last executing test programs:

1m38.70937817s ago: executing program 2 (id=512):
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x2, [{}, {}]}, 0x48)
r0 = io_uring_setup(0x19be, &(0x7f0000000500)={0x0, 0x709f, 0x8, 0x2, 0xef})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)

1m38.455254956s ago: executing program 2 (id=515):
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7)

1m37.38709234s ago: executing program 2 (id=527):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c)

1m37.307432992s ago: executing program 2 (id=528):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f00000144c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESHEX, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x14800, 0x0, 0x0, 0x0, &(0x7f0000000240))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m36.593955578s ago: executing program 2 (id=535):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r0, 0x0, 0x0}, 0x10)

1m35.589402561s ago: executing program 2 (id=541):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = geteuid()
mount$binderfs(0x0, 0x0, 0x0, 0x2076c10, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

1m35.256484499s ago: executing program 32 (id=541):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = geteuid()
mount$binderfs(0x0, 0x0, 0x0, 0x2076c10, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

4.633287469s ago: executing program 4 (id=1158):
unshare(0x6020400)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fdatasync(r0)

3.960482308s ago: executing program 3 (id=1164):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010)

3.736245675s ago: executing program 3 (id=1165):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x88380, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x1, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

3.454162143s ago: executing program 0 (id=1169):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xb, @loopback, 0x8000002}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000001200)='e', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}}], 0x2, 0x404c889)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84)

3.450944743s ago: executing program 3 (id=1171):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0xff000000, 0x0, 0x100000})

3.088163973s ago: executing program 1 (id=1174):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xfffffffc, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x42}, 0x0, 0x18, 0x0, 0x12345})
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="45ef20"])
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

3.086781053s ago: executing program 0 (id=1184):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getrusage(0x1, 0x0)

3.015523245s ago: executing program 4 (id=1175):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000000)="80", 0x1}], 0x2}}], 0x1, 0x0)

2.792874891s ago: executing program 4 (id=1177):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x7d, 0x14f3, &(0x7f0000001580)="$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")
fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xee01, r2, 0x1000)

2.791529501s ago: executing program 1 (id=1188):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)

2.546951378s ago: executing program 1 (id=1190):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x806, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ba, &(0x7f0000000580)="$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")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)

2.391956202s ago: executing program 4 (id=1179):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x1, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8003, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0xfffffffffffffffd, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x400000000008000, 0xc9, 0x7, 0x8, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0x7bcd, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]})
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000780)=[{0x3, 0xfffffffffffffff8, 0x400, {0x7, 0x9}, 0x7ff, 0xbd98, 0x200}, {0xa, 0x1, 0xd07, {0x4, 0x2}, 0x6, 0x7, 0x7}, {0x7, 0x9, 0x10001, {0x7fffffffffffffff, 0xe}, 0x4, 0x1, 0x9e0}], 0x15, 0x40, 0xd, 0xe2}, {&(0x7f0000000300)=[{0x1}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000340)=[0x6], 0x1, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x400, 0x6, 0x1, 0x7f, 0xd}], 0x1, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x9, 0xffff}})

2.265693116s ago: executing program 1 (id=1181):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="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", @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRES8, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x20a, &(0x7f0000000740)="$eJzsmb+LE0EUx78zu8mehwg2FjYWHniit7+ics0VJ4iVIJyiVwZv7wjuJZKskAREg42NpYhg6z9gYZHKws7OVgsVBAtTChbCyMxONpPEjQkJKtz7wM1935sf781j96VYEARxYPn86fvHxxfXr50FcNhagaP9X63BGg5k1odnd8882bj0/OX7F2+qR+51R89bAiDE9PEZgNebFhJlCSHuD8+vyOHpsO86OE5rfQMMLh5I+VMoUn8Ehm2lbBVlGyhIq3ZIb4wj91Yt3tmtxJEvh0AOoRxKZiy5u9dh2MnuJgQz5hut9u1yHEf1UVEQ/ThjU7OKSfVT+W1ybGhb5scB3Hz0sCNtV/t98LSWAAJwBFqXwLCl9TocuK47KIlx/+P24Hxrmvvni/72OSoyQbAf6WMgPUfXFniyLMBiU51D8L8ZVL5Af14snH9flukEG/XIFzrzHOt1347v+vK/JJ8vGHI6jmpc5tN7Wa95txzHV+YIWtQRx6cssz8xGzhl9CcbdtY/vGT/jtdotdcq++W9aC+qhmHpgn/O98+H3m7Fge+pdjSh/y2p/rRsnF8wFxg/KEVWRLOcJPWgCST1ILPDdDQ67tar2je1h6v+x7F6Mj1DFlld2/l9Pkz/cfVfqlUrN3mCIAiCIAiCIAiCIAiCIIiZOAGG9BOI+lAlcgivqtW/AgAA//8YJ2b3")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r0, 0x90, 0xff36, 0x3)

2.040593372s ago: executing program 5 (id=1182):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdX\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9=\t\xbb\x0e\xbb\xb5\x02\x95u\x94r\xfd\x00\xb9\xf8z\xa0\xe6\xcc\x85QO\x1dD\xd5\xe2\xa56j\\', 0x1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

1.897747946s ago: executing program 1 (id=1183):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0)

1.80272577s ago: executing program 0 (id=1185):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)

1.643604554s ago: executing program 5 (id=1186):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[], 0x0, 0x635, &(0x7f0000000c80)="$eJzs3c1rHOcdB/DvrFZryQVHSezELYGKGNJSUVsvKK16iVtK0SGUkB56FrYcC6+VIClFCaWo79BTD/kD0oNuPRV6N6Tn9parjoFCLznppjKzs9LaWil6s1ZqPx/z7PM888w888xvZ2Zndi0mwP+t+Yk0n6TI/MTb62V9a3OmvbU5c6Vubicpy42k2clSLCfFZ8nddFK+Xk6s5y8OWs8nS3Pvfv7l1hedWrNO1fyNw5Y7mo06ZTzJUJ0/o/Wn4/Q33CmU/dzr398xFLtbWAbsVjdwMGg7+2wcZ/FTHrfARVB0Pjf3GUuuJhmprwNSnx0a5zu6s3essxwAAABcUi9sZzvruTbocQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBlUj//v6hTo1seT9F9/n+rnpa6fKk9GfQAAAAAAAAAAOAMfHM721nPtW59p6h+83+9qlyvXr+WD7OaxazkdtazkLWsZSVTScZ6OmqtL6ytrUwdYcnpvktOn8/2AgAAAAAAAMD/qN9kfu/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGKShOi86xaJO17vlsTSaSUaStMr5NpJ/dcuXRNFv4pPzHwcAAACcysgJlnlhO9tZz7Vufaeo7vlfqe6XR/JhlrOWpaylncXcr++hy7v+xtbmTHtrc+Zxmfb3+8P/HGsYVY+7X0P0W/PNao7RPMhSNeV27lWDuZ9GtWTpZnc8/cf163JMxVu1I47sfp2XK/vzQd8iDMRYFZHh3YhM1mMro/Hi4ZH4yneneeiaptLY/ebn+nOI+dU6L7fnDxcz5o1UkZju2fteOTwSybf+/tefP2wvP3r4YHXi4mzSCT27T8z0ROLVSx2J5jHnn6wicWO3Pp+f5GeZyHjeyUqW8ossZC2L2anbF+r9uXwdOzxSd5+qvfNVI2nV70vnLHqUMY3nx1VpIa9Xy17LUoq8n/tZzJvVv+lM5XuZzWzmet7hGweOu9q26qhvHO+ov/XtujCa5I91Pmidj9Qyri/2xLX3nDtWtfVO2YvSS2d/bmx+oy6U6/htnV8Mz0ZiqicSLx8eib9Ux8Zqe/nRysOFDw7of+OZ+ht1Xu5xv79QnxLl/vJSRuozydN7R9n28u5Z5ul4tepfXDptjX1tN6q2ougeqT898Eht1ddw+3uartpe7ds2U7Xd7Gl76nor76e9ez0EwAV29TtXW6P/Hv3n6Kejvxt9OPr2yI+ufP/Ka60M/2P4B83JoTcarxV/y6f51d79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHKrH338aKHdXlzpX2gc3HS2haJ+kM95rEth0IXuQwRP3eHdC7E5l7owlKRfU/0WneThosClcGft8Qd3Vj/6+LtLjxfeW3xvcXl4dnZucm72zZk7D5bai5Od10GPEnge9j70+7cXF+oBmwAAAAAAAAAAAECO9vc2O/X//zvxXxoMehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy21+Is0nKTI1eXuyrG9tzrTL1C3vzdlM0mgkxS+T4rPkbjopYz3dFW8dsJ5Plube/fzLrS/2+mpW85ed1vkpbNQp40mG6vys+rt36v6K3S0sA3arGzgYtP8GAAD//+IHAOM=")
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x70000000})
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

1.543289967s ago: executing program 1 (id=1187):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

1.442388279s ago: executing program 4 (id=1189):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0))

1.310525883s ago: executing program 5 (id=1191):
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
keyctl$setperm(0x5, r0, 0x10162c31)
keyctl$read(0xb, r0, 0x0, 0x0)

1.178244027s ago: executing program 4 (id=1192):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
lseek(r0, 0x5960, 0x3)

1.042885361s ago: executing program 5 (id=1193):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
setresuid(0xee00, 0xee01, 0xee01)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="f52d5ea54caaabad"}})

1.040375831s ago: executing program 3 (id=1194):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x5}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

672.701421ms ago: executing program 5 (id=1195):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000009c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2a84bb2c3079a4297b1712f2cf9b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e296e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x24b, &(0x7f00000006c0)="$eJzs3bFqU1EYB/DPNm1DFjuLwwUXp6BOrkEqiAEhkkEnA9WlFeF2iU4XfAmfwbfwNXyMTt2OkBuatkYXvTnpvb8fhPPBn4TvLDkZvpP77v7Hk+NPZx/Sz2/R7xfRi6hSijiMndiN2p3lurOo9+OqKgCA22YymY1y90CzynI024uIg9+S6fcsDQEAAAAAAAAAAPDP1s3/x4X5fwBoM/P/7VeWo9lg+fvtOvP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQD4XKd1Nf3nl7g8A+P+c/wDQPc5/AOge5z8AdM/rN29fjsbjo0lR9CPOq/l0Pq3XOn/+Ynz0qFg4XL3rfD6f7l7mj+u8uJ7vxWCZP1mb78fDB4v86yCl4tmr8Y38II6b3z4AAAAAAAAAAAAAAAAAAABshWFxae39/uHwT3ldXfl/gBv393txr7exbQAAAAAAAAAAAAAAAAAAAMCtdvb5y8ns9PR9qdh48aOhT46nW7LBzRYRW9FGW4rc30wAAAAAAAAAAAAAAAAAANA9q0u/uTsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHxWz/9vroiIKtVybxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABosV8BAAD//zNVnPs=")
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f40)='./bus\x00')
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

552.358374ms ago: executing program 0 (id=1196):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@x={0x94, 0x0, "02000000ffd0"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

274.877382ms ago: executing program 3 (id=1197):
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

237.689423ms ago: executing program 0 (id=1198):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x4080)

61.146448ms ago: executing program 5 (id=1199):
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
poll(&(0x7f0000000140)=[{r0, 0x1100}], 0x1, 0x20002081)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}})

1.19164ms ago: executing program 0 (id=1200):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x40000)

0s ago: executing program 3 (id=1201):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x16, 0xc49, &(0x7f0000001cc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r0, 0x0, 0x0)
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')

kernel console output (not intermixed with test programs):

gistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.738083][ T4807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.014479][ T5911] netlink: 'syz.4.546': attribute type 11 has an invalid length.
[  130.464657][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.478724][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.480023][ T5923] loop1: detected capacity change from 0 to 512
[  130.505473][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.522274][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.525980][ T5904] loop3: detected capacity change from 0 to 32768
[  130.536385][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  130.544948][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.625208][ T5904] JBD2: Ignoring recovery information on journal
[  130.739093][ T5904] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  130.857129][ T5930] loop1: detected capacity change from 0 to 256
[  130.982740][ T5151] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  131.020447][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  131.198238][ T5151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.210463][ T5919] chnl_net:caif_netlink_parms(): no params data found
[  131.246259][ T5151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.267819][ T5151] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  131.287644][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.316194][ T5151] usb 5-1: config 0 descriptor??
[  131.737995][ T5151] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  131.771609][ T5151] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  131.801063][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.839004][ T5151] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  131.852829][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.860978][ T5919] device bridge_slave_0 entered promiscuous mode
[  131.878368][ T5151] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  131.897749][ T5151] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  131.928120][ T5151] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  131.933183][ T5957] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.944217][ T5957] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.953006][ T5957] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.960733][ T5151] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  131.961693][ T5957] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.997720][ T5151] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  132.066590][ T5957] device vxlan0 entered promiscuous mode
[  132.080518][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.103066][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.145171][ T5919] device bridge_slave_1 entered promiscuous mode
[  132.242524][ T4380] usb 5-1: USB disconnect, device number 3
[  132.364669][ T5963] fido_id[5963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  132.419795][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.471737][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.501346][ T5943] loop3: detected capacity change from 0 to 32768
[  132.618934][ T4807] device hsr_slave_0 left promiscuous mode
[  132.625507][ T4284] Bluetooth: hci4: command 0x0409 tx timeout
[  132.685158][ T4807] device hsr_slave_1 left promiscuous mode
[  132.715591][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.788566][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  132.792785][ T4807] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.794914][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  132.864507][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.871973][ T4807] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.957482][ T4807] device bridge_slave_1 left promiscuous mode
[  132.971558][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.058454][ T4807] device bridge_slave_0 left promiscuous mode
[  133.073565][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.207754][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  133.271695][ T4807] device veth1_macvtap left promiscuous mode
[  133.283167][ T4807] device veth0_macvtap left promiscuous mode
[  133.313758][ T4807] device veth1_vlan left promiscuous mode
[  133.340214][ T4807] device veth0_vlan left promiscuous mode
[  133.358595][ T5990] loop3: detected capacity change from 0 to 512
[  133.454116][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  133.487826][ T5996] loop4: detected capacity change from 0 to 512
[  133.532860][ T5990] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.562301][ T5996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  133.680182][ T5996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  133.760329][ T5996] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  133.776696][ T5996] EXT4-fs (loop4): 1 truncate cleaned up
[  133.782477][ T5996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  133.916987][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  134.045663][ T6000] loop1: detected capacity change from 0 to 4096
[  134.069593][ T6002] loop4: detected capacity change from 0 to 8
[  134.110086][ T5983] loop0: detected capacity change from 0 to 32768
[  134.116061][ T6002] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  134.116859][ T6003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.147192][ T6000] NILFS (loop1): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=0, cno=0, offset=0, blocknr=0, vblocknr=0
[  134.177428][ T4265] udevd[4265]: incorrect cramfs checksum on /dev/loop4
[  134.190555][ T6000] NILFS (loop1): error -2 preparing GC: cannot read source blocks
[  134.273579][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  134.283903][ T5983] XFS (loop0): Mounting V5 Filesystem
[  134.296280][ T4265] udevd[4265]: incorrect cramfs checksum on /dev/loop4
[  134.518595][ T5983] XFS (loop0): Starting recovery (logdev: internal)
[  134.593574][ T6020] loop4: detected capacity change from 0 to 64
[  134.602787][ T5983] XFS (loop0): Ending recovery (logdev: internal)
[  134.655530][ T5983] XFS (loop0): User initiated shutdown received.
[  134.679800][ T6018] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  134.679999][ T5983] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  134.703185][ T4284] Bluetooth: hci4: command 0x041b tx timeout
[  134.750108][ T5983] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  134.776173][ T6020] syz.4.569: attempt to access beyond end of device
[  134.776173][ T6020] loop4: rw=2049, sector=412, nr_sectors = 2 limit=64
[  134.778884][ T6018] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  134.819541][ T6020] Buffer I/O error on dev loop4, logical block 206, lost async page write
[  134.886189][   T26] audit: type=1800 audit(1782789704.902:26): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.571" name="bus" dev="loop1" ino=24 res=0 errno=0
[  134.911974][ T4274] XFS (loop0): Unmounting Filesystem
[  135.121312][ T4271] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22.
[  135.213084][ T4271] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22.
[  135.257634][ T6026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  135.481891][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  135.612779][   T14] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  135.694211][ T6034] set_capacity_and_notify: 2 callbacks suppressed
[  135.694227][ T6034] loop4: detected capacity change from 0 to 4096
[  135.815017][   T14] usb 2-1: config 4 has an invalid interface number: 128 but max is 0
[  135.829959][   T14] usb 2-1: config 4 has no interface number 0
[  135.839918][   T14] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  135.851513][   T14] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.861906][   T14] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  135.871315][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.906836][   T14] hub 2-1:4.128: USB hub found
[  136.018630][ T4273] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  136.026749][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  136.101350][   T14] hub 2-1:4.128: 2 ports detected
[  136.101730][ T4807] team0 (unregistering): Port device team_slave_1 removed
[  136.114386][   T14] hub 2-1:4.128: Using single TT (err -22)
[  136.191812][ T4807] team0 (unregistering): Port device team_slave_0 removed
[  136.262515][ T4807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.310048][ T4807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.534167][   T14] usb 2-1: USB disconnect, device number 9
[  136.690251][ T4807] bond0 (unregistering): Released all slaves
[  136.783594][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[  136.792058][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'.
[  136.802010][ T6022] tipc: Started in network mode
[  136.807393][ T6022] tipc: Node identity 7, cluster identity 4711
[  136.813620][ T6022] tipc: Node number set to 7
[  136.843865][ T5919] team0: Port device team_slave_0 added
[  136.859621][ T5919] team0: Port device team_slave_1 added
[  136.906118][ T6041] loop5: detected capacity change from 0 to 7
[  136.930906][ T6041] Dev loop5: unable to read RDB block 7
[  136.952742][ T6041]  loop5: unable to read partition table
[  136.984956][ T6041] loop5: partition table beyond EOD, truncated
[  137.006523][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.022015][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.022748][ T6041] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  137.074247][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.133536][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.184750][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.258890][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.288018][ T3639] Dev loop5: unable to read RDB block 7
[  137.304162][ T3639]  loop5: unable to read partition table
[  137.323058][ T3639] loop5: partition table beyond EOD, truncated
[  137.376194][ T5919] device hsr_slave_0 entered promiscuous mode
[  137.406259][ T5919] device hsr_slave_1 entered promiscuous mode
[  137.526036][ T6054] device bond0 entered promiscuous mode
[  137.539561][ T6054] device bond_slave_0 entered promiscuous mode
[  137.556836][ T6054] device bond_slave_1 entered promiscuous mode
[  137.568608][ T6054] device batadv0 entered promiscuous mode
[  137.610103][ T6054] 8021q: adding VLAN 0 to HW filter on device hsr1
[  137.649121][ T6054] device bond0 left promiscuous mode
[  137.657593][ T6054] device bond_slave_0 left promiscuous mode
[  137.678028][ T6054] device bond_slave_1 left promiscuous mode
[  137.699008][ T6054] device batadv0 left promiscuous mode
[  137.745662][ T6044] loop4: detected capacity change from 0 to 32768
[  137.784580][ T6044] (syz.4.580,6044,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.833168][ T6044] (syz.4.580,6044,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.939486][ T6047] loop0: detected capacity change from 0 to 32768
[  138.025204][ T6044] JBD2: Ignoring recovery information on journal
[  138.144481][ T6044] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  138.324229][ T4380] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  138.505514][ T5919] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  138.525576][ T4380] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  138.542916][ T4380] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  138.565123][ T4380] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.595511][ T5919] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  138.605879][ T4380] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  138.645481][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  138.682705][ T4380] usb 2-1: Product: syz
[  138.692926][ T4380] usb 2-1: Manufacturer: syz
[  138.707796][ T4380] usb 2-1: SerialNumber: syz
[  138.720004][ T4380] usb 2-1: config 0 descriptor??
[  138.739047][ T5919] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  138.750663][ T4380] usb 2-1: selecting invalid altsetting 0
[  138.815020][ T5919] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  138.832033][ T4273] ocfs2: Unmounting device (7,4) on (node local)
[  138.862978][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[  139.022803][ T4380] usb 2-1: USB disconnect, device number 10
[  139.154804][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.167847][ T5523] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  139.197996][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.213599][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.231432][ T5919] 8021q: adding VLAN 0 to HW filter on device team0
[  139.248930][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.258327][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  139.273436][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.280627][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.300331][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.309243][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.319253][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.332226][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.339424][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.350185][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.359458][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.382862][ T5523] usb 4-1: Using ep0 maxpacket: 16
[  139.400046][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.415382][ T5523] usb 4-1: config 0 interface 0 has no altsetting 0
[  139.422039][ T5523] usb 4-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00
[  139.439133][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.467998][ T5523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.469084][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.504054][ T5523] usb 4-1: config 0 descriptor??
[  139.525863][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.561600][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.600516][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.640924][ T5919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.700492][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  139.725019][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.746053][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.762086][ T6093] loop0: detected capacity change from 0 to 128
[  139.770500][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.810048][ T6093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  139.863216][ T6093] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.919908][ T6085] loop4: detected capacity change from 0 to 40427
[  139.924743][ T5523] wacom 0003:056A:00C0.0003: ignoring exceeding usage max
[  139.948038][ T6085] F2FS-fs (loop4): invalid crc value
[  139.981401][ T6085] F2FS-fs (loop4): Found nat_bits in checkpoint
[  140.023540][ T5523] wacom 0003:056A:00C0.0003: hidraw0: USB HID v0.81 Device [HID 056a:00c0] on usb-dummy_hcd.3-1/input0
[  140.187916][ T4318] usb 4-1: USB disconnect, device number 5
[  140.199921][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  140.217581][ T6085] F2FS-fs (loop4): Start checkpoint disabled!
[  140.310406][ T6085] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  140.398819][ T6103] fido_id[6103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  140.663835][ T4299] kworker/u4:6: attempt to access beyond end of device
[  140.663835][ T4299] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  140.685391][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.696489][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.722430][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.049912][ T6098] loop1: detected capacity change from 0 to 40427
[  141.065037][ T6098] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  141.099074][ T6098] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  141.143061][ T6098] F2FS-fs (loop1): invalid crc value
[  141.191668][ T6098] F2FS-fs (loop1): Found nat_bits in checkpoint
[  141.373689][ T6098] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  141.383038][ T6098] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  141.418491][ T6136] loop3: detected capacity change from 0 to 512
[  141.508503][ T6136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  141.566690][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'.
[  141.621492][ T6136] EXT4-fs (loop3): 1 truncate cleaned up
[  141.699015][ T6136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  141.926312][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.947553][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.970664][ T4807] kworker/u4:7: attempt to access beyond end of device
[  141.970664][ T4807] loop1: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  142.021608][ T6152] loop0: detected capacity change from 0 to 2048
[  142.037864][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.108817][ T6156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.122806][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.147999][ T6152] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  142.176276][ T5919] device veth0_vlan entered promiscuous mode
[  142.190544][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.218073][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.221929][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  142.238041][ T5919] device veth1_vlan entered promiscuous mode
[  142.250403][ T6152] Remounting filesystem read-only
[  142.380630][ T5919] device veth0_macvtap entered promiscuous mode
[  142.421654][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  142.441979][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  142.473504][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.501481][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.538813][ T5919] device veth1_macvtap entered promiscuous mode
[  142.562523][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.588966][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.699209][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.730291][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.776070][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.834299][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.858159][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.910072][ T6179] loop0: detected capacity change from 0 to 1024
[  142.921594][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.958067][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.978830][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.998471][ T6179] EXT4-fs: Ignoring removed orlov option
[  143.046150][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.086297][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.113590][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.115218][ T6179] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  143.176185][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.250216][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.328170][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.362522][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.401196][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.422227][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.461001][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.472008][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.491379][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  143.498343][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.573306][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  143.632904][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.653442][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.664965][ T5919] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.692929][ T5919] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.732388][ T5919] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.752889][ T5919] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.970883][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.010666][ T6172] loop3: detected capacity change from 0 to 32768
[  144.037542][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.099211][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.143660][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.181955][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.195061][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.218394][ T6172] XFS (loop3): Mounting V5 Filesystem
[  144.436307][ T6172] XFS (loop3): Ending clean mount
[  144.503960][ T6172] XFS (loop3): Quotacheck needed: Please wait.
[  144.599840][ T6210] loop5: detected capacity change from 0 to 1024
[  144.624654][ T6172] XFS (loop3): Quotacheck: Done.
[  144.658779][ T6210] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.687511][ T6210] EXT4-fs: inline encryption not supported
[  144.732817][ T6210] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.742146][ T6210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.847970][ T4272] XFS (loop3): Unmounting Filesystem
[  144.944548][ T6210] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  144.962986][ T6210] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.065125][ T6210] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.610: bg 0: block 112: padding at end of block bitmap is not set
[  145.150848][ T6210] EXT4-fs (loop5): Remounting filesystem read-only
[  145.289957][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  145.391719][ T6195] loop1: detected capacity change from 0 to 40427
[  145.439249][ T6195] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  145.472263][ T6195] F2FS-fs (loop1): invalid crc value
[  145.521613][ T6195] F2FS-fs (loop1): Found nat_bits in checkpoint
[  145.678771][ T4807] tipc: Subscription rejected, illegal request
[  145.710559][ T6195] F2FS-fs (loop1): recover fsync data on readonly fs
[  145.727861][ T6195] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  145.778714][ T6195] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  145.844031][ T6195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  145.899728][ T6239] loop3: detected capacity change from 0 to 1024
[  146.023425][ T6195] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0
[  146.227677][   T62] hfsplus: b-tree write err: -5, ino 25
[  146.233902][   T62] hfsplus: b-tree write err: -5, ino 4
[  146.239466][   T62] hfsplus: b-tree write err: -5, ino 2
[  146.626268][ T6259] loop5: detected capacity change from 0 to 4096
[  146.829081][ T6260] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.312366][ T6256] loop3: detected capacity change from 0 to 131072
[  147.331211][ T6256] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  147.339423][ T6256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  147.348798][ T6256] F2FS-fs (loop3): invalid crc value
[  147.356712][ T6256] F2FS-fs (loop3): Found nat_bits in checkpoint
[  147.443069][ T6256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  147.448118][ T6270] loop0: detected capacity change from 0 to 512
[  147.450182][ T6256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  147.542195][ T6270] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  147.603678][ T6275] program syz.4.624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.657786][ T6270] EXT4-fs (loop0): 1 truncate cleaned up
[  147.689139][ T6270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  147.974710][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  148.319168][ T6300] loop5: detected capacity change from 0 to 128
[  148.369440][ T6300] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  148.398783][ T6300] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.489531][ T6306] loop0: detected capacity change from 0 to 8192
[  148.503881][ T6306] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  148.517950][ T6306] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  148.527596][ T6306] REISERFS (device loop0): using ordered data mode
[  148.543689][ T6306] reiserfs: using flush barriers
[  148.582469][ T6306] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  148.635598][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  148.684485][ T6306] REISERFS (device loop0): checking transaction log (loop0)
[  148.993004][ T6306] REISERFS (device loop0): Using tea hash to sort names
[  149.000267][ T6306] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  149.180649][ T6323] loop4: detected capacity change from 0 to 7
[  149.212841][ T6320] loop5: detected capacity change from 0 to 4096
[  149.213150][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.228407][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.303417][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.312647][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.322469][ T6306] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  149.372819][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.382012][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.392304][ T6326] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.443169][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.452346][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.460839][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.470097][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.513609][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.522872][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.570622][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.579902][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.588799][ T4264] ldm_validate_partition_table(): Disk read failed.
[  149.628566][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.637799][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.687096][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.696338][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.714252][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.723484][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  149.736665][ T4264] Dev loop4: unable to read RDB block 0
[  149.745298][ T4264]  loop4: unable to read partition table
[  149.776374][ T4264] loop4: partition table beyond EOD, truncated
[  149.789148][ T6329] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  149.827852][ T6323] ldm_validate_partition_table(): Disk read failed.
[  149.877391][ T6323] Dev loop4: unable to read RDB block 0
[  149.887576][ T6323]  loop4: unable to read partition table
[  149.912858][ T6323] loop4: partition table beyond EOD, truncated
[  149.919099][ T6323] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=Ã	) failed (rc=-5)
[  150.423869][ T4378] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  150.624537][ T4378] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  150.632985][ T6332] loop1: detected capacity change from 0 to 32768
[  150.644085][ T4378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.675698][ T4378] usb 6-1: config 0 descriptor??
[  150.677444][ T6332] JBD2: Ignoring recovery information on journal
[  150.707688][ T4378] cp210x 6-1:0.0: cp210x converter detected
[  150.739048][ T6357] loop4: detected capacity change from 0 to 256
[  150.810974][ T6332] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  150.954334][ T4271] ocfs2: Unmounting device (7,1) on (node local)
[  151.090185][ T4378] usb 6-1: cp210x converter now attached to ttyUSB0
[  151.295474][ T5155] usb 6-1: USB disconnect, device number 2
[  151.324355][ T5155] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  151.375574][ T5155] cp210x 6-1:0.0: device disconnected
[  152.108908][ T6371] loop4: detected capacity change from 0 to 40427
[  152.153602][ T6371] F2FS-fs (loop4): invalid crc value
[  152.174906][ T6371] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.337495][ T6371] F2FS-fs (loop4): Start checkpoint disabled!
[  152.408503][ T6371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  152.700997][   T62] kworker/u4:4: attempt to access beyond end of device
[  152.700997][   T62] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  152.882443][ T6423] loop1: detected capacity change from 0 to 8
[  152.921872][ T6423] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  152.965675][ T4265] udevd[4265]: incorrect cramfs checksum on /dev/loop1
[  153.015530][ T4263] udevd[4263]: incorrect cramfs checksum on /dev/loop1
[  153.201876][ T6426] loop1: detected capacity change from 0 to 64
[  153.296433][ T6426] syz.1.677: attempt to access beyond end of device
[  153.296433][ T6426] loop1: rw=2049, sector=412, nr_sectors = 2 limit=64
[  153.506760][ T6419] loop3: detected capacity change from 0 to 40427
[  153.574942][ T6419] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  153.654186][ T6441] loop5: detected capacity change from 0 to 7
[  153.660430][ T6419] F2FS-fs (loop3): invalid crc value
[  153.681207][ T6419] F2FS-fs (loop3): Found nat_bits in checkpoint
[  153.709175][ T6441] Dev loop5: unable to read RDB block 7
[  153.720678][ T6441]  loop5: unable to read partition table
[  153.747527][ T6441] loop5: partition table beyond EOD, truncated
[  153.773042][ T6441] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  153.835090][ T6419] F2FS-fs (loop3): recover fsync data on readonly fs
[  153.850454][ T3639] Dev loop5: unable to read RDB block 7
[  153.863134][ T6419] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  153.871506][ T3639]  loop5: unable to read partition table
[  153.883036][ T3639] loop5: partition table beyond EOD, truncated
[  153.889507][ T6419] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  153.903741][   T14] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  153.935312][ T6419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  154.066370][ T6419] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[  154.094874][   T14] usb 6-1: config 4 has an invalid interface number: 128 but max is 0
[  154.132731][   T14] usb 6-1: config 4 has no interface number 0
[  154.139296][   T14] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.192704][   T14] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.217607][   T14] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  154.255069][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.277028][   T14] hub 6-1:4.128: USB hub found
[  154.408101][ T6456] loop0: detected capacity change from 0 to 4096
[  154.422784][ T4321] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  154.481136][   T14] hub 6-1:4.128: 2 ports detected
[  154.491424][   T14] hub 6-1:4.128: Using single TT (err -22)
[  154.615364][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.649192][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.683848][ T4321] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  154.702105][ T4274] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  154.723254][ T4274] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  154.751004][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.788771][ T4321] usb 5-1: config 0 descriptor??
[  154.898195][ T6469] loop1: detected capacity change from 0 to 512
[  154.912863][   T14] usb 6-1: USB disconnect, device number 3
[  154.929392][ T6469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  154.962796][ T4318] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  154.996541][ T6467] loop0: detected capacity change from 0 to 4096
[  155.046017][ T6467] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  155.070894][ T6469] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.687: corrupted in-inode xattr
[  155.105461][ T6469] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.687: couldn't read orphan inode 15 (err -117)
[  155.152138][ T6469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  155.172532][ T4318] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  155.212232][ T4318] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  155.232885][ T4321] hid (null): unknown global tag 0xe
[  155.257622][ T4321] hid (null): global environment stack underflow
[  155.266727][ T4321] hid (null): unknown global tag 0x52
[  155.272528][ T6467] ntfs: (device loop0): parse_options(): NLS character set asci not found. Using previous one macinuit.
[  155.287056][ T4318] usb 4-1: config 0 interface 0 has no altsetting 0
[  155.296354][ T4321] wacom 0003:056A:5000.0004: unknown main item tag 0x0
[  155.327205][ T4318] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  155.337336][ T4321] wacom 0003:056A:5000.0004: unknown main item tag 0x0
[  155.358339][ T6467] ntfs: volume version 3.1.
[  155.361387][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  155.365968][ T4321] wacom 0003:056A:5000.0004: unknown main item tag 0x0
[  155.401998][ T4318] usb 4-1: Product: syz
[  155.422694][ T4321] wacom 0003:056A:5000.0004: unknown main item tag 0x0
[  155.425508][ T4318] usb 4-1: Manufacturer: syz
[  155.429610][ T4321] wacom 0003:056A:5000.0004: unknown main item tag 0x0
[  155.469903][ T4318] usb 4-1: SerialNumber: syz
[  155.482808][ T4321] wacom 0003:056A:5000.0004: unknown main item tag 0x0
[  155.489752][ T4321] wacom 0003:056A:5000.0004: ignoring exceeding usage max
[  155.499355][ T4318] usb 4-1: config 0 descriptor??
[  155.540597][ T4318] usb 4-1: selecting invalid altsetting 0
[  155.545149][ T4321] wacom 0003:056A:5000.0004: unknown global tag 0xe
[  155.589941][ T4321] wacom 0003:056A:5000.0004: item 0 1 1 14 parsing failed
[  155.600420][ T4321] wacom 0003:056A:5000.0004: parse failed
[  155.609159][ T4321] wacom: probe of 0003:056A:5000.0004 failed with error -22
[  155.631398][ T4321] usb 5-1: USB disconnect, device number 4
[  155.704975][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  155.837741][ T4380] usb 4-1: USB disconnect, device number 6
[  155.928267][ T6488] device bond0 entered promiscuous mode
[  155.934046][ T6488] device bond_slave_0 entered promiscuous mode
[  155.940435][ T6488] device bond_slave_1 entered promiscuous mode
[  155.961972][ T6488] device batadv0 entered promiscuous mode
[  156.019521][ T6488] 8021q: adding VLAN 0 to HW filter on device hsr1
[  156.060840][ T6488] device bond0 left promiscuous mode
[  156.069022][ T6488] device bond_slave_0 left promiscuous mode
[  156.087228][ T6488] device bond_slave_1 left promiscuous mode
[  156.096641][ T6488] device batadv0 left promiscuous mode
[  156.362292][ T6502] loop0: detected capacity change from 0 to 64
[  156.422280][ T6502] syz.0.691: attempt to access beyond end of device
[  156.422280][ T6502] loop0: rw=2049, sector=412, nr_sectors = 2 limit=64
[  156.485930][ T6502] buffer_io_error: 24 callbacks suppressed
[  156.485945][ T6502] Buffer I/O error on dev loop0, logical block 206, lost async page write
[  156.649271][ T6510] loop5: detected capacity change from 0 to 512
[  156.729329][ T6510] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  156.902914][ T4321] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  156.927483][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  157.095574][ T4321] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  157.125091][ T4321] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  157.172719][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0
[  157.194245][ T4321] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  157.222692][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  157.236767][ T4321] usb 5-1: Product: syz
[  157.247660][ T4321] usb 5-1: Manufacturer: syz
[  157.261199][ T4321] usb 5-1: SerialNumber: syz
[  157.291478][ T4321] usb 5-1: config 0 descriptor??
[  157.338764][ T4321] usb 5-1: selecting invalid altsetting 0
[  157.491268][ T6508] loop3: detected capacity change from 0 to 32768
[  157.551078][ T6508] (syz.3.705,6508,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  157.575187][ T4321] usb 5-1: USB disconnect, device number 5
[  157.615316][ T6508] (syz.3.705,6508,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  157.643658][ T6516] loop0: detected capacity change from 0 to 40427
[  157.687272][ T6529] loop5: detected capacity change from 0 to 2048
[  157.698763][ T6516] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  157.718487][ T6508] JBD2: Ignoring recovery information on journal
[  157.781594][ T6534] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.830299][ T6516] F2FS-fs (loop0): invalid crc value
[  157.846239][ T6519] loop1: detected capacity change from 0 to 32768
[  157.848934][ T6529] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  157.872197][ T6508] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.895972][ T6516] F2FS-fs (loop0): Found nat_bits in checkpoint
[  157.916701][ T6519] JBD2: Ignoring recovery information on journal
[  158.059042][ T6516] F2FS-fs (loop0): recover fsync data on readonly fs
[  158.067376][ T6516] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  158.075328][ T6519] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  158.084797][ T6529] Remounting filesystem read-only
[  158.089767][ T6516] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  158.179348][ T6516] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  158.343056][ T6516] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[  158.442289][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  158.465754][ T6009] tipc: Subscription rejected, illegal request
[  158.467220][ T4271] ocfs2: Unmounting device (7,1) on (node local)
[  158.799527][ T6551] device bond0 entered promiscuous mode
[  158.823817][ T6551] device bond_slave_0 entered promiscuous mode
[  158.836969][ T6551] device bond_slave_1 entered promiscuous mode
[  158.903856][ T6551] device batadv0 entered promiscuous mode
[  158.934725][ T6551] 8021q: adding VLAN 0 to HW filter on device hsr1
[  158.956499][ T6555] loop3: detected capacity change from 0 to 512
[  158.962716][ T6551] device bond0 left promiscuous mode
[  158.976288][ T6551] device bond_slave_0 left promiscuous mode
[  158.981948][ T6555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  158.994833][ T6551] device bond_slave_1 left promiscuous mode
[  159.050650][ T6551] device batadv0 left promiscuous mode
[  159.075166][ T6555] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.701: corrupted in-inode xattr
[  159.193647][ T6555] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.701: couldn't read orphan inode 15 (err -117)
[  159.268697][ T6555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  159.627561][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  159.742551][ T6553] loop5: detected capacity change from 0 to 32768
[  160.220353][ T6582] loop0: detected capacity change from 0 to 512
[  160.305887][ T6582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  160.472762][ T5151] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  160.504312][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  160.638448][ T4299] tipc: Subscription rejected, illegal request
[  160.676584][ T5151] usb 4-1: Using ep0 maxpacket: 32
[  160.684685][ T5151] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  160.723607][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.766219][ T6587] loop4: detected capacity change from 0 to 32768
[  160.779096][ T5151] usb 4-1: config 0 descriptor??
[  160.819759][ T6587] JBD2: Ignoring recovery information on journal
[  160.846651][ T5151] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  161.008524][ T6602] loop5: detected capacity change from 0 to 7
[  161.015979][ T6587] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  161.039843][ T4263] Dev loop5: unable to read RDB block 7
[  161.045645][ T4263]  loop5: unable to read partition table
[  161.078674][ T4263] loop5: partition table beyond EOD, truncated
[  161.108215][ T6602] Dev loop5: unable to read RDB block 7
[  161.123896][ T6602]  loop5: unable to read partition table
[  161.149854][ T6602] loop5: partition table beyond EOD, truncated
[  161.206993][ T6602] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  161.297306][ T4273] ocfs2: Unmounting device (7,4) on (node local)
[  161.330002][ T6605] loop1: detected capacity change from 0 to 8192
[  161.388930][ T6605] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  161.404653][ T6605] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  161.419148][ T6605] REISERFS (device loop1): using ordered data mode
[  161.428169][ T6605] reiserfs: using flush barriers
[  161.438863][ T6605] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  161.460722][ T6605] REISERFS (device loop1): checking transaction log (loop1)
[  161.480086][ T6605] REISERFS (device loop1): Using r5 hash to sort names
[  161.494996][ T6605] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  161.688884][ T5151] gspca_vc032x: reg_w err -71
[  161.694432][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.699756][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.706580][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.712548][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.718394][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.724180][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.729571][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.740944][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.746441][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.751740][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.758635][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.764241][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.769802][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.775340][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.780642][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.787016][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.792475][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.797862][ T5151] gspca_vc032x: I2c Bus Busy Wait 00
[  161.803396][ T5151] gspca_vc032x: Unknown sensor...
[  161.808491][ T5151] vc032x: probe of 4-1:0.0 failed with error -22
[  161.817536][ T5151] usb 4-1: USB disconnect, device number 7
[  162.850835][ T6618] loop5: detected capacity change from 0 to 32768
[  162.940900][ T6622] loop3: detected capacity change from 0 to 32768
[  163.451324][ T6629] loop4: detected capacity change from 0 to 16
[  163.509041][ T6629] erofs: (device loop4): mounted with root inode @ nid 36.
[  163.582897][ T6629] syz.4.726: attempt to access beyond end of device
[  163.582897][ T6629] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  163.633528][ T6629] syz.4.726: attempt to access beyond end of device
[  163.633528][ T6629] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  163.722430][   T26] audit: type=1800 audit(1782789733.732:27): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.726" name="file1" dev="loop4" ino=86 res=0 errno=0
[  163.783592][ T6638] loop1: detected capacity change from 0 to 512
[  163.974085][ T6638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  164.095564][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  164.138866][ T6652] Cannot find add_set index 4 as target
[  164.339850][ T6009] tipc: Subscription rejected, illegal request
[  164.678454][ T6009] tipc: Subscription rejected, illegal request
[  164.745691][ T6647] loop4: detected capacity change from 0 to 32768
[  164.789590][ T6647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.730 (6647)
[  164.839045][ T6647] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.859672][ T6647] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  164.879908][ T6647] BTRFS info (device loop4): using free space tree
[  164.932685][ T4318] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  165.112844][ T4318] usb 6-1: Using ep0 maxpacket: 32
[  165.123099][ T6647] BTRFS info (device loop4): enabling ssd optimizations
[  165.131134][ T4318] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  165.162565][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.213635][ T4318] usb 6-1: config 0 descriptor??
[  165.270152][ T4318] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  165.396060][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.426292][ T6664] loop0: detected capacity change from 0 to 32768
[  165.559144][ T6664] JBD2: Ignoring recovery information on journal
[  165.660367][ T6664] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  165.831593][ T6484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (6484)
[  165.931775][ T4274] ocfs2: Unmounting device (7,0) on (node local)
[  166.081945][ T4318] gspca_vc032x: reg_w err -71
[  166.090309][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.102665][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.118199][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.138468][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.158713][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.168829][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.185178][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.212463][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.231150][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.259134][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.276245][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.301908][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.317837][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.333743][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.353967][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.364077][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.369393][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.395162][ T4318] gspca_vc032x: I2c Bus Busy Wait 00
[  166.415389][ T4318] gspca_vc032x: Unknown sensor...
[  166.430337][ T4318] vc032x: probe of 6-1:0.0 failed with error -22
[  166.458300][ T4318] usb 6-1: USB disconnect, device number 4
[  166.567079][ T6695] loop3: detected capacity change from 0 to 32768
[  166.588737][ T6695] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  166.841044][ T6484] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  167.507162][ T6710] loop0: detected capacity change from 0 to 32768
[  167.551785][ T6708] loop4: detected capacity change from 0 to 32768
[  167.558481][ T6710] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  167.608615][ T6713] loop5: detected capacity change from 0 to 32768
[  167.627927][ T6708] 
[  167.627927][ T6708]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  167.627927][ T6708] 
[  167.661596][ T6713] (syz.5.742,6713,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  167.734708][ T6713] (syz.5.742,6713,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  167.824319][ T6713] JBD2: Ignoring recovery information on journal
[  167.831246][ T4273] 
[  167.831246][ T4273]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  167.831246][ T4273] 
[  167.869635][ T6715] loop1: detected capacity change from 0 to 32768
[  167.887560][ T6484] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  167.903825][ T4273] 
[  167.903825][ T4273]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  167.903825][ T4273] 
[  167.975809][ T6713] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  168.392382][ T5919] ocfs2: Unmounting device (7,5) on (node local)
[  169.679893][ T6759] netlink: 47 bytes leftover after parsing attributes in process `syz.3.762'.
[  169.800709][ T6763] loop1: detected capacity change from 0 to 128
[  169.861611][ T6761] loop0: detected capacity change from 0 to 2048
[  169.879031][ T6763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  169.922748][ T6763] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.010339][ T6772] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.151280][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  170.348504][ T6781] loop0: detected capacity change from 0 to 1024
[  170.374789][ T6781] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.412334][ T6781] EXT4-fs: inline encryption not supported
[  170.440351][ T6781] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.480157][ T6781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.571807][ T6781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  170.601547][ T6781] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.707520][ T6781] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.782: bg 0: block 112: padding at end of block bitmap is not set
[  170.773772][ T6781] EXT4-fs (loop0): Remounting filesystem read-only
[  170.821890][ T6796] loop4: detected capacity change from 0 to 8192
[  170.907856][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  170.917233][ T6796] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  171.030966][ T6796] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  171.090100][ T6796] REISERFS (device loop4): using ordered data mode
[  171.122679][ T6796] reiserfs: using flush barriers
[  171.167537][ T6796] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  171.180668][ T6812] loop3: detected capacity change from 0 to 128
[  171.271913][ T6812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  171.301123][ T6796] REISERFS (device loop4): checking transaction log (loop4)
[  171.368774][ T6796] REISERFS (device loop4): Using r5 hash to sort names
[  171.401615][ T6812] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  171.421982][   T26] audit: type=1326 audit(1782789741.432:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  171.453048][ T6796] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  171.512118][ T6812] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  171.540733][   T26] audit: type=1326 audit(1782789741.482:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  171.635039][   T26] audit: type=1326 audit(1782789741.482:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  171.759472][   T26] audit: type=1326 audit(1782789741.482:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  171.788329][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  171.854074][ T6830] loop5: detected capacity change from 0 to 512
[  171.870459][   T26] audit: type=1326 audit(1782789741.482:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  171.914375][ T6830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  171.960662][ T6830] EXT4-fs (loop5): 1 truncate cleaned up
[  171.967279][   T26] audit: type=1326 audit(1782789741.482:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  172.013183][ T6830] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  172.048826][   T26] audit: type=1326 audit(1782789741.482:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  172.172939][   T26] audit: type=1326 audit(1782789741.482:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  172.220396][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  172.308982][ T6816] loop0: detected capacity change from 0 to 32768
[  172.322668][   T26] audit: type=1326 audit(1782789741.482:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.5.785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f46d099ce59 code=0x7ffc0000
[  172.375006][ T6816] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.780 (6816)
[  172.458140][ T6816] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  172.484391][ T6816] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  172.509972][ T6816] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  172.535744][ T6816] BTRFS info (device loop0): use zstd compression, level 3
[  172.550741][ T6816] BTRFS info (device loop0): using free space tree
[  172.700073][ T6816] BTRFS info (device loop0): enabling ssd optimizations
[  172.851861][ T4274] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.275682][ T6883] sch_fq: defrate 0 ignored.
[  173.746460][ T6900] loop3: detected capacity change from 0 to 1024
[  173.770780][ T6900] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.809630][ T6900] EXT4-fs: inline encryption not supported
[  173.839041][ T6900] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.860775][ T6900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  173.954626][ T6900] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  173.982772][ T6900] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.039365][ T6900] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.797: bg 0: block 112: padding at end of block bitmap is not set
[  174.087463][ T6900] EXT4-fs (loop3): Remounting filesystem read-only
[  174.181139][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  174.818038][ T6934] loop0: detected capacity change from 0 to 4096
[  174.973475][ T6945] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.702490][ T6943] loop1: detected capacity change from 0 to 131072
[  175.741578][ T6943] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  175.749802][ T6943] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  175.803054][ T6943] F2FS-fs (loop1): invalid crc value
[  175.874850][ T6943] F2FS-fs (loop1): Found nat_bits in checkpoint
[  175.958090][ T6943] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  175.965725][ T6943] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  176.020632][ T6938] loop5: detected capacity change from 0 to 32768
[  176.094735][ T6938] JBD2: Ignoring recovery information on journal
[  176.229965][ T6938] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  176.451032][ T6976] loop4: detected capacity change from 0 to 1024
[  176.495983][ T5919] ocfs2: Unmounting device (7,5) on (node local)
[  176.503609][ T6976] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.510233][ T6976] EXT4-fs: inline encryption not supported
[  176.585938][ T6976] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.628439][ T6976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.729487][ T6976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  176.742781][ T6976] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.860343][ T6976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.818: bg 0: block 112: padding at end of block bitmap is not set
[  176.916166][ T6976] EXT4-fs (loop4): Remounting filesystem read-only
[  177.052446][ T6997] loop3: detected capacity change from 0 to 4096
[  177.125396][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  177.204916][ T7002] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.404023][ T7006] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  177.754073][ T7024] Bluetooth: hci5: Frame reassembly failed (-84)
[  177.773868][   T33] Bluetooth: hci5: Frame reassembly failed (-84)
[  178.705236][ T7022] loop4: detected capacity change from 0 to 40427
[  178.739361][ T7022] F2FS-fs (loop4): invalid crc value
[  178.781707][ T7034] loop3: detected capacity change from 0 to 32768
[  178.781801][ T7022] F2FS-fs (loop4): Found nat_bits in checkpoint
[  178.800005][ T7055] loop5: detected capacity change from 0 to 512
[  178.859494][ T7034] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  178.918536][ T7055] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.841: inode has both inline data and extents flags
[  178.965834][ T7022] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  178.986035][ T7022] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  179.104066][ T7055] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.841: couldn't read orphan inode 15 (err -117)
[  179.147025][ T7055] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  179.224403][ T7055] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.841: directory missing '.'
[  179.266174][ T7022] syz.4.827: attempt to access beyond end of device
[  179.266174][ T7022] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  179.363599][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  179.823544][ T4286] Bluetooth: hci5: command 0x1003 tx timeout
[  179.832365][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  180.005368][ T7080] program syz.5.845 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  180.042313][ T7078] loop4: detected capacity change from 0 to 4096
[  180.122496][ T7084] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.227674][ T7078] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  180.657440][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  180.924382][ T7104] loop1: detected capacity change from 0 to 512
[  180.931413][ T7104] EXT4-fs: Ignoring removed nomblk_io_submit option
[  181.059034][ T7104] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  181.081991][ T7104] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  181.121314][ T7104] EXT4-fs (loop1): orphan cleanup on readonly fs
[  181.128000][ T7104] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  181.138059][ T7104] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  181.158598][ T7104] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  181.176088][ T7104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.855: bg 0: block 40: padding at end of block bitmap is not set
[  181.199839][ T7104] EXT4-fs (loop1): Remounting filesystem read-only
[  181.292672][ T7104] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  181.341921][ T7104] EXT4-fs (loop1): Remounting filesystem read-only
[  181.353158][ T7104] EXT4-fs (loop1): 1 truncate cleaned up
[  181.369110][ T7104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  181.454419][ T7104] EXT4-fs (loop1): shut down requested (1)
[  181.546637][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  181.641750][ T7095] loop5: detected capacity change from 0 to 32768
[  181.706981][ T7095] (syz.5.850,7095,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  181.748855][ T7095] (syz.5.850,7095,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  181.801653][ T7128] loop1: detected capacity change from 0 to 4096
[  181.829812][ T7095] JBD2: Ignoring recovery information on journal
[  181.932659][ T7131] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.973778][ T7095] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  182.017424][ T7128] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  182.051834][   T26] audit: type=1800 audit(1782789752.062:37): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.850" name="file1" dev="loop5" ino=16979 res=0 errno=0
[  182.244769][ T5919] ocfs2: Unmounting device (7,5) on (node local)
[  182.280650][ T7138] loop0: detected capacity change from 0 to 2048
[  182.393392][ T7138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  182.432805][ T7138] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.482032][ T7148] loop4: detected capacity change from 0 to 128
[  182.588371][ T7148] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  182.653201][ T7148] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  182.698253][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  182.842479][   T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  182.875228][ T7158] loop3: detected capacity change from 0 to 4096
[  182.937569][ T7162] loop1: detected capacity change from 0 to 128
[  182.999291][ T7162] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  183.075493][ T7162] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  183.180800][ T7162] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  183.404071][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  183.430091][ T7178] xt_hashlimit: size too large, truncated to 1048576
[  184.007330][ T7197] set_capacity_and_notify: 1 callbacks suppressed
[  184.007350][ T7197] loop3: detected capacity change from 0 to 512
[  184.054974][ T7197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  184.073104][ T7197] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  184.173446][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  184.829526][ T7222] sctp: [Deprecated]: syz.3.896 (pid 7222) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.829526][ T7222] Use struct sctp_sack_info instead
[  185.207059][ T7234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.902'.
[  185.325038][   T26] audit: type=1326 audit(1782789755.342:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7bf9ce59 code=0x0
[  185.352633][ T4376] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  185.459611][ T7228] loop3: detected capacity change from 0 to 40427
[  185.477851][ T7228] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  185.485325][ T7228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  185.507664][ T7228] F2FS-fs (loop3): invalid crc_offset: 1
[  185.537851][ T7228] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  185.546298][ T4376] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  185.569973][ T4376] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  185.592684][ T4376] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  185.611967][ T4376] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  185.632675][ T4376] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  185.664595][ T4376] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  185.682724][ T4376] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  185.705742][ T4376] usb 5-1: Product: syz
[  185.710352][ T7228] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  185.717961][ T4376] usb 5-1: Manufacturer: syz
[  185.718568][ T7228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  185.736071][ T4376] cdc_wdm 5-1:1.0: skipping garbage
[  185.741298][ T4376] cdc_wdm 5-1:1.0: skipping garbage
[  185.800197][ T4376] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  185.810989][ T4272] syz-executor: attempt to access beyond end of device
[  185.810989][ T4272] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  185.816565][ T4376] cdc_wdm 5-1:1.0: Unknown control protocol
[  185.980046][ T5155] usb 5-1: USB disconnect, device number 6
[  186.579208][ T7256] loop3: detected capacity change from 0 to 512
[  186.654744][ T7256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  186.794194][ T7256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  186.832985][ T7256] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.977265][ T7277] loop1: detected capacity change from 0 to 512
[  187.042892][ T7277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  187.139669][ T7277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002]
[  187.178706][ T7277] System zones: 1-12
[  187.209723][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  187.244813][ T7277] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.915: bad orphan inode 16
[  187.314361][ T7277] ext4_test_bit(bit=15, block=4) = 0
[  187.341048][ T7277] EXT4-fs (loop1): 1 orphan inode deleted
[  187.376038][ T7277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  187.602534][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  187.869314][ T7275] loop4: detected capacity change from 0 to 131072
[  187.929149][ T7275] XFS (loop4): Mounting V5 Filesystem
[  187.963362][ T7269] loop5: detected capacity change from 0 to 40427
[  187.982959][ T7269] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  187.994146][ T7269] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  188.012066][ T7269] F2FS-fs (loop5): invalid crc value
[  188.074114][ T7275] XFS (loop4): Starting recovery (logdev: internal)
[  188.109488][ T7275] XFS (loop4): Ending recovery (logdev: internal)
[  188.128637][ T7269] F2FS-fs (loop5): Found nat_bits in checkpoint
[  188.135798][ T7302] mmap: syz.3.916 (7302) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  188.151542][ T7275] XFS (loop4): Unmounting Filesystem
[  188.428569][ T7269] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  188.477069][ T7269] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  189.131532][ T7329] loop1: detected capacity change from 0 to 512
[  189.160251][ T7329] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  189.242320][ T7329] EXT4-fs (loop1): 1 truncate cleaned up
[  189.292710][ T7329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  189.474696][ T5155] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  189.495883][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  189.688049][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  189.707268][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  189.737693][ T5155] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  189.777099][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.832283][ T5155] usb 4-1: config 0 descriptor??
[  189.846187][ T7350] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  189.871226][ T7333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  190.109876][ T5523] usb 4-1: USB disconnect, device number 8
[  190.321097][ T7340] loop4: detected capacity change from 0 to 32768
[  190.362154][ T7340] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.384090][ T7340] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  190.403107][ T7340] BTRFS info (device loop4): force clearing of disk cache
[  190.410305][ T7340] BTRFS info (device loop4): enabling auto defrag
[  190.424148][ T5155] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  190.425937][ T7340] BTRFS info (device loop4): max_inline at 428
[  190.471567][ T7340] BTRFS info (device loop4): enabling disk space caching
[  190.484366][ T7340] BTRFS info (device loop4): disk space caching is enabled
[  190.644258][ T5155] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  190.663310][ T7368] loop0: detected capacity change from 0 to 4096
[  190.682776][ T5155] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.716813][ T5155] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  190.726553][ T5155] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  190.736251][ T5155] usb 6-1: Product: syz
[  190.740870][ T5155] usb 6-1: Manufacturer: syz
[  190.749266][ T5155] hub 6-1:4.0: USB hub found
[  190.809876][ T7340] BTRFS info (device loop4): enabling ssd optimizations
[  190.816248][ T7368] ntfs: volume version 3.1.
[  190.826650][ T7340] BTRFS info (device loop4): rebuilding free space tree
[  190.874583][ T7340] BTRFS info (device loop4): disabling free space tree
[  190.896430][ T7340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  190.948169][ T7340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  190.953891][ T5155] hub 6-1:4.0: 2 ports detected
[  191.155142][ T4299] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  191.182738][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  191.197168][ T4283] Bluetooth: hci2: command 0x0406 tx timeout
[  191.197176][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[  191.404532][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.574419][ T5155] usb 6-1: USB disconnect, device number 5
[  192.251828][ T7418] can0: slcan on ttyS3.
[  192.266871][ T7421] loop3: detected capacity change from 0 to 1024
[  192.413360][ T7417] can0 (unregistered): slcan off ttyS3.
[  192.508316][ T7421] hfsplus: xattr search failed
[  192.664083][ T7432] process 'syz.4.960' launched './file1' with NULL argv: empty string added
[  192.691968][ T7426] loop5: detected capacity change from 0 to 8192
[  192.822929][ T7426] syz.5.958: attempt to access beyond end of device
[  192.822929][ T7426] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  192.889464][ T7438] loop1: detected capacity change from 0 to 1024
[  192.919708][ T7426] Buffer I/O error on dev loop5, logical block 57847, async page read
[  192.979144][ T7426] syz.5.958: attempt to access beyond end of device
[  192.979144][ T7426] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  193.014837][ T7438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  193.090090][ T7426] Buffer I/O error on dev loop5, logical block 57847, async page read
[  193.103967][   T26] audit: type=1800 audit(1782789763.122:39): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.958" name="file2" dev="loop5" ino=1048620 res=0 errno=0
[  193.142455][ T7438] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.963: inline data xattr refers to an external xattr inode
[  193.280740][ T7456] netlink: 56 bytes leftover after parsing attributes in process `syz.4.967'.
[  193.332312][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  193.426198][ T5148] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  193.570559][ T7468] loop4: detected capacity change from 0 to 512
[  193.634504][ T5148] usb 4-1: config 0 has no interfaces?
[  193.648954][ T5148] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  193.685081][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.718061][ T5148] usb 4-1: Product: syz
[  193.722266][ T5148] usb 4-1: Manufacturer: syz
[  193.730376][ T5148] usb 4-1: SerialNumber: syz
[  193.777800][ T5148] usb 4-1: config 0 descriptor??
[  193.846752][ T7473] loop5: detected capacity change from 0 to 512
[  193.893543][ T7473] EXT4-fs: Ignoring removed nomblk_io_submit option
[  193.961479][ T7477] loop1: detected capacity change from 0 to 16
[  193.979311][ T7473] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  193.988341][ T7477] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  194.009536][ T5148] usb 4-1: USB disconnect, device number 9
[  194.027231][ T6481] udevd[6481]: incorrect cramfs checksum on /dev/loop1
[  194.029365][ T7473] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  194.045361][ T7473] EXT4-fs (loop5): orphan cleanup on readonly fs
[  194.063596][ T4316] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  194.077855][ T7473] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  194.118118][ T7473] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  194.120167][ T6481] udevd[6481]: incorrect cramfs checksum on /dev/loop1
[  194.162878][ T7473] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  194.171679][ T7473] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.972: bg 0: block 40: padding at end of block bitmap is not set
[  194.186614][ T7473] EXT4-fs (loop5): Remounting filesystem read-only
[  194.193428][ T7473] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  194.208979][ T7473] EXT4-fs (loop5): Remounting filesystem read-only
[  194.220266][ T7473] EXT4-fs (loop5): 1 truncate cleaned up
[  194.238634][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  194.245823][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  194.255132][ T7473] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  194.273907][ T4316] usb 5-1: Using ep0 maxpacket: 16
[  194.293791][ T4316] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  194.332282][ T4316] usb 5-1: config 0 has no interface number 0
[  194.353151][ T4316] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  194.402795][ T4316] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  194.416455][ T7473] EXT4-fs (loop5): shut down requested (1)
[  194.448037][ T4316] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  194.468448][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  194.517491][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  194.521671][ T4316] usb 5-1: Product: syz
[  194.539266][ T4316] usb 5-1: SerialNumber: syz
[  194.571276][ T4316] usb 5-1: config 0 descriptor??
[  194.607216][ T4316] cm109 5-1:0.8: invalid payload size 0, expected 4
[  194.659021][ T4316] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11
[  194.680229][ T7497] loop5: detected capacity change from 0 to 1024
[  194.719947][ T7497] EXT4-fs: Ignoring removed mblk_io_submit option
[  194.823583][ T7497] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  194.833590][ T7494] loop1: detected capacity change from 0 to 8192
[  194.871568][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.913431][   T26] audit: type=1800 audit(1782789764.932:40): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.977" name="bus" dev="loop1" ino=1048622 res=0 errno=0
[  195.004521][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.063992][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  195.088596][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  195.097967][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  195.105643][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  195.112906][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  195.120157][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  195.127371][ T4316] usb 5-1: USB disconnect, device number 7
[  195.136656][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  195.143623][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  195.151879][ T7508] loop3: detected capacity change from 0 to 8192
[  195.163712][ T4316] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  195.164656][ T7506] loop0: detected capacity change from 0 to 4096
[  195.245347][ T7506] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  195.299678][ T7508] syz.3.981: attempt to access beyond end of device
[  195.299678][ T7508] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  195.308951][ T7511] loop5: detected capacity change from 0 to 256
[  195.435164][ T7508] Buffer I/O error on dev loop3, logical block 57847, async page read
[  195.484277][ T7508] syz.3.981: attempt to access beyond end of device
[  195.484277][ T7508] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  195.572819][ T7508] Buffer I/O error on dev loop3, logical block 57847, async page read
[  195.599579][ T4274] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  195.667823][ T4274] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  195.702703][ T4274] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  195.738497][   T26] audit: type=1800 audit(1782789765.752:41): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.981" name="file2" dev="loop3" ino=1048623 res=0 errno=0
[  196.073441][ T7525] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  196.080543][ T7525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  196.153704][ T7525] vhci_hcd vhci_hcd.0: Device attached
[  196.188144][ T7530] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  196.194699][ T7530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.257771][ T7530] vhci_hcd vhci_hcd.0: Device attached
[  196.300279][ T7525] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5)
[  196.306833][ T7525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.357259][ T7525] vhci_hcd vhci_hcd.0: Device attached
[  196.362825][ T5148] vhci_hcd: vhci_device speed not set
[  196.390313][ T7535] vhci_hcd: connection closed
[  196.392788][ T7533] vhci_hcd: connection closed
[  196.397672][ T7526] vhci_hcd: connection closed
[  196.411071][ T4299] vhci_hcd: stop threads
[  196.442774][ T5148] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  196.453255][ T7527] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  196.480625][ T4299] vhci_hcd: release socket
[  196.487730][ T4299] vhci_hcd: disconnect device
[  196.493489][ T4299] vhci_hcd: stop threads
[  196.497755][ T4299] vhci_hcd: release socket
[  196.502281][ T4299] vhci_hcd: disconnect device
[  196.511567][ T4299] vhci_hcd: stop threads
[  196.516286][ T4299] vhci_hcd: release socket
[  196.520879][ T4299] vhci_hcd: disconnect device
[  196.867676][ T7553] loop4: detected capacity change from 0 to 4096
[  196.906278][ T7553] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  197.094765][ T4273] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  197.112448][ T4273] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  197.129597][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  197.212895][ T6484] blk_print_req_error: 23 callbacks suppressed
[  197.212912][ T6484] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  197.213215][ T7559] loop0: detected capacity change from 0 to 8192
[  197.308921][ T7563] loop5: detected capacity change from 0 to 128
[  197.381232][ T7559] syz.0.998: attempt to access beyond end of device
[  197.381232][ T7559] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  197.402966][ T7567] loop1: detected capacity change from 0 to 256
[  197.427983][ T7559] Buffer I/O error on dev loop0, logical block 57847, async page read
[  197.498992][ T7559] syz.0.998: attempt to access beyond end of device
[  197.498992][ T7559] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  197.524562][ T7567] FAT-fs (loop1): Directory bread(block 64) failed
[  197.538897][ T7567] FAT-fs (loop1): Directory bread(block 65) failed
[  197.552670][ T4317] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  197.560637][ T7559] Buffer I/O error on dev loop0, logical block 57847, async page read
[  197.580741][ T7567] FAT-fs (loop1): Directory bread(block 66) failed
[  197.600902][ T7567] FAT-fs (loop1): Directory bread(block 67) failed
[  197.611848][   T26] audit: type=1800 audit(1782789767.632:42): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.998" name="file2" dev="loop0" ino=1048628 res=0 errno=0
[  197.644974][ T7567] FAT-fs (loop1): Directory bread(block 68) failed
[  197.663268][ T7567] FAT-fs (loop1): Directory bread(block 69) failed
[  197.669897][ T7567] FAT-fs (loop1): Directory bread(block 70) failed
[  197.707609][ T7567] FAT-fs (loop1): Directory bread(block 71) failed
[  197.728714][ T7567] FAT-fs (loop1): Directory bread(block 72) failed
[  197.735687][ T7567] FAT-fs (loop1): Directory bread(block 73) failed
[  197.758197][ T7559] syz.0.998 (7559) used greatest stack depth: 20224 bytes left
[  197.785702][ T4317] usb 4-1: unable to read config index 0 descriptor/start: -71
[  197.799508][ T4317] usb 4-1: can't read configurations, error -71
[  198.137008][ T7583] loop0: detected capacity change from 0 to 512
[  198.197658][ T7583] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1009: inode has both inline data and extents flags
[  198.251806][ T7583] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1009: couldn't read orphan inode 15 (err -117)
[  198.312831][ T7583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  198.481033][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  198.641233][ T7593] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  198.892185][ T7592] ntfs: volume version 3.1.
[  199.005731][ T7603] sock: sock_timestamping_bind_phc: sock not bind to device
[  199.010525][ T7572] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  199.077647][ T7572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  199.105214][ T7572] F2FS-fs (loop4): invalid crc_offset: 1
[  199.161937][ T7572] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  199.202762][   T26] audit: type=1326 audit(1782789769.212:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.302301][   T26] audit: type=1326 audit(1782789769.252:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.437958][ T7572] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  199.463186][   T26] audit: type=1326 audit(1782789769.252:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.473109][ T7572] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  199.531783][   T26] audit: type=1326 audit(1782789769.252:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.633535][   T26] audit: type=1326 audit(1782789769.252:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.706623][   T26] audit: type=1326 audit(1782789769.252:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.778222][   T26] audit: type=1326 audit(1782789769.252:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.781390][ T4273] syz-executor: attempt to access beyond end of device
[  199.781390][ T4273] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  199.803778][ T4317] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  199.879986][ T7627] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  199.917006][   T26] audit: type=1326 audit(1782789769.252:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  199.983193][   T26] audit: type=1326 audit(1782789769.252:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  200.070328][   T26] audit: type=1326 audit(1782789769.252:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.1016" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1fd9ce59 code=0x7ffc0000
[  200.077563][ T4317] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  200.141838][ T7629] set_capacity_and_notify: 2 callbacks suppressed
[  200.141854][ T7629] loop1: detected capacity change from 0 to 1024
[  200.149853][ T4317] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  200.242747][ T4317] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  200.251761][ T4317] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  200.260006][ T7629] hfsplus: xattr search failed
[  200.276180][ T7631] loop3: detected capacity change from 0 to 2048
[  200.319847][ T7631] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  200.322444][ T4317] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  200.391200][ T7631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.404616][ T4317] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  200.432652][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  200.460974][ T4317] usb 6-1: Product: syz
[  200.468861][ T4317] usb 6-1: Manufacturer: syz
[  200.494842][ T4317] cdc_wdm 6-1:1.0: skipping garbage
[  200.500084][ T4317] cdc_wdm 6-1:1.0: skipping garbage
[  200.543414][ T4317] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  200.549363][ T4317] cdc_wdm 6-1:1.0: Unknown control protocol
[  200.691949][ T7635] loop1: detected capacity change from 0 to 4096
[  200.700640][ T7625] loop0: detected capacity change from 0 to 40427
[  200.746801][ T7625] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  200.772210][ T7625] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  200.803436][ T7635] ntfs: volume version 3.1.
[  200.805997][ T7625] F2FS-fs (loop0): invalid crc value
[  200.885994][ T7625] F2FS-fs (loop0): Found nat_bits in checkpoint
[  200.938369][ T4317] usb 6-1: USB disconnect, device number 6
[  201.049632][ T7625] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  201.068429][ T7625] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  201.227932][ T7651] loop3: detected capacity change from 0 to 4096
[  201.242750][ T7625] syz.0.1024: attempt to access beyond end of device
[  201.242750][ T7625] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.380046][ T7651] ntfs: volume version 3.1.
[  201.583026][ T5148] vhci_hcd: vhci_device speed not set
[  202.196407][ T7671] loop0: detected capacity change from 0 to 1024
[  202.298142][ T7671] hfsplus: xattr search failed
[  202.482045][ T7656] loop1: detected capacity change from 0 to 40427
[  202.512066][ T7656] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  202.549928][ T7656] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  202.576690][ T7656] F2FS-fs (loop1): invalid crc_offset: 1
[  202.634702][ T7656] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  202.659751][ T7662] loop5: detected capacity change from 0 to 32768
[  202.750302][ T7662] XFS (loop5): Mounting V5 Filesystem
[  202.838209][ T7656] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  202.882694][ T7656] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  202.926050][ T7662] XFS (loop5): Ending clean mount
[  203.077756][ T7690] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1046'.
[  203.139164][ T5919] XFS (loop5): Unmounting Filesystem
[  203.158329][ T4271] syz-executor: attempt to access beyond end of device
[  203.158329][ T4271] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  203.676357][ T7700] netem: change failed
[  203.871144][ T7702] loop4: detected capacity change from 0 to 4096
[  203.975590][ T7702] ntfs: volume version 3.1.
[  204.022780][ T4316] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  204.234359][ T4316] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  204.248671][ T4316] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  204.280503][ T4316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  204.322522][ T4316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  204.359061][ T4316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  204.391521][ T4316] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  204.420730][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  204.448056][ T4316] usb 2-1: Product: syz
[  204.452262][ T4316] usb 2-1: Manufacturer: syz
[  204.500316][ T4316] cdc_wdm 2-1:1.0: skipping garbage
[  204.505829][ T4316] cdc_wdm 2-1:1.0: skipping garbage
[  204.558604][ T4316] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  204.579394][ T4316] cdc_wdm 2-1:1.0: Unknown control protocol
[  204.782195][ T4317] usb 2-1: USB disconnect, device number 11
[  205.087726][ T7743] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  205.094287][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  205.163904][ T7743] vhci_hcd vhci_hcd.0: Device attached
[  205.171071][ T7749] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[  205.177620][ T7749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  205.247228][ T7747] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5)
[  205.253796][ T7747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  205.324876][ T7749] vhci_hcd vhci_hcd.0: Device attached
[  205.359336][ T7747] vhci_hcd vhci_hcd.0: Device attached
[  205.365574][ T5148] vhci_hcd: vhci_device speed not set
[  205.419979][ T7719] loop3: detected capacity change from 0 to 32768
[  205.434628][ T5148] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  205.435894][ T7751] vhci_hcd: connection closed
[  205.458405][   T51] vhci_hcd: stop threads
[  205.467844][   T51] vhci_hcd: release socket
[  205.473961][ T7750] vhci_hcd: connection closed
[  205.479592][   T51] vhci_hcd: disconnect device
[  205.489488][ T7744] vhci_hcd: connection reset by peer
[  205.509683][ T7761] loop1: detected capacity change from 0 to 64
[  205.517531][   T51] vhci_hcd: stop threads
[  205.521803][   T51] vhci_hcd: release socket
[  205.542949][   T51] vhci_hcd: disconnect device
[  205.553090][   T51] vhci_hcd: stop threads
[  205.562856][   T51] vhci_hcd: release socket
[  205.572926][   T51] vhci_hcd: disconnect device
[  205.686289][ T7761] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  205.708281][ T7719] XFS (loop3): Mounting V5 Filesystem
[  205.852971][ T7774] loop5: detected capacity change from 0 to 512
[  205.863575][ T7719] XFS (loop3): Ending clean mount
[  205.890685][ T7774] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  205.930999][ T7774] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.154149][ T4272] XFS (loop3): Unmounting Filesystem
[  206.480404][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  206.572871][ T4318] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  206.762802][ T4318] usb 5-1: Using ep0 maxpacket: 32
[  206.775360][ T4318] usb 5-1: config 246 has an invalid interface number: 166 but max is 0
[  206.803986][ T4318] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  206.858745][ T4318] usb 5-1: config 246 has no interface number 0
[  206.867138][ T4318] usb 5-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  206.882393][ T4318] usb 5-1: config 246 interface 166 has no altsetting 0
[  206.906301][ T4318] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  206.925790][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.949634][ T4318] usb 5-1: Product: syz
[  206.959465][ T4318] usb 5-1: Manufacturer: syz
[  206.969283][ T4318] usb 5-1: SerialNumber: syz
[  207.207752][ T5155] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  207.427075][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.450524][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.485669][ T7799] loop5: detected capacity change from 0 to 32768
[  207.492246][ T5155] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  207.517344][ T7805] loop3: detected capacity change from 0 to 32768
[  207.530770][ T5155] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  207.543988][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.555761][ T5155] usb 2-1: config 0 descriptor??
[  207.572679][ T7799] JBD2: Ignoring recovery information on journal
[  207.603950][ T4318] usb 5-1: Limiting number of CPorts to U8_MAX
[  207.606198][ T7805] XFS (loop3): Mounting V5 Filesystem
[  207.625226][ T4318] usb 5-1: Not enough endpoints found in device, aborting!
[  207.669022][ T7799] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  207.810987][ T5149] usb 5-1: USB disconnect, device number 8
[  207.843037][ T5919] ocfs2: Unmounting device (7,5) on (node local)
[  207.883013][ T7805] XFS (loop3): Starting recovery (logdev: internal)
[  207.935592][ T7828] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  207.942146][ T7828] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  207.961495][ T7828] vhci_hcd vhci_hcd.0: Device attached
[  207.981976][ T5155] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd
[  208.000602][ T7828] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5)
[  208.007149][ T7828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  208.010504][ T5155] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  208.034196][ T7828] vhci_hcd vhci_hcd.0: Device attached
[  208.052684][ T5155] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  208.069979][ T5155] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  208.097802][ T5155] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  208.112715][ T7833] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7)
[  208.115724][ T5155] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  208.119237][ T7833] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  208.140866][ T5155] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  208.152705][ T4317] vhci_hcd: vhci_device speed not set
[  208.158440][ T7833] vhci_hcd vhci_hcd.0: Device attached
[  208.179350][ T5155] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  208.210407][ T7834] vhci_hcd: connection closed
[  208.211902][   T11] vhci_hcd: stop threads
[  208.222726][ T4317] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  208.225884][   T11] vhci_hcd: release socket
[  208.235910][ T7831] vhci_hcd: connection closed
[  208.236064][ T7829] vhci_hcd: connection closed
[  208.238690][ T5155] usb 2-1: USB disconnect, device number 12
[  208.252072][ T7830] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  208.252284][   T11] vhci_hcd: disconnect device
[  208.280462][ T7805] XFS (loop3): Ending recovery (logdev: internal)
[  208.331634][   T11] vhci_hcd: stop threads
[  208.362674][   T11] vhci_hcd: release socket
[  208.393129][   T11] vhci_hcd: disconnect device
[  208.397984][   T11] vhci_hcd: stop threads
[  208.402238][   T11] vhci_hcd: release socket
[  208.445135][   T11] vhci_hcd: disconnect device
[  208.449021][ T7805] XFS (loop3): User initiated shutdown received.
[  208.492708][ T7805] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  208.520628][ T7838] fido_id[7838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  208.544958][ T7805] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  208.624185][ T4272] XFS (loop3): Unmounting Filesystem
[  208.837328][ T7845] xt_hashlimit: size too large, truncated to 1048576
[  208.990780][ T7848] random: crng reseeded on system resumption
[  209.189632][ T7837] loop0: detected capacity change from 0 to 40427
[  209.216736][ T7837] F2FS-fs (loop0): Invalid log blocks per segment (1)
[  209.224400][ T7837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  209.232742][ T7837] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  209.240867][ T7837] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  209.266049][ T7837] F2FS-fs (loop0): invalid crc value
[  209.305099][ T7837] F2FS-fs (loop0): Found nat_bits in checkpoint
[  209.463856][ T7856] device syz_tun entered promiscuous mode
[  209.485080][ T7837] F2FS-fs (loop0): Start checkpoint disabled!
[  209.503785][ T7855] device syz_tun left promiscuous mode
[  209.553268][ T7837] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  209.567673][ T7837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  209.649943][ T7857] loop5: detected capacity change from 0 to 8192
[  209.720621][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  209.720636][   T26] audit: type=1800 audit(1782790035.734:61): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1091" name="bus" dev="loop5" ino=1048643 res=0 errno=0
[  210.105793][ T7863] bridge0: port 2(bridge_slave_1) entered listening state
[  210.163424][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.482798][ T4316] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  210.542983][ T5148] vhci_hcd: vhci_device speed not set
[  210.652661][ T4322] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  210.684209][ T4316] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  210.702849][ T4316] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.724409][ T4316] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  210.742630][ T4316] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  210.750975][ T4316] usb 4-1: Product: syz
[  210.772640][ T4316] usb 4-1: Manufacturer: syz
[  210.780903][ T4316] hub 4-1:4.0: USB hub found
[  210.854134][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11
[  210.875092][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  210.888304][ T4322] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  210.899072][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.912795][ T4322] usb 2-1: config 0 descriptor??
[  210.987391][ T4316] hub 4-1:4.0: 2 ports detected
[  211.324222][ T4322] hid (null): bogus close delimiter
[  211.330580][ T4322] hid (null): report_id 0 is invalid
[  211.348715][ T4322] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0
[  211.397030][ T4322] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0
[  211.427736][ T4322] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0
[  211.442928][ T4322] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0
[  211.460485][ T4322] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0
[  211.478180][ T4322] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0
[  211.495750][ T4322] megaworld 0003:07B5:0312.0006: unknown main item tag 0x3
[  211.513563][ T4322] megaworld 0003:07B5:0312.0006: bogus close delimiter
[  211.530736][ T4322] megaworld 0003:07B5:0312.0006: item 0 0 2 10 parsing failed
[  211.573132][ T4322] megaworld 0003:07B5:0312.0006: parse failed
[  211.586469][ T4322] megaworld: probe of 0003:07B5:0312.0006 failed with error -22
[  211.614544][ T4316] usb 4-1: USB disconnect, device number 12
[  211.621582][ T4322] usb 2-1: USB disconnect, device number 13
[  212.097322][ T7873] loop4: detected capacity change from 0 to 32768
[  212.218910][ T7873] XFS (loop4): Mounting V5 Filesystem
[  212.431337][ T7873] XFS (loop4): Starting recovery (logdev: internal)
[  212.497397][ T7873] XFS (loop4): Ending recovery (logdev: internal)
[  212.524417][ T7881] loop5: detected capacity change from 0 to 32768
[  212.578394][ T7873] XFS (loop4): User initiated shutdown received.
[  212.598572][ T7873] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  212.621705][ T7873] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  212.721530][ T7881] XFS (loop5): Mounting V5 Filesystem
[  212.812959][ T7905] loop3: detected capacity change from 0 to 32768
[  212.824945][ T7905] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1107 (7905)
[  212.900013][ T7881] XFS (loop5): Ending clean mount
[  212.929727][ T7905] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  212.957908][ T4273] XFS (loop4): Unmounting Filesystem
[  213.000390][ T7905] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  213.072694][ T7905] BTRFS info (device loop3): force zlib compression, level 3
[  213.094384][ T7905] BTRFS info (device loop3): turning on flush-on-commit
[  213.137840][ T7905] BTRFS info (device loop3): max_inline at 4096
[  213.168215][ T7905] BTRFS info (device loop3): using free space tree
[  213.246536][ T5919] XFS (loop5): Unmounting Filesystem
[  213.348881][ T4317] vhci_hcd: vhci_device speed not set
[  213.606938][ T7905] BTRFS info (device loop3): enabling ssd optimizations
[  213.617990][ T7930] loop1: detected capacity change from 0 to 32768
[  213.655485][ T7930] (syz.1.1114,7930,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  213.749789][ T7930] (syz.1.1114,7930,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  213.839695][ T7930] JBD2: Ignoring recovery information on journal
[  213.967548][ T4272] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  213.970377][ T7930] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  214.423848][ T4271] ocfs2: Unmounting device (7,1) on (node local)
[  214.642204][ T6481] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop3 scanned by udevd (6481)
[  214.768434][ T7978] loop4: detected capacity change from 0 to 512
[  214.797483][ T7929] loop0: detected capacity change from 0 to 40427
[  214.825672][ T7978] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  214.856802][ T7929] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  214.937139][ T7929] F2FS-fs (loop0): invalid crc value
[  214.978879][ T7978] EXT4-fs (loop4): 1 truncate cleaned up
[  215.005135][ T7929] F2FS-fs (loop0): Found nat_bits in checkpoint
[  215.019438][ T7978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  215.112771][ T4317] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  215.196247][ T7929] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  215.319594][ T4317] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  215.329155][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.349446][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  215.370476][ T4317] usb 2-1: config 0 descriptor??
[  215.440607][ T7995] Set syz1 is full, maxelem 2 reached
[  215.445412][ T4317] cp210x 2-1:0.0: cp210x converter detected
[  215.460184][ T7993] input: syz0 as /devices/virtual/input/input15
[  215.537068][ T4263] udevd[4263]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  215.565802][ T4263] udevd[4263]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  215.651636][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  215.811266][ T7998] loop4: detected capacity change from 0 to 8192
[  215.846085][   T26] audit: type=1800 audit(1782790041.864:62): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1123" name="bus" dev="loop4" ino=1048644 res=0 errno=0
[  215.849312][ T4317] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  215.919670][ T4317] usb 2-1: cp210x converter now attached to ttyUSB0
[  216.220194][ T4317] usb 2-1: USB disconnect, device number 14
[  216.253245][ T4317] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  216.286285][ T4317] cp210x 2-1:0.0: device disconnected
[  216.629780][ T8020] loop3: detected capacity change from 0 to 4096
[  216.732148][ T8020] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  216.960432][ T8026] overlayfs: upper fs does not support file handles, falling back to index=off.
[  217.012651][ T8026] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  217.051719][ T8014] loop0: detected capacity change from 0 to 40427
[  217.104349][ T8014] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  217.135577][ T4272] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  217.142896][ T8014] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  217.288962][ T8014] F2FS-fs (loop0): invalid crc value
[  217.330880][ T8014] F2FS-fs (loop0): Found nat_bits in checkpoint
[  217.436325][ T8035] loop3: detected capacity change from 0 to 128
[  217.685762][ T8014] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  217.762690][ T8014] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  217.996049][ T8028] loop1: detected capacity change from 0 to 131072
[  218.013568][ T8028] F2FS-fs (loop1): invalid crc value
[  218.054253][ T8022] loop4: detected capacity change from 0 to 40427
[  218.111064][ T8022] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  218.148196][ T8022] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  218.158398][ T8028] F2FS-fs (loop1): Found nat_bits in checkpoint
[  218.215731][ T8022] F2FS-fs (loop4): invalid crc value
[  218.227416][ T8028] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  218.248172][ T8022] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  218.271028][ T8028] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  218.394413][ T8022] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  218.401727][ T8022] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  218.554582][ T4273] syz-executor: attempt to access beyond end of device
[  218.554582][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  218.947219][ T8055] loop4: detected capacity change from 0 to 256
[  219.006328][ T8055] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d)
[  219.285374][ T8042] loop3: detected capacity change from 0 to 32768
[  219.320102][ T8059] loop0: detected capacity change from 0 to 512
[  219.381944][ T8042] JBD2: Ignoring recovery information on journal
[  219.404632][ T8057] loop4: detected capacity change from 0 to 1024
[  219.412008][ T8059] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  219.432705][ T8059] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  219.473246][ T8059] EXT4-fs (loop0): 1 truncate cleaned up
[  219.478930][ T8059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  219.561709][ T8057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  219.582391][ T8059] EXT4-fs (loop0): shut down requested (1)
[  219.601945][ T8042] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  219.712723][ T8057] autofs4:pid:8057:autofs_fill_super: pipe file descriptor does not contain proper ops
[  219.740872][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  219.884259][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  219.936487][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  219.978623][ T8053] loop5: detected capacity change from 0 to 32768
[  220.067837][ T8071] loop0: detected capacity change from 0 to 4096
[  220.197365][ T8076] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.222459][   T26] audit: type=1800 audit(1782790046.234:63): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="file2" dev="loop0" ino=16 res=0 errno=0
[  220.378331][ T8075] loop1: detected capacity change from 0 to 4096
[  220.451870][ T8075] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  220.508811][ T8084] netlink: 'syz.3.1153': attribute type 11 has an invalid length.
[  220.612693][ T4318] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  220.824355][ T4318] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  220.842393][ T4318] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  220.871706][ T4318] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  220.918936][ T4318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  220.959131][ T4318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  220.996223][ T4318] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  221.007254][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  221.023226][ T4318] usb 5-1: Product: syz
[  221.029700][ T4318] usb 5-1: Manufacturer: syz
[  221.049921][ T4318] cdc_wdm 5-1:1.0: skipping garbage
[  221.059764][ T4318] cdc_wdm 5-1:1.0: skipping garbage
[  221.073543][ T4318] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  221.081542][ T4318] cdc_wdm 5-1:1.0: Unknown control protocol
[  221.167480][ T8080] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  221.692171][   T26] audit: type=1800 audit(1782790047.704:64): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1172" name="file1" dev="loop5" ino=1048650 res=0 errno=0
[  221.864169][ T4317] usb 5-1: USB disconnect, device number 9
[  222.240473][ T8133] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  222.302332][ T8111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1171 (8111)
[  222.373395][ T8111] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.401510][ T8111] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  222.415985][ T8135] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.487899][ T8111] BTRFS info (device loop3): turning on sync discard
[  222.523793][ T8111] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  222.585214][ T8111] BTRFS info (device loop3): use zstd compression, level 3
[  222.596059][ T8111] BTRFS info (device loop3): turning on async discard
[  222.653764][ T8111] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  222.678837][ T8111] BTRFS info (device loop3): trying to use backup root at mount time
[  222.706542][ T8111] BTRFS info (device loop3): enabling auto defrag
[  222.713742][ T8142] binder: 8139:8142 ioctl 541b 0 returned -22
[  222.722873][ T8111] BTRFS info (device loop3): using free space tree
[  222.765926][ T8141] set_capacity_and_notify: 6 callbacks suppressed
[  222.765941][ T8141] loop4: detected capacity change from 0 to 4096
[  222.770138][ T8146] loop1: detected capacity change from 0 to 16
[  222.825790][ T8146] erofs: (device loop1): mounted with root inode @ nid 36.
[  222.879546][ T8146] erofs: (device loop1): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[  222.894276][ T8148] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.943692][ T8141] syz.4.1179: attempt to access beyond end of device
[  222.943692][ T8141] loop4: rw=0, sector=4706, nr_sectors = 2 limit=4096
[  223.036409][ T8141] syz.4.1179: attempt to access beyond end of device
[  223.036409][ T8141] loop4: rw=0, sector=18446744073709551608, nr_sectors = 2 limit=4096
[  223.091431][   T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  223.121513][ T8111] BTRFS error (device loop3): failed to load root extent
[  223.170462][ T8111] BTRFS warning (device loop3): try to load backup roots slot 1
[  223.209021][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1183'.
[  223.214045][   T11] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  223.224353][ T8141] NILFS (loop4): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=2092, cno=32768, offset=8, blocknr=0, vblocknr=3940649673949184
[  223.274964][ T8141] NILFS (loop4): error -2 preparing GC: cannot read source blocks
[  223.312721][ T8111] BTRFS warning (device loop3): couldn't read tree root
[  223.329969][ T8111] BTRFS warning (device loop3): try to load backup roots slot 2
[  223.390749][ T8111] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  223.428366][ T8170] loop5: detected capacity change from 0 to 1024
[  223.434971][ T8111] BTRFS warning (device loop3): couldn't read tree root
[  223.441935][ T8111] BTRFS warning (device loop3): try to load backup roots slot 3
[  223.571203][ T8111] BTRFS info (device loop3): enabling ssd optimizations
[  223.587935][ T8111] BTRFS info (device loop3): rebuilding free space tree
[  223.636735][ T8111] BTRFS info (device loop3): checking UUID tree
[  223.762763][ T5150] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  223.890995][ T4272] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.925894][ T8184] loop5: detected capacity change from 0 to 128
[  223.952787][ T5150] usb 2-1: Using ep0 maxpacket: 32
[  223.960539][ T5150] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  223.978777][ T8184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  223.991076][ T5150] usb 2-1: config 0 has no interface number 0
[  224.022365][ T8184] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  224.026587][ T5150] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  224.060711][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.073718][ T6481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (6481)
[  224.079804][ T5150] usb 2-1: Product: syz
[  224.105991][ T5150] usb 2-1: Manufacturer: syz
[  224.122664][ T5150] usb 2-1: SerialNumber: syz
[  224.138665][ T5150] usb 2-1: config 0 descriptor??
[  224.171485][ T5150] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  224.374043][ T5150] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  224.411555][ T5150] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  224.450056][ T5919] EXT4-fs (loop5): unmounting filesystem.
[  224.628007][ T8194] loop5: detected capacity change from 0 to 512
[  224.749912][ T8182] loop4: detected capacity change from 0 to 32768
[  224.879000][ T8182] JBD2: Ignoring recovery information on journal
[  224.949954][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  224.977338][ T8201] loop3: detected capacity change from 0 to 2048
[  224.991265][ T8182] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  225.014251][ T5150] usb 2-1: USB disconnect, device number 15
[  225.040674][ T5150] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  225.066612][ T8201] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  225.080458][ T8201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.113249][ T8207] vivid-000: disconnect
[  225.121323][ T8205] vivid-000: reconnect
[  225.125144][ T5150] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  225.179144][ T5150] quatech2 2-1:0.51: device disconnected
[  225.203824][ T8182] 
[  225.206184][ T8182] ======================================================
[  225.213202][ T8182] WARNING: possible circular locking dependency detected
[  225.220216][ T8182] syzkaller #0 Not tainted
[  225.224613][ T8182] ------------------------------------------------------
[  225.231613][ T8182] syz.4.1192/8182 is trying to acquire lock:
[  225.237659][ T8182] ffff888075f55488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a2/0x820
[  225.248614][ T8182] 
[  225.248614][ T8182] but task is already holding lock:
[  225.255959][ T8182] ffff888072443f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x194/0x310
[  225.266475][ T8182] 
[  225.266475][ T8182] which lock already depends on the new lock.
[  225.266475][ T8182] 
[  225.276862][ T8182] 
[  225.276862][ T8182] the existing dependency chain (in reverse order) is:
[  225.285858][ T8182] 
[  225.285858][ T8182] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  225.294621][ T8182]        down_read+0x42/0x2d0
[  225.299296][ T8182]        ocfs2_read_virt_blocks+0x266/0x980
[  225.305203][ T8182]        ocfs2_find_entry+0x3a8/0x2080
[  225.310653][ T8182]        ocfs2_find_files_on_disk+0x102/0x390
[  225.316710][ T8182]        ocfs2_lookup_ino_from_name+0x4f/0xf0
[  225.322776][ T8182]        ocfs2_get_system_file_inode+0x34d/0x820
[  225.329095][ T8182]        ocfs2_init_global_system_inodes+0x315/0x6e0
[  225.335758][ T8182]        ocfs2_fill_super+0x2b5a/0x5020
[  225.341295][ T8182]        mount_bdev+0x28a/0x3c0
[  225.346136][ T8182]        legacy_get_tree+0xe6/0x180
[  225.351327][ T8182]        vfs_get_tree+0x88/0x270
[  225.356257][ T8182]        do_new_mount+0x247/0xa40
[  225.361274][ T8182]        __se_sys_mount+0x2e3/0x3d0
[  225.366461][ T8182]        do_syscall_64+0x4c/0xa0
[  225.371388][ T8182]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.377822][ T8182] 
[  225.377822][ T8182] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}:
[  225.386152][ T8182]        __lock_acquire+0x2c92/0x7bd0
[  225.391520][ T8182]        lock_acquire+0x1bb/0x4a0
[  225.396546][ T8182]        __mutex_lock+0x12d/0xae0
[  225.401562][ T8182]        ocfs2_get_system_file_inode+0x1a2/0x820
[  225.407877][ T8182]        ocfs2_reserve_local_alloc_bits+0xfd/0x2770
[  225.414456][ T8182]        ocfs2_reserve_clusters_with_limit+0x1b6/0xc10
[  225.421301][ T8182]        ocfs2_lock_allocators+0x2ce/0x5f0
[  225.427095][ T8182]        ocfs2_write_begin_nolock+0x1bdd/0x4590
[  225.433323][ T8182]        ocfs2_write_begin+0x1b7/0x310
[  225.438769][ T8182]        generic_perform_write+0x2fa/0x5c0
[  225.444572][ T8182]        __generic_file_write_iter+0x148/0x2a0
[  225.450722][ T8182]        ocfs2_file_write_iter+0x1731/0x1fc0
[  225.456692][ T8182]        vfs_write+0x482/0x9a0
[  225.461449][ T8182]        __x64_sys_pwrite64+0x194/0x220
[  225.466989][ T8182]        do_syscall_64+0x4c/0xa0
[  225.471916][ T8182]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.478329][ T8182] 
[  225.478329][ T8182] other info that might help us debug this:
[  225.478329][ T8182] 
[  225.488540][ T8182]  Possible unsafe locking scenario:
[  225.488540][ T8182] 
[  225.495970][ T8182]        CPU0                    CPU1
[  225.501317][ T8182]        ----                    ----
[  225.506666][ T8182]   lock(&ocfs2_file_ip_alloc_sem_key);
[  225.512204][ T8182]                                lock(&osb->system_file_mutex);
[  225.519822][ T8182]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  225.527874][ T8182]   lock(&osb->system_file_mutex);
[  225.532972][ T8182] 
[  225.532972][ T8182]  *** DEADLOCK ***
[  225.532972][ T8182] 
[  225.541098][ T8182] 3 locks held by syz.4.1192/8182:
[  225.546191][ T8182]  #0: ffff88807b88a460 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0
[  225.555162][ T8182]  #1: ffff8880724442c8 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x45a/0x1fc0
[  225.566468][ T8182]  #2: ffff888072443f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x194/0x310
[  225.577426][ T8182] 
[  225.577426][ T8182] stack backtrace:
[  225.583320][ T8182] CPU: 0 PID: 8182 Comm: syz.4.1192 Not tainted syzkaller #0
[  225.590677][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  225.600723][ T8182] Call Trace:
[  225.603998][ T8182]  <TASK>
[  225.606918][ T8182]  dump_stack_lvl+0x188/0x24e
[  225.611586][ T8182]  ? load_image+0x410/0x410
[  225.616082][ T8182]  ? show_regs_print_info+0x12/0x12
[  225.621272][ T8182]  ? print_circular_bug+0x12b/0x1a0
[  225.626476][ T8182]  check_noncircular+0x296/0x330
[  225.631415][ T8182]  ? add_chain_block+0x9b0/0x9b0
[  225.636347][ T8182]  ? add_chain_block+0x9b0/0x9b0
[  225.641278][ T8182]  ? lockdep_lock+0xf1/0x1f0
[  225.645863][ T8182]  ? _find_first_zero_bit+0xd2/0x100
[  225.651142][ T8182]  __lock_acquire+0x2c92/0x7bd0
[  225.655992][ T8182]  ? mark_lock+0x94/0x320
[  225.660317][ T8182]  ? verify_lock_unused+0x140/0x140
[  225.665522][ T8182]  ? __lock_acquire+0x13e3/0x7bd0
[  225.670554][ T8182]  lock_acquire+0x1bb/0x4a0
[  225.675055][ T8182]  ? ocfs2_get_system_file_inode+0x1a2/0x820
[  225.681030][ T8182]  ? __might_sleep+0xd0/0xd0
[  225.685609][ T8182]  ? mark_lock+0x94/0x320
[  225.689950][ T8182]  ? read_lock_is_recursive+0x10/0x10
[  225.695326][ T8182]  ? __lock_acquire+0x13e3/0x7bd0
[  225.700356][ T8182]  ? verify_lock_unused+0x140/0x140
[  225.705559][ T8182]  __mutex_lock+0x12d/0xae0
[  225.710060][ T8182]  ? ocfs2_get_system_file_inode+0x1a2/0x820
[  225.716042][ T8182]  ? ocfs2_get_system_file_inode+0x14f/0x820
[  225.722019][ T8182]  ? ocfs2_get_system_file_inode+0x1a2/0x820
[  225.727991][ T8182]  ? check_path+0x40/0x40
[  225.732322][ T8182]  ? mutex_lock_nested+0x10/0x10
[  225.737253][ T8182]  ? do_raw_spin_lock+0x128/0x2f0
[  225.742268][ T8182]  ? __rwlock_init+0x140/0x140
[  225.747020][ T8182]  ? do_raw_spin_unlock+0x11d/0x230
[  225.752209][ T8182]  ocfs2_get_system_file_inode+0x1a2/0x820
[  225.758012][ T8182]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  225.764156][ T8182]  ? mark_lock+0x94/0x320
[  225.768482][ T8182]  ? mark_lock+0x94/0x320
[  225.772808][ T8182]  ? __lock_acquire+0x13e3/0x7bd0
[  225.777828][ T8182]  ocfs2_reserve_local_alloc_bits+0xfd/0x2770
[  225.783892][ T8182]  ? stack_trace_save+0xa6/0xf0
[  225.788735][ T8182]  ? verify_lock_unused+0x140/0x140
[  225.793928][ T8182]  ? ocfs2_complete_local_alloc_recovery+0x580/0x580
[  225.800593][ T8182]  ? kasan_set_track+0x60/0x70
[  225.805355][ T8182]  ? kasan_set_track+0x4b/0x70
[  225.810110][ T8182]  ? __kasan_kmalloc+0x8e/0xa0
[  225.814866][ T8182]  ? ocfs2_reserve_clusters_with_limit+0xda/0xc10
[  225.821267][ T8182]  ? ocfs2_lock_allocators+0x2ce/0x5f0
[  225.826714][ T8182]  ? ocfs2_write_begin_nolock+0x1bdd/0x4590
[  225.832600][ T8182]  ? ocfs2_write_begin+0x1b7/0x310
[  225.837698][ T8182]  ? generic_perform_write+0x2fa/0x5c0
[  225.843152][ T8182]  ? __generic_file_write_iter+0x148/0x2a0
[  225.848951][ T8182]  ? ocfs2_file_write_iter+0x1731/0x1fc0
[  225.854570][ T8182]  ? vfs_write+0x482/0x9a0
[  225.858978][ T8182]  ? __x64_sys_pwrite64+0x194/0x220
[  225.864172][ T8182]  ? do_syscall_64+0x4c/0xa0
[  225.868760][ T8182]  ? ocfs2_alloc_should_use_local+0x16b/0x370
[  225.874818][ T8182]  ? __lock_acquire+0x7bd0/0x7bd0
[  225.879837][ T8182]  ? do_raw_spin_lock+0x128/0x2f0
[  225.884855][ T8182]  ? __rwlock_init+0x140/0x140
[  225.889607][ T8182]  ? do_raw_spin_unlock+0x11d/0x230
[  225.894794][ T8182]  ? ocfs2_alloc_should_use_local+0x16b/0x370
[  225.900851][ T8182]  ocfs2_reserve_clusters_with_limit+0x1b6/0xc10
[  225.907170][ T8182]  ? ocfs2_reserve_clusters+0x30/0x30
[  225.912528][ T8182]  ? ocfs2_get_clusters+0xa30/0xa30
[  225.917726][ T8182]  ? rcu_is_watching+0x11/0xa0
[  225.922487][ T8182]  ? ocfs2_num_free_extents+0x307/0x630
[  225.928027][ T8182]  ? ocfs2_validate_extent_block+0x620/0x620
[  225.934002][ T8182]  ? do_raw_spin_unlock+0x11d/0x230
[  225.939195][ T8182]  ocfs2_lock_allocators+0x2ce/0x5f0
[  225.944475][ T8182]  ? _ocfs2_clear_bit+0x30/0x30
[  225.949315][ T8182]  ? do_raw_spin_lock+0x128/0x2f0
[  225.954327][ T8182]  ? __rwlock_init+0x140/0x140
[  225.959081][ T8182]  ? ocfs2_write_begin_nolock+0xfa5/0x4590
[  225.964879][ T8182]  ocfs2_write_begin_nolock+0x1bdd/0x4590
[  225.970603][ T8182]  ? ocfs2_size_fits_inline_data+0x90/0x90
[  225.976396][ T8182]  ? __lock_acquire+0x13e3/0x7bd0
[  225.981420][ T8182]  ? ocfs2_inode_lock_full_nested+0x149/0x1b10
[  225.987570][ T8182]  ? ocfs2_read_inode_block+0x120/0x190
[  225.993105][ T8182]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  225.999077][ T8182]  ? ocfs2_allocate_extend_trans+0x670/0x670
[  226.005048][ T8182]  ? __mod_timer+0x925/0xd20
[  226.009626][ T8182]  ? __lock_acquire+0x7bd0/0x7bd0
[  226.014657][ T8182]  ? rwsem_write_trylock+0x135/0x1c0
[  226.019935][ T8182]  ? clear_nonspinnable+0x60/0x60
[  226.024954][ T8182]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  226.030931][ T8182]  ocfs2_write_begin+0x1b7/0x310
[  226.035862][ T8182]  ? ocfs2_readahead+0x190/0x190
[  226.040786][ T8182]  ? __lock_acquire+0x7bd0/0x7bd0
[  226.045803][ T8182]  ? fault_in_readable+0x18a/0x1f0
[  226.050914][ T8182]  ? fault_in_iov_iter_readable+0xbf/0x2f0
[  226.056718][ T8182]  generic_perform_write+0x2fa/0x5c0
[  226.062001][ T8182]  ? generic_file_direct_write+0x330/0x330
[  226.067803][ T8182]  ? __file_remove_privs+0x5f0/0x5f0
[  226.073080][ T8182]  ? __up_read+0x2b4/0x6b0
[  226.077488][ T8182]  ? do_raw_spin_unlock+0x11d/0x230
[  226.082675][ T8182]  __generic_file_write_iter+0x148/0x2a0
[  226.088305][ T8182]  ocfs2_file_write_iter+0x1731/0x1fc0
[  226.093752][ T8182]  ? verify_lock_unused+0x140/0x140
[  226.098948][ T8182]  ? ocfs2_file_read_iter+0xbb0/0xbb0
[  226.104308][ T8182]  ? aa_file_perm+0x3ea/0xf00
[  226.108974][ T8182]  ? verify_lock_unused+0x140/0x140
[  226.114176][ T8182]  ? rcu_read_lock_any_held+0xb0/0x130
[  226.119634][ T8182]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  226.124912][ T8182]  ? end_current_label_crit_section+0x14b/0x170
[  226.131145][ T8182]  ? common_file_perm+0x171/0x1c0
[  226.136162][ T8182]  vfs_write+0x482/0x9a0
[  226.140408][ T8182]  ? file_end_write+0x250/0x250
[  226.145256][ T8182]  ? __fget_files+0x3fc/0x460
[  226.149932][ T8182]  ? __fdget+0x17c/0x200
[  226.154170][ T8182]  ? __x64_sys_pwrite64+0xf3/0x220
[  226.159283][ T8182]  __x64_sys_pwrite64+0x194/0x220
[  226.164304][ T8182]  ? ksys_pwrite64+0x1b0/0x1b0
[  226.169063][ T8182]  ? lockdep_hardirqs_on+0x94/0x140
[  226.174256][ T8182]  do_syscall_64+0x4c/0xa0
[  226.178659][ T8182]  ? clear_bhb_loop+0x60/0xb0
[  226.183326][ T8182]  ? clear_bhb_loop+0x60/0xb0
[  226.187991][ T8182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.193889][ T8182] RIP: 0033:0x7f2b9259ce59
[  226.198300][ T8182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.217894][ T8182] RSP: 002b:00007f2b93431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  226.226296][ T8182] RAX: ffffffffffffffda RBX: 00007f2b92815fa0 RCX: 00007f2b9259ce59
[  226.234258][ T8182] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[  226.242215][ T8182] RBP: 00007f2b92632e6f R08: 0000000000000000 R09: 0000000000000000
[  226.250177][ T8182] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000000
[  226.258142][ T8182] R13: 00007f2b92816038 R14: 00007f2b92815fa0 R15: 00007ffeae096848
[  226.266115][ T8182]  </TASK>
[  226.388052][ T4273] ocfs2: Unmounting device (7,4) on (node local)