8401] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  170.867714][ T8430] netlink: 'syz.0.772': attribute type 12 has an invalid length.
[  170.876942][ T8430] netlink: 'syz.0.772': attribute type 29 has an invalid length.
[  170.903227][ T8430] netlink: 148 bytes leftover after parsing attributes in process `syz.0.772'.
[  170.952959][ T6491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.149317][ T5783] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  171.242298][ T8432] loop0: detected capacity change from 0 to 64
[  172.602127][ T8462] loop2: detected capacity change from 0 to 32768
[  172.637950][ T8462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.786 (8462)
[  172.718806][ T8462] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.742937][ T8462] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  172.773244][ T8462] BTRFS info (device loop2): setting nodatacow, compression disabled
[  172.806556][ T8462] BTRFS info (device loop2): max_inline at 0
[  172.845296][ T8462] BTRFS info (device loop2): enabling disk space caching
[  172.852361][ T8462] BTRFS info (device loop2): turning off barriers
[  172.912355][ T8462] BTRFS info (device loop2): turning on flush-on-commit
[  172.937079][ T8462] BTRFS info (device loop2): doing ref verification
[  172.946750][ T8462] BTRFS info (device loop2): force clearing of disk cache
[  172.954254][ T8462] BTRFS info (device loop2): enabling ssd optimizations
[  172.961417][ T8462] BTRFS info (device loop2): max_inline at 4096
[  172.971656][ T8462] BTRFS info (device loop2): disk space caching is enabled
[  173.104773][ T8495] input: syz1 as /devices/virtual/input/input12
[  173.255338][ T8462] BTRFS info (device loop2): auto enabling async discard
[  173.272297][ T8462] BTRFS info (device loop2): rebuilding free space tree
[  173.323255][ T8462] BTRFS info (device loop2): disabling free space tree
[  173.346111][ T8462] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  173.384380][ T8462] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  173.586759][ T8507] loop8: detected capacity change from 0 to 8
[  173.633430][ T8507] Dev loop8: unable to read RDB block 8
[  173.664454][ T8507]  loop8: unable to read partition table
[  173.670327][ T8507] loop8: partition table beyond EOD, truncated
[  173.701421][ T8507] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  173.775387][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.922349][   T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  174.116223][   T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.142234][ T8521] mmap: syz.1.804 (8521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  174.149376][   T23] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  174.186656][   T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.206163][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.223286][   T23] usb 1-1: Product: syz
[  174.227511][   T23] usb 1-1: Manufacturer: syz
[  174.232124][   T23] usb 1-1: SerialNumber: syz
[  174.257769][   T23] cdc_mbim 1-1:1.0: skipping garbage
[  174.466333][ T8511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  174.736758][ T8534] loop2: detected capacity change from 0 to 1024
[  174.804321][ T8534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.937325][ T8534] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.810: Allocating blocks 465-513 which overlap fs metadata
[  175.004966][ T8533] EXT4-fs (loop2): pa ffff88805c836570: logic 1, phys. 145, len 23
[  175.013691][ T8533] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 3
[  175.065022][ T8531] loop1: detected capacity change from 0 to 32768
[  175.084658][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.114456][ T8511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  175.127714][ T8531] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.130156][   T23] cdc_mbim 1-1:1.0: setting tx_max = 184
[  175.145815][   T23] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  175.200861][   T23] wwan wwan0: port wwan0mbim0 attached
[  175.282468][   T23] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, f6:5a:f2:f3:a6:e5
[  175.365775][ T8531] XFS (loop1): Ending clean mount
[  175.372235][   T23] usb 1-1: USB disconnect, device number 12
[  175.408105][   T23] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  175.427562][ T8531] XFS (loop1): Quotacheck needed: Please wait.
[  175.545685][ T8531] XFS (loop1): Quotacheck: Done.
[  175.574249][ T8531] XFS (loop1): User initiated shutdown received.
[  175.575221][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  175.581289][ T8531] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  175.600651][ T8531] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  175.741375][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.400410][ T8586] loop1: detected capacity change from 0 to 4096
[  176.506283][ T8586] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  176.553201][ T8586] ntfs3: loop1: Failed to load $Extend (-22).
[  176.569203][ T8586] ntfs3: loop1: Failed to initialize $Extend.
[  176.707626][ T8600] program syz.0.831 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  176.985590][ T8607] syz.2.835[8607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.985718][ T8607] syz.2.835[8607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  177.594198][ T8615] loop0: detected capacity change from 0 to 40427
[  177.649649][ T8615] F2FS-fs (loop0): heap/no_heap options were deprecated
[  177.666446][ T8615] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff
[  177.682173][ T8615] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x77e8c
[  177.729700][ T8615] F2FS-fs (loop0): invalid crc value
[  177.773069][ T8615] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920
[  177.818942][ T8615] F2FS-fs (loop0): Found nat_bits in checkpoint
[  177.949411][ T8615] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  177.958545][ T8637] loop1: detected capacity change from 0 to 2048
[  178.024255][ T8615] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  178.037573][ T8637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.121609][ T8615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  178.281353][ T8615] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910
[  178.317274][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.317716][ T8650] loop2: detected capacity change from 0 to 1024
[  178.360663][ T8650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.379636][ T8650] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.438192][ T5784] syz-executor: attempt to access beyond end of device
[  178.438192][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  178.486551][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  178.615978][   T28] audit: type=1804 audit(1752562579.807:24): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.849" name="/newroot/234/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  178.667430][ T8657] EXT4-fs error (device loop2): ext4_free_blocks:6681: comm syz.2.849: Freeing blocks not in datazone - block = 0, count = 16
[  178.885595][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.290355][ T8661] loop1: detected capacity change from 0 to 32768
[  179.307215][ T8661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.854 (8661)
[  179.352961][ T8661] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.380235][ T8661] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  179.390525][ T8661] BTRFS info (device loop1): using free space tree
[  179.399413][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  179.503023][ T8661] BTRFS info (device loop1): enabling ssd optimizations
[  179.513030][ T8661] BTRFS info (device loop1): auto enabling async discard
[  179.611820][ T5832] usb 5-1: config 0 has an invalid interface number: 104 but max is 0
[  179.630459][ T5832] usb 5-1: config 0 has no interface number 0
[  179.653304][ T5832] usb 5-1: config 0 interface 104 has no altsetting 0
[  179.689999][ T5832] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  179.693368][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.713190][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.719009][ T8669] loop0: detected capacity change from 0 to 32768
[  179.734513][ T5832] usb 5-1: Product: syz
[  179.738698][ T5832] usb 5-1: Manufacturer: syz
[  179.757255][ T5832] usb 5-1: SerialNumber: syz
[  179.799230][ T5832] usb 5-1: config 0 descriptor??
[  179.807342][ T8669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.852 (8669)
[  179.838021][ T5832] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  179.868708][ T8669] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.898538][ T8669] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  179.922506][ T8669] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  179.957331][ T8669] BTRFS info (device loop0): trying to use backup root at mount time
[  179.977935][ T8673] loop2: detected capacity change from 0 to 32768
[  179.984520][ T8669] BTRFS info (device loop0): setting nodatasum
[  179.990698][ T8669] BTRFS info (device loop0): force zlib compression, level 3
[  180.012410][ T8673] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.859 (8673)
[  180.031863][ T8669] BTRFS info (device loop0): doing ref verification
[  180.046230][ T8669] BTRFS info (device loop0): turning on flush-on-commit
[  180.046669][ T5832] gspca_vc032x: reg_r err -71
[  180.077313][ T8673] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.096125][ T8669] BTRFS info (device loop0): allowing degraded mounts
[  180.103179][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.115813][ T8669] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  180.128499][ T8673] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  180.133028][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.165768][ T8669] BTRFS info (device loop0): use lzo compression, level 0
[  180.176630][ T8673] BTRFS info (device loop2): using free space tree
[  180.183263][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.183278][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.183287][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.201028][ T8669] BTRFS info (device loop0): enabling ssd optimizations
[  180.222472][ T8669] BTRFS info (device loop0): using spread ssd allocation scheme
[  180.240286][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.250958][ T8669] BTRFS info (device loop0): using free space tree
[  180.253684][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.313919][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.349302][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.382997][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.410689][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.424261][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.429734][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.437886][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.444340][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.448856][ T8673] BTRFS info (device loop2): enabling ssd optimizations
[  180.449673][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.463446][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.468754][ T5832] gspca_vc032x: I2c Bus Busy Wait 00
[  180.474531][ T5832] gspca_vc032x: Unknown sensor...
[  180.493307][ T8673] BTRFS info (device loop2): auto enabling async discard
[  180.501118][ T5832] vc032x: probe of 5-1:0.104 failed with error -22
[  180.534182][ T8669] BTRFS info (device loop0): auto enabling async discard
[  180.553891][ T5832] usb 5-1: USB disconnect, device number 4
[  180.722221][ T5783] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.744585][   T28] audit: type=1800 audit(1752562581.927:25): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.852" name="file1" dev="loop0" ino=260 res=0 errno=0
[  180.962667][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.006018][ T6231] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (6231)
[  182.608354][ T8761] loop4: detected capacity change from 0 to 32768
[  182.648658][ T8763] loop0: detected capacity change from 0 to 32768
[  182.665151][ T8763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.871 (8763)
[  182.671025][ T8761] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  182.694948][ T8763] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.706023][ T8763] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  182.714886][ T8763] BTRFS info (device loop0): setting nodatacow, compression disabled
[  182.723233][ T8763] BTRFS info (device loop0): max_inline at 0
[  182.729272][ T8763] BTRFS info (device loop0): enabling disk space caching
[  182.736510][ T8763] BTRFS info (device loop0): turning off barriers
[  182.743029][ T8763] BTRFS info (device loop0): turning on flush-on-commit
[  182.750677][ T8763] BTRFS info (device loop0): doing ref verification
[  182.757442][ T8763] BTRFS info (device loop0): force clearing of disk cache
[  182.764806][ T8763] BTRFS info (device loop0): enabling ssd optimizations
[  182.772653][ T8763] BTRFS info (device loop0): max_inline at 4096
[  182.779032][ T8763] BTRFS info (device loop0): disk space caching is enabled
[  182.844485][ T8785] loop2: detected capacity change from 0 to 64
[  182.887624][ T8763] BTRFS info (device loop0): auto enabling async discard
[  182.906637][ T8763] BTRFS info (device loop0): rebuilding free space tree
[  182.915662][ T8785] hfs: request for non-existent node 131072 in B*Tree
[  182.926661][ T8785] hfs: request for non-existent node 131072 in B*Tree
[  182.948850][ T8789] loop1: detected capacity change from 0 to 256
[  182.961837][ T8763] BTRFS info (device loop0): disabling free space tree
[  182.971827][ T8763] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  182.971962][ T8761] XFS (loop4): Ending clean mount
[  183.023226][ T8763] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  183.241781][ T6491] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  183.263802][ T8795] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  183.324598][ T8795] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  183.369027][ T8795] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  183.467060][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.473758][   T28] audit: type=1800 audit(1752562584.657:26): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.873" name="file1" dev="loop1" ino=1048628 res=0 errno=0
[  183.519539][ T8795] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  183.628304][ T6231] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop0 scanned by udevd (6231)
[  183.862488][   T28] audit: type=1326 audit(1752562585.047:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.4.876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00caf8e929 code=0x0
[  184.215298][ T8814] xt_bpf: check failed: parse error
[  184.441492][ T8822] loop2: detected capacity change from 0 to 512
[  184.479934][ T8822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  184.539005][ T8822] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  184.567379][ T8822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  184.578613][ T8822] System zones: 0-1, 15-15, 18-18, 34-34
[  184.598326][ T8822] EXT4-fs (loop2): orphan cleanup on readonly fs
[  184.633488][ T8822] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  184.642842][ T8822] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  184.724506][ T8822] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  184.743243][ T8822] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.886: bg 0: block 40: padding at end of block bitmap is not set
[  184.758695][ T8822] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  184.769093][ T8822] EXT4-fs (loop2): 1 truncate cleaned up
[  184.776207][ T8822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  184.843877][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.160895][ T8846] loop4: detected capacity change from 0 to 1024
[  185.242540][ T8846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.510428][ T8858] loop1: detected capacity change from 0 to 64
[  185.536523][ T6491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.564695][ T8858] hfs: request for non-existent node 131072 in B*Tree
[  185.585908][ T8858] hfs: request for non-existent node 131072 in B*Tree
[  185.872963][ T8841] loop0: detected capacity change from 0 to 32768
[  185.947000][ T8841] find_entry called with index = 0
[  185.975263][ T8841] read_mapping_page failed!
[  185.979841][ T8841] ERROR: (device loop0): txCommit: 
[  185.979841][ T8841] 
[  186.173946][ T5796] Bluetooth: hci3: command 0x0406 tx timeout
[  186.180094][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout
[  186.186210][ T5798] Bluetooth: hci1: command 0x0406 tx timeout
[  186.561662][ T8860] loop2: detected capacity change from 0 to 40427
[  186.602362][ T8860] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7
[  186.654806][ T8860] F2FS-fs (loop2): invalid crc value
[  186.686007][ T8860] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.829085][ T8860] F2FS-fs (loop2): Start checkpoint disabled!
[  186.842460][ T8860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  186.901104][ T8860] syz.2.903: attempt to access beyond end of device
[  186.901104][ T8860] loop2: rw=2049, sector=45096, nr_sectors = 96 limit=40427
[  186.941152][ T8860] syz.2.903: attempt to access beyond end of device
[  186.941152][ T8860] loop2: rw=2049, sector=45192, nr_sectors = 8 limit=40427
[  187.169564][   T12] kworker/u4:1: attempt to access beyond end of device
[  187.169564][   T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  187.203536][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  187.210440][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  187.230918][ T8873] loop1: detected capacity change from 0 to 32768
[  187.263974][ T8873] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  187.298444][ T8898] loop0: detected capacity change from 0 to 256
[  187.309207][ T8898] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.330057][ T8898] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  187.378659][ T8898] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  187.456800][ T6231] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  188.068698][ T8920] loop1: detected capacity change from 0 to 8
[  188.107253][ T8920] SQUASHFS error: lzo decompression failed, data probably corrupt
[  188.141645][ T8920] SQUASHFS error: Failed to read block 0x91: -5
[  188.152958][ T8920] SQUASHFS error: Unable to read metadata cache entry [8f]
[  188.161318][ T8920] SQUASHFS error: Unable to read inode 0x11f
[  188.252486][ T8920] loop1: detected capacity change from 0 to 1024
[  188.410519][ T8924] loop0: detected capacity change from 0 to 2048
[  188.437338][ T8924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.731739][ T5784] UDF-fs: error (device loop0): udf_read_inode: (ino 1329) failed !bh
[  188.740002][ T8918] loop2: detected capacity change from 0 to 40427
[  188.750785][ T5784] UDF-fs: error (device loop0): udf_read_inode: (ino 1329) failed !bh
[  188.763456][ T8918] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7
[  188.796627][ T8918] F2FS-fs (loop2): invalid crc value
[  188.835769][ T8918] F2FS-fs (loop2): Found nat_bits in checkpoint
[  189.035461][ T8918] F2FS-fs (loop2): Start checkpoint disabled!
[  189.067815][ T8918] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  189.306299][ T6062] kworker/u4:13: attempt to access beyond end of device
[  189.306299][ T6062] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  189.339745][ T6062] kworker/u4:13: attempt to access beyond end of device
[  189.339745][ T6062] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  189.354330][ T6062] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  189.362293][ T6062] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  189.375745][ T6062] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  190.207822][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.220950][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.234022][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.248741][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.269221][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  190.276961][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.318009][ T8967] loop1: detected capacity change from 0 to 2048
[  190.461888][ T8967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.519416][   T28] audit: type=1800 audit(1752562591.707:28): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.947" name="bus" dev="loop1" ino=18 res=0 errno=0
[  190.539495][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.582385][ T8978] netlink: 'syz.4.949': attribute type 12 has an invalid length.
[  190.593338][ T8978] netlink: 'syz.4.949': attribute type 29 has an invalid length.
[  190.606598][ T8978] netlink: 148 bytes leftover after parsing attributes in process `syz.4.949'.
[  190.607656][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.617721][ T8978] netlink: 'syz.4.949': attribute type 1 has an invalid length.
[  191.013636][    T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  191.219156][    T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  191.251135][    T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  191.290237][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  191.331896][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  191.355308][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  191.384217][    T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  191.404538][    T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  191.428329][    T8] usb 3-1: Product: syz
[  191.437054][    T8] usb 3-1: Manufacturer: syz
[  191.476151][    T8] cdc_wdm 3-1:1.0: skipping garbage
[  191.481410][    T8] cdc_wdm 3-1:1.0: skipping garbage
[  191.495131][ T8962] chnl_net:caif_netlink_parms(): no params data found
[  191.504828][    T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  191.525117][    T8] cdc_wdm 3-1:1.0: Unknown control protocol
[  191.771089][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  191.771974][   T27] usb 3-1: USB disconnect, device number 11
[  191.777977][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  191.789905][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  191.802998][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[  191.835208][ T1080] hsr_slave_0: left promiscuous mode
[  191.841860][ T1080] hsr_slave_1: left promiscuous mode
[  191.851301][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.859412][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.865717][ T9022] loop4: detected capacity change from 0 to 512
[  191.891450][ T1080] bridge_slave_1: left allmulticast mode
[  191.912125][ T1080] bridge_slave_1: left promiscuous mode
[  191.918470][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.922145][ T9022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.940344][ T1080] bridge_slave_0: left allmulticast mode
[  191.946210][    T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  191.960662][ T9022] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  192.013183][ T1080] bridge_slave_0: left promiscuous mode
[  192.018963][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.137196][    T8] usb 2-1: config index 0 descriptor too short (expected 5668, got 36)
[  192.145694][    T8] usb 2-1: config 3 has too many interfaces: 84, using maximum allowed: 32
[  192.155185][ T6491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.163662][    T8] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 84
[  192.188970][    T8] usb 2-1: config 3 has no interface number 0
[  192.211225][    T8] usb 2-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  192.233735][    T8] usb 2-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.275647][    T8] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  192.290214][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.312707][    T8] usb 2-1: Product: syz
[  192.334325][    T8] usb 2-1: Manufacturer: syz
[  192.338990][    T8] usb 2-1: SerialNumber: syz
[  192.372315][ T9012] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  192.413303][ T5793] Bluetooth: hci0: command tx timeout
[  192.602619][    T8] usb-storage 2-1:3.20: USB Mass Storage device detected
[  192.651637][    T8] usb-storage 2-1:3.20: Quirks match for vid 04e6 pid 000b: 4
[  192.809575][    T8] scsi host1: usb-storage 2-1:3.20
[  192.850683][    T8] usb 2-1: USB disconnect, device number 7
[  193.119339][ T1080] team0 (unregistering): Port device team_slave_1 removed
[  193.201284][ T1080] team0 (unregistering): Port device team_slave_0 removed
[  193.261392][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.307663][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.775883][ T9072] loop1: detected capacity change from 0 to 256
[  194.308893][ T9081] loop1: detected capacity change from 0 to 2048
[  194.318671][ T9081] EXT4-fs: Ignoring removed mblk_io_submit option
[  194.347922][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  194.354370][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  194.386184][ T9081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.499518][ T5793] Bluetooth: hci0: command tx timeout
[  194.512198][ T9085] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.977: bg 0: block 234: padding at end of block bitmap is not set
[  194.576941][ T9085] EXT4-fs (loop1): Remounting filesystem read-only
[  194.635787][ T1080] bond0 (unregistering): Released all slaves
[  194.735897][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.835302][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.842687][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.851579][ T8962] bridge_slave_0: entered allmulticast mode
[  194.859957][ T8962] bridge_slave_0: entered promiscuous mode
[  194.891841][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.910264][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.917894][ T8962] bridge_slave_1: entered allmulticast mode
[  194.926257][ T8962] bridge_slave_1: entered promiscuous mode
[  195.052948][ T8962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.102596][ T8962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.239345][ T8962] team0: Port device team_slave_0 added
[  195.264777][ T8962] team0: Port device team_slave_1 added
[  195.369648][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.388830][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.441235][ T8962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.477337][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.497889][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.551818][ T8962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.706613][ T8962] hsr_slave_0: entered promiscuous mode
[  195.740474][ T8962] hsr_slave_1: entered promiscuous mode
[  195.783504][ T8962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.797480][ T8962] Cannot create hsr debugfs directory
[  196.000267][ T9118] loop4: detected capacity change from 0 to 2048
[  196.007963][ T9094] loop1: detected capacity change from 0 to 40427
[  196.036451][ T9118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.065305][ T9094] F2FS-fs (loop1): Found nat_bits in checkpoint
[  196.196719][ T9094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  196.280704][ T8962] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  196.326356][ T8962] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  196.356014][ T8962] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  196.435573][ T8962] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  196.573692][ T5793] Bluetooth: hci0: command tx timeout
[  196.758208][ T8962] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.817735][ T8962] 8021q: adding VLAN 0 to HW filter on device team0
[  196.867881][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.875068][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.917313][ T9141] loop2: detected capacity change from 0 to 2048
[  196.918470][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.930823][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.994900][ T9143] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.254531][ T9143] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  197.287231][ T9143] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  197.341894][ T9143] Remounting filesystem read-only
[  197.377410][ T6062] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  197.397257][ T6062] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  197.401007][ T9127] loop4: detected capacity change from 0 to 32768
[  197.413080][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.439511][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.473797][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.493067][ T6062] NILFS (loop2): discard dirty page: offset=0, ino=2
[  197.503896][ T6062] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  197.511431][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.534138][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.543391][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.562677][ T6062] NILFS (loop2): discard dirty page: offset=0, ino=5
[  197.582017][ T6062] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  197.598126][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.604826][ T9127] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  197.607451][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.625956][ T6062] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.635986][ T5783] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  197.646229][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=6
[  197.652928][ T5783] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  197.661356][ T5783] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  197.668625][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.679361][ T5783] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  197.687924][ T5783] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  197.697391][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=4
[  197.704496][ T5783] NILFS (loop2): discard dirty block: blocknr=40, size=1024
[  197.711877][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.726088][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.739116][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.753599][ T9127] 
[  197.755942][ T9127] ======================================================
[  197.762956][ T9127] WARNING: possible circular locking dependency detected
[  197.769986][ T9127] 6.6.98-syzkaller #0 Not tainted
[  197.775019][ T9127] ------------------------------------------------------
[  197.782041][ T9127] syz.4.985/9127 is trying to acquire lock:
[  197.787936][ T9127] ffff88805eee5f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_xattr_set+0xada/0x11f0
[  197.800153][ T9127] 
[  197.800153][ T9127] but task is already holding lock:
[  197.807520][ T9127] ffff88805eee4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  197.817036][ T9127] 
[  197.817036][ T9127] which lock already depends on the new lock.
[  197.817036][ T9127] 
[  197.827442][ T9127] 
[  197.827442][ T9127] the existing dependency chain (in reverse order) is:
[  197.836455][ T9127] 
[  197.836455][ T9127] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  197.844301][ T9127]        down_read+0x46/0x2e0
[  197.848987][ T9127]        ocfs2_init_acl+0x2fa/0x720
[  197.854201][ T9127]        ocfs2_mknod+0x12e5/0x20f0
[  197.859326][ T9127]        ocfs2_create+0x196/0x410
[  197.864365][ T9127]        path_openat+0x1277/0x3190
[  197.869490][ T9127]        do_filp_open+0x1c5/0x3d0
[  197.874525][ T9127]        do_sys_openat2+0x12c/0x1c0
[  197.879742][ T9127]        __x64_sys_openat+0x139/0x160
[  197.885130][ T9127]        do_syscall_64+0x55/0xb0
[  197.890084][ T9127]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.896513][ T9127] 
[  197.896513][ T9127] -> #3 (jbd2_handle){++++}-{0:0}:
[  197.903826][ T9127]        start_this_handle+0x1e9d/0x20c0
[  197.909473][ T9127]        jbd2__journal_start+0x2bb/0x5b0
[  197.915118][ T9127]        jbd2_journal_start+0x2a/0x40
[  197.920504][ T9127]        ocfs2_start_trans+0x376/0x6c0
[  197.925978][ T9127]        ocfs2_symlink+0x1093/0x2550
[  197.931287][ T9127]        vfs_symlink+0x138/0x2b0
[  197.936241][ T9127]        do_symlinkat+0x1b2/0x3f0
[  197.941281][ T9127]        __x64_sys_symlink+0x7e/0x90
[  197.946581][ T9127]        do_syscall_64+0x55/0xb0
[  197.951535][ T9127]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.957962][ T9127] 
[  197.957962][ T9127] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  197.966502][ T9127]        down_read+0x46/0x2e0
[  197.971194][ T9127]        ocfs2_start_trans+0x36a/0x6c0
[  197.976665][ T9127]        ocfs2_symlink+0x1093/0x2550
[  197.981968][ T9127]        vfs_symlink+0x138/0x2b0
[  197.986930][ T9127]        do_symlinkat+0x1b2/0x3f0
[  197.991971][ T9127]        __x64_sys_symlink+0x7e/0x90
[  197.993900][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=3
[  197.997258][ T9127]        do_syscall_64+0x55/0xb0
[  198.008878][ T9127]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.015305][ T9127] 
[  198.015305][ T9127] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  198.022803][ T9127]        ocfs2_start_trans+0x26b/0x6c0
[  198.026730][ T5783] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  198.028258][ T9127]        ocfs2_remove_btree_range+0x7df/0x1480
[  198.041672][ T9127]        ocfs2_commit_truncate+0xb4b/0x21a0
[  198.047580][ T9127]        ocfs2_evict_inode+0xef6/0x3e60
[  198.047954][ T5783] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  198.053117][ T9127]        evict+0x486/0x870
[  198.053141][ T9127]        do_unlinkat+0x37b/0x570
[  198.053158][ T9127]        __x64_sys_unlink+0x49/0x50
[  198.053177][ T9127]        do_syscall_64+0x55/0xb0
[  198.053196][ T9127]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.053218][ T9127] 
[  198.053218][ T9127] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  198.053252][ T9127]        __lock_acquire+0x2ddb/0x7c80
[  198.053271][ T9127]        lock_acquire+0x197/0x410
[  198.053289][ T9127]        down_write+0x97/0x1f0
[  198.053303][ T9127]        ocfs2_xattr_set+0xada/0x11f0
[  198.070736][ T5783] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  198.075066][ T9127]        __vfs_setxattr+0x431/0x470
[  198.075092][ T9127]        __vfs_setxattr_noperm+0x12d/0x5e0
[  198.075114][ T9127]        vfs_setxattr+0x16c/0x2f0
[  198.075135][ T9127]        path_setxattr+0x362/0x550
[  198.075150][ T9127]        __x64_sys_setxattr+0xbb/0xd0
[  198.075173][ T9127]        do_syscall_64+0x55/0xb0
[  198.075194][ T9127]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.075212][ T9127] 
[  198.075212][ T9127] other info that might help us debug this:
[  198.075212][ T9127] 
[  198.075218][ T9127] Chain exists of:
[  198.075218][ T9127]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> jbd2_handle --> &oi->ip_xattr_sem
[  198.075218][ T9127] 
[  198.075258][ T9127]  Possible unsafe locking scenario:
[  198.075258][ T9127] 
[  198.090853][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.097026][ T9127]        CPU0                    CPU1
[  198.097033][ T9127]        ----                    ----
[  198.097037][ T9127]   lock(&oi->ip_xattr_sem);
[  198.097051][ T9127]                                lock(jbd2_handle);
[  198.097063][ T9127]                                lock(&oi->ip_xattr_sem);
[  198.097076][ T9127]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4);
[  198.097095][ T9127] 
[  198.097095][ T9127]  *** DEADLOCK ***
[  198.097095][ T9127] 
[  198.097099][ T9127] 3 locks held by syz.4.985/9127:
[  198.097109][ T9127]  #0: ffff88807d7ac418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  198.097162][ T9127]  #1: ffff88805eee5118 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0
[  198.097219][ T9127]  #2: ffff88805eee4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  198.097270][ T9127] 
[  198.097270][ T9127] stack backtrace:
[  198.097291][ T9127] CPU: 1 PID: 9127 Comm: syz.4.985 Not tainted 6.6.98-syzkaller #0
[  198.097308][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  198.097325][ T9127] Call Trace:
[  198.097333][ T9127]  <TASK>
[  198.097344][ T9127]  dump_stack_lvl+0x16c/0x230
[  198.097369][ T9127]  ? load_image+0x3b0/0x3b0
[  198.097389][ T9127]  ? show_regs_print_info+0x20/0x20
[  198.097417][ T9127]  ? print_circular_bug+0x12b/0x1a0
[  198.097442][ T9127]  check_noncircular+0x2bd/0x3c0
[  198.097462][ T9127]  ? look_up_lock_class+0x75/0x140
[  198.097482][ T9127]  ? print_deadlock_bug+0x5d0/0x5d0
[  198.097502][ T9127]  ? lockdep_lock+0xe0/0x220
[  198.097521][ T9127]  ? lockdep_unlock+0x137/0x2d0
[  198.097540][ T9127]  ? _find_first_zero_bit+0xd3/0x100
[  198.097562][ T9127]  __lock_acquire+0x2ddb/0x7c80
[  198.097594][ T9127]  ? verify_lock_unused+0x140/0x140
[  198.097613][ T9127]  ? stack_trace_save+0x9c/0xe0
[  198.097646][ T9127]  lock_acquire+0x197/0x410
[  198.097670][ T9127]  ? ocfs2_xattr_set+0xada/0x11f0
[  198.097698][ T9127]  ? __might_sleep+0xe0/0xe0
[  198.097720][ T9127]  ? read_lock_is_recursive+0x20/0x20
[  198.097739][ T9127]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  198.124353][ T5783] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  198.125465][ T9127]  ? ocfs2_xattr_block_find+0x154/0x4c0
[  198.140161][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.141424][ T9127]  down_write+0x97/0x1f0
[  198.153909][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.156802][ T9127]  ? ocfs2_xattr_set+0xada/0x11f0
[  198.183239][ T5783] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  198.189084][ T9127]  ? down_read_killable+0x340/0x340
[  198.189106][ T9127]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  198.210742][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.216083][ T9127]  ocfs2_xattr_set+0xada/0x11f0
[  198.216121][ T9127]  ? __ocfs2_xattr_set_handle+0xf10/0xf10
[  198.216148][ T9127]  ? __lock_acquire+0x1334/0x7c80
[  198.216170][ T9127]  ? verify_lock_unused+0x140/0x140
[  198.216199][ T9127]  ? aa_get_newest_label+0xf8/0x5c0
[  198.216230][ T9127]  ? end_current_label_crit_section+0x170/0x170
[  198.216259][ T9127]  ? posix_xattr_acl+0x93/0xb0
[  198.216278][ T9127]  ? evm_protect_xattr+0x36d/0x7a0
[  198.216295][ T9127]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  198.516817][ T9127]  __vfs_setxattr+0x431/0x470
[  198.521513][ T9127]  __vfs_setxattr_noperm+0x12d/0x5e0
[  198.526817][ T9127]  vfs_setxattr+0x16c/0x2f0
[  198.531320][ T9127]  ? xattr_permission+0x470/0x470
[  198.536333][ T9127]  ? __mnt_want_write+0x223/0x2a0
[  198.541351][ T9127]  ? path_setxattr+0x314/0x550
[  198.546105][ T9127]  path_setxattr+0x362/0x550
[  198.550682][ T9127]  ? simple_xattrs_free+0x150/0x150
[  198.555872][ T9127]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  198.561841][ T9127]  ? lock_chain_count+0x20/0x20
[  198.566682][ T9127]  __x64_sys_setxattr+0xbb/0xd0
[  198.571526][ T9127]  do_syscall_64+0x55/0xb0
[  198.575936][ T9127]  ? clear_bhb_loop+0x40/0x90
[  198.580601][ T9127]  ? clear_bhb_loop+0x40/0x90
[  198.585264][ T9127]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.591143][ T9127] RIP: 0033:0x7f00caf8e929
[  198.595563][ T9127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.615164][ T9127] RSP: 002b:00007f00cbd69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  198.623578][ T9127] RAX: ffffffffffffffda RBX: 00007f00cb1b5fa0 RCX: 00007f00caf8e929
[  198.631553][ T9127] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[  198.639513][ T9127] RBP: 00007f00cb010b39 R08: 0000000000000000 R09: 0000000000000000
[  198.647487][ T9127] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[  198.655452][ T9127] R13: 0000000000000000 R14: 00007f00cb1b5fa0 R15: 00007fff364951e8
[  198.663436][ T9127]  </TASK>
[  198.693186][ T5793] Bluetooth: hci0: command tx timeout
[  198.830225][ T6491] ocfs2: Unmounting device (7,4) on (node local)
[  199.014479][  T786] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  199.031478][ T8962] veth0_vlan: entered promiscuous mode
[  199.045600][ T8962] veth1_vlan: entered promiscuous mode
[  199.078330][ T8962] veth0_macvtap: entered promiscuous mode
[  199.090314][ T8962] veth1_macvtap: entered promiscuous mode
[  199.109673][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.120545][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.131871][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.142436][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.155461][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.170699][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.182373][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.192463][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.203200][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.214225][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.216710][  T786] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  199.224267][ T8962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.238304][  T786] usb 3-1: config 0 has no interface number 0
[  199.238449][ T8962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.246590][  T786] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 8293, setting to 64
[  199.254503][ T8962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.269963][  T786] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  199.273899][ T8962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.291154][  T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.291177][  T786] usb 3-1: Product: syz
[  199.305045][  T786] usb 3-1: Manufacturer: syz
[  199.311191][  T786] usb 3-1: SerialNumber: syz
[  199.318792][  T786] usb 3-1: config 0 descriptor??
[  199.335389][ T9171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  199.354950][ T8962] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  199.393355][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.401276][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.405657][ T8962] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  199.441501][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.450865][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.555637][  T786] usbtouchscreen 3-1:0.214: Failed to read FW rev: -32
[  199.578166][  T786] usbtouchscreen: probe of 3-1:0.214 failed with error -32
[  199.611870][  T786] usb 3-1: USB disconnect, device number 12