last executing test programs:

1m56.423029546s ago: executing program 0 (id=22):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a145d00000000000000000014000200fc02000000000000000700000000000114000100200100"/68], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010003904000000e3ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02000000000000"], 0x5c}}, 0x0)

1m56.145218004s ago: executing program 0 (id=26):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0)

1m55.765870066s ago: executing program 0 (id=32):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20)

1m55.530981124s ago: executing program 0 (id=36):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

1m55.247174553s ago: executing program 0 (id=39):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffffd, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"})

1m54.509623126s ago: executing program 0 (id=44):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0)

1m54.05492811s ago: executing program 32 (id=44):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0)

1m23.594820151s ago: executing program 1 (id=277):
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6)
mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid}]})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x8, &(0x7f0000000100))

1m23.301902621s ago: executing program 1 (id=280):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
poll(&(0x7f00000000c0)=[{r0, 0x480}], 0x1, 0x5)

1m22.987898101s ago: executing program 1 (id=284):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @mcast2, 0x8000000}}}, 0x108)

1m22.721255179s ago: executing program 1 (id=286):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x7)

1m22.468684427s ago: executing program 1 (id=290):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0d000000010001", 0x7)

1m21.901569055s ago: executing program 1 (id=292):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x514, &(0x7f0000002080)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)

1m21.226691726s ago: executing program 33 (id=292):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x514, &(0x7f0000002080)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)

6.144505476s ago: executing program 4 (id=985):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000440)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "caa7c1b7f4c336af"}}}}}}}, 0x0)

5.757461778s ago: executing program 4 (id=989):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)

5.434469598s ago: executing program 4 (id=991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x24044080)

5.105366569s ago: executing program 4 (id=994):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]})
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x9)

4.866215246s ago: executing program 4 (id=996):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000007d80)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@background_gc_on}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@segment_mode}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xd74}}], [{@smackfsdef={'smackfsdef', 0x3d, 'fault_injection'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x33, 0x36, 0x32, 0x64, 0x32, 0x34, 0x37], 0x2d, [0x37, 0x63, 0x65, 0x63], 0x2d, [0x65, 0x61, 0x61, 0x61], 0x2d, [0x64, 0x61, 0x65, 0x36], 0x2d, [0x32, 0x31, 0x0, 0x63, 0x35, 0x61, 0x33, 0x33]}}}, {@uid_lt}, {@subj_role={'subj_role', 0x3d, 'batadv0\x00'}}, {@obj_type={'obj_type', 0x3d, 'noinline_dentry'}}, {@pcr={'pcr', 0x3d, 0x1d}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
lseek(r0, 0x8000000000000001, 0x1)

3.251039567s ago: executing program 6 (id=1011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

3.031447864s ago: executing program 6 (id=1013):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x1e7bd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2.693548144s ago: executing program 6 (id=1017):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="04", 0x1}], 0x1)

2.490764331s ago: executing program 6 (id=1021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4008}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1aef658c054e0eb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

2.375628765s ago: executing program 5 (id=1023):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x1)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.253573939s ago: executing program 4 (id=1024):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)

2.19315806s ago: executing program 6 (id=1025):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl726\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0x4000000e, 0x4, 0x2, 0x2, 0x2000007, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffffb]})

2.002849237s ago: executing program 6 (id=1028):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x40, 0x5, 0x8fffd)

1.961331498s ago: executing program 5 (id=1029):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f0000002500))

1.765577574s ago: executing program 2 (id=1031):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x5, 0x8}]})

1.660856428s ago: executing program 3 (id=1032):
syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0xfa, 0x155, &(0x7f0000000340)="$eJzskT9LQlEYxp/jvV41Mg0MKiiChsQwb1dsa9BIcrADhUtToCcSNEUh3LLmhj6AS0uTOERjQ9FkeSHsMzS6BUGLce4faW1/f8u953mf87zvOWd324wiDCiw2alV6w3RbIrSygHPZw/vHx5npO5THQOq9YY0l+zVUxo4lV8VGF3a8kvQA6AiNoq1SkkDkAaiADIyo+yFDts7JbWIHyflith0tOgqPp1WwnA1DdDmYPmSjraoApmQrek/wPgWWJN5s5jkfQFodbzO3PHY3ZKSdk/R6qz3uq/7g34uHlsW10Z2wbqBgpDzMln/SPTj74led2gOxhc8z82kYWwldUXXU0P+Nsil2jdQ96bPgSMGBP7kaTKjAFwxoMOArpU3enZ7c3/IFwkAnrMwwGSFBWXP9jevuu+gWJXi8byXudsmPwRBEARBEARBEATxX34DAAD//4EIV14=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0xe0)
getdents(r0, &(0x7f00000001c0)=""/166, 0xa6)

1.650672698s ago: executing program 5 (id=1033):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

1.485598823s ago: executing program 2 (id=1034):
unshare(0x2020600)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, 0x0, 0x0)

1.26852111s ago: executing program 2 (id=1035):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)=""/4063, 0xfdf}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000002d00)=""/4093, 0xffd}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/99, 0x6b}, {&(0x7f0000000400)=""/249, 0xee}, {&(0x7f0000000940)=""/97, 0x61}], 0xa}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0xfffb}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90d2}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0xffffffff}], 0x8, 0x2040, 0x0)

1.250065981s ago: executing program 3 (id=1036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x7, 0xffffffff, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)

1.113618625s ago: executing program 5 (id=1037):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x1})

1.067087356s ago: executing program 2 (id=1038):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c740f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0)

910.842921ms ago: executing program 3 (id=1039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x8010)

868.893862ms ago: executing program 5 (id=1040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)

671.758349ms ago: executing program 3 (id=1041):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

601.851831ms ago: executing program 5 (id=1042):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000140)={[{@dmode={'dmode', 0x3d, 0xfff}}, {@noadinicb}, {@longad}, {@uid_forget}, {@nostrict}, {@umask={'umask', 0x3d, 0x6ac82bcf}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@shortad}, {@mode={'mode', 0x3d, 0xc}}]}, 0xfc, 0xc44, &(0x7f0000000200)="$eJzs3UFsHNd9B+D/Gy3Fld1UTJyodhu3m7ZIZcVyZUkxFatwVzXNNoAsC6GYWwCuxJW6MEUSJNXIRtowvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKdgi5l9Ky4pyaJNkaKs77Op3+7sezPvvaFmKEFvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/3yrkTz6cH3QoAYC9dmPjKiZPu/wDwSLlU/fnfDwAAAAAAAAAAAAAAALCPpSjiiUgxf2E9TVXve+rnO7M3bk6Ojd+52qFU1TxQlS+/6s+fPHX6iy+MnunnB9e/356K1yYunWu8PHd9fqG9uNiebkzOdq7MTbe3vYed1t/qWDUAjeuv35i+enWxcfK5U5s+vjny/vDjR0bOjj5z/Ol+2cmx8fGJgTK1oY989NvcbYLHwSjieKR49ns/Sa2IKGLnY3GP753ddqjqxLGqE5Nj41VHZjqt2aXyw4v9gSgiGgOVmv0x2oNzsSPNiOWy+WWDj5Xdm5hvLbQuz7QbF1sLS52lztzsxdRrbdmfRhRxJkWsRMTa8O27G4oiapHiO4fX0+WIONAfhy9UE4Pv3o5iF/u4DWU7G0MRK8VDcM72seEo4tVI8dN3irhSjln+is9HvFrmDyLeKvOliGqW2OmI9+7wfcTDqRZF/Hl5/s+up+mI6B7ubR9vnP9q48uzV+cGyvavKw/9/WEv7fNrUz2KaFVX/PX00X/YAQAAAAAAAAAAAAAAAOB+OxRFPBUpXvn3P6rmFUc1L/3w2dHfH/nE4JzxJ++xn7LscxGxXGxvTu7BPIX4YrqY0gOeS/woq0cRf5zn/33rQTcGAAAAAAAAAAAAAAAAAADgkVbEjyPFi+8eTSsxuKZ4Z/Za41Lr8kxvVdj+2r/9NdO73W63kXrZzDmVcznnSs7VnGs5o8j1czZzTuVczrmSczXnWs44kOvnbOacyrmccyXnas61nFHL9XM2c07lXM65knM151rO2Cdr9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJwUUcTPI8W3v76eIkVEM2Iqerk63C8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxIw6mI70eKxh80b22rRUSq/u85Wv5yOpoHy/xUNEfLfCma53K2qqw1v3XPo6Vd6QMf3VAq4keRYrj+9q2zk8//UO/dxjl76xsb73651ssD/Q9H3h9+/Mjhs6Pjv/rk3V5XdYe2NODY+c7sjZuNybHx8YmBzbVc7lMD20bycYv8/hP3ZwgeaYtvvPl6a2amveDFo/Gi1ntRi33Snr16ka9XsV/as/VFc380Y+PFA74wsSfK+/97keK33/2PW7fmfP//hd67W3f4+NmfbNz/X9y6o+3e/7e6x/3/iYFtL+afRoZqEfWl6/NDRyLqi2+8ebxzvXWtfa09e/rEiS+Njn7p1ImhgxH1q52Z9sCrHQ8VAAAAAAAAAAAAAAAAwN5KRfxupGj9aD01IuJmNV9r5OzoM8efPhAHqvlWm+ZtvTZx6Vzj5bnr8wvtxcX2dGNytnNlbrq93cPVq+lek2Pju9KZezq0y+0/VH95bv6Nhc61P1y64+eP1c9dXlxaaF2588dxKIqI5uCWY1WDJ8fGq0bPdFqzVdWL9+lRCkOpiP+MFFdON9Ln8rY8/2/rDP9N8/+Xt+5o+/P/hjfVu8f8v08ObCuPmVIRP4sUv/UXT8bnqnY+FreNWS73N5Hi2JnP5nJxsCzXb3/vuQK9mYFl2f+NFP/w881l+/Mhn9go+/yHGtyHQHn+D0eK7//Zd+PX87bNz3+48/l/bOuOdmn+56cHtj226XkFO+46+fwfjxQvPfF2/Ebe9kHP/yii2+1+M+JoLnzr+Ry7dP4/M7BtJHrH/c37130AAAAAAAAAAICH1lAq4m8jxdPjtfRC3radf/83vXVHu/Tvv35pYNv0Hq1XtONBBQAAAIB9YigV8eNIcW3p7VtzqDfP/x6Y//k7G2uvj6Utn1Z/z/eL1XMD7uff/w0ayced2nm3AQAAAAAAAAAAAAAAAAAAYF9JqYgX8nrqU/dYT301Urzy38/mculIWa6/DvxI9Wv9wtzs8XMzM3NXWkutyzPtxsR860q7rPvpSLH+15/NdYtqffX+evO9Nd7r3f5a7AuRYvzv+mV7a7H31ybvrQfeW4u9LPvJSPFff7+5bH8d689slD1Zlv2rSPG1f7pz2SMbZU+VZb8bKX74tUa/7GNl2f7zUXvPJK3XYqb93JW5mdsehQoAAAAAAAAAAAAAAAAAAAAf1lAq4k8jxf9cX4nlPO0/r//fX4G/1i/71jcG1vvf4ma1zv9Itf7/3V5/lPX/R+5bTwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OGRoog3I8X8hfW0Oly+76mf78zeuDk5Nn7naodSVfNAVb78qj9/8tTpL74weqafH1z/fnsqXpu4dK7x8tz1+YX24mJ7ujE527kyN93e9h52Wn9j6HqOVQPQuP76jemrVxcbJ587tenjmyPvDz9+ZOTs6DPHn+6XnRwbH58YKFMb+hBH/1CN23AwivjLSPHs936S/nk4ooh7jUW32+1+8LHu8b2z2w5VnThWdWJybLzqyEynNbtUfnixPxBFRGOgUrM/RntwLnakGbFcNr9s8LGyexPzrYXW5Zl242JrYamz1JmbvZh6rS3704gizqSIlYhYG759d0NRxOuR4juH19O/DJe/o/M4fOHCxFdOnLx7O4pd7OM2lO1sDEWsFBvnrL5fz9k+NhxF/GOk+Ok7R+NfhyNq0fuKz0e8WuYPIt4q86WIlCK634x47w7fRzycalHE/5Xn/+x6eme4vB70ryvnv9r48uzVuYGy/evKtu6Vv3b3Yz7w+8Ne2uf3k3oU8cPqir+e/s3vawAAAAAAAAAAAAAAAIB9pIhfiRQvvns0VfODb80p7sxea1xqXZ7pTevrz/3rz5nudrvdRuplM+dUzuWcKzlXc67ljCLXz9nMOZVzOedKztWcaznjQK6fs5lzKufygYO9+vn9as61nFHL9XM2c07lXM65knM151rO2Cdz9wAAAAAAAAAAAAAAAAAAgI+Xovovxbe/vp66w731paeil6vWA/3Y+/8AAAD//yotAps=")
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

547.239032ms ago: executing program 2 (id=1043):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070200000000000000000100000008000880040007a12c0004800500030001000000050003000200000005000300050000000500030001000000050003000100000008000100030000000800020001"], 0x58}, 0x1, 0x0, 0x0, 0x20044008}, 0x0)

351.102559ms ago: executing program 3 (id=1044):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x21000000001f, &(0x7f0000000680)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14)

133.627196ms ago: executing program 2 (id=1045):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

0s ago: executing program 3 (id=1046):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)

kernel console output (not intermixed with test programs):

] type 2 family 0 port 6081 - 0
[   83.712847][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.724548][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.741380][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.750759][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.788699][ T4274] device veth0_vlan entered promiscuous mode
[   83.818145][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.826743][ T4361] loop3: detected capacity change from 0 to 1024
[   83.860206][ T4274] device veth1_vlan entered promiscuous mode
[   83.872615][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.920560][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.941305][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.965365][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[   84.035452][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[   84.038669][ T4361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   84.041681][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[   84.056410][ T4279] Bluetooth: hci3: command 0x0419 tx timeout
[   84.062678][ T4279] Bluetooth: hci2: command 0x0419 tx timeout
[   84.072029][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.128474][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.143560][ T4274] device veth0_macvtap entered promiscuous mode
[   84.214445][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.234611][ T4281] EXT4-fs (loop3): unmounting filesystem.
[   84.256998][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.331688][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.363214][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.392558][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.468803][ T4274] device veth1_macvtap entered promiscuous mode
[   84.526415][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.556147][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.573140][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.632186][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.648743][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.658722][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.704563][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.720848][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.765434][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.801794][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.835144][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.850826][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.858601][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.869080][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.895806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.977765][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.999119][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.036367][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.078842][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.099670][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.110814][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.132713][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.164753][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.177590][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.200903][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.214814][ T4285] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.222364][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.238120][ T4393] loop0: detected capacity change from 0 to 256
[   85.256806][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.267481][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.278957][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.289620][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.319067][ T4393] exfat: Deprecated parameter 'utf8'
[   85.324474][ T4393] exfat: Deprecated parameter 'utf8'
[   85.366096][ T4393] exfat: Deprecated parameter 'namecase'
[   85.371873][ T4393] exfat: Deprecated parameter 'namecase'
[   85.424794][ T4285] usb 4-1: Using ep0 maxpacket: 16
[   85.428312][ T4395] loop2: detected capacity change from 0 to 512
[   85.453981][ T4397] loop1: detected capacity change from 0 to 256
[   85.461155][ T4285] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   85.481823][ T4285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.513882][ T4395] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   85.526631][ T4397] exfat: Deprecated parameter 'namecase'
[   85.532389][ T4397] exfat: Deprecated parameter 'namecase'
[   85.556868][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.572056][ T4393] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   85.573040][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.595278][ T4285] usb 4-1: config 0 descriptor??
[   85.630072][ T4395] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[   85.647957][ T4285] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   85.686311][ T4397] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   85.762128][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.783533][ T4395] Quota error (device loop2): write_blk: dquota write failed
[   85.821406][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.830032][ T4285] usb 4-1: Detected FT232B
[   85.836291][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.852542][ T4395] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[   85.875163][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.929305][ T4395] Quota error (device loop2): write_blk: dquota write failed
[   85.942950][ T4395] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   86.038540][ T4395] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.17: Failed to acquire dquot type 1
[   86.123588][ T4395] EXT4-fs (loop2): 1 truncate cleaned up
[   86.181614][ T4395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   86.244288][ T4408] sp0: Synchronizing with TNC
[   86.264040][ T4285] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   86.284154][ T4395] =======================================================
[   86.284154][ T4395] WARNING: The mand mount option has been deprecated and
[   86.284154][ T4395]          and is ignored by this kernel. Remove the mand
[   86.284154][ T4395]          option from the mount to silence this warning.
[   86.284154][ T4395] =======================================================
[   86.336305][ T4410] sp0: Found TNC
[   86.341493][ T4285] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   86.429644][ T4285] usb 4-1: USB disconnect, device number 2
[   86.473883][ T4395] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.17: Abort forced by user
[   86.493218][ T4285] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   86.539473][ T4285] ftdi_sio 4-1:0.0: device disconnected
[   86.546307][ T4395] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   86.594600][ T4395] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.17: Abort forced by user
[   86.651498][ T4395] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   86.795384][ T4289] EXT4-fs (loop2): unmounting filesystem.
[   86.814115][ T4418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'.
[   86.837501][   T22] cfg80211: failed to load regulatory.db
[   87.584172][ T4438] loop1: detected capacity change from 0 to 512
[   87.634297][ T4438] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   87.717708][ T4438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   87.784020][ T4438] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   87.802151][ T4438] EXT4-fs (loop1): 1 truncate cleaned up
[   87.808222][ T4438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   87.944747][ T4285] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   87.986554][ T4282] EXT4-fs (loop1): unmounting filesystem.
[   88.139314][ T4285] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   88.168048][ T4285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   88.202932][ T4285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   88.234887][ T4285] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   88.254411][ T4285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.294967][ T4285] usb 3-1: config 0 descriptor??
[   88.328678][ T4446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   88.419138][ T4459] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[   88.654510][ T4451] loop4: detected capacity change from 0 to 32768
[   88.665960][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.783973][ T4285] hid-multitouch 0003:1FD2:6007.0001: ignoring exceeding usage max
[   88.823654][ T4285] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x2
[   88.831677][ T4451] JBD2: Ignoring recovery information on journal
[   88.880774][ T4285] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[   88.912472][ T4451] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   89.024998][ T4285] usb 3-1: USB disconnect, device number 2
[   89.130387][   T27] audit: type=1800 audit(1781050906.007:2): pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.40" name="file1" dev="loop4" ino=17058 res=0 errno=0
[   89.165447][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.208943][ T1171] libceph: connect (1)[c::]:6789 error -101
[   89.216070][ T1171] libceph: mon0 (1)[c::]:6789 connect error
[   89.307362][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.327464][ T4471] fido_id[4471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   89.468668][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.470227][ T4274] ocfs2: Unmounting device (7,4) on (node local)
[   89.487480][ T1171] libceph: connect (1)[c::]:6789 error -101
[   89.493546][ T1171] libceph: mon0 (1)[c::]:6789 connect error
[   89.765505][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.774296][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.782681][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.791629][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.800300][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.814067][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.909778][ T4468] ceph: No mds server is up or the cluster is laggy
[   90.025783][   T22] libceph: connect (1)[c::]:6789 error -101
[   90.031881][   T22] libceph: mon0 (1)[c::]:6789 connect error
[   90.419251][ T4497] netlink: 172 bytes leftover after parsing attributes in process `syz.3.57'.
[   91.051689][ T4521] loop1: detected capacity change from 0 to 64
[   91.072679][ T4520] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.125339][ T4516] loop4: detected capacity change from 0 to 4096
[   91.187214][ T4477] chnl_net:caif_netlink_parms(): no params data found
[   91.231767][ T4526] loop2: detected capacity change from 0 to 8
[   91.345891][ T4526] SQUASHFS error: zlib decompression failed, data probably corrupt
[   91.376448][ T4527] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.395170][ T4526] SQUASHFS error: Failed to read block 0x9b: -5
[   91.429354][ T4526] SQUASHFS error: Unable to read metadata cache entry [99]
[   91.513486][ T4526] SQUASHFS error: Unable to read inode 0x127
[   91.874926][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[   92.104343][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.155559][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.163907][ T4477] device bridge_slave_0 entered promiscuous mode
[   92.210286][ T4531] loop1: detected capacity change from 0 to 32768
[   92.241634][ T4549] loop4: detected capacity change from 0 to 256
[   92.299313][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.344065][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.378593][ T4477] device bridge_slave_1 entered promiscuous mode
[   92.573975][  T108] ERROR: (device loop1): diFree: numfree > numinos
[   92.573975][  T108] 
[   92.614690][  T108] ERROR: (device loop1): remounting filesystem as read-only
[   92.915359][ T4477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.209229][ T4567] capability: warning: `syz.3.82' uses deprecated v2 capabilities in a way that may be insecure
[   93.275248][ T4477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.353006][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'.
[   93.424951][    T9] device hsr_slave_0 left promiscuous mode
[   93.486924][    T9] device hsr_slave_1 left promiscuous mode
[   93.535632][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.543204][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.627412][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.650280][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.692293][    T9] device bridge_slave_1 left promiscuous mode
[   93.702888][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.751646][    T9] device bridge_slave_0 left promiscuous mode
[   93.773777][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.906781][    T9] device veth1_macvtap left promiscuous mode
[   93.942944][    T9] device veth0_macvtap left promiscuous mode
[   93.954896][ T4279] Bluetooth: hci0: command 0x041b tx timeout
[   94.011412][    T9] device veth1_vlan left promiscuous mode
[   94.034040][ T4591] loop3: detected capacity change from 0 to 256
[   94.061532][    T9] device veth0_vlan left promiscuous mode
[   94.151658][ T4591] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d)
[   94.236560][ T4591] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005)
[   94.268179][ T4591] exFAT-fs (loop3): failed to initialize root inode
[   94.276614][ T4560] loop4: detected capacity change from 0 to 40427
[   94.435459][ T4558] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   95.004834][ T4275] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.052816][ T4610] loop4: detected capacity change from 0 to 4096
[   95.231434][ T4610] ntfs: volume version 3.1.
[   95.234843][ T4275] usb 4-1: Using ep0 maxpacket: 32
[   95.246728][ T4275] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   95.284455][ T4275] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[   95.305174][ T4275] usb 4-1: config 0 interface 0 has no altsetting 0
[   95.311882][ T4275] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[   95.351507][ T4275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.385533][ T4275] usb 4-1: config 0 descriptor??
[   95.842745][ T4275] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   95.883828][ T4275] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   95.899711][ T4275] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   95.916446][ T4275] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   95.934386][ T4275] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   95.954384][ T4275] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0
[   96.002438][ T4628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'.
[   96.034939][ T4279] Bluetooth: hci0: command 0x040f tx timeout
[   96.070181][ T4275] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-90)
[   96.081966][ T4275] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -90
[   96.143615][ T4275] usb 4-1: USB disconnect, device number 3
[   96.167900][  T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   96.277557][ T4631] fido_id[4631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   96.355779][  T127] usb 5-1: Using ep0 maxpacket: 16
[   96.364348][  T127] usb 5-1: config index 0 descriptor too short (expected 52, got 36)
[   96.410957][  T127] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[   96.429597][  T127] usb 5-1: config 0 has no interface number 0
[   96.458006][  T127] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   96.478973][  T127] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   96.502347][  T127] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   96.518921][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.528613][  T127] usb 5-1: Product: syz
[   96.532832][  T127] usb 5-1: Manufacturer: syz
[   96.543486][  T127] usb 5-1: SerialNumber: syz
[   96.567575][  T127] usb 5-1: config 0 descriptor??
[   96.582520][ T4626] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   96.593927][ T4626] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   96.757660][    T9] team0 (unregistering): Port device team_slave_1 removed
[   96.847593][  T127] asix: probe of 5-1:0.251 failed with error -71
[   96.872748][  T127] usb 5-1: USB disconnect, device number 2
[   96.906627][    T9] team0 (unregistering): Port device team_slave_0 removed
[   96.991208][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.110822][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.932894][    T9] bond0 (unregistering): Released all slaves
[   97.953115][ T4651] loop3: detected capacity change from 0 to 32768
[   98.081168][ T4477] team0: Port device team_slave_0 added
[   98.102044][ T4477] team0: Port device team_slave_1 added
[   98.111347][ T4665] loop4: detected capacity change from 0 to 1024
[   98.115210][ T4279] Bluetooth: hci0: command 0x0419 tx timeout
[   98.296517][ T4665] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.115: lblock 2 mapped to illegal pblock 2 (length 1)
[   98.397854][ T4477] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.433722][ T4665] Quota error (device loop4): qtree_write_dquot: dquota write failed
[   98.439887][ T4477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.465023][ T4665] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.115: lblock 0 mapped to illegal pblock 48 (length 1)
[   98.584727][ T4665] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   98.603932][ T4477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.614794][ T4665] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.115: Failed to acquire dquot type 0
[   98.685258][ T4477] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.686016][ T4665] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   98.692260][ T4477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.692287][ T4477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.900664][ T4665] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.115: mark_inode_dirty error
[   98.956428][ T4665] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   98.980385][ T4665] EXT4-fs (loop4): 1 orphan inode deleted
[   98.995976][   T11] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   99.010715][ T4665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   99.017770][ T4477] device hsr_slave_0 entered promiscuous mode
[   99.047375][ T4477] device hsr_slave_1 entered promiscuous mode
[   99.055795][   T11] Quota error (device loop4): remove_tree: Can't read quota data block 1
[   99.064496][   T11] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0
[   99.104167][ T4477] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.115373][ T4682] 9pnet_virtio: no channels available for device c:::
[   99.124338][ T4477] Cannot create hsr debugfs directory
[   99.303320][ T4274] EXT4-fs (loop4): unmounting filesystem.
[   99.361904][   T46] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   99.434856][ T4688] netlink: 'syz.1.123': attribute type 4 has an invalid length.
[   99.446161][   T46] Quota error (device loop4): remove_tree: Can't read quota data block 1
[   99.467798][   T46] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0
[   99.484072][ T4688] netlink: 'syz.1.123': attribute type 8 has an invalid length.
[   99.499035][ T4688] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.123'.
[   99.530999][ T4274] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[   99.612705][ T4274] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   99.638697][ T4274] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[   99.912294][ T4477] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   99.931358][ T4670] loop3: detected capacity change from 0 to 40427
[   99.953131][ T4701] netlink: 'syz.2.126': attribute type 12 has an invalid length.
[   99.965105][ T4701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.126'.
[   99.994501][ T4477] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  100.029253][ T4670] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  100.052165][ T4477] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  100.083707][ T4477] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  100.094403][ T4670] F2FS-fs (loop3): invalid crc value
[  100.155300][ T4670] F2FS-fs (loop3): Found nat_bits in checkpoint
[  100.194742][ T4279] Bluetooth: hci0: command 0x0407 tx timeout
[  100.398384][ T4670] F2FS-fs (loop3): recover fsync data on readonly fs
[  100.446452][ T4670] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  100.453192][ T4670] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  100.495009][ T4477] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.549897][ T4670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  100.578190][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.612252][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.669079][ T4477] 8021q: adding VLAN 0 to HW filter on device team0
[  100.718014][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.753857][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.775631][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.783717][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.863475][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  100.874026][ T4714] loop1: detected capacity change from 0 to 64
[  100.918897][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.963902][   T27] audit: type=1800 audit(1781050917.837:3): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.131" name="file1" dev="loop1" ino=21 res=0 errno=0
[  101.004216][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.016313][ T4712] loop2: detected capacity change from 0 to 8192
[  101.058628][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.065868][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.113108][ T4712] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  101.116138][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.154097][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.163530][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.174692][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.183722][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  101.235312][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  101.245062][ T4712] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  101.274966][ T4712] REISERFS (device loop2): using ordered data mode
[  101.277261][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.281575][ T4712] reiserfs: using flush barriers
[  101.312498][ T4699] loop4: detected capacity change from 0 to 32768
[  101.334606][ T4712] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  101.383828][ T4720] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.393143][ T4720] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.402164][ T4720] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.411658][ T4720] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.425772][ T4712] REISERFS (device loop2): checking transaction log (loop2)
[  101.504560][ T4720] Zero length message leads to an empty skb
[  101.513882][ T4477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  101.554598][ T4699] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  101.655511][ T4477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.695917][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.755344][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.785446][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  101.797466][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.819721][ T4274] ocfs2: Unmounting device (7,4) on (node local)
[  101.864832][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.105742][ T4712] REISERFS (device loop2): Using tea hash to sort names
[  102.186503][ T4712] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  102.883369][ T4752] loop3: detected capacity change from 0 to 256
[  102.965506][ T4477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.994228][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.032035][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.738808][ T4775] capability: warning: `syz.2.148' uses 32-bit capabilities (legacy support in use)
[  104.266604][ T4794] loop1: detected capacity change from 0 to 64
[  104.373436][ T4794] hfs: small file entry
[  104.680082][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.705684][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.760384][ T4320] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  104.771660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.781129][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.828676][ T4477] device veth0_vlan entered promiscuous mode
[  104.851779][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.860167][ T4812] loop4: detected capacity change from 0 to 512
[  104.868544][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.904130][ T4477] device veth1_vlan entered promiscuous mode
[  104.962542][ T4812] EXT4-fs (loop4): 1 orphan inode deleted
[  104.968896][ T4320] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  104.990030][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.991658][ T4812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  105.028906][ T4320] usb 4-1: config 0 descriptor??
[  105.059971][   T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  105.071080][ T4812] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.082175][   T11] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1
[  105.091031][ T4320] cp210x 4-1:0.0: cp210x converter detected
[  105.209810][ T4477] device veth0_macvtap entered promiscuous mode
[  105.237041][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.279669][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.343273][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  105.349946][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.418147][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.456639][ T4477] device veth1_macvtap entered promiscuous mode
[  105.476470][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.497808][ T4320] usb 4-1: cp210x converter now attached to ttyUSB0
[  105.507422][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.631227][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.656572][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.691015][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.695420][ T1171] usb 4-1: USB disconnect, device number 4
[  105.733013][ T1171] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  105.754782][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.796307][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.810401][ T1171] cp210x 4-1:0.0: device disconnected
[  105.862724][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.882192][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.902966][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.937075][ T4477] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.989669][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.020450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.077351][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.108455][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.165301][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.195007][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.234894][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.254710][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.301587][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.354968][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.397078][ T4477] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.411544][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.430694][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.473146][ T4477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.493026][ T4477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.523427][ T4477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.563967][ T4477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.792616][ T4828] loop2: detected capacity change from 0 to 32768
[  106.822269][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.858645][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.867153][ T4828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.166 (4828)
[  106.885205][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.945810][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.993457][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.019532][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.023303][ T4828] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.086310][ T4828] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  107.134825][ T4828] BTRFS info (device loop2): setting nodatasum
[  107.151389][ T4828] BTRFS info (device loop2): force zlib compression, level 3
[  107.203215][ T4828] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  107.265075][ T4828] BTRFS info (device loop2): use lzo compression, level 0
[  107.316245][ T4828] BTRFS info (device loop2): turning on flush-on-commit
[  107.323280][ T4828] BTRFS info (device loop2): enabling auto defrag
[  107.370587][ T4828] BTRFS info (device loop2): max_inline at 4096
[  107.395708][ T4828] BTRFS info (device loop2): using free space tree
[  107.497215][ T4839] loop1: detected capacity change from 0 to 32768
[  107.563132][ T4841] loop4: detected capacity change from 0 to 32768
[  107.584610][ T4839] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.169 (4839)
[  107.628083][ T4839] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  107.704895][ T4839] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  107.758312][ T4839] BTRFS info (device loop1): force zlib compression, level 3
[  107.804511][ T4839] BTRFS info (device loop1): turning on flush-on-commit
[  107.811935][ T4839] BTRFS info (device loop1): max_inline at 4096
[  107.818633][ T4839] BTRFS info (device loop1): using free space tree
[  107.849713][ T4841] XFS (loop4): Mounting V5 Filesystem
[  107.994396][ T4828] BTRFS info (device loop2): enabling ssd optimizations
[  108.071836][ T4841] XFS (loop4): Ending clean mount
[  108.210917][ T4839] BTRFS info (device loop1): enabling ssd optimizations
[  108.227106][ T4841] XFS (loop4): Quotacheck needed: Please wait.
[  108.385899][ T4841] XFS (loop4): Quotacheck: Done.
[  108.508140][ T4282] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  108.703989][ T4289] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  108.825726][ T4274] XFS (loop4): Unmounting Filesystem
[  109.031535][ T4927] loop5: detected capacity change from 0 to 256
[  109.135415][ T4927] exfat: Deprecated parameter 'utf8'
[  109.140845][ T4927] exfat: Deprecated parameter 'utf8'
[  109.236022][ T4927] exfat: Deprecated parameter 'utf8'
[  109.394784][ T4927] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  109.656887][ T4898] loop3: detected capacity change from 0 to 40427
[  109.684532][ T4898] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  109.763553][ T4898] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  109.844817][ T4898] F2FS-fs (loop3): invalid crc value
[  109.862650][ T4943] loop1: detected capacity change from 0 to 1024
[  109.952973][ T4898] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  110.358952][ T4898] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  110.376441][ T4898] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  110.630772][   T27] audit: type=1800 audit(1781050927.507:4): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file2" dev="loop3" ino=10 res=0 errno=0
[  110.888970][ T4281] syz-executor: attempt to access beyond end of device
[  110.888970][ T4281] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.126589][ T5010] loop1: detected capacity change from 0 to 8192
[  112.178073][ T5010] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  112.199701][ T5010] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  112.210216][ T5010] REISERFS (device loop1): using ordered data mode
[  112.217189][ T5010] reiserfs: using flush barriers
[  112.230576][ T5010] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  112.249790][ T5010] REISERFS (device loop1): checking transaction log (loop1)
[  112.266046][ T5010] REISERFS (device loop1): Using r5 hash to sort names
[  112.295123][ T5010] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  112.341473][ T5014] sg_read: process 95 (syz.3.208) changed security contexts after opening file descriptor, this is not allowed.
[  112.355025][ T5010] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  112.533499][ T5017] loop4: detected capacity change from 0 to 512
[  112.991815][ T5005] loop5: detected capacity change from 0 to 32768
[  113.203071][ T5005] XFS (loop5): Mounting V5 Filesystem
[  113.475902][ T5005] XFS (loop5): Ending clean mount
[  113.493777][ T5005] XFS (loop5): Quotacheck needed: Please wait.
[  113.502055][ T5051] comedi comedi3: 8255: I/O port conflict (0x10003,4)
[  113.545239][ T5051] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[  113.584814][ T5051] comedi comedi3: 8255: I/O port conflict (0x7f,4)
[  113.637525][ T5005] XFS (loop5): Quotacheck: Done.
[  113.768177][ T4336] hid-generic 0000:FFFFFFFE:0800.0003: unknown main item tag 0x0
[  113.824757][ T4336] hid-generic 0000:FFFFFFFE:0800.0003: unknown main item tag 0x0
[  113.866511][ T4477] XFS (loop5): Unmounting Filesystem
[  113.886896][ T4336] hid-generic 0000:FFFFFFFE:0800.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  114.289115][ T5067] loop3: detected capacity change from 0 to 256
[  114.306232][ T5060] fido_id[5060]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  114.375836][ T5067] exfat: Deprecated parameter 'namecase'
[  114.450893][ T5069] loop1: detected capacity change from 0 to 2048
[  114.482504][ T5067] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  114.610183][ T5076] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.817439][ T5077] NILFS (loop1): error -2 truncating bmap (ino=16)
[  114.983656][ T5042] loop2: detected capacity change from 0 to 32768
[  115.288016][ T5076] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  115.310003][ T5076] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16)
[  115.410395][ T5076] Remounting filesystem read-only
[  115.457198][ T4282] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  115.637090][ T5101] process 'syz.2.235' launched '/dev/fd/3' with NULL argv: empty string added
[  116.484754][ T4930] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  116.590505][ T5139] loop5: detected capacity change from 0 to 256
[  116.647277][ T5139] exfat: Deprecated parameter 'utf8'
[  116.674237][ T5139] exfat: Deprecated parameter 'namecase'
[  116.683918][ T4930] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  116.714204][ T4930] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  116.725761][ T5139] exfat: Deprecated parameter 'namecase'
[  116.731485][ T5139] exfat: Deprecated parameter 'utf8'
[  116.759823][ T4930] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.795063][ T5139] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  116.814474][ T4930] usb 4-1: config 0 interface 0 has no altsetting 0
[  116.834901][ T4930] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  116.864512][ T4930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.941503][ T4930] usb 4-1: config 0 descriptor??
[  116.963640][ T5127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  117.204714][ T4921] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  117.396487][ T4930] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  117.412194][ T4930] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  117.436079][ T4921] usb 2-1: Using ep0 maxpacket: 8
[  117.443769][ T4921] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 132, changing to 11
[  117.461018][ T4930] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  117.473110][ T4921] usb 2-1: config 0 interface 0 has no altsetting 0
[  117.487443][ T4930] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  117.504230][ T4921] usb 2-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00
[  117.518432][ T4930] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  117.532539][ T4930] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  117.543388][ T4921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.558834][ T4930] samsung 0003:0419:0001.0004: unknown main item tag 0x0
[  117.569059][ T4921] usb 2-1: config 0 descriptor??
[  117.589183][ T4930] samsung 0003:0419:0001.0004: hidraw0: USB HID v1.01 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0
[  117.626335][ T4930] usb 4-1: USB disconnect, device number 5
[  117.942011][ T5165] fido_id[5165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  117.994163][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x3
[  117.994228][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x0
[  117.994252][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x0
[  117.994276][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x0
[  117.994300][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x0
[  117.994323][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x0
[  117.994347][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x0
[  117.994370][ T4921] asus 0003:0B05:183D.0005: unknown main item tag 0x0
[  117.999521][ T4921] asus 0003:0B05:183D.0005: hidraw0: USB HID v0.04 Device [HID 0b05:183d] on usb-dummy_hcd.1-1/input0
[  118.152577][ T5171] loop4: detected capacity change from 0 to 4096
[  118.217967][ T4921] usb 2-1: USB disconnect, device number 2
[  118.303325][ T5178] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.352303][ T5171] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 32 already freed
[  118.357955][ T5171] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  118.377422][ T5177] fido_id[5177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  119.038418][ T5198] loop5: detected capacity change from 0 to 512
[  119.132132][ T5198] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  119.155205][ T5192] loop4: detected capacity change from 0 to 4096
[  119.191805][ T5198] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.284903][ T5208] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.614783][ T4477] EXT4-fs (loop5): unmounting filesystem.
[  120.355212][ T5192] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  120.457427][ T5211] loop2: detected capacity change from 0 to 32768
[  120.505411][ T5211] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  120.583483][ T5211] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  120.811811][ T5238] loop3: detected capacity change from 0 to 4096
[  120.865903][ T4289] ocfs2: Unmounting device (7,2) on (node local)
[  120.874538][ T5241] loop5: detected capacity change from 0 to 8192
[  120.932397][ T5241] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  120.949181][ T5238] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  120.996787][ T5241] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  121.059119][ T5241] REISERFS (device loop5): using ordered data mode
[  121.087788][ T5241] reiserfs: using flush barriers
[  121.110643][ T5241] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  121.190576][ T5241] REISERFS (device loop5): checking transaction log (loop5)
[  121.261889][ T5241] REISERFS (device loop5): Using r5 hash to sort names
[  121.291826][ T5241] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  121.600949][ T4326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.669791][ T4326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.866321][ T5253] loop2: detected capacity change from 0 to 16
[  121.936863][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.294'.
[  122.240678][ T4326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.302562][ T4326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.386436][ T5266] loop5: detected capacity change from 0 to 1024
[  122.429077][ T5268] loop4: detected capacity change from 0 to 256
[  122.504769][   T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  122.513516][ T5268] FAT-fs (loop4): Directory bread(block 64) failed
[  122.542124][ T4326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.548151][ T5268] FAT-fs (loop4): Directory bread(block 65) failed
[  122.565286][ T5266] hfsplus: keylen 65060 too large
[  122.584414][ T5266] hfsplus: xattr searching failed
[  122.614307][ T5268] FAT-fs (loop4): Directory bread(block 66) failed
[  122.624726][ T4326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.653502][ T5268] FAT-fs (loop4): Directory bread(block 67) failed
[  122.671539][ T5268] FAT-fs (loop4): Directory bread(block 68) failed
[  122.709313][ T5268] FAT-fs (loop4): Directory bread(block 69) failed
[  122.716542][   T22] usb 4-1: Using ep0 maxpacket: 8
[  122.736062][   T22] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  122.765017][ T5268] FAT-fs (loop4): Directory bread(block 70) failed
[  122.771645][ T5268] FAT-fs (loop4): Directory bread(block 71) failed
[  122.778737][   T22] usb 4-1: config 2 has no interface number 0
[  122.798957][   T22] usb 4-1: config 2 interface 31 has no altsetting 0
[  122.817534][ T4326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.825472][ T5268] FAT-fs (loop4): Directory bread(block 72) failed
[  122.843665][   T22] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  122.883999][ T4326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.895896][ T5268] FAT-fs (loop4): Directory bread(block 73) failed
[  122.909610][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.948826][   T22] usb 4-1: Product: syz
[  122.977772][   T22] usb 4-1: Manufacturer: syz
[  122.982475][   T22] usb 4-1: SerialNumber: syz
[  123.050527][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.061334][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.071021][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.089130][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.096883][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  123.104321][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.756578][   T22] ch9200: probe of 4-1:2.31 failed with error -22
[  123.779704][   T22] usb 4-1: USB disconnect, device number 6
[  124.127942][ T5273] chnl_net:caif_netlink_parms(): no params data found
[  124.272075][ T5312] loop4: detected capacity change from 0 to 64
[  124.320142][ T5310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'.
[  124.875394][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.892953][ T5273] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.915709][ T5273] device bridge_slave_0 entered promiscuous mode
[  125.021737][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.037201][ T5273] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.058381][ T5273] device bridge_slave_1 entered promiscuous mode
[  125.103012][ T5338] loop5: detected capacity change from 0 to 256
[  125.154897][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[  125.200321][ T5338] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  125.224222][ T5337] loop2: detected capacity change from 0 to 4096
[  125.265707][ T5337] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  125.317291][ T5273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.339870][ T5273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.448114][ T5345] loop4: detected capacity change from 0 to 64
[  125.452597][ T5337] ntfs: volume version 3.1.
[  125.503403][ T5273] team0: Port device team_slave_0 added
[  125.512487][ T5345] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  125.585597][ T5273] team0: Port device team_slave_1 added
[  125.656329][ T4326] IPVS: stopping master sync thread 4459 ...
[  125.944246][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.957833][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.021358][ T5273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.085266][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.105213][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.167237][ T5273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.464490][ T5273] device hsr_slave_0 entered promiscuous mode
[  126.539226][ T5273] device hsr_slave_1 entered promiscuous mode
[  126.560486][ T5273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.573430][ T5273] Cannot create hsr debugfs directory
[  126.685640][ T4326] device hsr_slave_0 left promiscuous mode
[  126.696298][ T4326] device hsr_slave_1 left promiscuous mode
[  126.730941][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.755501][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.780138][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.813415][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.836537][ T4326] device bridge_slave_1 left promiscuous mode
[  126.844069][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.895568][ T4326] device bridge_slave_0 left promiscuous mode
[  126.901946][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.007399][ T4326] device veth1_macvtap left promiscuous mode
[  127.032529][ T4326] device veth0_macvtap left promiscuous mode
[  127.047023][ T4326] device veth1_vlan left promiscuous mode
[  127.066277][ T4326] device veth0_vlan left promiscuous mode
[  127.135319][ T5390] loop3: detected capacity change from 0 to 256
[  127.234918][ T4287] Bluetooth: hci2: command 0x041b tx timeout
[  127.663265][ T5398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'.
[  128.990366][ T5427] loop2: detected capacity change from 0 to 8
[  129.155848][ T5429] nbd: socks must be embedded in a SOCK_ITEM attr
[  129.314929][ T4287] Bluetooth: hci2: command 0x040f tx timeout
[  129.507713][ T4326] team0 (unregistering): Port device team_slave_1 removed
[  129.678842][ T4326] team0 (unregistering): Port device team_slave_0 removed
[  129.777531][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.839488][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.221520][ T5449] loop2: detected capacity change from 0 to 2048
[  130.364996][ T5449] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  130.422968][ T5449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.576108][ T4326] bond0 (unregistering): Released all slaves
[  130.784743][ T5441] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.368'.
[  131.110021][ T5459] mmap: syz.3.376 (5459): VmData 37449728 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  131.284883][ T4921] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  131.394804][ T4287] Bluetooth: hci2: command 0x0419 tx timeout
[  131.401793][ T5273] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  131.485051][ T4921] usb 6-1: Using ep0 maxpacket: 16
[  131.508122][ T5273] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  131.518575][ T4921] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.550180][ T4921] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.570703][ T4921] usb 6-1: config 0 interface 0 has no altsetting 0
[  131.584373][ T5468] loop4: detected capacity change from 0 to 256
[  131.590958][ T4921] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  131.619048][ T5468] exfat: Deprecated parameter 'namecase'
[  131.628438][ T4921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.687745][ T4921] usb 6-1: config 0 descriptor??
[  131.693166][ T5468] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d)
[  131.759892][ T5273] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  131.793060][ T5273] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  132.146912][ T4921] mcp2221 0003:04D8:00DD.0006: item fetching failed at offset 4/5
[  132.155558][ T5273] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.186164][ T4921] mcp2221 0003:04D8:00DD.0006: can't parse reports
[  132.192787][ T4921] mcp2221: probe of 0003:04D8:00DD.0006 failed with error -22
[  132.238152][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  132.265640][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.298111][ T5273] 8021q: adding VLAN 0 to HW filter on device team0
[  132.349656][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  132.359989][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  132.381691][ T4921] usb 6-1: USB disconnect, device number 2
[  132.411793][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.419080][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.473691][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  132.504535][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  132.546167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.576836][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.584068][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.632806][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  132.684829][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  132.697688][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.738666][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.756059][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.802471][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.844163][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  132.863035][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.881527][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.918804][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  132.936293][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.966680][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.997594][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  133.328227][ T5451] loop2: detected capacity change from 0 to 32768
[  133.390916][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.390'.
[  133.466746][ T5451] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  133.542632][ T5451] JBD2: Ignoring recovery information on journal
[  133.780350][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  133.796972][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  133.829823][ T5451] JBD2: recovery failed
[  133.851628][ T5273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.864114][ T5451] (syz.2.373,5451,0):ocfs2_journal_load:1134 ERROR: Failed to load journal!
[  133.915320][ T5451] (syz.2.373,5451,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5
[  134.016030][ T5451] (syz.2.373,5451,0):ocfs2_check_volume:2489 ERROR: status = -5
[  134.044020][ T5451] (syz.2.373,5451,0):ocfs2_mount_volume:1821 ERROR: status = -5
[  134.164659][ T5451] (syz.2.373,5451,0):ocfs2_fill_super:1176 ERROR: status = -5
[  134.965921][ T5541] loop3: detected capacity change from 0 to 1024
[  135.117005][ T5541] hfsplus: small dir entry
[  135.209945][ T5523] loop4: detected capacity change from 0 to 32768
[  135.348238][ T5523] XFS (loop4): Mounting V5 Filesystem
[  135.374943][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.436079][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.460763][ T5555] loop2: detected capacity change from 0 to 256
[  135.543016][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  135.621739][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  135.648040][ T5523] XFS (loop4): Ending clean mount
[  135.700668][ T5273] device veth0_vlan entered promiscuous mode
[  135.718725][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  135.735465][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  135.748460][ T5565] netlink: 'syz.3.402': attribute type 3 has an invalid length.
[  135.774835][ T5565] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.402'.
[  135.809392][ T5273] device veth1_vlan entered promiscuous mode
[  135.864067][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'.
[  135.893104][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.403'.
[  135.915673][ T5569] netlink: 'syz.5.403': attribute type 19 has an invalid length.
[  135.955404][ T5569] netlink: 'syz.5.403': attribute type 20 has an invalid length.
[  136.060183][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.072140][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.105639][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.137168][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.174984][ T5273] device veth0_macvtap entered promiscuous mode
[  136.218679][ T5273] device veth1_macvtap entered promiscuous mode
[  136.245820][ T4274] XFS (loop4): Unmounting Filesystem
[  136.323759][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.351332][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.390204][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.441697][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.461807][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.483009][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.507906][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.540828][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.572969][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.584773][ T4336] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  136.613854][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  136.623525][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  136.645904][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  136.683318][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  136.710379][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.722128][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.732206][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.745148][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.761535][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.774773][ T4336] usb 3-1: Using ep0 maxpacket: 32
[  136.781820][ T4336] usb 3-1: config 1 interface 0 has no altsetting 0
[  136.792547][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.805623][ T4336] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  136.814313][ T5586] loop3: detected capacity change from 0 to 512
[  136.824707][ T4336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.833778][ T5273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.843363][ T4336] usb 3-1: Product: syz
[  136.853316][ T4336] usb 3-1: Manufacturer: syz
[  136.859322][ T5273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.863722][ T4336] usb 3-1: SerialNumber: syz
[  136.887822][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.897850][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  136.927182][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  136.971856][ T5586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  136.986235][ T5273] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.040754][ T5586] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  137.057705][ T5273] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.114727][ T5273] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.123519][ T5273] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.201628][ T4336] usbhid 3-1:1.0: can't add hid device: -71
[  137.228199][ T4336] usbhid: probe of 3-1:1.0 failed with error -71
[  137.276381][ T4336] usb 3-1: USB disconnect, device number 3
[  137.381637][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  137.486094][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.494001][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.559749][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  137.586846][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.600232][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.611966][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  137.918616][ T5605] loop5: detected capacity change from 0 to 2048
[  137.929886][ T5609] loop2: detected capacity change from 0 to 64
[  137.982221][ T5605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.019821][   T27] audit: type=1800 audit(1781050954.897:5): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.416" name="file1" dev="loop2" ino=21 res=0 errno=0
[  139.141984][ T5638] loop5: detected capacity change from 0 to 4096
[  139.182383][ T5643] loop2: detected capacity change from 0 to 256
[  139.230466][ T5646] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  139.267990][ T5643] exfat: Deprecated parameter 'utf8'
[  139.287306][ T5603] loop6: detected capacity change from 0 to 40427
[  139.331121][ T5638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  139.347636][ T5643] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  139.402435][ T5603] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff
[  139.534899][ T5603] F2FS-fs (loop6): invalid crc value
[  139.574438][ T5603] F2FS-fs (loop6): Found nat_bits in checkpoint
[  139.589736][ T4477] EXT4-fs (loop5): unmounting filesystem.
[  139.783845][ T5659] loop5: detected capacity change from 0 to 1024
[  139.856918][ T5603] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  141.198113][ T5700] loop2: detected capacity change from 0 to 1024
[  141.678211][ T5719] Illegal XDP return value 4183789311 on prog  (id 30) dev N/A, expect packet loss!
[  142.226004][ T5735] option changes via remount are deprecated (pid=5734 comm=syz.4.463)
[  142.234802][ T4921] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.244853][ T1171] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  142.414814][ T4921] usb 3-1: Using ep0 maxpacket: 16
[  142.423215][ T4921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.434747][ T1171] usb 4-1: Using ep0 maxpacket: 8
[  142.441792][ T1171] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30
[  142.467619][ T4921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.481743][ T4921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.494211][ T1171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11
[  142.497874][ T5744] Unsupported ieee802154 address type: 0
[  142.529862][ T4921] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  142.544724][ T1171] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73
[  142.560547][ T5748] loop4: detected capacity change from 0 to 64
[  142.564558][ T4921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.593750][ T4921] usb 3-1: config 0 descriptor??
[  142.594934][ T1171] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  142.634666][ T1171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.677980][ T1171] usb 4-1: config 0 descriptor??
[  142.823050][ T4274] hfs: node 4:3 still has 2 user(s)!
[  142.896321][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.470'.
[  143.057325][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.073719][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.098240][ T1171] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  143.098618][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.119489][ T1171] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  143.123363][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.140299][ T1171] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  143.143052][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.150606][ T1171] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  143.182651][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.185732][ T1171] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  143.195823][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.206118][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.213419][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.220887][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.228460][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.236648][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.243943][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.251356][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.267618][ T1171] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  143.274742][ T4921] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  143.283336][ T4921] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input5
[  143.307111][ T1171] elecom 0003:056E:010D.0008: unknown main item tag 0x0
[  143.319447][ T1171] elecom 0003:056E:010D.0008: unbalanced collection at end of report description
[  143.332419][ T1171] elecom: probe of 0003:056E:010D.0008 failed with error -22
[  143.344894][ T4921] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  143.360071][ T1171] usb 4-1: USB disconnect, device number 7
[  143.400217][ T4921] usb 3-1: USB disconnect, device number 4
[  143.887740][ T5767] fido_id[5767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  143.910915][ T4922] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  144.104923][ T4922] usb 7-1: Using ep0 maxpacket: 16
[  144.116139][ T5782] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  144.146515][ T4922] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.186904][ T4922] usb 7-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00
[  144.213064][ T4922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.252829][ T4922] usb 7-1: config 0 descriptor??
[  144.497176][ T5794] loop3: detected capacity change from 0 to 512
[  144.606805][ T5799] syz.5.485 (5799): drop_caches: 4
[  144.644330][ T5794] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #3: comm syz.3.483: corrupted inode contents
[  144.693127][ T4922] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0934.0009/input/input7
[  144.728316][ T5794] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #3: comm syz.3.483: mark_inode_dirty error
[  144.750917][ T5794] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #3: comm syz.3.483: corrupted inode contents
[  144.780691][ T4922] uclogic 0003:28BD:0934.0009: input,hidraw0: USB HID v0.81 Mouse [HID 28bd:0934] on usb-dummy_hcd.6-1/input0
[  144.815227][ T5794] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.483: mark_inode_dirty error
[  144.866136][ T5794] Quota error (device loop3): write_blk: dquota write failed
[  144.903983][ T4922] usb 7-1: USB disconnect, device number 2
[  144.952753][ T5794] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  144.998932][ T5794] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.483: Failed to acquire dquot type 0
[  145.146214][ T5794] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.483: corrupted inode contents
[  145.171998][ T5794] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #16: comm syz.3.483: mark_inode_dirty error
[  145.190173][ T5794] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.483: corrupted inode contents
[  145.203081][ T5794] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.483: mark_inode_dirty error
[  145.233469][ T5794] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.483: corrupted inode contents
[  145.299710][ T5808] fido_id[5808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  145.334303][ T5794] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  145.386401][ T5794] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.483: corrupted inode contents
[  145.438316][ T5794] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.483: mark_inode_dirty error
[  145.463304][ T5794] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  145.511823][ T5794] EXT4-fs (loop3): 1 truncate cleaned up
[  145.539053][ T5794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  145.568881][ T5794] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.821583][ T5818] loop2: detected capacity change from 0 to 8192
[  145.947852][ T5818] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  145.964807][ T5818] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  146.023667][ T5818] REISERFS (device loop2): using ordered data mode
[  146.030843][ T5818] reiserfs: using flush barriers
[  146.042907][ T5818] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.061189][ T5818] REISERFS (device loop2): checking transaction log (loop2)
[  146.141663][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  146.327781][ T5818] REISERFS (device loop2): Using tea hash to sort names
[  146.351913][ T5818] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  146.362547][ T4275] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  146.568078][ T4275] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  146.605873][ T4275] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.659522][ T4275] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  146.727069][ T4275] usb 6-1: string descriptor 0 read error: -22
[  146.780515][ T4275] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  146.816093][ T4275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.061366][ T4275] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  147.154357][ T4275] usb 6-1: USB disconnect, device number 3
[  147.483602][ T4930] kernel write not supported for file /dsp1 (pid: 4930 comm: kworker/0:15)
[  147.505455][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.190524][ T5883] loop4: detected capacity change from 0 to 512
[  148.306730][ T5883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  148.396606][ T5883] EXT4-fs (loop4): 1 truncate cleaned up
[  148.402359][ T5883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  148.691247][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  148.903431][ T5908] netlink: 52 bytes leftover after parsing attributes in process `syz.4.522'.
[  149.747629][ T5934] loop5: detected capacity change from 0 to 512
[  149.816796][ T5934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002]
[  149.846043][ T5934] System zones: 1-12
[  149.851353][ T5934] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.532: corrupted in-inode xattr
[  149.904698][ T4336] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  149.926162][ T5934] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.532: couldn't read orphan inode 15 (err -117)
[  149.970500][ T5934] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  150.112084][ T4336] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  150.143895][ T4336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  150.189062][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  150.242942][ T4336] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  150.267846][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.305752][ T4336] usb 4-1: config 0 descriptor??
[  150.311612][ T5931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  150.330687][ T4477] EXT4-fs (loop5): unmounting filesystem.
[  150.389056][ T5914] loop6: detected capacity change from 0 to 32768
[  150.481611][ T5914] JBD2: Ignoring recovery information on journal
[  150.564795][ T1171] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  150.620580][ T5914] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  150.652622][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'.
[  150.756789][ T4336] hid-multitouch 0003:1FD2:6007.000A: ignoring exceeding usage max
[  150.761863][   T27] audit: type=1800 audit(1781050967.637:6): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.524" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  150.772516][ T1171] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  150.847153][ T4336] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x2
[  150.868258][ T4336] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  150.884673][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  150.924153][ T5273] ocfs2: Unmounting device (7,6) on (node local)
[  150.927517][ T1171] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  151.009801][ T4930] usb 4-1: USB disconnect, device number 8
[  151.013780][ T1171] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  151.082773][ T1171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.136016][ T1171] usb 5-1: config 0 descriptor??
[  151.141745][ T5943] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  151.420341][ T5962] fido_id[5962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  151.580453][ T1171] hid-thrustmaster 0003:044F:B65D.000B: ignoring exceeding usage max
[  151.626305][ T1171] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x4
[  151.644451][ T1171] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  151.664642][ T5971] loop6: detected capacity change from 0 to 4096
[  151.779564][ T1171] hid-thrustmaster 0003:044F:B65D.000B: setup data couldn't be sent
[  151.792977][ T5971] ntfs: volume version 3.1.
[  151.798319][    C1] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71
[  151.851917][ T1171] usb 5-1: USB disconnect, device number 3
[  152.044743][ T4275] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  152.196705][ T5989] loop3: detected capacity change from 0 to 64
[  152.246135][ T5985] fido_id[5985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  152.268107][ T4275] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  152.304687][ T4275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.361003][ T4275] usb 6-1: config 0 descriptor??
[  152.399338][ T4275] cp210x 6-1:0.0: cp210x converter detected
[  152.602567][ T4275] usb 6-1: cp210x converter now attached to ttyUSB0
[  152.825939][ T4275] usb 6-1: USB disconnect, device number 4
[  152.856004][ T4275] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  152.881521][ T4275] cp210x 6-1:0.0: device disconnected
[  153.297187][ T6022] loop4: detected capacity change from 0 to 256
[  153.371184][ T6022] exfat: Deprecated parameter 'utf8'
[  153.387672][ T6022] exfat: Deprecated parameter 'utf8'
[  153.408655][ T6022] exfat: Deprecated parameter 'namecase'
[  153.414907][ T6022] exfat: Deprecated parameter 'namecase'
[  153.502260][ T6022] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  153.715116][ T4287] Bluetooth: hci2: command 0x0405 tx timeout
[  154.027932][ T6043] loop3: detected capacity change from 0 to 64
[  154.411711][ T6054] 9pnet_virtio: no channels available for device c:::
[  154.471266][ T6056] loop5: detected capacity change from 0 to 1024
[  154.578623][ T6056] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  154.644857][ T6064] 9pnet_virtio: no channels available for device c:::
[  154.717286][ T6024] loop2: detected capacity change from 0 to 32768
[  154.740415][ T6068] loop6: detected capacity change from 0 to 256
[  154.778087][ T6068] exfat: Deprecated parameter 'namecase'
[  154.797047][ T4477] EXT4-fs (loop5): unmounting filesystem.
[  154.817268][ T6068] exfat: Deprecated parameter 'namecase'
[  154.940457][ T6068] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  155.407612][ T6087] loop4: detected capacity change from 0 to 8
[  155.459659][ T6087] SQUASHFS error: zlib decompression failed, data probably corrupt
[  155.616058][ T6087] SQUASHFS error: Failed to read block 0x9b: -5
[  155.681956][ T6087] SQUASHFS error: Unable to read metadata cache entry [99]
[  155.776640][ T6087] SQUASHFS error: Unable to read inode 0x127
[  156.377306][ T6070] loop3: detected capacity change from 0 to 32768
[  156.464043][ T6070] JBD2: Ignoring recovery information on journal
[  156.679111][ T6070] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  156.786024][   T27] audit: type=1800 audit(1781050973.667:7): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.576" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  156.952503][ T4281] ocfs2: Unmounting device (7,3) on (node local)
[  156.955677][ T4921] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  157.168939][ T4921] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  157.209410][ T4921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  157.232710][ T4921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  157.254875][ T4922] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  157.282829][ T4921] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  157.312325][ T4921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.337996][ T4921] usb 3-1: config 0 descriptor??
[  157.344364][ T6107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  157.456698][ T4922] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  157.494874][ T4922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.540551][ T4922] usb 5-1: config 0 descriptor??
[  157.570158][ T4922] cp210x 5-1:0.0: cp210x converter detected
[  157.773955][ T4921] hid-thrustmaster 0003:044F:B65D.000C: ignoring exceeding usage max
[  157.793265][ T4922] usb 5-1: cp210x converter now attached to ttyUSB0
[  157.812282][ T4921] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x4
[  157.848744][ T4921] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  157.971965][ T4921] hid-thrustmaster 0003:044F:B65D.000C: setup data couldn't be sent
[  157.995158][    C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71
[  158.015673][ T4921] usb 3-1: USB disconnect, device number 5
[  158.058893][ T4317] usb 5-1: USB disconnect, device number 4
[  158.075382][ T4317] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  158.109750][ T4317] cp210x 5-1:0.0: device disconnected
[  158.401122][ T6157] loop5: detected capacity change from 0 to 2048
[  158.411333][ T6155] fido_id[6155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  158.474805][ T6161] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.516486][ T6157] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  158.569689][ T6157] Remounting filesystem read-only
[  158.851982][ T6167] loop2: detected capacity change from 0 to 64
[  158.940347][ T6167] hfs: small file entry
[  159.155771][ T6174] Bluetooth: MGMT ver 1.22
[  159.162657][ T6173] loop3: detected capacity change from 0 to 256
[  159.294547][ T6173] FAT-fs (loop3): Directory bread(block 64) failed
[  159.310677][ T6178] loop2: detected capacity change from 0 to 512
[  159.357494][ T6173] FAT-fs (loop3): Directory bread(block 65) failed
[  159.364246][ T6173] FAT-fs (loop3): Directory bread(block 66) failed
[  159.424092][ T6173] FAT-fs (loop3): Directory bread(block 67) failed
[  159.462624][ T6178] EXT4-fs (loop2): 1 orphan inode deleted
[  159.476330][ T6173] FAT-fs (loop3): Directory bread(block 68) failed
[  159.482958][ T6173] FAT-fs (loop3): Directory bread(block 69) failed
[  159.499921][   T46] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  159.532153][ T6178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  159.535763][ T6173] FAT-fs (loop3): Directory bread(block 70) failed
[  159.558154][   T46] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1
[  159.623349][ T6178] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.648482][ T6173] FAT-fs (loop3): Directory bread(block 71) failed
[  159.693155][ T6173] FAT-fs (loop3): Directory bread(block 72) failed
[  159.764764][ T6173] FAT-fs (loop3): Directory bread(block 73) failed
[  159.912777][ T4289] EXT4-fs (loop2): unmounting filesystem.
[  159.958725][ T6159] loop6: detected capacity change from 0 to 32768
[  160.062328][ T6159] XFS (loop6): Mounting V5 Filesystem
[  160.092435][ T6201] syz.2.621 uses obsolete (PF_INET,SOCK_PACKET)
[  160.315837][ T6159] XFS (loop6): Ending clean mount
[  160.625861][ T5273] XFS (loop6): Unmounting Filesystem
[  160.776636][ T6222] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  161.017057][ T6231] loop4: detected capacity change from 0 to 64
[  161.907383][ T6254] loop2: detected capacity change from 0 to 64
[  162.173002][ T6232] loop5: detected capacity change from 0 to 32768
[  162.211252][ T6260] loop4: detected capacity change from 0 to 512
[  162.218710][ T6232] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.633 (6232)
[  162.315964][ T6232] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.347264][ T6232] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  162.385689][ T6260] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  162.402853][ T6266] Bluetooth: MGMT ver 1.22
[  162.415389][ T6264] loop2: detected capacity change from 0 to 256
[  162.415558][ T6235] loop3: detected capacity change from 0 to 32768
[  162.424207][ T6264] exfat: Deprecated parameter 'utf8'
[  162.433916][ T6232] BTRFS info (device loop5): setting nodatasum
[  162.441396][ T6232] BTRFS info (device loop5): force zlib compression, level 3
[  162.443900][ T6260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  162.465384][ T6232] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  162.478973][ T6264] exfat: Deprecated parameter 'utf8'
[  162.504847][ T6260] System zones: 0-1, 15-15, 18-18, 34-34
[  162.511816][ T6260] EXT4-fs (loop4): orphan cleanup on readonly fs
[  162.518330][ T6264] exfat: Deprecated parameter 'utf8'
[  162.522091][ T6232] BTRFS info (device loop5): use lzo compression, level 0
[  162.537657][ T6235] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.635 (6235)
[  162.568588][ T6264] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  162.610856][ T6235] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  162.611288][ T6232] BTRFS info (device loop5): turning on flush-on-commit
[  162.642768][ T6260] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.642: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  162.693558][ T6235] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  162.721145][ T6232] BTRFS info (device loop5): enabling auto defrag
[  162.744788][ T6235] BTRFS info (device loop3): force zlib compression, level 3
[  162.754099][ T6232] BTRFS info (device loop5): max_inline at 4096
[  162.773508][ T6232] BTRFS info (device loop5): using free space tree
[  162.793785][ T6235] BTRFS info (device loop3): turning on flush-on-commit
[  162.843862][ T6235] BTRFS info (device loop3): max_inline at 4096
[  162.851959][ T6260] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.642: Bad quota inode: 4, type: 1
[  162.884120][ T6260] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  162.959227][ T6260] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  162.966156][ T6235] BTRFS info (device loop3): using free space tree
[  162.999849][ T6260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  163.090489][ T6260] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.642: bad symlink.
[  163.136913][ T6296] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.642: bad symlink.
[  163.205933][ T6232] BTRFS info (device loop5): enabling ssd optimizations
[  163.265794][ T6303] loop2: detected capacity change from 0 to 1024
[  163.370062][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  163.410068][ T6235] BTRFS info (device loop3): enabling ssd optimizations
[  163.673254][ T4281] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  163.687537][ T4477] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.359794][ T6376] loop2: detected capacity change from 0 to 4096
[  165.518035][ T6383] loop5: detected capacity change from 0 to 256
[  165.565470][ T6383] exfat: Deprecated parameter 'namecase'
[  165.660214][ T6383] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  167.099162][ T6389] loop6: detected capacity change from 0 to 32768
[  167.280442][ T6442] loop2: detected capacity change from 0 to 16
[  167.362320][ T6442] erofs: (device loop2): mounted with root inode @ nid 36.
[  168.512008][ T6472] loop5: detected capacity change from 0 to 4096
[  168.597272][ T6472] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  168.862656][ T6487] loop2: detected capacity change from 0 to 256
[  168.973446][ T6487] FAT-fs (loop2): Directory bread(block 64) failed
[  169.002347][ T6487] FAT-fs (loop2): Directory bread(block 65) failed
[  169.052597][ T6487] FAT-fs (loop2): Directory bread(block 66) failed
[  169.085713][ T6487] FAT-fs (loop2): Directory bread(block 67) failed
[  169.092481][ T6487] FAT-fs (loop2): Directory bread(block 68) failed
[  169.164805][ T6487] FAT-fs (loop2): Directory bread(block 69) failed
[  169.171646][ T6487] FAT-fs (loop2): Directory bread(block 70) failed
[  169.224939][ T6487] FAT-fs (loop2): Directory bread(block 71) failed
[  169.247750][ T6487] FAT-fs (loop2): Directory bread(block 72) failed
[  169.254400][ T6487] FAT-fs (loop2): Directory bread(block 73) failed
[  169.382348][ T6463] loop3: detected capacity change from 0 to 32768
[  169.464466][ T6463] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  169.576424][ T6463] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  169.793668][ T4281] ocfs2: Unmounting device (7,3) on (node local)
[  170.653872][ T6540] loop2: detected capacity change from 0 to 64
[  170.783901][ T6540] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  170.867650][ T6548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.732'.
[  170.881334][ T6550] loop3: detected capacity change from 0 to 256
[  170.983548][ T6550] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  171.810860][ T6575] loop3: detected capacity change from 0 to 8
[  172.474856][    T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  172.670953][    T7] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  172.700807][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.760297][    T7] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  172.822890][    T7] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  172.865252][    T7] usb 4-1: Manufacturer: syz
[  172.903852][    T7] usb 4-1: config 0 descriptor??
[  173.208860][    T7] rc_core: IR keymap rc-hauppauge not found
[  173.222502][    T7] Registered IR keymap rc-empty
[  173.237255][ T6624] netlink: 'syz.4.761': attribute type 3 has an invalid length.
[  173.247992][    T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  173.265075][ T6624] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.761'.
[  173.277113][    T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8
[  173.392579][ T6623] loop5: detected capacity change from 0 to 4096
[  173.434268][ T6623] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  173.488809][    C0] igorplugusb 4-1:0.0: receive overflow invalid: 44
[  173.712598][ T6342] usb 4-1: USB disconnect, device number 9
[  173.947833][ T6639] loop6: detected capacity change from 0 to 1024
[  173.996561][ T6638] loop4: detected capacity change from 0 to 4096
[  174.105137][ T6643] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.802618][ T6665] loop3: detected capacity change from 0 to 128
[  174.848116][ T6665] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  174.864391][ T4921] libceph: connect (1)[c::]:6789 error -101
[  174.888558][ T4921] libceph: mon0 (1)[c::]:6789 connect error
[  174.930465][ T6673] loop5: detected capacity change from 0 to 128
[  174.940494][ T6673] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  174.955767][ T6673] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  174.980463][ T6665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  175.022633][ T6665] ext2 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.159946][ T6673] overlayfs: filesystem on './file0' not supported
[  175.210680][ T4921] libceph: connect (1)[c::]:6789 error -101
[  175.232051][ T4921] libceph: mon0 (1)[c::]:6789 connect error
[  175.282889][ T4324] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  175.401880][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  175.628790][ T6667] ceph: No mds server is up or the cluster is laggy
[  175.755694][    T7] libceph: connect (1)[c::]:6789 error -101
[  175.761969][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  176.005620][ T6691] loop3: detected capacity change from 0 to 1024
[  176.072103][ T6691] hfsplus: bad catalog entry type
[  176.100291][ T6670] loop4: detected capacity change from 0 to 32768
[  176.276340][    T9] hfsplus: b-tree write err: -5, ino 25
[  176.297226][    T9] hfsplus: b-tree write err: -5, ino 4
[  176.302860][    T9] hfsplus: b-tree write err: -5, ino 2
[  176.820777][ T6711] mkiss: ax0: crc mode is auto.
[  176.969451][ T6342] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  177.185948][ T6342] usb 6-1: Using ep0 maxpacket: 32
[  177.193005][ T6342] usb 6-1: config index 0 descriptor too short (expected 164, got 36)
[  177.222156][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.253746][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.297544][ T6342] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  177.347585][ T6342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.387732][ T6342] usb 6-1: config 0 descriptor??
[  177.828627][ T6342] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  177.844752][ T6342] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  177.852231][ T6342] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  177.868248][ T6342] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  177.879620][ T6342] logitech 0003:046D:C29C.000D: unknown main item tag 0x0
[  177.919786][ T6342] logitech 0003:046D:C29C.000D: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0
[  178.029209][ T6342] logitech 0003:046D:C29C.000D: no inputs found
[  178.066691][ T6342] usb 6-1: USB disconnect, device number 5
[  178.307372][ T6742] fido_id[6742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  178.339936][ T6728] loop4: detected capacity change from 0 to 32768
[  178.428268][ T6728] XFS (loop4): Mounting V5 Filesystem
[  178.512068][ T6728] XFS (loop4): Ending clean mount
[  178.757073][ T4274] XFS (loop4): Unmounting Filesystem
[  178.780847][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'.
[  178.863781][   T27] audit: type=1326 audit(1781050995.737:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  178.887730][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.948201][   T27] audit: type=1326 audit(1781050995.737:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  178.971997][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.068314][   T27] audit: type=1326 audit(1781050995.777:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  179.092231][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.232526][   T27] audit: type=1326 audit(1781050995.787:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  179.365106][   T27] audit: type=1326 audit(1781050995.787:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  179.444715][   T27] audit: type=1326 audit(1781050995.787:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  179.514954][   T27] audit: type=1326 audit(1781050995.787:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  179.613185][   T27] audit: type=1326 audit(1781050995.787:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  179.760158][   T27] audit: type=1326 audit(1781050995.787:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  179.881269][   T27] audit: type=1326 audit(1781050995.787:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.6.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12b9ce59 code=0x7ffc0000
[  180.620610][ T6770] loop2: detected capacity change from 0 to 32768
[  180.654835][    T7] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  180.789884][ T6770] ialloc: diAlloc returned -5!
[  180.858508][    T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  180.910484][    T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.960697][    T7] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  180.991511][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.042242][    T7] usb 6-1: config 0 descriptor??
[  181.052465][ T6819] blktrace: Concurrent blktraces are not allowed on sg0
[  181.481533][    T7] isku 0003:1E7D:319C.000E: item fetching failed at offset 5/7
[  181.512012][    T7] isku 0003:1E7D:319C.000E: parse failed
[  181.533254][    T7] isku: probe of 0003:1E7D:319C.000E failed with error -22
[  181.592264][ T6830] Bluetooth: MGMT ver 1.22
[  181.713417][    T7] usb 6-1: USB disconnect, device number 6
[  182.621471][ T6862] loop6: detected capacity change from 0 to 64
[  182.790617][ T5273] hfs: node 4:3 still has 2 user(s)!
[  182.809994][ T6865] loop4: detected capacity change from 0 to 64
[  183.179044][ T6844] loop2: detected capacity change from 0 to 40427
[  183.210113][ T6844] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  183.247540][ T6844] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  183.313391][ T6844] F2FS-fs (loop2): Found nat_bits in checkpoint
[  183.516841][ T6844] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  183.524022][ T6844] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  183.702827][ T6892] loop6: detected capacity change from 0 to 1024
[  183.892348][ T4262] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  184.094686][ T4262] usb 6-1: Using ep0 maxpacket: 16
[  184.103776][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.140440][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.164836][ T4262] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  184.194800][ T4262] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  184.205771][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.235935][ T4262] usb 6-1: config 0 descriptor??
[  184.656513][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.666116][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.673430][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.681485][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.689937][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.697591][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.705998][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.713538][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.721070][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.729342][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.736705][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.744107][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.751469][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.758965][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.768001][ T4262] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  184.779871][ T4262] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/input/input9
[  184.796627][ T4262] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  184.897055][ T4262] usb 6-1: USB disconnect, device number 7
[  184.929812][ T6904] fido_id[6904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  185.535886][ T6920] netlink: 'syz.2.862': attribute type 6 has an invalid length.
[  185.602394][ T6924] loop6: detected capacity change from 0 to 2048
[  185.713071][ T6924] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  186.207154][ T6949] loop5: detected capacity change from 0 to 64
[  186.221143][ T5273] EXT4-fs (loop6): unmounting filesystem.
[  186.530194][ T6956] device wlan1 entered promiscuous mode
[  186.581556][ T6956] device macsec1 entered promiscuous mode
[  186.629100][ T6956] device wlan1 left promiscuous mode
[  186.674931][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'.
[  187.610662][ T6990] loop5: detected capacity change from 0 to 4096
[  187.668477][ T6996] netlink: 'syz.6.891': attribute type 4 has an invalid length.
[  187.714286][ T6996] netlink: 17 bytes leftover after parsing attributes in process `syz.6.891'.
[  187.724830][   T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  187.924786][   T14] usb 4-1: Using ep0 maxpacket: 32
[  187.934855][   T14] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  187.963975][   T14] usb 4-1: config 0 has no interface number 0
[  188.012726][   T14] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  188.072955][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.084138][   T14] usb 4-1: Product: syz
[  188.111394][   T14] usb 4-1: Manufacturer: syz
[  188.133769][   T14] usb 4-1: SerialNumber: syz
[  188.155107][ T7004] loop4: detected capacity change from 0 to 512
[  188.173277][   T14] usb 4-1: config 0 descriptor??
[  188.216254][ T7004] EXT4-fs error (device loop4): __ext4_iget:5102: inode #17: block 1803188595: comm syz.4.894: invalid block
[  188.259202][   T14] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  188.296404][ T7004] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.894: couldn't read orphan inode 17 (err -117)
[  188.308807][ T7004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  188.351133][   T14] usb 4-1: selecting invalid altsetting 1
[  188.397979][   T14] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  188.472130][   T14] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  188.500257][ T7014] loop6: detected capacity change from 0 to 512
[  188.539532][   T14] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  188.554859][ T4262] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  188.586604][ T7014] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  188.592732][   T14] usb 4-1: media controller created
[  188.605312][ T7014] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  188.719584][   T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  188.746353][ T4262] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  188.759122][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  188.771153][ T4262] usb 6-1: config 0 has no interface number 0
[  188.806883][ T7014] __quota_error: 4 callbacks suppressed
[  188.806903][ T7014] Quota error (device loop6): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  188.807201][ T4262] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.807231][ T4262] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.814322][ T7014] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  188.890591][ T4262] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  188.938453][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.956289][ T7014] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.897: Failed to acquire dquot type 0
[  188.992097][ T4262] usb 6-1: config 0 descriptor??
[  189.390702][ T5273] EXT4-fs (loop6): unmounting filesystem.
[  189.421676][ T7032] loop2: detected capacity change from 0 to 1024
[  189.439441][ T4262] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1
[  189.501839][ T7032] hfsplus: bad catalog entry type
[  189.516990][ T4262] hid_prodikeys: hid-prodikeys: failed to find output report
[  189.516990][ T4262] 
[  189.535342][ T7034] device sit0 entered promiscuous mode
[  189.564048][ T6988] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  189.628464][ T7034] netlink: 'syz.4.904': attribute type 1 has an invalid length.
[  189.671084][   T14] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  189.678883][ T7034] netlink: 1 bytes leftover after parsing attributes in process `syz.4.904'.
[  189.732504][   T14] zl10353_read_register: readreg error (reg=127, ret==-71)
[  189.794125][ T4921] usb 6-1: USB disconnect, device number 8
[  189.809578][   T14] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  189.824843][    T9] hfsplus: b-tree write err: -5, ino 25
[  189.887375][    T9] hfsplus: b-tree write err: -5, ino 4
[  189.893066][    T9] hfsplus: b-tree write err: -5, ino 2
[  189.993768][   T14] usb 4-1: USB disconnect, device number 10
[  190.109505][ T7040] fido_id[7040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  190.312167][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'.
[  190.947075][ T7037] loop6: detected capacity change from 0 to 32768
[  190.986476][ T7037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.902 (7037)
[  191.084769][ T7037] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.132869][ T7037] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  191.174852][ T7037] BTRFS info (device loop6): setting nodatasum
[  191.181190][ T7037] BTRFS info (device loop6): force zlib compression, level 3
[  191.197605][ T7037] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  191.208496][ T7037] BTRFS info (device loop6): use lzo compression, level 0
[  191.217452][ T7037] BTRFS info (device loop6): turning on flush-on-commit
[  191.227613][ T7037] BTRFS info (device loop6): enabling auto defrag
[  191.234145][ T7037] BTRFS info (device loop6): max_inline at 4096
[  191.244532][ T7037] BTRFS info (device loop6): using free space tree
[  191.350739][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'.
[  191.705376][ T7037] BTRFS info (device loop6): enabling ssd optimizations
[  192.061554][ T5273] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.963227][ T7144] usb usb8: usbfs: process 7144 (syz.3.938) did not claim interface 0 before use
[  193.111994][ T7147] loop4: detected capacity change from 0 to 512
[  193.154530][ T7154] xt_NFQUEUE: number of queues (4096) out of range (got 67070)
[  193.192718][ T7147] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  193.273678][ T7147] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  193.294880][ T7147] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.939: corrupted inode contents
[  193.394985][ T7147] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #11: comm syz.4.939: mark_inode_dirty error
[  193.449180][ T7147] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.939: invalid indirect mapped block 1 (level 1)
[  193.596111][ T7147] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.939: corrupted inode contents
[  193.617492][ T7166] netlink: 124 bytes leftover after parsing attributes in process `syz.3.947'.
[  193.697699][ T7147] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  193.733266][ T7147] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.939: corrupted inode contents
[  193.791900][ T7147] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.939: mark_inode_dirty error
[  193.854870][ T7147] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  193.896957][ T7147] EXT4-fs (loop4): 1 truncate cleaned up
[  193.902759][ T7147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  194.046127][ T7147] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.939: path /200/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  194.357570][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  194.395671][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  194.397252][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'.
[  194.419526][ T7191] loop5: detected capacity change from 0 to 64
[  194.514276][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.957'.
[  194.641458][ T7195] loop4: detected capacity change from 0 to 512
[  194.748332][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.958: corrupted inode contents
[  194.860154][ T7195] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #3: comm syz.4.958: mark_inode_dirty error
[  194.908094][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #3: comm syz.4.958: corrupted inode contents
[  194.992033][ T7195] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.958: mark_inode_dirty error
[  195.056056][ T7195] Quota error (device loop4): write_blk: dquota write failed
[  195.110494][ T7195] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  195.184911][ T7195] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.958: Failed to acquire dquot type 0
[  195.237877][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.958: corrupted inode contents
[  195.270376][ T7195] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #16: comm syz.4.958: mark_inode_dirty error
[  195.307631][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.958: corrupted inode contents
[  195.358703][ T7195] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.958: mark_inode_dirty error
[  195.418163][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.958: corrupted inode contents
[  195.490618][ T7195] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  195.534718][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.958: corrupted inode contents
[  195.594892][ T7195] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.958: mark_inode_dirty error
[  195.635784][ T7195] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  195.669370][ T7195] EXT4-fs (loop4): 1 truncate cleaned up
[  195.685822][ T7195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  195.748341][ T7195] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.041268][ T7237] loop2: detected capacity change from 0 to 256
[  196.124535][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  196.383218][ T7243] netlink: 'syz.4.975': attribute type 3 has an invalid length.
[  196.483512][ T7246] netlink: 6 bytes leftover after parsing attributes in process `syz.3.976'.
[  196.768055][ T7255] loop2: detected capacity change from 0 to 2048
[  196.819281][ T7255] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.868813][ T7255] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.958267][ T7255] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  197.161597][ T4289] EXT4-fs (loop2): unmounting filesystem.
[  197.439778][ T7279] loop2: detected capacity change from 0 to 2048
[  197.520143][ T7283] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.656369][ T7275] loop3: detected capacity change from 0 to 8192
[  197.721750][ T7275] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  197.838250][ T7293] loop2: detected capacity change from 0 to 2048
[  197.844752][ T7275] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  197.846763][ T7275] REISERFS (device loop3): using ordered data mode
[  197.910857][ T7293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  197.935786][ T7275] reiserfs: using flush barriers
[  197.963329][ T7275] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  198.065494][ T7275] REISERFS (device loop3): checking transaction log (loop3)
[  198.103238][ T7275] REISERFS (device loop3): Using r5 hash to sort names
[  198.138405][ T7275] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  198.246666][ T4289] EXT4-fs (loop2): unmounting filesystem.
[  198.357849][ T7306] cifs: Unknown parameter 'h}#úä
[  198.357849][ T7306] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ
[  198.357849][ T7306] SÃȘØÈžZ§6ŸÂ'
[  198.430733][ T7308] loop2: detected capacity change from 0 to 16
[  198.468489][ T7308] erofs: (device loop2): mounted with root inode @ nid 36.
[  198.540168][ T7308] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89
[  198.646772][ T7308] syz.2.997: attempt to access beyond end of device
[  198.646772][ T7308] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  198.760950][ T7308] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89
[  198.800106][ T7308] syz.2.997: attempt to access beyond end of device
[  198.800106][ T7308] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[  198.836713][ T7314] loop5: detected capacity change from 0 to 1024
[  198.857465][ T7308] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192]
[  198.907767][   T27] audit: type=1800 audit(1781051015.787:22): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.997" name="file2" dev="loop2" ino=89 res=0 errno=0
[  198.959176][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'.
[  198.969515][ T7314] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  198.987560][ T7308] syz.2.997 (7308) used greatest stack depth: 19760 bytes left
[  200.012195][ T7303] loop4: detected capacity change from 0 to 40427
[  200.079555][ T7303] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff
[  200.129990][ T7303] F2FS-fs (loop4): invalid crc value
[  200.167341][ T7303] F2FS-fs (loop4): Found nat_bits in checkpoint
[  200.404709][ T7303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  200.490931][ T7366] loop3: detected capacity change from 0 to 1024
[  200.579489][ T7366] hfsplus: invalid file type 0177777 for inode 2
[  200.603370][ T7366] hfsplus: failed to load root directory
[  200.779992][ T4274] syz-executor: attempt to access beyond end of device
[  200.779992][ T4274] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.319332][ T7386] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  201.431023][ T7389] loop3: detected capacity change from 0 to 8
[  201.465747][ T7389] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  201.498902][ T7391] loop5: detected capacity change from 0 to 256
[  201.514181][ T4352] udevd[4352]: incorrect cramfs checksum on /dev/loop3
[  201.564654][ T4279] Bluetooth: hci1: command 0x0406 tx timeout
[  201.570755][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  201.577275][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  201.609111][ T4352] udevd[4352]: incorrect cramfs checksum on /dev/loop3
[  202.198122][ T7403] loop2: detected capacity change from 0 to 4096
[  202.286236][ T7408] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.468308][ T7380] loop6: detected capacity change from 0 to 40427
[  202.541237][ T7380] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  202.565491][ T7380] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  202.623490][ T7380] F2FS-fs (loop6): Found nat_bits in checkpoint
[  202.654424][ T7412] loop5: detected capacity change from 0 to 2048
[  202.692973][ T7412] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  202.709573][ T7395] loop4: detected capacity change from 0 to 32768
[  202.775266][ T7412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.846078][ T7395] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  202.966102][ T7395] 
[  202.968533][ T7395] ======================================================
[  202.975607][ T7395] WARNING: possible circular locking dependency detected
[  202.982783][ T7395] syzkaller #0 Not tainted
[  202.987510][ T7395] ------------------------------------------------------
[  202.994583][ T7395] syz.4.1024/7395 is trying to acquire lock:
[  203.000620][ T7395] ffff8880552b1808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  203.013952][ T7395] 
[  203.013952][ T7395] but task is already holding lock:
[  203.021366][ T7395] ffff8880552b4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[  203.030940][ T7395] 
[  203.030940][ T7395] which lock already depends on the new lock.
[  203.030940][ T7395] 
[  203.041396][ T7395] 
[  203.041396][ T7395] the existing dependency chain (in reverse order) is:
[  203.051073][ T7395] 
[  203.051073][ T7395] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  203.058962][ T7395]        down_read+0x42/0x2d0
[  203.063794][ T7395]        ocfs2_init_acl+0x307/0x770
[  203.069072][ T7395]        ocfs2_mknod+0x15e8/0x25b0
[  203.074256][ T7395]        ocfs2_create+0x1b6/0x4b0
[  203.079387][ T7395]        path_openat+0x1181/0x2ee0
[  203.084561][ T7395]        do_filp_open+0x1f1/0x430
[  203.089642][ T7395]        do_sys_openat2+0x150/0x4b0
[  203.094947][ T7395]        __x64_sys_open+0x11b/0x140
[  203.100297][ T7395]        do_syscall_64+0x4c/0xa0
[  203.105299][ T7395]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.111782][ T7395] 
[  203.111782][ T7395] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  203.120538][ T7395]        down_read+0x42/0x2d0
[  203.125281][ T7395]        ocfs2_start_trans+0x3a4/0x6f0
[  203.130807][ T7395]        ocfs2_mknod+0xf77/0x25b0
[  203.135900][ T7395]        ocfs2_create+0x1b6/0x4b0
[  203.140997][ T7395]        path_openat+0x1181/0x2ee0
[  203.146177][ T7395]        do_filp_open+0x1f1/0x430
[  203.151258][ T7395]        do_sys_openat2+0x150/0x4b0
[  203.156527][ T7395]        __x64_sys_open+0x11b/0x140
[  203.161782][ T7395]        do_syscall_64+0x4c/0xa0
[  203.166765][ T7395]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.173285][ T7395] 
[  203.173285][ T7395] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  203.180834][ T7395]        ocfs2_start_trans+0x2a5/0x6f0
[  203.186413][ T7395]        ocfs2_mknod+0xf77/0x25b0
[  203.191576][ T7395]        ocfs2_create+0x1b6/0x4b0
[  203.196676][ T7395]        path_openat+0x1181/0x2ee0
[  203.201860][ T7395]        do_filp_open+0x1f1/0x430
[  203.206945][ T7395]        do_sys_openat2+0x150/0x4b0
[  203.212223][ T7395]        __x64_sys_open+0x11b/0x140
[  203.217504][ T7395]        do_syscall_64+0x4c/0xa0
[  203.222503][ T7395]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.228993][ T7395] 
[  203.228993][ T7395] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  203.239585][ T7395]        down_write+0x36/0x60
[  203.244333][ T7395]        ocfs2_reserve_local_alloc_bits+0x11e/0x2700
[  203.251603][ T7395]        ocfs2_reserve_clusters_with_limit+0x1b6/0xc10
[  203.258519][ T7395]        ocfs2_mknod+0xf15/0x25b0
[  203.264528][ T7395]        ocfs2_create+0x1b6/0x4b0
[  203.270320][ T7395]        path_openat+0x1181/0x2ee0
[  203.275492][ T7395]        do_filp_open+0x1f1/0x430
[  203.280586][ T7395]        do_sys_openat2+0x150/0x4b0
[  203.285850][ T7395]        __x64_sys_open+0x11b/0x140
[  203.291120][ T7395]        do_syscall_64+0x4c/0xa0
[  203.296141][ T7395]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.302819][ T7395] 
[  203.302819][ T7395] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  203.313421][ T7395]        __lock_acquire+0x2d07/0x7d10
[  203.318885][ T7395]        lock_acquire+0x1bb/0x4a0
[  203.323986][ T7395]        down_write+0x36/0x60
[  203.328748][ T7395]        ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  203.335238][ T7395]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  203.342152][ T7395]        ocfs2_init_xattr_set_ctxt+0x314/0x7b0
[  203.348387][ T7395]        ocfs2_xattr_set+0xc3b/0x13e0
[  203.353829][ T7395]        __vfs_setxattr+0x3e0/0x420
[  203.359127][ T7395]        __vfs_setxattr_noperm+0x129/0x5e0
[  203.365005][ T7395]        vfs_setxattr+0x167/0x2e0
[  203.370130][ T7395]        setxattr+0x346/0x360
[  203.374897][ T7395]        path_setxattr+0x147/0x290
[  203.380178][ T7395]        __x64_sys_lsetxattr+0xb4/0xd0
[  203.385738][ T7395]        do_syscall_64+0x4c/0xa0
[  203.390744][ T7395]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.397238][ T7395] 
[  203.397238][ T7395] other info that might help us debug this:
[  203.397238][ T7395] 
[  203.407519][ T7395] Chain exists of:
[  203.407519][ T7395]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  203.407519][ T7395] 
[  203.424536][ T7395]  Possible unsafe locking scenario:
[  203.424536][ T7395] 
[  203.432022][ T7395]        CPU0                    CPU1
[  203.437523][ T7395]        ----                    ----
[  203.442931][ T7395]   lock(&oi->ip_xattr_sem);
[  203.447588][ T7395]                                lock(&journal->j_trans_barrier);
[  203.455478][ T7395]                                lock(&oi->ip_xattr_sem);
[  203.462654][ T7395]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  203.470101][ T7395] 
[  203.470101][ T7395]  *** DEADLOCK ***
[  203.470101][ T7395] 
[  203.478296][ T7395] 3 locks held by syz.4.1024/7395:
[  203.483449][ T7395]  #0: ffff888075760460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  203.493498][ T7426] loop2: detected capacity change from 0 to 2048
[  203.499959][ T7395]  #1: ffff8880552b5108 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0
[  203.510500][ T7395]  #2: ffff8880552b4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[  203.520475][ T7395] 
[  203.520475][ T7395] stack backtrace:
[  203.522293][ T7380] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  203.526413][ T7395] CPU: 0 PID: 7395 Comm: syz.4.1024 Not tainted syzkaller #0
[  203.526438][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  203.526454][ T7395] Call Trace:
[  203.526467][ T7395]  <TASK>
[  203.557343][ T7395]  dump_stack_lvl+0x188/0x24e
[  203.562062][ T7395]  ? load_image+0x400/0x400
[  203.566604][ T7395]  ? show_regs_print_info+0x12/0x12
[  203.571836][ T7395]  ? print_circular_bug+0x12b/0x1a0
[  203.577082][ T7395]  check_noncircular+0x296/0x330
[  203.582070][ T7395]  ? add_chain_block+0x940/0x940
[  203.587050][ T7395]  ? lockdep_lock+0xf1/0x1f0
[  203.591686][ T7395]  ? _find_first_zero_bit+0xcf/0x100
[  203.597016][ T7395]  __lock_acquire+0x2d07/0x7d10
[  203.601918][ T7395]  ? verify_lock_unused+0x140/0x140
[  203.607164][ T7395]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  203.612834][ T7395]  ? do_raw_spin_lock+0x128/0x2f0
[  203.617934][ T7395]  ? mutex_unlock+0x10/0x10
[  203.622477][ T7395]  ? __rwlock_init+0x140/0x140
[  203.627313][ T7395]  ? do_raw_spin_unlock+0x11d/0x230
[  203.632577][ T7395]  lock_acquire+0x1bb/0x4a0
[  203.637129][ T7395]  ? ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  203.643239][ T7395]  ? __might_sleep+0xd0/0xd0
[  203.647860][ T7395]  ? check_noncircular+0x189/0x330
[  203.653015][ T7395]  ? read_lock_is_recursive+0x10/0x10
[  203.658438][ T7395]  down_write+0x36/0x60
[  203.662714][ T7395]  ? ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  203.668851][ T7395]  ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  203.674840][ T7395]  ? mark_lock+0x94/0x320
[  203.679209][ T7395]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  203.685231][ T7395]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  203.691172][ T7395]  ? lockdep_hardirqs_on+0x94/0x140
[  203.696408][ T7395]  ? ocfs2_block_group_search+0x4f0/0x4f0
[  203.702174][ T7395]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  203.708198][ T7395]  ? _raw_spin_unlock+0x40/0x40
[  203.713087][ T7395]  ? stack_trace_save+0xa6/0xf0
[  203.717986][ T7395]  ? __stack_depot_save+0x421/0x460
[  203.723232][ T7395]  ? kasan_set_track+0x60/0x70
[  203.728034][ T7395]  ? kasan_set_track+0x4b/0x70
[  203.732839][ T7395]  ? __kasan_kmalloc+0x8e/0xa0
[  203.737639][ T7395]  ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0
[  203.744176][ T7395]  ? ocfs2_init_xattr_set_ctxt+0x314/0x7b0
[  203.750016][ T7395]  ? ocfs2_xattr_set+0xc3b/0x13e0
[  203.755079][ T7395]  ? __vfs_setxattr+0x3e0/0x420
[  203.759975][ T7395]  ? __vfs_setxattr_noperm+0x129/0x5e0
[  203.765470][ T7395]  ? vfs_setxattr+0x167/0x2e0
[  203.770190][ T7395]  ? setxattr+0x346/0x360
[  203.774562][ T7395]  ? path_setxattr+0x147/0x290
[  203.779373][ T7395]  ? __x64_sys_lsetxattr+0xb4/0xd0
[  203.784522][ T7395]  ? do_syscall_64+0x4c/0xa0
[  203.789149][ T7395]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.795367][ T7395]  ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  203.802099][ T7395]  ? ocfs2_init_steal_slots+0x150/0x150
[  203.807699][ T7395]  ? ocfs2_xattr_block_set+0x3090/0x3090
[  203.813372][ T7395]  ? do_raw_spin_lock+0x128/0x2f0
[  203.818444][ T7395]  ocfs2_init_xattr_set_ctxt+0x314/0x7b0
[  203.824343][ T7395]  ? _raw_spin_unlock+0x24/0x40
[  203.829255][ T7395]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  203.835360][ T7395]  ? ocfs2_truncate_log_needs_flush+0x12c/0x300
[  203.841641][ T7395]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  203.847585][ T7395]  ? up_write+0x1bb/0x420
[  203.851959][ T7395]  ocfs2_xattr_set+0xc3b/0x13e0
[  203.856855][ T7395]  ? __ocfs2_xattr_set_handle+0xf30/0xf30
[  203.862629][ T7395]  ? aa_get_newest_label+0xf9/0x5b0
[  203.867859][ T7395]  ? posix_xattr_acl+0x8f/0xb0
[  203.872681][ T7395]  ? evm_protect_xattr+0x333/0x9d0
[  203.877837][ T7395]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  203.883335][ T7395]  __vfs_setxattr+0x3e0/0x420
[  203.888063][ T7395]  __vfs_setxattr_noperm+0x129/0x5e0
[  203.893392][ T7395]  vfs_setxattr+0x167/0x2e0
[  203.897947][ T7395]  ? xattr_permission+0x500/0x500
[  203.903013][ T7395]  ? __sanitizer_cov_trace_pc+0x45/0x60
[  203.908602][ T7395]  ? strncpy_from_user+0x1e3/0x350
[  203.913764][ T7395]  setxattr+0x346/0x360
[  203.917967][ T7395]  ? path_setxattr+0x290/0x290
[  203.922779][ T7395]  ? __mnt_want_write+0x21f/0x2a0
[  203.927853][ T7395]  path_setxattr+0x147/0x290
[  203.932504][ T7395]  ? simple_xattr_list_add+0xf0/0xf0
[  203.937840][ T7395]  ? lock_chain_count+0x20/0x20
[  203.942737][ T7395]  __x64_sys_lsetxattr+0xb4/0xd0
[  203.947720][ T7395]  do_syscall_64+0x4c/0xa0
[  203.952168][ T7395]  ? clear_bhb_loop+0x60/0xb0
[  203.956893][ T7395]  ? clear_bhb_loop+0x60/0xb0
[  203.961617][ T7395]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.967601][ T7395] RIP: 0033:0x7f048959ce59
[  203.972077][ T7395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.991725][ T7395] RSP: 002b:00007f048a4d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  204.000175][ T7395] RAX: ffffffffffffffda RBX: 00007f0489815fa0 RCX: 00007f048959ce59
[  204.008175][ T7395] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[  204.016174][ T7395] RBP: 00007f0489632d6f R08: 0000000000000000 R09: 0000000000000000
[  204.024178][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.032352][ T7395] R13: 00007f0489816038 R14: 00007f0489815fa0 R15: 00007ffe0198e178
[  204.040365][ T7395]  </TASK>
[  204.059376][ T7380] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  204.160409][ T7426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  204.200799][ T4274] ocfs2: Unmounting device (7,4) on (node local)
[  204.250617][ T7426] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  204.294741][ T7426] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  204.320465][ T7426] EXT4-fs (loop2): This should not happen!! Data will be lost
[  204.320465][ T7426] 
[  204.366785][ T7426] EXT4-fs (loop2): Total free blocks count 0
[  204.372868][ T7426] EXT4-fs (loop2): Free/Dirty block details
[  204.419331][ T7426] EXT4-fs (loop2): free_blocks=2415919104
[  204.426478][ T7426] EXT4-fs (loop2): dirty_blocks=64
[  204.431676][ T7426] EXT4-fs (loop2): Block reservation details
[  204.440398][ T7426] EXT4-fs (loop2): i_reserved_data_blocks=4
[  204.460987][   T53] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28