last executing test programs:

3.163139424s ago: executing program 0 (id=6364):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
modify_ldt$write(0x1, 0x0, 0x0)

2.85011573s ago: executing program 0 (id=6366):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)

2.642511356s ago: executing program 0 (id=6368):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1fffffc, &(0x7f0000000180)=[{0xfffffffffffffffc, 0x2}], 0x1, 0x237, 0x0, 0x2, 0x0, 0x2})

1.998184745s ago: executing program 3 (id=6373):
r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$IPC_RMID(r0, 0x0)

1.940460479s ago: executing program 2 (id=6374):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}})

1.807857525s ago: executing program 0 (id=6376):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x5, 0x4fa, &(0x7f0000000ac0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)

1.754577457s ago: executing program 3 (id=6378):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0xfffffffd}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)

1.710393266s ago: executing program 2 (id=6379):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

1.571986247s ago: executing program 0 (id=6382):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0x1, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0)

1.555649285s ago: executing program 3 (id=6383):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2})
close(r0)

1.492782956s ago: executing program 2 (id=6385):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c0005", 0xd}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004)

1.432554498s ago: executing program 3 (id=6386):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, 0x0, 0x10000000000001)

1.316110997s ago: executing program 2 (id=6388):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1af4b9e2afb08fbfa8795ae198eb98603501824b278e7af60824251a6b1334031aac5f7421d7ea02310f3f6dad9592da8773525688000a5f6a49c37b23832cc040c84e783080c453e1088ece52fc67c24c3e1ae2c1037d5ce4993609bee3f15bec55d55dc9e7628af08d52ef57f853e1e37981fbde83dcef7e62652a8134c50", 0x82})
close(r0)

1.266487357s ago: executing program 3 (id=6389):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x194)
open_by_handle_at(r0, &(0x7f0000000100)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x8, 0x7, 0x0, 0xf4, 0x3}}, 0x90000)

1.161845482s ago: executing program 1 (id=6390):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.138267882s ago: executing program 2 (id=6392):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

1.018563561s ago: executing program 4 (id=6393):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)

996.979407ms ago: executing program 2 (id=6394):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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")
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

945.972554ms ago: executing program 4 (id=6395):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x7, 0x4)

890.65073ms ago: executing program 1 (id=6396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

794.589237ms ago: executing program 4 (id=6397):
unshare(0x2a020400)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0))

756.28225ms ago: executing program 1 (id=6398):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
ioctl$sock_bt_hci(r0, 0x400448cc, 0x0)

578.110087ms ago: executing program 4 (id=6399):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfa, 0x5, 0x400, 0x8, @loopback, @private0, 0x80, 0x80, 0x3b6, 0xbd4b681}})

577.838619ms ago: executing program 1 (id=6400):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000f80)={0x8, 0x120, 0xfa00, {0x0, {0x80000, 0x5f9b, "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", 0x2, 0x0, 0x7, 0x7, 0x6, 0x5, 0x3, 0x1}}}, 0x128)

480.649138ms ago: executing program 1 (id=6401):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

414.835291ms ago: executing program 4 (id=6402):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, @none, 0xfffc, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000024c0), 0x4)

315.209578ms ago: executing program 0 (id=6403):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x40)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x2, 0xffe, 0x2})

262.562372ms ago: executing program 1 (id=6404):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6311, &(0x7f0000006d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@shmem={0x4a, 0x1, {0x20, 0x2}}, 0x80002)

262.318989ms ago: executing program 4 (id=6405):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90", 0x1}, {&(0x7f00000002c0)="d6a5a8", 0x3}], 0x2)

0s ago: executing program 3 (id=6406):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)

kernel console output (not intermixed with test programs):

fs: heap/no_heap options were deprecated
[  479.556177][T19184] F2FS-fs (loop1): build fault injection rate: 19
[  479.573141][T19184] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  479.610694][T19184] F2FS-fs (loop1): invalid crc value
[  479.637364][T19184] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  479.798369][ T5870] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  479.804084][T19184] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  479.830952][T19184] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  479.844879][T19184] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  479.979934][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  480.004651][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  480.045443][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  480.074357][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  480.094650][ T5870] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  480.138717][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.169591][ T5870] usb 1-1: config 0 descriptor??
[  480.399787][ T5870] hdpvr 1-1:0.0: firmware version 0x0 dated 
[  480.407600][T19229] loop2: detected capacity change from 0 to 4096
[  480.414128][ T5870] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  480.422728][T19229] EXT4-fs (loop2): Test dummy encryption mode enabled
[  480.447170][T19229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.468312][   T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  480.480202][T19229] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  480.534543][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.640399][   T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  480.661217][   T24] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  480.679097][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.688490][ T5896] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  480.706833][   T24] usb 5-1: Product: syz
[  480.712276][   T24] usb 5-1: Manufacturer: syz
[  480.716928][   T24] usb 5-1: SerialNumber: syz
[  480.731034][   T24] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  480.774564][T19231] loop1: detected capacity change from 0 to 32768
[  480.787417][T19231] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5321 (19231)
[  480.821894][T19231] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  480.839549][T19231] BTRFS info (device loop1): using crc32c checksum algorithm
[  480.861467][ T5896] usb 4-1: Using ep0 maxpacket: 8
[  480.882689][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  480.901227][T19231] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  480.917088][ T5870] hdpvr 1-1:0.0: Could not setup controls
[  480.928083][T19240] F2FS-fs: Conflicting test_dummy_encryption options
[  480.937967][ T5896] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  480.949327][ T5896] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  480.959625][ T5896] usb 4-1: Product: syz
[  480.963959][ T5896] usb 4-1: Manufacturer: syz
[  480.970013][   T24] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  480.983809][ T5870] hdpvr 1-1:0.0: registering videodev failed
[  480.995014][ T5896] usb 4-1: SerialNumber: syz
[  481.018983][ T5870] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71
[  481.051928][   T24] usb 5-1: USB disconnect, device number 44
[  481.076946][ T5870] usb 1-1: USB disconnect, device number 46
[  481.123664][T19231] BTRFS info (device loop1): rebuilding free space tree
[  481.187415][T19231] BTRFS info (device loop1): disabling free space tree
[  481.208175][T19231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  481.218521][T19231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  481.242370][T19231] BTRFS info (device loop1): checking UUID tree
[  481.254905][T19231] BTRFS info (device loop1): enabling ssd optimizations
[  481.262640][T19231] BTRFS info (device loop1): turning off barriers
[  481.266258][ T5896] usb 4-1: Handspring Visor / Palm OS: No valid connect info available
[  481.270248][T19231] BTRFS info (device loop1): disabling tree log
[  481.284581][T19231] BTRFS info (device loop1): turning on flush-on-commit
[  481.284873][ T5896] usb 4-1: Handspring Visor / Palm OS: port 0, is for Console use
[  481.297974][T19231] BTRFS info (device loop1): enabling disk space caching
[  481.302130][ T5896] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  481.315742][T19260] loop2: detected capacity change from 0 to 1024
[  481.315909][T19231] BTRFS info (device loop1): force clearing of disk cache
[  481.324278][ T5896] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  481.345131][T19231] BTRFS info (device loop1): use zstd compression, level 3
[  481.353878][T19260] EXT4-fs: Ignoring removed nomblk_io_submit option
[  481.360831][T19231] BTRFS info (device loop1): max_inline set to 0
[  481.442643][T19260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.467035][ T5896] usb 4-1: palm_os_3_probe - error -71 getting bytes available request
[  481.513169][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  481.545986][ T5896] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  481.554665][   T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  481.583336][ T5896] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  481.596362][ T5896] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  481.632535][ T5896] usb 4-1: USB disconnect, device number 31
[  481.633189][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.642466][ T5896] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  481.739550][ T5896] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  481.766968][ T5896] visor 4-1:1.0: device disconnected
[  481.773935][   T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  481.830273][   T24] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  481.871491][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.888769][   T24] usb 5-1: Product: syz
[  481.893418][   T24] usb 5-1: Manufacturer: syz
[  481.917768][   T24] usb 5-1: SerialNumber: syz
[  481.991356][   T24] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  482.021988][T19270] loop0: detected capacity change from 0 to 256
[  482.059966][T19270] exfat: Deprecated parameter 'utf8'
[  482.158905][T19270] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  482.165605][   T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  482.253362][   T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  482.268476][   T24] usb 5-1: media controller created
[  482.287562][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  482.302117][T19276] loop2: detected capacity change from 0 to 1024
[  482.653254][   T24] usb 5-1: USB disconnect, device number 45
[  482.811513][T19293] loop2: detected capacity change from 0 to 1024
[  482.843274][T19295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5349'.
[  482.864353][T19293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  482.912108][T19301] ipvlan0: entered promiscuous mode
[  482.918823][T19296] ipvlan0: left promiscuous mode
[  482.930683][T19303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5353'.
[  482.968693][T19293] ext4 filesystem being mounted at /1030/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  483.105891][T19313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.163406][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  483.307957][  T796] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  483.492870][  T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.523476][  T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  483.557240][  T796] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  483.579717][  T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.608962][  T796] usb 4-1: config 0 descriptor??
[  483.622285][  T796] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  483.654309][  T796] dvb-usb: bulk message failed: -22 (3/0)
[  483.675453][  T796] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  483.703526][  T796] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  483.721255][  T796] usb 4-1: media controller created
[  483.738282][  T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  483.767712][  T796] dvb-usb: bulk message failed: -22 (6/0)
[  483.778747][  T796] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  483.810695][  T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38
[  483.827549][T19309] dvb-usb: bulk message failed: -22 (2/0)
[  483.829957][   T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  483.865694][  T796] dvb-usb: schedule remote query interval to 150 msecs.
[  483.890793][  T796] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  483.920330][  T796] usb 4-1: USB disconnect, device number 32
[  483.971204][T19312] loop1: detected capacity change from 0 to 32768
[  483.972500][  T796] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  484.010294][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  484.031704][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  484.056887][T19334] loop2: detected capacity change from 0 to 1024
[  484.077055][T19312] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  484.090064][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  484.113462][T19312] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  484.127700][   T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  484.137658][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.151075][   T24] usb 1-1: Product: syz
[  484.159247][   T24] usb 1-1: Manufacturer: syz
[  484.171855][T19334] hfsplus: bad catalog entry type
[  484.191689][   T24] usb 1-1: SerialNumber: syz
[  484.203084][   T24] usb 1-1: config 0 descriptor??
[  484.210034][T19327] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  484.220238][T19327] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  484.241373][T19312] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms
[  484.260066][   T24] usb 1-1: ucan: probing device on interface #0
[  484.269227][  T796] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  484.284480][  T796] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  484.284737][ T7944] hfsplus: b-tree write err: -5, ino 25
[  484.311310][ T7944] hfsplus: b-tree write err: -5, ino 4
[  484.329500][ T7944] hfsplus: b-tree write err: -5, ino 2
[  484.384315][  T796] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 99ms
[  484.422449][  T796] gfs2: fsid=syz:syz.0: jid=0: Done
[  484.438643][T19312] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  484.558946][T19312] gfs2: fsid=syz:syz.0: found 1 quota changes
[  484.672962][   T24] usb 1-1: ucan: device reported invalid tx-fifo size
[  484.685538][   T24] usb 1-1: ucan: probe failed; try to update the device firmware
[  484.698952][ T5826] syz-executor: attempt to access beyond end of device
[  484.698952][ T5826] loop1: rw=8400897, sector=68719479080, nr_sectors = 8 limit=32768
[  484.714060][ T5826] Buffer I/O error on dev loop1, logical block 8589934885, lost async page write
[  484.726481][ T5826] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116
[  484.739848][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.739876][ T5826] Tainted: [L]=SOFTLOCKUP
[  484.739883][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  484.739893][ T5826] Call Trace:
[  484.739901][ T5826]  <TASK>
[  484.739909][ T5826]  dump_stack_lvl+0xe8/0x150
[  484.739940][ T5826]  gfs2_withdraw+0xc3/0x1b0
[  484.739968][ T5826]  gfs2_ail1_flush+0x990/0xfd0
[  484.740015][ T5826]  ? __pfx_gfs2_ail1_flush+0x10/0x10
[  484.740056][ T5826]  empty_ail1_list+0x1b3/0x330
[  484.740087][ T5826]  ? __pfx_empty_ail1_list+0x10/0x10
[  484.740157][ T5826]  ? do_raw_spin_unlock+0xf5/0x210
[  484.740181][ T5826]  gfs2_log_flush+0x1e20/0x2510
[  484.740222][ T5826]  ? __pfx_gfs2_log_flush+0x10/0x10
[  484.740250][ T5826]  ? call_rcu+0x644/0x890
[  484.740275][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[  484.740299][ T5826]  gfs2_kill_sb+0x5c/0x430
[  484.740329][ T5826]  deactivate_locked_super+0xbc/0x130
[  484.740359][ T5826]  cleanup_mnt+0x437/0x4d0
[  484.740378][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[  484.740408][ T5826]  task_work_run+0x1d9/0x270
[  484.740432][ T5826]  ? __pfx_task_work_run+0x10/0x10
[  484.740462][ T5826]  exit_to_user_mode_loop+0xed/0x480
[  484.740483][ T5826]  ? rcu_is_watching+0x15/0xb0
[  484.740511][ T5826]  do_syscall_64+0x32d/0xf80
[  484.740530][ T5826]  ? trace_irq_disable+0x3b/0x150
[  484.740545][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.740563][ T5826]  ? clear_bhb_loop+0x40/0x90
[  484.740585][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.740612][ T5826] RIP: 0033:0x7fcfc979d9d7
[  484.740630][ T5826] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  484.740645][ T5826] RSP: 002b:00007ffd1eb5e108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  484.740664][ T5826] RAX: 0000000000000000 RBX: 00007fcfc9831f90 RCX: 00007fcfc979d9d7
[  484.740676][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1eb5e1c0
[  484.740688][ T5826] RBP: 00007ffd1eb5e1c0 R08: 00007ffd1eb5f1c0 R09: 00000000ffffffff
[  484.740700][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1eb5f250
[  484.740712][ T5826] R13: 00007fcfc9831f90 R14: 0000000000076703 R15: 00007ffd1eb5f290
[  484.740743][ T5826]  </TASK>
[  484.740750][ T5826] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  484.885704][ T5896] usb 1-1: USB disconnect, device number 47
[  484.925966][ T5826] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5
[  484.935395][   T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  485.023098][ T5826] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5
[  485.088836][   T24] usb 5-1: Using ep0 maxpacket: 8
[  485.102601][   T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  485.119183][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.137400][   T24] usb 5-1: Product: syz
[  485.142369][   T24] usb 5-1: Manufacturer: syz
[  485.146990][   T24] usb 5-1: SerialNumber: syz
[  485.168504][   T24] usb 5-1: config 0 descriptor??
[  485.184205][   T24] gspca_main: se401-2.14.0 probing 047d:5003
[  485.432949][T19358] loop3: detected capacity change from 0 to 32768
[  485.453268][T19358] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  485.505109][T19358] XFS (loop3): Ending clean mount
[  485.516802][T19358] XFS (loop3): Quotacheck needed: Please wait.
[  485.581568][   T24] gspca_se401: Wrong descriptor type
[  485.606410][T19358] XFS (loop3): Quotacheck: Done.
[  485.685455][ T5828] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  485.785528][ T5920] usb 5-1: USB disconnect, device number 46
[  485.917954][  T796] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  485.961051][T19372] loop2: detected capacity change from 0 to 16
[  485.988876][T19372] erofs (device loop2): mounted with root inode @ nid 36.
[  486.075546][  T796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  486.102106][T19376] netlink: 488 bytes leftover after parsing attributes in process `syz.3.5384'.
[  486.113580][  T796] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  486.122934][T19376] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.5384'.
[  486.129715][T19378] IPVS: stopping master sync thread 19379 ...
[  486.132461][T19379] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  486.150048][  T796] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  486.161329][  T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  486.181526][  T796] usb 1-1: SerialNumber: syz
[  486.343861][T19385] loop3: detected capacity change from 0 to 1024
[  486.369249][T19385] EXT4-fs: inline encryption not supported
[  486.436150][T19385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.452688][  T796] usb 1-1: 0:2 : does not exist
[  486.496124][  T796] usb 1-1: USB disconnect, device number 48
[  486.597299][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.643883][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5393'.
[  486.681585][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  487.597833][T19432] fuse: Bad value for 'group_id'
[  487.603097][T19432] fuse: Bad value for 'group_id'
[  487.662400][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5409'.
[  487.692972][T19435] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  488.036481][T19447] loop2: detected capacity change from 0 to 8192
[  488.082921][T19447] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  488.286729][T19462] bridge: RTM_NEWNEIGH with invalid state 0x0
[  488.333156][T19465] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5424'.
[  488.569627][T19471] loop0: detected capacity change from 0 to 2048
[  488.583779][T19474] loop2: detected capacity change from 0 to 512
[  488.600128][T19471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  488.610012][T19474] EXT4-fs: Ignoring removed oldalloc option
[  488.618401][T19474] EXT4-fs: Ignoring removed bh option
[  488.647522][T19474] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  488.661842][   T29] audit: type=1800 audit(1772457105.179:199): pid=19471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5427" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  488.664427][T19471] [syz.0.5427/19471] FS: loop0 File: /file1 would truncate fibmap result
[  488.749988][T19457] loop3: detected capacity change from 0 to 40427
[  488.751967][T19474] EXT4-fs (loop2): 1 truncate cleaned up
[  488.789651][T19474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.033053][T19457] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  489.065187][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.075542][T19457] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  489.156690][T19457] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0
[  489.177675][T19457] CPU: 1 UID: 0 PID: 19457 Comm: syz.3.5420 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  489.177706][T19457] Tainted: [L]=SOFTLOCKUP
[  489.177714][T19457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  489.177726][T19457] Call Trace:
[  489.177735][T19457]  <TASK>
[  489.177743][T19457]  dump_stack_lvl+0xe8/0x150
[  489.177772][T19457]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  489.177805][T19457]  f2fs_get_read_data_folio+0x699/0xb70
[  489.177833][T19457]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  489.177857][T19457]  ? __filemap_get_folio_mpol+0x9b0/0xb00
[  489.177879][T19457]  ? __pfx_stack_trace_save+0x10/0x10
[  489.177904][T19457]  ? f2fs_readdir+0x4ec/0xaf0
[  489.177925][T19457]  f2fs_find_data_folio+0x3a6/0x6a0
[  489.177953][T19457]  f2fs_readdir+0x4ec/0xaf0
[  489.177994][T19457]  ? __pfx_f2fs_readdir+0x10/0x10
[  489.178027][T19457]  ? iterate_dir+0x292/0x570
[  489.178051][T19457]  ? down_read_killable+0x1bb/0x340
[  489.178082][T19457]  iterate_dir+0x399/0x570
[  489.178112][T19457]  __se_sys_getdents64+0xf1/0x280
[  489.178188][T19457]  ? __pfx___se_sys_getdents64+0x10/0x10
[  489.178213][T19457]  ? __pfx_filldir64+0x10/0x10
[  489.178239][T19457]  ? rcu_is_watching+0x15/0xb0
[  489.178277][T19457]  do_syscall_64+0x14d/0xf80
[  489.178296][T19457]  ? trace_irq_disable+0x3b/0x150
[  489.178312][T19457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.178333][T19457]  ? clear_bhb_loop+0x40/0x90
[  489.178358][T19457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.178378][T19457] RIP: 0033:0x7f8ec719c799
[  489.178397][T19457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.178414][T19457] RSP: 002b:00007f8ec8011028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  489.178436][T19457] RAX: ffffffffffffffda RBX: 00007f8ec7415fa0 RCX: 00007f8ec719c799
[  489.178451][T19457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  489.178463][T19457] RBP: 00007f8ec7232bd9 R08: 0000000000000000 R09: 0000000000000000
[  489.178476][T19457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  489.178488][T19457] R13: 00007f8ec7416038 R14: 00007f8ec7415fa0 R15: 00007ffe566e4958
[  489.178521][T19457]  </TASK>
[  489.953030][   T10] gfs2: fsid=syz:syz.0: file system withdrawn
[  490.701588][T19542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5458'.
[  490.735318][T19542] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5458'.
[  490.758597][T19542] netlink: 'syz.0.5458': attribute type 10 has an invalid length.
[  490.947140][T19555] loop2: detected capacity change from 0 to 512
[  490.979278][T19555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  491.053959][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5466'.
[  491.073658][T19555] EXT4-fs (loop2): 1 orphan inode deleted
[  491.099340][T19555] EXT4-fs (loop2): 1 truncate cleaned up
[  491.106788][T19555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.187678][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.359908][T19567] loop1: detected capacity change from 0 to 4096
[  491.395440][T19567] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  491.581547][T19567] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  491.590766][T19578] loop3: detected capacity change from 0 to 1024
[  491.611470][T19566] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex
[  491.661090][T19578] hfsplus: bad catalog entry type
[  491.731560][ T7944] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  491.762937][ T5826] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  491.793194][   T35] hfsplus: b-tree write err: -5, ino 25
[  491.813516][ T5826] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  491.820725][   T35] hfsplus: b-tree write err: -5, ino 4
[  491.820810][   T35] hfsplus: b-tree write err: -5, ino 2
[  491.874284][   T29] audit: type=1326 audit(1772457108.389:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  491.900160][ T5826] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  491.927676][   T35] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  491.969705][   T29] audit: type=1326 audit(1772457108.389:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.052245][   T29] audit: type=1326 audit(1772457108.389:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.136696][T19591] CUSE: unknown device info ""
[  492.146439][T19591] CUSE: zero length info key specified
[  492.177934][   T29] audit: type=1326 audit(1772457108.389:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.238477][   T29] audit: type=1326 audit(1772457108.389:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.338044][   T29] audit: type=1326 audit(1772457108.389:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.382003][   T29] audit: type=1326 audit(1772457108.389:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.404843][   T29] audit: type=1326 audit(1772457108.389:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.427980][   T29] audit: type=1326 audit(1772457108.389:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.0.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  492.601592][T19607] loop3: detected capacity change from 0 to 128
[  492.638961][T19607] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  492.677613][T19607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  493.136683][T19597] loop2: detected capacity change from 0 to 40427
[  493.199529][T19597] F2FS-fs (loop2): Image doesn't support compression
[  493.222354][T19597] F2FS-fs (loop2): build fault injection rate: 690
[  493.255103][T19603] loop0: detected capacity change from 0 to 40427
[  493.262395][T19597] F2FS-fs (loop2): invalid crc value
[  493.290325][T19603] F2FS-fs (loop0): Encrypt feature is off
[  493.570052][T19597] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  493.650523][T19597] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  494.289654][T19660] loop0: detected capacity change from 0 to 512
[  494.390763][T19660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.415506][T19660] ext4 filesystem being mounted at /1078/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.451166][T19660] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  494.548781][T19671] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  494.672940][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.847168][T19685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5526'.
[  494.960212][T19693] loop0: detected capacity change from 0 to 64
[  495.281644][T19708] loop3: detected capacity change from 0 to 512
[  495.310936][T19708] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  495.352795][T19708] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.5536: bad orphan inode 131083
[  495.386670][T19708] loop3: lost filesystem error report for type 5 error -117
[  495.393121][T19708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.415315][T19057] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  495.502717][T19717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5541'.
[  495.529808][T19708] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.5536: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  495.540188][T19717] netlink: 35 bytes leftover after parsing attributes in process `syz.4.5541'.
[  495.685397][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.698639][T19725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5545'.
[  495.782578][T19725] bridge0: port 3(vlan3) entered blocking state
[  495.801338][T19725] bridge0: port 3(vlan3) entered disabled state
[  495.817010][T19725] vlan3: entered allmulticast mode
[  495.823869][T19725] bridge0: entered allmulticast mode
[  495.837287][T19732] loop3: detected capacity change from 0 to 256
[  495.855687][T19732] exfat: Deprecated parameter 'utf8'
[  495.864577][T19725] vlan3: left allmulticast mode
[  495.872530][T19725] bridge0: left allmulticast mode
[  495.895196][T19732] exfat: Deprecated parameter 'utf8'
[  495.913441][T19732] exfat: Deprecated parameter 'utf8'
[  495.979307][T19732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  496.012277][T19732] exFAT-fs (loop3): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  496.046386][T19732] exFAT-fs (loop3): Filesystem has been set read-only
[  496.069325][T19732] exfat: Deprecated parameter 'utf8'
[  496.074663][T19732] exfat: Deprecated parameter 'utf8'
[  496.111720][T19732] exfat: Deprecated parameter 'utf8'
[  496.269758][T19742] loop0: detected capacity change from 0 to 4096
[  496.276448][T19057] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  496.313015][T19742] NILFS (loop0): invalid segment: Checksum error in segment payload
[  496.343091][T19742] NILFS (loop0): trying rollback from an earlier position
[  496.434369][T19742] NILFS (loop0): recovery complete
[  496.458651][T19752] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  496.517126][T19747] loop1: detected capacity change from 0 to 4096
[  496.529007][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5559'.
[  496.681616][T19747] ntfs3(loop1): ino=b, mi_enum_attr
[  496.687022][T19747] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  496.740512][T19747] ntfs3(loop1): Failed to load $Extend (-22).
[  496.746633][T19747] ntfs3(loop1): Failed to initialize $Extend.
[  496.837480][T19747] ntfs3(loop1): ino=1b, mi_enum_attr
[  496.937163][T19756] loop0: detected capacity change from 0 to 4096
[  496.945434][T19763] loop2: detected capacity change from 0 to 256
[  496.972537][T19763] exfat: Deprecated parameter 'utf8'
[  496.994091][T19763] exfat: Deprecated parameter 'namecase'
[  497.072083][T19763] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  497.195422][T19767] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.5565'.
[  497.658118][T19104] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  497.826466][T19104] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  497.848687][T19772] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  497.865362][T19104] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  497.898137][T19104] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  497.957550][T19104] usb 3-1: config 220 has no interface number 2
[  497.988295][T19780] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5571 (19780)
[  498.022571][T19104] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  498.050364][T19772] XFS (loop0): Ending clean mount
[  498.095990][T19104] usb 3-1: config 220 interface 0 has no altsetting 0
[  498.134332][T19104] usb 3-1: config 220 interface 76 has no altsetting 0
[  498.143817][T19780] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  498.169174][T19104] usb 3-1: config 220 interface 1 has no altsetting 0
[  498.188378][T19780] BTRFS info (device loop1): using sha256 checksum algorithm
[  498.204823][T19104] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  498.224077][T19104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.242452][T19104] usb 3-1: Product: syz
[  498.246916][T19104] usb 3-1: Manufacturer: syz
[  498.254012][T19104] usb 3-1: SerialNumber: syz
[  498.285701][ T5829] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  498.396934][T19813] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5575'.
[  498.448981][T19780] BTRFS info (device loop1): rebuilding free space tree
[  498.482388][T19104] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  498.497981][T19104] uvcvideo 3-1:220.0: No valid video chain found.
[  498.504599][T19104] usb 3-1: selecting invalid altsetting 0
[  498.567091][T19780] BTRFS info (device loop1): disabling free space tree
[  498.578715][T19104] usb 3-1: selecting invalid altsetting 0
[  498.584738][T19104] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  498.600575][T19780] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  498.649129][T19780] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  498.670292][T19104] usb 3-1: USB disconnect, device number 43
[  498.740069][T19780] BTRFS info (device loop1): setting nodatasum
[  498.788053][T19780] BTRFS info (device loop1): setting nodatacow
[  498.801047][T19780] BTRFS info (device loop1): turning off barriers
[  498.807514][T19780] BTRFS info (device loop1): force clearing of disk cache
[  499.033001][ T5826] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  499.149038][T19057] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  499.300790][T19841] set_capacity_and_notify: 2 callbacks suppressed
[  499.300807][T19841] loop3: detected capacity change from 0 to 1024
[  499.309708][T19057] usb 5-1: Using ep0 maxpacket: 8
[  499.313963][T19057] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  499.313996][T19057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.314016][T19057] usb 5-1: Product: syz
[  499.314031][T19057] usb 5-1: Manufacturer: syz
[  499.314047][T19057] usb 5-1: SerialNumber: syz
[  499.329360][T19057] usb 5-1: config 0 descriptor??
[  499.351011][T19057] gspca_main: se401-2.14.0 probing 047d:5003
[  499.617163][ T7946] hfsplus: b-tree write err: -5, ino 25
[  499.666818][ T7946] hfsplus: b-tree write err: -5, ino 4
[  499.675439][ T7946] hfsplus: b-tree write err: -5, ino 2
[  499.921729][T19853] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  499.989963][T19057] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40
[  500.120549][T19057] usb 5-1: USB disconnect, device number 47
[  500.474334][T19879] loop0: detected capacity change from 0 to 512
[  500.554232][T19879] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.5596: corrupted inode contents
[  500.564224][T19881] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  500.574720][T19879] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  500.577834][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  500.593440][    C0] EXT4-fs (loop0): initial error at time 1772457117: ext4_do_update_inode:5569: inode 3
[  500.603222][    C0] EXT4-fs (loop0): last error at time 1772457117: ext4_do_update_inode:5569: inode 3
[  500.607291][T19879] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #3: comm syz.0.5596: mark_inode_dirty error
[  500.738001][T19879] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  500.745646][T19879] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.5596: corrupted inode contents
[  500.794745][T19879] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  500.796863][T19879] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.5596: mark_inode_dirty error
[  500.847005][T19879] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  500.858707][T19879] __quota_error: 4 callbacks suppressed
[  500.858729][T19879] Quota error (device loop0): write_blk: dquota write failed
[  500.981584][T19879] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  501.023044][T19879] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.5596: Failed to acquire dquot type 0
[  501.069042][T19868] loop2: detected capacity change from 0 to 32768
[  501.082688][T19879] loop0: lost filesystem error report for type 5 error -117
[  501.084035][T19879] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.5596: corrupted inode contents
[  501.119425][T19868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5592 (19868)
[  501.126933][T19879] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  501.151883][T19879] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.5596: mark_inode_dirty error
[  501.197890][T19879] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  501.198842][T19879] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.5596: corrupted inode contents
[  501.244080][T19879] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  501.244579][T19879] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.5596: mark_inode_dirty error
[  501.289466][T19868] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  501.317182][T19879] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  501.320540][T19879] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.5596: corrupted inode contents
[  501.329320][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  501.332074][T19879] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  501.371838][T19879] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  501.395540][T19868] BTRFS info (device loop2): using crc32c checksum algorithm
[  501.428492][T19868] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  501.480729][T19879] loop0: lost filesystem error report for type 5 error -117
[  501.482743][T19879] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.5596: corrupted inode contents
[  501.507324][T19910] netlink: 'syz.3.5606': attribute type 153 has an invalid length.
[  501.516513][T19879] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  501.525852][T19879] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.5596: mark_inode_dirty error
[  501.578615][T19879] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  501.590796][T19879] loop0: lost filesystem error report for type 5 error -117
[  501.596159][T19914] netlink: 'syz.4.5607': attribute type 2 has an invalid length.
[  501.619625][T19924] loop1: detected capacity change from 0 to 1024
[  501.632096][T19879] EXT4-fs (loop0): 1 truncate cleaned up
[  501.658797][T19879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.689732][T19868] BTRFS info (device loop2): rebuilding free space tree
[  501.725670][T19879] ext4 filesystem being mounted at /1095/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.755989][   T29] audit: type=1800 audit(1772457118.269:213): pid=19924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5608" name="file1" dev="loop1" ino=20 res=0 errno=0
[  501.784830][T19868] BTRFS info (device loop2): disabling free space tree
[  501.813847][T19868] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  501.871722][  T151] hfsplus: b-tree write err: -5, ino 25
[  501.879414][T19868] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  501.888254][  T151] hfsplus: b-tree write err: -5, ino 4
[  501.895633][  T151] hfsplus: b-tree write err: -5, ino 2
[  501.932401][T19868] BTRFS info (device loop2): checking UUID tree
[  501.937675][  T151] hfsplus: b-tree write err: -5, ino 20
[  501.943809][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.962890][T19868] BTRFS info (device loop2): enabling ssd optimizations
[  501.982687][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5613'.
[  501.997585][T19868] BTRFS info (device loop2): turning off barriers
[  502.004456][T19868] BTRFS info (device loop2): disabling tree log
[  502.016967][T19868] BTRFS info (device loop2): turning on flush-on-commit
[  502.032226][T19937] loop3: detected capacity change from 0 to 128
[  502.040264][T19936] macvtap1: entered promiscuous mode
[  502.045614][T19936] dummy0: entered promiscuous mode
[  502.068691][T19868] BTRFS info (device loop2): enabling disk space caching
[  502.075772][T19868] BTRFS info (device loop2): force clearing of disk cache
[  502.110302][T19936] macvtap1: entered allmulticast mode
[  502.120779][T19936] dummy0: entered allmulticast mode
[  502.147322][T19868] BTRFS info (device loop2): use zstd compression, level 3
[  502.188215][T19868] BTRFS info (device loop2): max_inline set to 0
[  502.461998][ T5822] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  503.039665][T19968] Bluetooth: MGMT ver 1.23
[  503.113248][T19952] loop0: detected capacity change from 0 to 32768
[  503.215834][T19952] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  503.529357][T19952] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  503.598571][T19986] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  503.620819][T19952] XFS (loop0): Starting recovery (logdev: internal)
[  503.674898][T19952] XFS (loop0): Ending recovery (logdev: internal)
[  503.762580][T19952] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d6/0x510, xfs_bnobt block 0x8
[  503.772029][T19991] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  503.800639][T19952] XFS (loop0): Unmount and run xfs_repair
[  503.929172][ T5829] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  503.977988][ T5829] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  504.220333][T20000] loop2: detected capacity change from 0 to 4096
[  504.375678][T20000] ntfs3(loop2): ino=b, mi_enum_attr
[  504.387913][T20000] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  504.395376][T20000] ntfs3(loop2): Failed to load $Extend (-22).
[  504.408098][T20000] ntfs3(loop2): Failed to initialize $Extend.
[  504.488550][T19104] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  504.532365][T20000] ntfs3(loop2): ino=1b, mi_enum_attr
[  504.597154][T20013] loop0: detected capacity change from 0 to 256
[  504.675618][T20013] FAT-fs (loop0): Directory bread(block 64) failed
[  504.689836][T19104] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  504.710515][T20013] FAT-fs (loop0): Directory bread(block 65) failed
[  504.717170][T20013] FAT-fs (loop0): Directory bread(block 66) failed
[  504.725509][T19104] usb 2-1: config 0 has no interface number 0
[  504.738511][T19104] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  504.758230][T20013] FAT-fs (loop0): Directory bread(block 67) failed
[  504.778125][T19104] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  504.793038][T20013] FAT-fs (loop0): Directory bread(block 68) failed
[  504.800649][T19104] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  504.810403][T20013] FAT-fs (loop0): Directory bread(block 69) failed
[  504.818425][T20013] FAT-fs (loop0): Directory bread(block 70) failed
[  504.827135][T19104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.836663][T20013] FAT-fs (loop0): Directory bread(block 71) failed
[  504.854583][T19104] usb 2-1: config 0 descriptor??
[  504.860869][T20013] FAT-fs (loop0): Directory bread(block 72) failed
[  504.867441][T20013] FAT-fs (loop0): Directory bread(block 73) failed
[  504.873040][T20007] loop3: detected capacity change from 0 to 32768
[  504.909510][T20007] JBD2: Ignoring recovery information on journal
[  504.954187][T20007] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  505.122015][ T5828] ocfs2: Unmounting device (7,3) on (node local)
[  505.218060][   T10] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  505.232730][T20027] loop0: detected capacity change from 0 to 512
[  505.259773][T20027] EXT4-fs: Ignoring removed oldalloc option
[  505.270895][T20027] EXT4-fs: Ignoring removed bh option
[  505.303129][T20027] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  505.324930][T19104] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0
[  505.349274][T20027] EXT4-fs (loop0): 1 truncate cleaned up
[  505.373246][T19104] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0
[  505.387440][T20027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  505.416225][T19104] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0
[  505.438390][T19104] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0
[  505.449098][   T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  505.481913][T19104] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0
[  505.496149][   T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  505.520271][T19104] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0
[  505.535037][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.556444][T19104] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0
[  505.567299][   T10] usb 3-1: Product: syz
[  505.577850][   T10] usb 3-1: Manufacturer: syz
[  505.582493][   T10] usb 3-1: SerialNumber: syz
[  505.594337][T19104] prodikeys 0003:041E:2801.002C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1
[  505.625895][T19104] hid_prodikeys: hid-prodikeys: failed to find output report
[  505.625895][T19104] 
[  505.642821][   T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  505.666108][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.700996][T19104] usb 2-1: USB disconnect, device number 43
[  505.763079][T20030] fido_id[20030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  505.841211][   T10] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  505.867012][T20036] loop3: detected capacity change from 0 to 2048
[  505.883634][T20038] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  505.906517][   T10] usb 3-1: USB disconnect, device number 44
[  505.921192][T20036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  506.388142][   T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  506.570552][   T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  506.597520][   T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  506.629682][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.647855][   T10] usb 3-1: Product: syz
[  506.652223][   T10] usb 3-1: Manufacturer: syz
[  506.657013][   T10] usb 3-1: SerialNumber: syz
[  506.684744][   T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  506.825436][T20050] loop3: detected capacity change from 0 to 32768
[  506.846317][T20050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5655 (20050)
[  506.912826][T20050] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  506.920079][   T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  506.935091][   T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  506.948840][   T10] usb 3-1: media controller created
[  506.958462][T20050] BTRFS info (device loop3): using sha256 checksum algorithm
[  507.036003][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  507.140355][T20086] loop1: detected capacity change from 0 to 1024
[  507.176802][T20050] BTRFS info (device loop3): rebuilding free space tree
[  507.305006][T20050] BTRFS info (device loop3): disabling free space tree
[  507.344882][T20050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  507.409725][ T7944] hfsplus: b-tree write err: -5, ino 25
[  507.415497][ T7944] hfsplus: b-tree write err: -5, ino 4
[  507.421653][T20050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  507.440556][T20060] loop0: detected capacity change from 0 to 32768
[  507.451120][ T7944] hfsplus: b-tree write err: -5, ino 2
[  507.477756][T20050] BTRFS info (device loop3): enabling ssd optimizations
[  507.516627][T20050] BTRFS info (device loop3): turning on async discard
[  507.539960][T20050] BTRFS info (device loop3): force clearing of disk cache
[  507.547120][T20050] BTRFS info (device loop3): enabling auto defrag
[  507.586122][T20107] loop2: detected capacity change from 0 to 64
[  507.587102][T20060] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  507.697860][   T29] audit: type=1800 audit(1772457124.209:214): pid=20107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5667" name="file1" dev="loop2" ino=5 res=0 errno=0
[  507.720086][T20050] BTRFS info (device loop3): max_inline set to 4096
[  507.751477][T20112] netlink: 'syz.1.5668': attribute type 10 has an invalid length.
[  507.859191][   T10] usb 3-1: USB disconnect, device number 45
[  507.876754][T20060] XFS (loop0): Ending clean mount
[  507.882749][T20114] netlink: 'syz.1.5668': attribute type 10 has an invalid length.
[  507.921745][T20060] XFS (loop0): Quotacheck needed: Please wait.
[  507.991626][T20112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.029261][T20114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5668'.
[  508.091711][T20060] XFS (loop0): Quotacheck: Done.
[  508.093110][ T5828] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  508.114351][T20112] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  508.124153][T20114] batadv0: entered promiscuous mode
[  508.138447][T20114] batadv0: entered allmulticast mode
[  508.176406][T20114] bond0: (slave batadv0): Releasing backup interface
[  508.238600][T20114] bridge0: port 3(batadv0) entered blocking state
[  508.285176][T20114] bridge0: port 3(batadv0) entered disabled state
[  508.426049][ T5829] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  508.515761][T20132] netlink: 'syz.4.5674': attribute type 3 has an invalid length.
[  508.556442][  T151] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  508.566435][  T151] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  508.634060][T19057] kernel write not supported for file /2372/clear_refs (pid: 19057 comm: kworker/1:1)
[  509.358845][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5687'.
[  509.557504][T20163] loop1: detected capacity change from 0 to 8192
[  509.559267][T20169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5689'.
[  509.639999][ T5813]  loop1: p1 p2 p3 < > p4 < p5 p6 >
[  509.645517][ T5813] loop1: partition table partially beyond EOD, truncated
[  509.664648][ T5813] loop1: p1 start 30976 is beyond EOD, truncated
[  509.672210][ T5813] loop1: p2 size 16128 extends beyond EOD, truncated
[  509.684701][ T5813] loop1: p3 start 327168 is beyond EOD, truncated
[  509.695188][ T5813] loop1: p5 start 30976 is beyond EOD, truncated
[  509.735156][ T5813] loop1: p6 size 16128 extends beyond EOD, truncated
[  509.774025][T20163]  loop1: p1 p2 p3 < > p4 < p5 p6 >
[  509.783200][T20163] loop1: partition table partially beyond EOD, truncated
[  509.796639][T20163] loop1: p1 start 30976 is beyond EOD, truncated
[  509.813461][T20163] loop1: p2 size 16128 extends beyond EOD, truncated
[  509.815532][T20146] loop2: detected capacity change from 0 to 32768
[  509.838568][T20163] loop1: p3 start 327168 is beyond EOD, truncated
[  509.870726][T20163] loop1: p5 start 30976 is beyond EOD, truncated
[  509.890955][T20146] (syz.2.5679,20146,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  509.910787][T20163] loop1: p6 size 16128 extends beyond EOD, truncated
[  509.942566][T20146] (syz.2.5679,20146,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  509.988676][T20146] JBD2: Ignoring recovery information on journal
[  509.997200][T20182] loop0: detected capacity change from 0 to 1024
[  510.056129][T20182] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  510.156045][T20182] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  510.186292][T20146] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  510.198071][T20182] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  510.235129][T20182] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: inode #32: comm syz.0.5695: iget: special inode unallocated
[  510.286500][T20182] fserror_report: 1 callbacks suppressed
[  510.286519][T20182] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  510.312393][T20182] EXT4-fs (loop0): no journal found
[  510.321629][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  510.321657][    C0] EXT4-fs (loop0): initial error at time 1772457126: ext4_get_journal_inode:5863: inode 32
[  510.321690][    C0] EXT4-fs (loop0): last error at time 1772457126: ext4_get_journal_inode:5863: inode 32
[  510.403790][T20182] EXT4-fs (loop0): can't get journal size
[  510.411259][   T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  510.431125][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  510.446860][T13142] udevd[13142]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  510.446961][ T6051] udevd[6051]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  510.464755][T20182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  510.540991][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.557638][T13142] udevd[13142]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  510.569418][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  510.589757][   T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  510.598549][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.613988][ T6051] udevd[6051]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  510.622246][   T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  510.652012][   T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  510.702081][T20203] loop1: detected capacity change from 0 to 64
[  510.711138][T20204] netlink: 'syz.4.5705': attribute type 29 has an invalid length.
[  510.719809][   T10] usb 4-1: Manufacturer: syz
[  510.734917][   T10] usb 4-1: config 0 descriptor??
[  510.744132][T20204] netlink: 'syz.4.5705': attribute type 29 has an invalid length.
[  510.756704][ T5822] ocfs2: Unmounting device (7,2) on (node local)
[  510.764454][T20203] minix: block size(59136) > page size(4096) not supported by filesystem
[  511.013510][   T10] rc_core: IR keymap rc-hauppauge not found
[  511.026396][   T10] Registered IR keymap rc-empty
[  511.047455][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  511.061828][T20212] loop0: detected capacity change from 0 to 256
[  511.100695][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42
[  511.115384][T20212] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d)
[  511.298078][T20217] vivid-007: disconnect
[  511.318811][T20216] vivid-007: reconnect
[  511.353152][    C0] igorplugusb 4-1:0.0: receive overflow, at least 21 lost
[  511.465486][T20221] loop0: detected capacity change from 0 to 4096
[  511.585462][   T24] usb 4-1: USB disconnect, device number 33
[  511.597944][T20226] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  511.964820][T20233] mkiss: ax0: crc mode is auto.
[  512.072005][T20240] loop2: detected capacity change from 0 to 256
[  512.124215][T20240] exfat: Deprecated parameter 'namecase'
[  512.157945][T20240] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  512.206815][T20244] loop3: detected capacity change from 0 to 1024
[  512.491718][T20254] CUSE: unknown device info "€"
[  512.509943][T20254] CUSE: unknown device info ""
[  512.518495][T20254] CUSE: unknown device info "
"
[  512.530021][T20254] CUSE: unknown device info "€"
[  512.534905][T20254] CUSE: zero length info key specified
[  512.558240][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5727'.
[  512.737930][T19104] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  512.920673][T19104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.945348][T19104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.967972][T19104] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  512.984374][T19104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.001988][T19104] usb 3-1: config 0 descriptor??
[  513.357595][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5742'.
[  513.408816][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5743'.
[  513.445316][T20274] loop3: detected capacity change from 0 to 32768
[  513.471289][T20274] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5735 (20274)
[  513.475375][T19104] stadia 0003:18D1:9400.002D: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0
[  513.518849][T20274] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  513.551688][T19104] stadia 0003:18D1:9400.002D: no inputs found
[  513.565389][T20274] BTRFS info (device loop3): using blake2b checksum algorithm
[  513.573008][T19104] stadia 0003:18D1:9400.002D: force feedback init failed
[  513.740614][T20274] BTRFS info (device loop3): enabling ssd optimizations
[  513.747246][T19104] usb 3-1: USB disconnect, device number 46
[  513.747598][T20274] BTRFS info (device loop3): turning on async discard
[  513.817903][T20274] BTRFS info (device loop3): enabling free space tree
[  513.824730][T20274] BTRFS info (device loop3): use zstd compression, level 3
[  513.990537][T20312] loop1: detected capacity change from 0 to 4096
[  514.017987][T20312] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  514.165903][ T5828] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  514.206736][T20312] ntfs3(loop1): ino=19, mi_enum_attr
[  514.236969][T20312] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  514.814343][T20330] sp0: Synchronizing with TNC
[  514.841598][T20335] sp0: Found TNC
[  514.887360][T20329] [U] è`
[  514.901689][T20339] loop3: detected capacity change from 0 to 2048
[  514.993452][T20339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  515.041657][T20339] UDF-fs: error (device loop3): udf_read_inode: (ino 1316) failed !bh
[  515.207374][T20350] sp0: Synchronizing with TNC
[  515.483411][T20363] [U] k43°{}_âhM|Ú™T6½‰Ý¬
[  515.538036][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  515.719557][T20373] loop3: detected capacity change from 0 to 4096
[  515.732346][    T9] usb 2-1: Using ep0 maxpacket: 32
[  515.740934][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  515.760886][    T9] usb 2-1: config 0 has no interface number 0
[  515.767043][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.778640][T20373] EXT4-fs (loop3): Test dummy encryption mode enabled
[  515.806752][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.819520][T20348] loop2: detected capacity change from 0 to 32768
[  515.834535][    T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  515.852241][T20373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.915317][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.984890][    T9] usb 2-1: config 0 descriptor??
[  516.055502][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.292087][T20386] loop2: detected capacity change from 0 to 4096
[  516.328377][T20386] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  516.406719][T20394] loop0: detected capacity change from 0 to 512
[  516.432778][T20394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  516.471536][    T9] ft260 0003:0403:6030.002E: item fetching failed at offset 0/2
[  516.519688][    T9] ft260 0003:0403:6030.002E: failed to parse HID
[  516.532892][T20394] EXT4-fs (loop0): 1 truncate cleaned up
[  516.558665][    T9] ft260 0003:0403:6030.002E: probe with driver ft260 failed with error -22
[  516.604415][T20394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  516.663757][    T9] usb 2-1: USB disconnect, device number 44
[  516.698957][   T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  516.759270][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.888627][   T10] usb 5-1: Using ep0 maxpacket: 32
[  516.910848][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.935505][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.953544][T20413] loop3: detected capacity change from 0 to 64
[  516.963163][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  517.013352][   T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  517.039053][   T10] usb 5-1: Product: syz
[  517.043269][   T10] usb 5-1: Manufacturer: syz
[  517.089684][   T10] hub 5-1:4.0: USB hub found
[  517.285458][   T10] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  517.447981][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  517.519656][T20433] loop2: detected capacity change from 0 to 128
[  517.538548][T20433] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  517.558957][T20433] hpfs: filesystem error: improperly stopped
[  517.566763][T20433] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  517.589226][T20433] hpfs: You really don't want any checks? You are crazy...
[  517.597162][T20433] hpfs: hpfs_map_sector(): read error
[  517.604298][ T5896] usb 5-1: USB disconnect, device number 48
[  517.607066][T20433] hpfs: code page support is disabled
[  517.616424][T20433] hpfs: hpfs_map_4sectors(): unaligned read
[  517.622631][T20433] hpfs: hpfs_map_4sectors(): unaligned read
[  517.630695][T20433] hpfs: filesystem error: unable to find root dir
[  517.650543][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  517.661602][T20436] loop1: detected capacity change from 0 to 2048
[  517.671016][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  517.689991][T20436] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504
[  517.697853][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  517.715968][    T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  517.725895][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.734317][    T9] usb 4-1: Product: syz
[  517.740198][    T9] usb 4-1: Manufacturer: syz
[  517.745382][    T9] usb 4-1: SerialNumber: syz
[  517.751302][T20436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  517.777030][    T9] usb 4-1: config 0 descriptor??
[  517.787084][T20420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  517.808761][T20420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  517.819977][    T9] usb 4-1: ucan: probing device on interface #0
[  517.885567][T20441] netlink: 'syz.1.5806': attribute type 2 has an invalid length.
[  518.439615][    T9] ucan 4-1:0.0: probe with driver ucan failed with error -71
[  518.460717][    T9] usb 4-1: USB disconnect, device number 34
[  518.493953][T20452] loop1: detected capacity change from 0 to 32768
[  518.501292][   T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  518.513536][T20452] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 97939750-7ff5-4eb2-a70f-089209986cd6
[  518.528398][T20452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5811 (20452)
[  518.548997][T20452] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  518.560008][T20452] BTRFS info (device loop1): using sha256 checksum algorithm
[  518.568545][T20452] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  518.645988][T20452] BTRFS info (device loop1): rebuilding free space tree
[  518.658238][   T24] usb 5-1: Using ep0 maxpacket: 32
[  518.679627][   T24] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  518.700172][   T24] usb 5-1: config 0 has no interface number 0
[  518.704014][T20452] BTRFS info (device loop1): disabling free space tree
[  518.706406][   T24] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  518.728894][   T24] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  518.744890][   T24] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  518.756061][T20452] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  518.760205][   T24] usb 5-1: config 0 interface 196 has no altsetting 0
[  518.776727][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  518.787076][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.787420][T20452] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  518.796125][   T24] usb 5-1: Product: syz
[  518.812183][   T24] usb 5-1: Manufacturer: syz
[  518.816843][   T24] usb 5-1: SerialNumber: syz
[  518.843390][   T24] usb 5-1: config 0 descriptor??
[  518.849105][T20469] loop2: detected capacity change from 0 to 1024
[  518.856467][T20469] ext3: Bad value for 'mb_optimize_scan'
[  518.863800][T20450] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  518.880704][T20452] BTRFS info (device loop1): enabling ssd optimizations
[  518.902058][T20452] BTRFS info (device loop1): enabling disk space caching
[  518.902086][T20452] BTRFS info (device loop1): force clearing of disk cache
[  518.902103][T20452] BTRFS info (device loop1): enabling auto defrag
[  519.056984][   T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  519.230579][ T5826] BTRFS info (device loop1): last unmount of filesystem 97939750-7ff5-4eb2-a70f-089209986cd6
[  519.530895][   T24] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  519.626239][T20490] minix: block size(59136) > page size(4096) not supported by filesystem
[  519.656980][   T24] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[  519.732024][   T24] usb 5-1: USB disconnect, device number 49
[  519.930832][   T24] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[  520.059336][T20498] set_capacity_and_notify: 2 callbacks suppressed
[  520.059357][T20498] loop3: detected capacity change from 0 to 2048
[  520.089852][T20498] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504
[  520.132732][T20498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  520.413774][T20514] netlink: 'syz.1.5832': attribute type 3 has an invalid length.
[  520.630829][T20524] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5838'.
[  520.686432][T20518] loop2: detected capacity change from 0 to 8192
[  520.755068][   T29] audit: type=1800 audit(1772457137.269:215): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5834" name="file2" dev="loop2" ino=1048906 res=0 errno=0
[  520.771936][T20518] syz.2.5834: attempt to access beyond end of device
[  520.771936][T20518] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  520.872083][T20518] Buffer I/O error on dev loop2, logical block 57847, async page read
[  520.932647][T20535] veth1_macvtap: left promiscuous mode
[  520.946551][T20538] sctp: [Deprecated]: syz.3.5842 (pid 20538) Use of int in max_burst socket option.
[  520.946551][T20538] Use struct sctp_assoc_value instead
[  520.973552][T20535] macsec0: entered allmulticast mode
[  521.015113][T20539] veth1_macvtap: entered promiscuous mode
[  521.051437][T20539] veth1_macvtap: entered allmulticast mode
[  521.057360][T20539] macsec0: left allmulticast mode
[  521.088750][T20539] veth1_macvtap: left allmulticast mode
[  521.619201][T20569] loop2: detected capacity change from 0 to 512
[  521.636480][T20571] loop1: detected capacity change from 0 to 164
[  521.639910][T20569] EXT4-fs: Ignoring removed orlov option
[  521.665684][T20571] rock: directory entry would overflow storage
[  521.678621][T20571] rock: sig=0x4d4e, size=5, remaining=4
[  521.684474][T20569] EXT4-fs: Ignoring removed oldalloc option
[  521.701785][T20571] isofs: isofs_export_get_parent(): child directory not normalized!
[  521.740193][T20569] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a043c018, mo2=0002]
[  521.758363][T20569] System zones: 0-2, 18-18, 34-35
[  521.776609][T20569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.794891][T20569] ext4 filesystem being mounted at /1120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  521.862251][T20569] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz.2.5857: Directory hole found for htree leaf block 0
[  522.001195][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.942820][T20592] loop0: detected capacity change from 0 to 32768
[  523.017520][T20592] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  523.059978][T20624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.153473][T20592] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  523.267874][T20592] XFS (loop0): Starting recovery (logdev: internal)
[  523.340044][T20592] XFS (loop0): Ending recovery (logdev: internal)
[  523.426844][T20635] binder: 20634:20635 unknown command 0
[  523.452713][T20635] binder: 20634:20635 ioctl c0306201 2000000002c0 returned -22
[  523.473796][ T5829] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  523.740386][T20615] loop3: detected capacity change from 0 to 32768
[  523.905900][T20647] loop2: detected capacity change from 0 to 64
[  524.138979][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5892'.
[  524.454757][T20639] loop1: detected capacity change from 0 to 32768
[  524.479390][T20666] loop0: detected capacity change from 0 to 764
[  524.486990][T20639] btrfs: Deprecated parameter 'usebackuproot'
[  524.498653][T20639] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  524.519253][T20666] iso9660: Unknown parameter 'ÿÿÿÿ–$º{†xàe3CÑ
ÔLášÒ”´]ç63Ò'
[  524.552655][T20639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5887 (20639)
[  524.634625][T20639] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  524.634665][T20639] BTRFS info (device loop1): using crc32c checksum algorithm
[  524.759510][T20684] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  524.799744][T20639] BTRFS info (device loop1): rebuilding free space tree
[  524.860395][T20639] BTRFS info (device loop1): enabling ssd optimizations
[  524.860424][T20639] BTRFS info (device loop1): using spread ssd allocation scheme
[  524.860442][T20639] BTRFS info (device loop1): turning on flush-on-commit
[  524.860460][T20639] BTRFS info (device loop1): enabling free space tree
[  524.860476][T20639] BTRFS info (device loop1): force clearing of disk cache
[  524.860494][T20639] BTRFS info (device loop1): trying to use backup root at mount time
[  524.860512][T20639] BTRFS info (device loop1): force zlib compression, level 3
[  525.130598][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  525.219352][T20694] loop2: detected capacity change from 0 to 128
[  525.231949][T20694] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  525.330539][T20694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  525.346697][T20696] loop3: detected capacity change from 0 to 1024
[  526.133173][T20716] netlink: 'syz.3.5915': attribute type 5 has an invalid length.
[  526.377632][T20698] loop1: detected capacity change from 0 to 32768
[  526.444226][T20698] JBD2: Ignoring recovery information on journal
[  526.501580][T20698] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  526.535766][T20698] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  526.557391][T20698] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  526.559074][T19104] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  526.568461][T20698] OCFS2: File system is now read-only.
[  526.581529][T20698] (syz.1.5904,20698,1):ocfs2_trim_mainbm:7631 ERROR: status = -30
[  526.694473][ T5826] ocfs2: Unmounting device (7,1) on (node local)
[  526.809792][T19104] usb 5-1: Using ep0 maxpacket: 16
[  526.824522][T19104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.857856][T19104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.893314][T20711] loop2: detected capacity change from 0 to 32768
[  526.896065][T19104] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  526.927848][T19104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.982801][T20711] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  527.000314][T19104] usb 5-1: config 0 descriptor??
[  527.172427][T20711] XFS (loop2): Ending clean mount
[  527.191154][T20711] XFS (loop2): Quotacheck needed: Please wait.
[  527.209413][T20753] xt_hashlimit: size too large, truncated to 1048576
[  527.326935][T20711] XFS (loop2): Quotacheck: Done.
[  527.464267][T19104] razer 0003:1532:011B.002F: unbalanced collection at end of report description
[  527.503620][ T5822] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  527.504113][T19104] razer 0003:1532:011B.002F: probe with driver razer failed with error -22
[  527.797641][   T24] usb 5-1: USB disconnect, device number 50
[  528.353622][T20788] loop1: detected capacity change from 0 to 128
[  528.436137][T20788] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  528.509376][T20797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5946'.
[  528.543054][T20788] ext4 filesystem being mounted at /1113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.573244][T20795] loop3: detected capacity change from 0 to 2048
[  528.635003][T20795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  528.758789][ T5826] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  528.855528][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.107334][T20822] program syz.3.5959 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  529.246541][T20829] loop1: detected capacity change from 0 to 64
[  529.256237][    T9] kernel write not supported for file /2504/oom_adj (pid: 9 comm: kworker/0:0)
[  529.411466][T20833] loop3: detected capacity change from 0 to 16
[  529.449728][T20833] erofs (device loop3): mounted with root inode @ nid 36.
[  529.836042][T20857] netlink: 'syz.3.5976': attribute type 4 has an invalid length.
[  530.021496][T20867] loop0: detected capacity change from 0 to 1024
[  530.054601][T20867] ext3: Bad value for 'mb_optimize_scan'
[  530.597229][T20887] loop1: detected capacity change from 0 to 4096
[  530.606234][T20887] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  530.646909][T20887] ntfs3(loop1): ino=19, mi_enum_attr
[  530.681716][T20887] ntfs3(loop1): ino=20, mi_enum_attr
[  530.847837][   T29] audit: type=1326 audit(1772457147.359:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.2.5997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f9c799 code=0x7ffc0000
[  530.847900][   T29] audit: type=1326 audit(1772457147.359:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.2.5997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0e92f9c799 code=0x7ffc0000
[  530.847939][   T29] audit: type=1326 audit(1772457147.359:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.2.5997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f9c799 code=0x7ffc0000
[  530.847978][   T29] audit: type=1326 audit(1772457147.359:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.2.5997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f9c799 code=0x7ffc0000
[  530.848019][   T29] audit: type=1326 audit(1772457147.359:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.2.5997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0e92f9c799 code=0x7ffc0000
[  530.848060][   T29] audit: type=1326 audit(1772457147.359:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.2.5997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f9c799 code=0x7ffc0000
[  530.848100][   T29] audit: type=1326 audit(1772457147.359:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20898 comm="syz.2.5997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e92f9c799 code=0x7ffc0000
[  531.086177][T20907] loop1: detected capacity change from 0 to 2048
[  531.097954][T20907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  531.160774][T20905] loop2: detected capacity change from 0 to 4096
[  531.283057][T20905] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  531.298941][   T29] audit: type=1800 audit(1772457147.819:223): pid=20907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6001" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  531.477389][T20914] loop0: detected capacity change from 0 to 764
[  531.517277][T20893] loop3: detected capacity change from 0 to 32768
[  531.566356][T20893] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  531.682800][T20893] XFS (loop3): Ending clean mount
[  531.738619][T19104] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  531.758638][T20927] loop0: detected capacity change from 0 to 64
[  531.811733][   T29] audit: type=1800 audit(1772457148.329:224): pid=20927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6007" name="file2" dev="loop0" ino=22 res=0 errno=0
[  531.844281][T20927] syz.0.6007: attempt to access beyond end of device
[  531.844281][T20927] loop0: rw=34817, sector=39, nr_sectors = 125 limit=64
[  531.864459][T20929] loop1: detected capacity change from 0 to 256
[  531.871948][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  531.874163][T20927] syz.0.6007: attempt to access beyond end of device
[  531.874163][T20927] loop0: rw=34817, sector=167, nr_sectors = 1 limit=64
[  531.936592][T20927] syz.0.6007: attempt to access beyond end of device
[  531.936592][T20927] loop0: rw=34817, sector=169, nr_sectors = 1 limit=64
[  531.951725][T20929] FAT-fs (loop1): Directory bread(block 64) failed
[  531.952346][T20927] syz.0.6007: attempt to access beyond end of device
[  531.952346][T20927] loop0: rw=34817, sector=171, nr_sectors = 7 limit=64
[  531.959058][T19104] usb 5-1: Using ep0 maxpacket: 16
[  531.970670][T19104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.018273][T20929] FAT-fs (loop1): Directory bread(block 65) failed
[  532.039827][T20927] syz.0.6007: attempt to access beyond end of device
[  532.039827][T20927] loop0: rw=34817, sector=179, nr_sectors = 263 limit=64
[  532.047578][T20929] FAT-fs (loop1): Directory bread(block 66) failed
[  532.071383][T19104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.114334][T19104] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  532.128040][T20929] FAT-fs (loop1): Directory bread(block 67) failed
[  532.135119][T20929] FAT-fs (loop1): Directory bread(block 68) failed
[  532.143260][T19104] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  532.156921][T20929] FAT-fs (loop1): Directory bread(block 69) failed
[  532.166349][T19104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.174834][T20929] FAT-fs (loop1): Directory bread(block 70) failed
[  532.183780][T20929] FAT-fs (loop1): Directory bread(block 71) failed
[  532.198866][T19104] usb 5-1: config 0 descriptor??
[  532.212636][T20929] FAT-fs (loop1): Directory bread(block 72) failed
[  532.230770][T20929] FAT-fs (loop1): Directory bread(block 73) failed
[  532.329957][T20933] loop3: detected capacity change from 0 to 512
[  532.369289][T20933] EXT4-fs: Ignoring removed orlov option
[  532.374976][T20933] EXT4-fs: Ignoring removed oldalloc option
[  532.452412][T20933] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a043c018, mo2=0002]
[  532.500294][T20933] System zones: 0-2, 18-18, 34-35
[  532.513116][T20933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.539352][T20933] ext4 filesystem being mounted at /1218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  532.636297][T19104] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  532.683556][T19104] microsoft 0003:045E:07DA.0030: no inputs found
[  532.691820][T20933] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz.3.6008: Directory hole found for htree leaf block 0
[  532.700050][T19104] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway
[  532.817078][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.839652][T19104] usb 5-1: USB disconnect, device number 51
[  532.947119][T20950] loop0: detected capacity change from 0 to 4096
[  532.971468][T20952] loop1: detected capacity change from 0 to 1764
[  533.005647][T20950] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  533.097737][   T29] audit: type=1800 audit(1772457149.609:225): pid=20950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6015" name="file1" dev="loop0" ino=30 res=0 errno=0
[  533.135043][ T5826] iso9660: Corrupted directory entry in block 2 of inode 1920
[  533.175548][ T7946] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22.
[  533.185102][ T5826] iso9660: Corrupted directory entry in block 2 of inode 1920
[  533.186538][ T7946] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  533.744532][T20954] JBD2: Ignoring recovery information on journal
[  533.873211][T20954] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  534.112150][ T5828] ocfs2: Unmounting device (7,3) on (node local)
[  534.393230][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.410908][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.441789][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.462931][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.482598][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.501471][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.518154][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.538286][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.545719][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.588433][T19104] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0
[  534.625164][T19104] hid-generic 0000:0000:0004.0031: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  534.852084][T21010] fido_id[21010]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  535.491009][T21050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6062'.
[  535.544416][T21054] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.6063: inode has both inline data and extents flags
[  535.591324][T21054] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  535.597834][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  535.613447][    C1] EXT4-fs (loop1): initial error at time 1772457152: ext4_orphan_get:1391: inode 15
[  535.622939][    C1] EXT4-fs (loop1): last error at time 1772457152: ext4_orphan_get:1391: inode 15
[  535.647929][T21054] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6063: couldn't read orphan inode 15 (err -117)
[  535.712130][T21054] loop1: lost filesystem error report for type 5 error -117
[  535.743271][T21054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  535.932126][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  536.092773][T21080] set_capacity_and_notify: 3 callbacks suppressed
[  536.092791][T21080] loop3: detected capacity change from 0 to 256
[  536.255305][T21080] FAT-fs (loop3): Directory bread(block 64) failed
[  536.264034][T21080] FAT-fs (loop3): Directory bread(block 65) failed
[  536.288006][T21080] FAT-fs (loop3): Directory bread(block 66) failed
[  536.299780][T21080] FAT-fs (loop3): Directory bread(block 67) failed
[  536.316629][T21080] FAT-fs (loop3): Directory bread(block 68) failed
[  536.326671][T21080] FAT-fs (loop3): Directory bread(block 69) failed
[  536.349626][T21080] FAT-fs (loop3): Directory bread(block 70) failed
[  536.356191][T21080] FAT-fs (loop3): Directory bread(block 71) failed
[  536.375991][T21080] FAT-fs (loop3): Directory bread(block 72) failed
[  536.385616][T21080] FAT-fs (loop3): Directory bread(block 73) failed
[  536.423122][T21061] loop2: detected capacity change from 0 to 32768
[  536.485617][T21061] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  536.542068][T21061] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  536.676926][T21085] loop1: detected capacity change from 0 to 32768
[  536.706644][T21085] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6078 (21085)
[  536.771013][T21061] XFS (loop2): Ending clean mount
[  536.791417][T21061] XFS (loop2): Quotacheck needed: Please wait.
[  536.801396][T21103] loop3: detected capacity change from 0 to 164
[  536.801425][T21085] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  536.849665][T21085] BTRFS info (device loop1): using sha256 checksum algorithm
[  536.860996][T21103] rock: directory entry would overflow storage
[  536.894440][T21103] rock: sig=0x5252, size=5, remaining=3
[  536.918761][T21061] XFS (loop2): Quotacheck: Done.
[  537.050219][ T5822] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  537.061295][T21085] BTRFS info (device loop1): rebuilding free space tree
[  537.184073][T21085] BTRFS info (device loop1): disabling free space tree
[  537.219994][T21085] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  537.290104][T21085] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  537.311786][T21122] loop3: detected capacity change from 0 to 2048
[  537.369348][T21085] BTRFS info (device loop1): enabling ssd optimizations
[  537.405951][T21085] BTRFS info (device loop1): turning on async discard
[  537.432200][T21122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  537.455648][T21085] BTRFS info (device loop1): force clearing of disk cache
[  537.519083][T21085] BTRFS info (device loop1): enabling auto defrag
[  537.525553][T21085] BTRFS info (device loop1): max_inline set to 4096
[  537.530999][T21098] loop0: detected capacity change from 0 to 32768
[  537.538489][T21122] ext4 filesystem being mounted at /1232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.876893][ T5826] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  538.032198][T21129] loop0: detected capacity change from 0 to 16
[  538.394499][T19057] kernel write not supported for file /snd/midiC2D0 (pid: 19057 comm: kworker/1:1)
[  538.571167][   T35] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set
[  538.671823][   T35] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1368 with error 117
[  538.729458][   T35] EXT4-fs (loop3): This should not happen!! Data will be lost
[  538.729458][   T35] 
[  539.000495][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.031738][T21159] loop2: detected capacity change from 0 to 256
[  539.149907][T21159] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  539.311546][T21175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6109'.
[  539.798674][   T29] audit: type=1326 audit(1772457156.319:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21197 comm="syz.1.6121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfc979c799 code=0x0
[  540.217676][T21189] loop3: detected capacity change from 0 to 32768
[  540.293637][T21189] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  540.320448][T21226] loop0: detected capacity change from 0 to 136
[  540.335965][T21226] Attempt to read inode for relocated directory
[  540.368186][T19104] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  540.407261][T21189] XFS (loop3): Ending clean mount
[  540.447627][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  540.548281][T19104] usb 3-1: Using ep0 maxpacket: 16
[  540.608624][T19104] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  540.617722][T19104] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  540.657899][T19104] usb 3-1: Product: syz
[  540.662187][T19104] usb 3-1: Manufacturer: syz
[  540.678164][T19104] usb 3-1: SerialNumber: syz
[  540.708854][T19104] usb 3-1: config 0 descriptor??
[  540.987396][T19104] usb 3-1: USB disconnect, device number 47
[  541.121705][T21230] loop0: detected capacity change from 0 to 32768
[  541.218783][T21230] JBD2: Ignoring recovery information on journal
[  541.308890][T21230] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  541.482955][T21232] loop1: detected capacity change from 0 to 32768
[  541.598863][ T5829] ocfs2: Unmounting device (7,0) on (node local)
[  541.840038][T21242] loop3: detected capacity change from 0 to 32768
[  541.938775][T21242] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  542.106971][T21257] loop1: detected capacity change from 0 to 4096
[  542.121673][T21275] loop0: detected capacity change from 0 to 256
[  542.149973][T21242] XFS (loop3): Ending clean mount
[  542.207690][T21257] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  542.284601][T21275] FAT-fs (loop0): Directory bread(block 64) failed
[  542.292692][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  542.311371][T21275] FAT-fs (loop0): Directory bread(block 65) failed
[  542.349008][T21275] FAT-fs (loop0): Directory bread(block 66) failed
[  542.411478][T21275] FAT-fs (loop0): Directory bread(block 67) failed
[  542.424901][T21275] FAT-fs (loop0): Directory bread(block 68) failed
[  542.470950][T21275] FAT-fs (loop0): Directory bread(block 69) failed
[  542.509030][T21275] FAT-fs (loop0): Directory bread(block 70) failed
[  542.516950][T21275] FAT-fs (loop0): Directory bread(block 71) failed
[  542.548503][T21275] FAT-fs (loop0): Directory bread(block 72) failed
[  542.555066][T21275] FAT-fs (loop0): Directory bread(block 73) failed
[  542.679863][T21283] loop2: detected capacity change from 0 to 4096
[  542.794075][T21283] ntfs3(loop2): ino=1a, mi_enum_attr
[  542.806304][T21283] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  542.875076][T21283] ntfs3(loop2): ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  543.713172][T21293] loop2: detected capacity change from 0 to 32768
[  543.739688][T21293] BTRFS warning: excessive commit interval 2147483648, use with care
[  543.763565][T21291] loop0: detected capacity change from 0 to 32768
[  543.768592][T21293] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6159 (21293)
[  543.852864][T21293] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  543.869204][T21293] BTRFS info (device loop2): using crc32c checksum algorithm
[  543.879892][T21291] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  543.940082][T21299] loop1: detected capacity change from 0 to 32768
[  543.963962][T21315] netlink: 'syz.4.6164': attribute type 4 has an invalid length.
[  544.020149][T21299] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  544.089094][  T151] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  544.099493][T21291] XFS (loop0): Ending clean mount
[  544.121547][T21293] BTRFS error (device loop2): failed to load root extent
[  544.158623][T21291] XFS (loop0): Quotacheck needed: Please wait.
[  544.170454][T21293] BTRFS warning (device loop2): try to load backup roots slot 1
[  544.260192][   T35] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  544.336582][T21299] XFS (loop1): Ending clean mount
[  544.353969][T21342] devtmpfs: Too few inodes for current use
[  544.358391][T21293] BTRFS warning (device loop2): couldn't read tree root
[  544.364401][T21299] XFS (loop1): Quotacheck needed: Please wait.
[  544.383697][T21291] XFS (loop0): Quotacheck: Done.
[  544.418641][T21293] BTRFS warning (device loop2): try to load backup roots slot 2
[  544.426666][ T7941] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  544.494718][T21293] BTRFS warning (device loop2): couldn't read tree root
[  544.516101][T21299] XFS (loop1): Quotacheck: Done.
[  544.529437][T21293] BTRFS warning (device loop2): try to load backup roots slot 3
[  544.631095][ T5829] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  544.644886][T21293] BTRFS info (device loop2): checking UUID tree
[  544.675677][T21293] BTRFS info (device loop2): enabling ssd optimizations
[  544.725839][T21293] BTRFS info (device loop2): using spread ssd allocation scheme
[  544.758402][T21293] BTRFS info (device loop2): turning on sync discard
[  544.765156][T21293] BTRFS info (device loop2): enabling free space tree
[  544.838236][T21293] BTRFS info (device loop2): enabling auto defrag
[  544.844881][T21293] BTRFS info (device loop2): trying to use backup root at mount time
[  544.863674][ T5826] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  545.215031][ T5822] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  545.924651][T21382] loop0: detected capacity change from 0 to 1024
[  546.400503][T21398] loop3: detected capacity change from 0 to 128
[  546.439682][T21398] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  546.479166][   T29] audit: type=1326 audit(1772457162.979:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  546.549748][T21398] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  546.567077][   T29] audit: type=1326 audit(1772457162.989:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  546.670669][   T29] audit: type=1326 audit(1772457162.989:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  546.759359][   T29] audit: type=1326 audit(1772457162.989:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  546.855648][   T29] audit: type=1326 audit(1772457162.989:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  546.944140][T21410] loop3: detected capacity change from 0 to 512
[  546.946551][   T29] audit: type=1326 audit(1772457162.989:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  547.011099][T21383] loop1: detected capacity change from 0 to 32768
[  547.016631][   T29] audit: type=1326 audit(1772457162.989:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  547.108415][   T29] audit: type=1326 audit(1772457162.989:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21399 comm="syz.0.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f19c799 code=0x7ffc0000
[  547.163323][T21375] loop2: detected capacity change from 0 to 32768
[  547.173080][T21383] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  547.195964][T21410] EXT4-fs (loop3): 1 orphan inode deleted
[  547.218703][   T13] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  547.230232][T21375] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+"
[  547.260663][T21410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.300178][   T13] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1
[  547.339482][T21375] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)...
[  547.359740][T21383] XFS (loop1): Ending clean mount
[  547.391174][T21410] ext4 filesystem being mounted at /1255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  547.418702][T21383] XFS (loop1): Quotacheck needed: Please wait.
[  547.457407][T21375] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 18 extents in 0ms
[  547.483878][T19104] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use
[  547.509085][T19104] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal...
[  547.526867][T21383] XFS (loop1): Quotacheck: Done.
[  547.597056][T19104] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 87ms
[  547.621396][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.640899][T19104] gfs2: fsid=(œ[{{{+.0: jid=0: Done
[  547.666179][T21375] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount
[  547.724416][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  548.700082][T21433] loop3: detected capacity change from 0 to 32768
[  548.743501][T21433] (syz.3.6205,21433,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  548.785224][T21433] (syz.3.6205,21433,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  548.859446][T21433] JBD2: Ignoring recovery information on journal
[  548.978919][T21427] loop0: detected capacity change from 0 to 65536
[  548.990819][T21433] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  549.064361][T21472] loop2: detected capacity change from 0 to 8
[  549.078763][T21427] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  549.173524][T21427] XFS (loop0): Ending clean mount
[  549.254682][T21427] XFS (loop0): Quotacheck needed: Please wait.
[  549.340465][   T13] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x26 dinode
[  549.368184][   T13] XFS (loop0): Unmount and run xfs_repair
[  549.397902][   T13] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  549.405672][   T13] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  549.438324][   T13] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  549.483449][   T13] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  549.504828][   T13] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[  549.525945][   T13] 00000040: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  549.544998][ T5828] ocfs2: Unmounting device (7,3) on (node local)
[  549.558120][   T13] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[  549.603275][   T13] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[  549.614051][T21492] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6228'.
[  549.649018][   T13] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  549.678408][   T13] loop0: lost filesystem error report for type 5 error -117
[  549.747484][T21427] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  549.801960][T21427] loop0: lost filesystem error report for type 5 error -117
[  549.831282][T21494] loop2: detected capacity change from 0 to 512
[  549.861264][T21494] EXT4-fs: Ignoring removed bh option
[  549.866732][T21494] EXT4-fs: Ignoring removed mblk_io_submit option
[  549.902891][ T5829] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  549.932028][ T5829] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  549.946231][T21494] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  549.980106][T21494] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  550.028499][T21494] EXT4-fs (loop2): orphan cleanup on readonly fs
[  550.082341][T21494] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4
[  550.136200][T21494] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6229: Failed to acquire dquot type 1
[  550.207111][T21494] loop2: lost filesystem error report for type 5 error -5
[  550.207828][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  550.221516][    C1] EXT4-fs (loop2): last error at time 1772457166: ext4_acquire_dquot:7001
[  550.248779][T21494] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6229: Invalid block bitmap block 0 in block_group 0
[  550.267655][T21494] loop2: lost filesystem error report for type 5 error -117
[  550.295002][T21494] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6229: Invalid block bitmap block 0 in block_group 0
[  550.364242][T21494] loop2: lost filesystem error report for type 5 error -117
[  550.369000][T21494] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6229: Invalid block bitmap block 0 in block_group 0
[  550.495145][T21494] loop2: lost filesystem error report for type 5 error -117
[  550.495855][T21494] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6229: Failed to acquire dquot type 1
[  550.588402][T21494] loop2: lost filesystem error report for type 5 error -28
[  550.610030][T21494] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6229: Failed to acquire dquot type 1
[  550.701258][T21494] loop2: lost filesystem error report for type 5 error -28
[  550.712826][T21494] EXT4-fs (loop2): 1 orphan inode deleted
[  550.760762][T21494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  550.950285][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.230765][T21545] smc: net device bond0 applied user defined pnetid SYZ0
[  551.370152][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6256'.
[  551.485241][T21559] loop2: detected capacity change from 0 to 64
[  551.736236][T21567] loop2: detected capacity change from 0 to 1024
[  551.776282][T21567] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  551.841630][T21567] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.6263: lblock 2 mapped to illegal pblock 2 (length 1)
[  551.885551][T21567] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  551.887759][T21567] __quota_error: 5 callbacks suppressed
[  551.902485][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  551.908943][    C1] EXT4-fs (loop2): initial error at time 1772457168: ext4_map_blocks:776: inode 3: block 2
[  551.919047][    C1] EXT4-fs (loop2): last error at time 1772457168: ext4_map_blocks:776: inode 3: block 2
[  551.929993][T21567] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  551.941430][T21567] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.6263: lblock 0 mapped to illegal pblock 48 (length 1)
[  551.958505][T21567] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  551.958853][T21567] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  552.020293][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6266'.
[  552.038554][T21567] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6263: Failed to acquire dquot type 0
[  552.044482][T21579] loop1: detected capacity change from 0 to 256
[  552.086302][T21567] loop2: lost filesystem error report for type 5 error -117
[  552.086599][T21567] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  552.115243][T21567] loop2: lost filesystem error report for type 5 error -117
[  552.115488][T21567] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.6263: mark_inode_dirty error
[  552.138636][T21567] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  552.138940][T21567] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  552.149373][T21581] loop3: detected capacity change from 0 to 512
[  552.163211][T21567] EXT4-fs (loop2): 1 orphan inode deleted
[  552.173644][T21567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  552.187277][   T13] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  552.211819][T21579] FAT-fs (loop1): Directory bread(block 64) failed
[  552.219578][T21579] FAT-fs (loop1): Directory bread(block 65) failed
[  552.221244][T21581] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 3: comm syz.3.6269: lblock 0 mapped to illegal pblock 3 (length 1)
[  552.226204][T21579] FAT-fs (loop1): Directory bread(block 66) failed
[  552.247593][   T13] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  552.249018][T21579] FAT-fs (loop1): Directory bread(block 67) failed
[  552.265703][   T13] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  552.293978][   T13] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0
[  552.316229][T21579] FAT-fs (loop1): Directory bread(block 68) failed
[  552.316826][T21581] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  552.326302][T21567] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.6263: Invalid inode table block 1 in block_group 0
[  552.327262][T21581] EXT4-fs (loop3): Remounting filesystem read-only
[  552.336531][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  552.336555][    C0] EXT4-fs (loop3): initial error at time 1772457168: ext4_map_blocks:776: inode 2: block 3
[  552.336592][    C0] EXT4-fs (loop3): last error at time 1772457168: ext4_map_blocks:776: inode 2: block 3
[  552.353482][T21579] FAT-fs (loop1): Directory bread(block 69) failed
[  552.395155][T21567] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  552.395205][T21581] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.6269: error -117 reading directory block
[  552.419482][T21579] FAT-fs (loop1): Directory bread(block 70) failed
[  552.426093][T21579] FAT-fs (loop1): Directory bread(block 71) failed
[  552.437951][T21579] FAT-fs (loop1): Directory bread(block 72) failed
[  552.443510][T21581] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  552.448989][T21579] FAT-fs (loop1): Directory bread(block 73) failed
[  552.461855][T21581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.483388][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.513278][ T5822] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  552.532672][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.547871][ T5822] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  552.557562][ T5822] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  552.591649][ T5822] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  553.516830][T21624] loop2: detected capacity change from 0 to 2048
[  553.544701][T21624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  553.685418][T21628] loop2: detected capacity change from 0 to 256
[  553.773100][T21628] FAT-fs (loop2): Directory bread(block 64) failed
[  553.781097][T21628] FAT-fs (loop2): Directory bread(block 65) failed
[  553.808520][T21628] FAT-fs (loop2): Directory bread(block 66) failed
[  553.835465][T21628] FAT-fs (loop2): Directory bread(block 67) failed
[  553.858882][T21628] FAT-fs (loop2): Directory bread(block 68) failed
[  553.871502][T21628] FAT-fs (loop2): Directory bread(block 69) failed
[  553.884895][T21628] FAT-fs (loop2): Directory bread(block 70) failed
[  553.892249][T21628] FAT-fs (loop2): Directory bread(block 71) failed
[  553.899546][T21628] FAT-fs (loop2): Directory bread(block 72) failed
[  553.906161][T21628] FAT-fs (loop2): Directory bread(block 73) failed
[  554.093286][T21641] loop2: detected capacity change from 0 to 256
[  554.208973][T21645] Invalid source name
[  554.482471][T21660] sp0: Synchronizing with TNC
[  554.708746][   T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  554.870435][   T24] usb 5-1: Using ep0 maxpacket: 16
[  554.894762][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.926903][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.937610][T19057] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  554.966457][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  554.991198][   T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  555.028483][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.046860][T21683] loop1: detected capacity change from 0 to 4096
[  555.050867][   T24] usb 5-1: config 0 descriptor??
[  555.081989][T21683] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  555.101508][T19057] usb 3-1: Using ep0 maxpacket: 16
[  555.122531][T19057] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  555.134515][T19057] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  555.147345][T19057] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  555.152346][T21683] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  555.177088][T21683] ntfs3(loop1): ino=1a, mi_enum_attr
[  555.177381][T19057] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  555.192055][T21683] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  555.233350][T19057] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  555.254848][T19057] usb 3-1: config 0 has no interface number 0
[  555.262745][T19057] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  555.275842][T19057] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  555.309572][T19057] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  555.322732][T19057] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  555.387502][T19057] usb 3-1: config 0 interface 125 has no altsetting 0
[  555.407735][T19057] usb 3-1: config 0 interface 125 has no altsetting 2
[  555.417667][T19057] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  555.439918][T19057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.457146][T19057] usb 3-1: Product: syz
[  555.483439][T19057] usb 3-1: Manufacturer: syz
[  555.492346][T19057] usb 3-1: SerialNumber: syz
[  555.501336][   T24] hid_parser_main: 90 callbacks suppressed
[  555.501358][   T24] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0
[  555.535779][T19057] usb 3-1: config 0 descriptor??
[  555.542291][   T24] microsoft 0003:045E:07DA.0032: collection stack underflow
[  555.563034][   T24] microsoft 0003:045E:07DA.0032: item 0 2 0 12 parsing failed
[  555.573326][T19057] usb 3-1: selecting invalid altsetting 2
[  555.588775][   T24] microsoft 0003:045E:07DA.0032: parse failed
[  555.601771][   T24] microsoft 0003:045E:07DA.0032: probe with driver microsoft failed with error -22
[  555.705564][   T24] usb 5-1: USB disconnect, device number 52
[  555.992163][    C1] usb 3-1: async_complete: urb error -71
[  555.997975][    C1] usb 3-1: async_complete: urb error -71
[  556.003709][    C1] usb 3-1: async_complete: urb error -71
[  556.013229][T19057] get_1284_register: usb error -71
[  556.025966][T19057] uss720 3-1:0.125: probe with driver uss720 failed with error -71
[  556.072572][T19057] usb 3-1: USB disconnect, device number 48
[  556.237433][T21732] loop3: detected capacity change from 0 to 1024
[  556.311161][  T151] hfsplus: b-tree write err: -5, ino 25
[  556.317005][  T151] hfsplus: b-tree write err: -5, ino 4
[  556.344395][  T151] hfsplus: b-tree write err: -5, ino 2
[  556.399792][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6340'.
[  556.441416][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6340'.
[  556.481584][T21734] netlink: 'syz.4.6340': attribute type 14 has an invalid length.
[  556.510777][T21734] netlink: 'syz.4.6340': attribute type 12 has an invalid length.
[  556.680968][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6344'.
[  556.850222][T21750] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6348'.
[  556.870803][T21730] loop1: detected capacity change from 0 to 32768
[  556.891177][T21730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6338 (21730)
[  556.949727][T21730] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  556.983998][T21730] BTRFS info (device loop1): using crc32c checksum algorithm
[  557.013540][T21730] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  557.267478][T21730] BTRFS info (device loop1): rebuilding free space tree
[  557.383772][T21730] BTRFS info (device loop1): disabling free space tree
[  557.421185][T21730] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  557.462732][T21730] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  557.509245][T21730] BTRFS info (device loop1): enabling ssd optimizations
[  557.526553][T21730] BTRFS info (device loop1): enabling disk space caching
[  557.544938][T21730] BTRFS info (device loop1): force clearing of disk cache
[  557.590041][T21730] BTRFS info (device loop1): force zstd compression, level 3
[  557.628387][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.654187][T21730] BTRFS info (device loop1): balance: start -sprofiles=data|raid1c4
[  557.700347][T21730] BTRFS info (device loop1): balance: ended with status: 0
[  557.774789][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  557.898198][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  558.068639][   T10] usb 5-1: Using ep0 maxpacket: 16
[  558.080978][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.111812][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  558.129220][T21783] loop3: detected capacity change from 0 to 32768
[  558.145951][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  558.186615][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  558.197196][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  558.213699][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  558.224763][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6359'.
[  558.248504][T21783] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  558.259281][   T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  558.328250][   T10] usb 5-1: Manufacturer: syz
[  558.346404][   T10] usb 5-1: config 0 descriptor??
[  558.482089][T21783] XFS (loop3): Ending clean mount
[  558.505784][T21783] XFS (loop3): Quotacheck needed: Please wait.
[  558.672539][T21783] XFS (loop3): Quotacheck: Done.
[  558.748368][   T10] rc_core: IR keymap rc-hauppauge not found
[  558.754323][   T10] Registered IR keymap rc-empty
[  558.782420][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  558.784228][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  558.840841][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  558.872365][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  558.892990][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43
[  558.969029][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.027997][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.068651][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.104586][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.165686][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.170199][T21806] loop1: detected capacity change from 0 to 32768
[  559.202273][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.268235][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.293307][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.318363][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.333536][T21823] loop3: detected capacity change from 0 to 512
[  559.358981][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  559.370330][T21823] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6367: invalid indirect mapped block 256 (level 2)
[  559.385466][T21823] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  559.387833][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  559.403498][    C0] EXT4-fs (loop3): initial error at time 1772457175: ext4_free_branches:1023: inode 11
[  559.413231][    C0] EXT4-fs (loop3): last error at time 1772457175: ext4_free_branches:1023: inode 11
[  559.422965][T21823] EXT4-fs (loop3): 2 truncates cleaned up
[  559.436852][   T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  559.446322][   T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  559.459413][   T10] usb 5-1: USB disconnect, device number 53
[  559.476214][T21823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  559.496464][T21823] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.6367: bg 0: block 5: invalid block bitmap
[  559.620141][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.099398][T21866] loop3: detected capacity change from 0 to 32768
[  561.129266][T21866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6389 (21866)
[  561.188685][T21866] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  561.248248][T21866] BTRFS info (device loop3): using crc32c checksum algorithm
[  561.324242][T21876] loop2: detected capacity change from 0 to 32768
[  561.431980][T21876] JBD2: Ignoring recovery information on journal
[  561.468775][T21866] BTRFS info (device loop3): turning off barriers
[  561.475838][T21866] BTRFS info (device loop3): enabling free space tree
[  561.493895][T21866] BTRFS info (device loop3): use zstd compression, level 3
[  561.514486][T21876] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  561.656328][ T5828] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  561.688184][   T10] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  561.726835][T21876] 
[  561.729195][T21876] ======================================================
[  561.736308][T21876] WARNING: possible circular locking dependency detected
[  561.743433][T21876] syzkaller #0 Tainted: G             L     
[  561.749413][T21876] ------------------------------------------------------
[  561.756524][T21876] syz.2.6394/21876 is trying to acquire lock:
[  561.762597][T21876] ffff888036bf6d80 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0x1539/0x44e0
[  561.775153][T21876] 
[  561.775153][T21876] but task is already holding lock:
[  561.782532][T21876] ffff88805bdadf40 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0xe97/0x44e0
[  561.795000][T21876] 
[  561.795000][T21876] which lock already depends on the new lock.
[  561.795000][T21876] 
[  561.805416][T21876] 
[  561.805416][T21876] the existing dependency chain (in reverse order) is:
[  561.814438][T21876] 
[  561.814438][T21876] -> #3 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}:
[  561.825047][T21876]        down_write+0x96/0x200
[  561.829825][T21876]        ocfs2_del_inode_from_orphan+0x12e/0x7a0
[  561.836151][T21876]        ocfs2_dio_end_io+0x543/0x1210
[  561.841605][T21876]        dio_complete+0x25b/0x790
[  561.846625][T21876]        __blockdev_direct_IO+0x2e5d/0x34e0
[  561.852532][T21876]        ocfs2_direct_IO+0x251/0x2c0
[  561.857827][T21876]        generic_file_direct_write+0x1db/0x3e0
[  561.863986][T21876]        __generic_file_write_iter+0x11d/0x230
[  561.870145][T21876]        ocfs2_file_write_iter+0x1663/0x1ed0
[  561.876128][T21876]        do_iter_readv_writev+0x619/0x8c0
[  561.881855][T21876]        vfs_writev+0x33c/0x990
[  561.886821][T21876]        __se_sys_pwritev2+0x184/0x2a0
[  561.892298][T21876]        do_syscall_64+0x14d/0xf80
[  561.897439][T21876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.903876][T21876] 
[  561.903876][T21876] -> #2 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  561.912737][T21876]        down_write+0x96/0x200
[  561.917506][T21876]        ocfs2_create_local_dquot+0x1a5/0x1af0
[  561.923661][T21876]        ocfs2_acquire_dquot+0x816/0xb70
[  561.929287][T21876]        dqget+0x7b1/0xf10
[  561.933703][T21876]        dquot_set_dqblk+0x2b/0xfa0
[  561.938901][T21876]        quota_setquota+0x4e0/0x590
[  561.944089][T21876]        __se_sys_quotactl+0x2cd/0x9e0
[  561.949637][T21876]        do_syscall_64+0x14d/0xf80
[  561.954750][T21876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.961166][T21876] 
[  561.961166][T21876] -> #1 (&dquot->dq_lock){+.+.}-{4:4}:
[  561.968806][T21876]        __mutex_lock+0x19f/0x1300
[  561.973911][T21876]        dqget+0x72a/0xf10
[  561.978321][T21876]        __dquot_initialize+0x3ba/0xd30
[  561.983868][T21876]        ocfs2_get_init_inode+0x147/0x1c0
[  561.989592][T21876]        ocfs2_mknod+0xa67/0x2290
[  561.994627][T21876]        ocfs2_mkdir+0x181/0x490
[  561.999581][T21876]        vfs_mkdir+0x413/0x630
[  562.004361][T21876]        filename_mkdirat+0x285/0x510
[  562.009728][T21876]        __se_sys_mkdirat+0x35/0x150
[  562.015012][T21876]        do_syscall_64+0x14d/0xf80
[  562.020117][T21876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.026529][T21876] 
[  562.026529][T21876] -> #0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  562.037130][T21876]        __lock_acquire+0x15a5/0x2cf0
[  562.042506][T21876]        lock_acquire+0xf0/0x2e0
[  562.047470][T21876]        down_write+0x96/0x200
[  562.052224][T21876]        ocfs2_evict_inode+0x1539/0x44e0
[  562.057858][T21876]        evict+0x61e/0xb10
[  562.062288][T21876]        ocfs2_dentry_iput+0x24d/0x390
[  562.067760][T21876]        __dentry_kill+0x1a2/0x5e0
[  562.072878][T21876]        finish_dput+0xc9/0x480
[  562.077734][T21876]        filename_symlinkat+0x22a/0x410
[  562.083371][T21876]        __se_sys_symlink+0x4d/0x2b0
[  562.088654][T21876]        do_syscall_64+0x14d/0xf80
[  562.093758][T21876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.100164][T21876] 
[  562.100164][T21876] other info that might help us debug this:
[  562.100164][T21876] 
[  562.110382][T21876] Chain exists of:
[  562.110382][T21876]   &ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key --> &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]
[  562.110382][T21876] 
[  562.130629][T21876]  Possible unsafe locking scenario:
[  562.130629][T21876] 
[  562.138089][T21876]        CPU0                    CPU1
[  562.143449][T21876]        ----                    ----
[  562.149182][T21876]   lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);
[  562.156474][T21876]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  562.164642][T21876]                                lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);
[  562.174437][T21876]   lock(&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]);
[  562.181800][T21876] 
[  562.181800][T21876]  *** DEADLOCK ***
[  562.181800][T21876] 
[  562.189941][T21876] 3 locks held by syz.2.6394/21876:
[  562.195130][T21876]  #0: ffff88803e744420 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  562.204368][T21876]  #1: ffff88807dc38bd0 (&osb->nfs_sync_rwlock){.+.+}-{4:4}, at: ocfs2_nfs_sync_lock+0x106/0x270
[  562.214891][T21876]  #2: ffff88805bdadf40 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0xe97/0x44e0
[  562.227672][T21876] 
[  562.227672][T21876] stack backtrace:
[  562.233556][T21876] CPU: 0 UID: 0 PID: 21876 Comm: syz.2.6394 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  562.233579][T21876] Tainted: [L]=SOFTLOCKUP
[  562.233585][T21876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  562.233595][T21876] Call Trace:
[  562.233604][T21876]  <TASK>
[  562.233613][T21876]  dump_stack_lvl+0xe8/0x150
[  562.233638][T21876]  print_circular_bug+0x2e1/0x300
[  562.233666][T21876]  check_noncircular+0x12e/0x150
[  562.233692][T21876]  __lock_acquire+0x15a5/0x2cf0
[  562.233717][T21876]  ? _raw_spin_unlock+0x28/0x50
[  562.233747][T21876]  ? ocfs2_get_system_file_inode+0x202/0x7e0
[  562.233766][T21876]  lock_acquire+0xf0/0x2e0
[  562.233785][T21876]  ? ocfs2_evict_inode+0x1539/0x44e0
[  562.233808][T21876]  down_write+0x96/0x200
[  562.233826][T21876]  ? ocfs2_evict_inode+0x1539/0x44e0
[  562.233844][T21876]  ? __pfx_down_write+0x10/0x10
[  562.233864][T21876]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  562.233885][T21876]  ocfs2_evict_inode+0x1539/0x44e0
[  562.233908][T21876]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  562.233928][T21876]  ? arch_stack_walk+0xe3/0x150
[  562.233942][T21876]  ? arch_stack_walk+0xe3/0x150
[  562.233956][T21876]  ? unwind_next_frame+0xa5/0x23c0
[  562.233980][T21876]  ? rcu_is_watching+0x15/0xb0
[  562.234004][T21876]  ? __lock_acquire+0x6b5/0x2cf0
[  562.234026][T21876]  ? __lock_acquire+0x6b5/0x2cf0
[  562.234045][T21876]  ? arch_stack_walk+0xe3/0x150
[  562.234059][T21876]  ? unwind_next_frame+0xa5/0x23c0
[  562.234082][T21876]  ? rcu_is_watching+0x15/0xb0
[  562.234103][T21876]  ? unwind_next_frame+0xa5/0x23c0
[  562.234125][T21876]  ? lock_release+0x4b/0x3d0
[  562.234144][T21876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.234161][T21876]  ? unwind_next_frame+0xa5/0x23c0
[  562.234183][T21876]  ? rcu_is_watching+0x15/0xb0
[  562.234205][T21876]  ? rcu_is_watching+0x15/0xb0
[  562.234227][T21876]  ? lock_release+0x4b/0x3d0
[  562.234246][T21876]  ? lock_release+0x4b/0x3d0
[  562.234267][T21876]  ? is_bpf_text_address+0x292/0x2b0
[  562.234284][T21876]  ? is_bpf_text_address+0x26/0x2b0
[  562.234302][T21876]  ? kernel_text_address+0xa5/0xe0
[  562.234320][T21876]  ? __kernel_text_address+0xd/0x30
[  562.234338][T21876]  ? unwind_get_return_address+0x4d/0x90
[  562.234361][T21876]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  562.234378][T21876]  ? arch_stack_walk+0xfb/0x150
[  562.234396][T21876]  ? stack_trace_save+0xa9/0x100
[  562.234412][T21876]  ? __pfx_stack_trace_save+0x10/0x10
[  562.234427][T21876]  ? __pfx_hlock_conflict+0x10/0x10
[  562.234452][T21876]  ? check_path+0x21/0x40
[  562.234475][T21876]  ? add_lock_to_list+0xc7/0x100
[  562.234498][T21876]  ? __lock_acquire+0x6b5/0x2cf0
[  562.234519][T21876]  ? check_path+0x21/0x40
[  562.234545][T21876]  ? inode_wait_for_writeback+0x16d/0x3b0
[  562.234566][T21876]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  562.234584][T21876]  ? do_raw_spin_lock+0x12b/0x2f0
[  562.234603][T21876]  ? do_raw_spin_unlock+0xf5/0x210
[  562.234619][T21876]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  562.234639][T21876]  evict+0x61e/0xb10
[  562.234660][T21876]  ? __pfx_evict+0x10/0x10
[  562.234679][T21876]  ? _raw_spin_unlock+0x28/0x50
[  562.234700][T21876]  ? iput+0xb25/0xe80
[  562.234726][T21876]  ocfs2_dentry_iput+0x24d/0x390
[  562.234754][T21876]  ? __pfx_ocfs2_dentry_iput+0x10/0x10
[  562.234776][T21876]  ? fsnotify_destroy_marks+0x81/0x330
[  562.234797][T21876]  ? dentry_unlink_inode+0x30e/0x3f0
[  562.234817][T21876]  __dentry_kill+0x1a2/0x5e0
[  562.234836][T21876]  ? finish_dput+0xad/0x480
[  562.234859][T21876]  finish_dput+0xc9/0x480
[  562.234882][T21876]  filename_symlinkat+0x22a/0x410
[  562.234905][T21876]  ? __pfx_filename_symlinkat+0x10/0x10
[  562.234927][T21876]  ? do_getname+0x151/0x250
[  562.234948][T21876]  __se_sys_symlink+0x4d/0x2b0
[  562.234970][T21876]  do_syscall_64+0x14d/0xf80
[  562.234986][T21876]  ? trace_irq_disable+0x3b/0x150
[  562.235000][T21876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.235016][T21876]  ? clear_bhb_loop+0x40/0x90
[  562.235034][T21876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.235051][T21876] RIP: 0033:0x7f0e92f9c799
[  562.235065][T21876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.235080][T21876] RSP: 002b:00007f0e93dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  562.235097][T21876] RAX: ffffffffffffffda RBX: 00007f0e93215fa0 RCX: 00007f0e92f9c799
[  562.235109][T21876] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900
[  562.235120][T21876] RBP: 00007f0e93032bd9 R08: 0000000000000000 R09: 0000000000000000
[  562.235131][T21876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  562.235141][T21876] R13: 00007f0e93216038 R14: 00007f0e93215fa0 R15: 00007ffdee7f6ae8
[  562.235159][T21876]  </TASK>
[  562.812103][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  562.818708][T21909] loop1: detected capacity change from 0 to 32768
[  562.829597][   T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  562.837725][   T10] usb 5-1: config 0 has no interface number 0
[  562.844162][   T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  562.855212][   T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  562.860768][T21909] 
[  562.860768][T21909]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  562.860768][T21909] 
[  562.865886][   T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  562.888207][   T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  562.899321][   T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  562.910573][   T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  562.923993][   T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  562.933070][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.945336][   T10] usb 5-1: config 0 descriptor??
[  562.951068][T21913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  562.990821][T21913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  563.020643][   T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  563.020649][ T5822] ocfs2: Unmounting device (7,2) on (node local)
[  563.131467][ T5826] 
[  563.131467][ T5826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  563.131467][ T5826] 
[  563.169095][ T5826] 
[  563.169095][ T5826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  563.169095][ T5826] 
[  563.225507][   T10] usb 5-1: USB disconnect, device number 54
[  563.235199][   T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected