last executing test programs:

18.435628061s ago: executing program 2 (id=1870):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)

18.265632434s ago: executing program 2 (id=1871):
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x7a82, 0x2)
ioctl$EVIOCGSW(r0, 0x8040451b, 0x0)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/49)

18.122386586s ago: executing program 2 (id=1873):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1)

17.908319723s ago: executing program 2 (id=1875):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

17.177141372s ago: executing program 2 (id=1877):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e5301", 0x4ae}], 0x1}}], 0x1, 0x240080e4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700"], 0x1ac}}, 0x0)

15.317757082s ago: executing program 2 (id=1884):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)

14.950761942s ago: executing program 32 (id=1884):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)

5.791598792s ago: executing program 0 (id=1946):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000400)='./bus\x00', 0xa10888, &(0x7f0000000480)=ANY=[@ANYBLOB="6167655f657874656e745f63616368652c6e6f6c617a7974696d652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6261636b67726f756e645f67633d6f66662c6e6f626172726965722c636f6d70726573735f63616368652c6d6f64653d6c66732c00a0f136a7b12c237938b84e413b4410176f83a54dc492582695e005d110d725abbe2adec1ac2f6f77d172f0a20b3c1a8f19a6b28a8e0ba53dc3bf8ebe1ba50407cd64781927026076251050bd3ce7"], 0x1, 0x5505, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r0)

4.150003205s ago: executing program 4 (id=1963):
ioperm(0x8, 0x8f, 0x7)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

3.899641125s ago: executing program 4 (id=1965):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"a2e3ad214fc752f91b25470987f70e06d038e7ff7fc6e5539b3245078b089b3f083868060890e0878f0e1ac6e70a9b3368959b6c9a241b5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d16993428807789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e17f907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c330600d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a0200afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8abb1015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f29f768ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0d1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a9740600000000f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079de662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b303db4d7bec6b6a97dbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

3.404081005s ago: executing program 4 (id=1969):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0x0, 0xc}}}}]}, 0x40}}, 0x0)

3.403394185s ago: executing program 0 (id=1970):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f00000000c0))

3.157545985s ago: executing program 4 (id=1971):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./bus\x00', 0x4000, 0x0, 0xfd, 0x0, &(0x7f0000000340))
chown(&(0x7f0000000140)='./bus\x00', 0xee01, 0xffffffffffffffff)

2.961373231s ago: executing program 1 (id=1974):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {}, {@codepage={'codepage', 0x3d, 'iso8859-9'}}, {@dir_umask={'dir_umask', 0x3d, 0x401}}, {@creator={'creator', 0x3d, "ecf3ae12"}}]}, 0x1, 0x322, &(0x7f0000000b40)="$eJzs3c1u00wUBuB3HKdNv1b9TFuExAZUqASbigILxAaEsmXPEmhSqSIqoi0SsGmoWCIugD23wEWwQeIGgA0rLqBiY3SOx844nvxVadyG95EaOfbM+Ez8M3MipQYR/bMe1L9/uvVL/gxQQQXAXSAAUANCAOdxofZyZ397v9Vs9GuoojXkzyCpaQplNneavqpST2tYkbwLseCuk+Zidfy+UlEcx/d/lB0ElU6vfo8AmLXXoW6vTTiucbGdm03ft4FLJYZTCvcAmyMc4RUWSwyHiIhOATv+B3aYWNBVBkEArNlh/0yP/92Oyg5gvG63Cqv6J0rO+K+zu9jI8f1fN3XyPU3hZHuQZonDBFPtej+D5MzKTTCNP6v8GadZnsYSzG1th1jffItGgEPcs5wKK/raSE7d1IBoVz25aS8yY+zZWhUP/0t6IzPKue7NaUhb262mzjw98S/7djrKpz0q8+VPHMemho9oZPM/98OLuo5UUJX4b/gS+sS81pJS0pBJ+hnkipyTl/CiPResAb2s+TMSt830C4J2FoHE2eUwXdB9LyH/tULSuw3fDkyn8eWuWlWpFWVtFOvqvlZytSr2TFjffN5qOKnIhKRdNB/MI7OK3/iMujP/DyS+NThXZr9bvdGS9sxI+jPjLxlqyagwcrSzpctZBNakP5kpEY5U+j2e4g4W916/eVZptZq7svDEs/BiYdfYNdV3gLfMyS9UIAsG3jJod9bo4HEQp+fSwJbjkwz++jFqzfTcJPePbI1cPr7qcpVla4JJH6bpWwjh21T/OsSpdUIL6Sg8YvWad5NMtHrUGvv9iU6hPZMedLuiMImlKSdjpUnyP53J21md3mfkJbLz9M6Z0ZmXe5LMdu6d0+JGlsHlp4JLvrnLgNxgvncG5+zxZjFn1Lml5lxXrgFXnXoGffcYaZxTw9TxDY/5/T8RERERERERERERERERERERERER0Vnj+anAwbh/5FN2H4mIiIiIiIiIiIiIiIiIiIiIiIiIiIiIzrrhn/8713lSk+9/xOvzf6OBz//NPQDYPihquOf/EtG4/Q0AAP//wrZ9uQ==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r0, &(0x7f0000000100)=""/191, 0xbf)

2.914962785s ago: executing program 3 (id=1975):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x101}, 0xe)

2.658648315s ago: executing program 3 (id=1976):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000000c0)="d1")

2.593425241s ago: executing program 1 (id=1977):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x4, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd, 0x400000000000000, 0x1, 0x0, 0x7fffffff}, {0x3, 0x200000000, 0x0, 0x100000}, {0x0, 0x3}, 0x1, 0x0, 0x2, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9}, [@acm={0x4, 0x24, 0x2, 0xa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x7f, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5}}}}}]}}]}}, 0x0)

2.420789415s ago: executing program 3 (id=1978):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

2.268387147s ago: executing program 0 (id=1979):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b7040000f510be53850000003300000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="9a923a378ee885a030e722cd1887", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

2.089381882s ago: executing program 0 (id=1980):
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000001480)='./file1\x00', 0xc00a, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./file1\x00', 0x1c1400, 0x10)
fchown(r0, 0x0, 0x0)

1.684565014s ago: executing program 0 (id=1981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x303, 0x70bd2b, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000)

1.509701928s ago: executing program 3 (id=1982):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be080005"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

1.36564018s ago: executing program 0 (id=1983):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "2c9bf624d607a5a9e2843fe8ae6632d02ffd8f9dd4c5e64fc65ac033b7a87c1f", "1c1e66c29869bf688917a2ed3835dc1d9e81b84960aca558453c4565abe3dcd8", "d1157590637541abeca20b9ca73977b269091c8aca21e3a616010dc44053ec09", "0f83ee263df12a6401579dcd55e31d69df95ecfcd41b0b75ef367a2297d352fc", "eef1d2fa3c932f1f8ebfc1874010684213066050ad07a2af725a1cc11d7e0bd6", "ce579275bc602e7bd0597b59", 0xa, 0xfffffffd, 0x1c, 0x3, 0x6}})
syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0)

1.304889615s ago: executing program 4 (id=1984):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
removexattr(0x0, 0x0)

1.205718763s ago: executing program 3 (id=1985):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40025)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'xxhash64\x00'}})

1.11800002s ago: executing program 3 (id=1986):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x2000)
ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0)

983.789751ms ago: executing program 4 (id=1987):
syz_mount_image$ocfs2(&(0x7f00000017c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)

849.601862ms ago: executing program 1 (id=1988):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

793.639186ms ago: executing program 1 (id=1989):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)

656.521167ms ago: executing program 1 (id=1990):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d33f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08dc338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c2264ddc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7ff7544130700400000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8254c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d62ded8a7b4a302a97bc641df076c069e881ac00a9b7ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

0s ago: executing program 1 (id=1991):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090)

kernel console output (not intermixed with test programs):


[  221.361781][ T8816] loop2: detected capacity change from 0 to 512
[  221.392291][ T8816] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  221.411354][ T8816] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  221.452719][ T8816] EXT4-fs (loop2): 1 truncate cleaned up
[  221.494186][ T8816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.520672][ T1188] usb 2-1: USB disconnect, device number 11
[  221.636474][ T8816] EXT4-fs: user quota file already specified
[  221.716287][ T8824] loop3: detected capacity change from 0 to 1024
[  221.728234][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.874831][  T137] hfsplus: b-tree write err: -5, ino 4
[  222.216582][ T8838] loop1: detected capacity change from 0 to 512
[  222.234502][ T8838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  222.282095][ T8838] EXT4-fs (loop1): 1 truncate cleaned up
[  222.293936][ T8838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.402737][ T8843] loop2: detected capacity change from 0 to 64
[  222.418126][ T8838] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.1190: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  222.438355][    C0] vkms_vblank_simulate: vblank timer overrun
[  222.501744][ T8838] EXT4-fs (loop1): Remounting filesystem read-only
[  222.516119][ T8838] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.1190: Deleting old file: nlink 5, error=-117
[  222.709829][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.845367][ T8832] loop3: detected capacity change from 0 to 32768
[  222.931760][ T8832] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.958108][ T8858] loop1: detected capacity change from 0 to 512
[  222.999236][ T8858] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  223.076587][ T8858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.102789][ T8832] XFS (loop3): Ending clean mount
[  223.114025][ T8832] XFS (loop3): Quotacheck needed: Please wait.
[  223.211340][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.225734][ T8832] XFS (loop3): Quotacheck: Done.
[  223.426276][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  223.473175][ T8873] loop1: detected capacity change from 0 to 4096
[  223.488302][ T8873] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  223.575415][ T8875] nbd: must specify an index to disconnect
[  223.926197][ T8883] loop0: detected capacity change from 0 to 1024
[  223.970025][ T8885] loop2: detected capacity change from 0 to 512
[  223.991067][ T8885] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  224.034747][ T8885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.071675][   T12] hfsplus: b-tree write err: -5, ino 4
[  224.104869][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.314544][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'.
[  224.414279][ T8897] nbd: must specify an index to disconnect
[  224.498967][ T8899] loop1: detected capacity change from 0 to 4096
[  224.514518][ T8899] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  224.563748][ T5790] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  224.787847][ T5790] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  224.818768][ T5790] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  224.834205][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.860265][ T5790] usb 3-1: Product: syz
[  224.864507][ T5790] usb 3-1: Manufacturer: syz
[  224.875997][ T5790] usb 3-1: SerialNumber: syz
[  225.067150][ T8906] netlink: 'syz.0.1225': attribute type 8 has an invalid length.
[  225.121968][ T5790] usb 3-1: selecting invalid altsetting 1
[  225.279854][ T8917] loop0: detected capacity change from 0 to 512
[  225.310377][ T8917] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  225.329372][ T5790] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  225.329489][ T5790] dvb_usb_lmedm04: probe of 3-1:2.0 failed with error -22
[  225.374752][ T8917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.449438][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.584100][ T5790] usb 3-1: USB disconnect, device number 8
[  225.634875][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'.
[  225.744710][ T8927] loop0: detected capacity change from 0 to 2048
[  225.788596][ T8927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.819862][ T8929] loop3: detected capacity change from 0 to 4096
[  225.903306][ T8929] NILFS (loop3): invalid segment: Checksum error in segment payload
[  225.927111][ T8929] NILFS (loop3): trying rollback from an earlier position
[  225.974696][ T8929] NILFS (loop3): recovery complete
[  225.999930][ T8932] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.201825][ T8935] loop1: detected capacity change from 0 to 1024
[  226.209713][ T8935] EXT4-fs: inline encryption not supported
[  226.227617][ T8935] EXT4-fs: Ignoring removed i_version option
[  226.235460][ T8935] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  226.266266][   T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  226.298023][ T8935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.357900][ T8936] loop3: detected capacity change from 0 to 4096
[  226.373480][ T8936] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  226.468243][   T27] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  226.486077][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.508846][   T27] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  226.540206][   T27] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  226.548475][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.571744][   T27] usb 1-1: Manufacturer: syz
[  226.587476][   T27] usb 1-1: config 0 descriptor??
[  226.766479][   T27] rc_core: IR keymap rc-hauppauge not found
[  226.772468][   T27] Registered IR keymap rc-empty
[  226.820333][   T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  226.872834][   T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10
[  227.138529][ T8958] loop2: detected capacity change from 0 to 256
[  227.436803][   T27] usb 1-1: USB disconnect, device number 9
[  227.454212][ T8964] ieee802154 phy0 wpan0: encryption failed: -22
[  227.633286][ T8966] loop2: detected capacity change from 0 to 4096
[  227.651685][ T8966] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  227.738972][ T8966] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  227.774197][ T8966] ntfs3: loop2: Failed to load $Extend (-22).
[  227.803272][ T8966] ntfs3: loop2: Failed to initialize $Extend.
[  227.895662][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  227.895681][   T28] audit: type=1800 audit(1756512897.862:51): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1242" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=33 res=0 errno=0
[  228.183652][ T8982] loop0: detected capacity change from 0 to 256
[  228.459229][   T50] Bluetooth: hci1: unexpected event for opcode 0x0c57
[  228.895410][ T8974] loop3: detected capacity change from 0 to 32768
[  228.953894][ T9001] loop2: detected capacity change from 0 to 512
[  228.967153][ T9001] EXT4-fs: Ignoring removed nobh option
[  228.989272][ T9001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  229.037741][ T9001] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1259: iget: bad i_size value: 38620345925642
[  229.083165][ T8974] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  229.083165][ T8974] 
[  229.135023][ T9001] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1259: couldn't read orphan inode 15 (err -117)
[  229.144590][ T8991] loop1: detected capacity change from 0 to 32768
[  229.156270][ T8974] ERROR: (device loop3): remounting filesystem as read-only
[  229.177159][ T9001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.201557][ T8991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1255 (8991)
[  229.279017][ T9001] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1259: bg 0: block 5: invalid block bitmap
[  229.302111][ T8991] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.327968][ T8991] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  229.352373][ T9001] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  229.387822][ T8991] BTRFS info (device loop1): setting nodatasum
[  229.394086][ T8991] BTRFS info (device loop1): enabling auto defrag
[  229.427996][ T8991] BTRFS info (device loop1): disabling tree log
[  229.434333][ T8991] BTRFS info (device loop1): using free space tree
[  229.503476][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.667459][ T8991] BTRFS info (device loop1): enabling ssd optimizations
[  229.717595][ T8991] BTRFS info (device loop1): auto enabling async discard
[  230.007688][ T9032] loop0: detected capacity change from 0 to 256
[  230.047487][ T9032] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  230.100689][ T9032] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  230.116284][ T5783] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.736559][ T9049] netlink: 'syz.1.1275': attribute type 3 has an invalid length.
[  231.020542][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1279'.
[  231.858410][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1291'.
[  231.870076][ T9080] loop1: detected capacity change from 0 to 4096
[  231.880457][ T9057] loop2: detected capacity change from 0 to 32768
[  231.908153][ T9080] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  231.919385][ T9057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1278 (9057)
[  231.988676][ T9057] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.007851][ T9086] loop0: detected capacity change from 0 to 2048
[  232.015220][ T9057] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  232.055949][ T9057] BTRFS info (device loop2): setting nodatasum
[  232.062238][ T9057] BTRFS info (device loop2): enabling auto defrag
[  232.079180][ T9057] BTRFS info (device loop2): disabling tree log
[  232.092891][ T9086] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  232.106865][ T9080] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  232.110749][ T9057] BTRFS info (device loop2): using free space tree
[  232.123157][ T9080] ntfs3: loop1: Failed to load $Extend (-22).
[  232.147132][ T9086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.162614][ T9080] ntfs3: loop1: Failed to initialize $Extend.
[  232.198452][ T9088] loop3: detected capacity change from 0 to 2048
[  232.255924][   T28] audit: type=1800 audit(1756512902.232:52): pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1289" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=33 res=0 errno=0
[  232.292778][ T9088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.428564][ T9057] BTRFS info (device loop2): enabling ssd optimizations
[  232.435624][ T9057] BTRFS info (device loop2): auto enabling async discard
[  232.846313][ T5785] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.944746][ T9112] loop1: detected capacity change from 0 to 2048
[  233.027888][ T9112] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  233.088148][ T5802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5802)
[  233.126386][ T9112] NILFS (loop1): mounting unchecked fs
[  233.151254][ T5803] udevd[5803]: incorrect nilfs2 checksum on /dev/loop1
[  233.199908][ T9112] NILFS (loop1): recovery complete
[  233.210121][ T9123] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.287781][ T9124] netlink: 'syz.2.1300': attribute type 3 has an invalid length.
[  235.041039][ T9136] syz.0.1307 (9136): drop_caches: 2
[  235.143372][ T9152] loop1: detected capacity change from 0 to 1024
[  235.393392][ T9144] loop3: detected capacity change from 0 to 32768
[  235.446383][ T9144] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  235.566957][ T9148] loop2: detected capacity change from 0 to 32768
[  235.682288][ T5802] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  235.762521][ T9135] syz.0.1307 (9135): drop_caches: 2
[  235.859249][ T9148] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  235.941555][ T1076] hfsplus: b-tree write err: -5, ino 4
[  236.192880][ T9168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1316'.
[  236.219328][ T9170] loop3: detected capacity change from 0 to 2048
[  236.226001][ T9148] XFS (loop2): Ending clean mount
[  236.240885][ T9148] XFS (loop2): Quotacheck needed: Please wait.
[  236.242700][ T9170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.369882][ T9148] XFS (loop2): Quotacheck: Done.
[  236.616205][ T5877] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  236.691046][ T5785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  236.854674][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.871213][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.919258][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  236.940414][ T5877] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  236.950473][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.976845][ T5877] usb 1-1: config 0 descriptor??
[  237.421322][ T5877] hid-multitouch 0003:0EEF:72D0.0013: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0
[  237.567974][ T9198] loop1: detected capacity change from 0 to 1024
[  237.670721][ T5877] usb 1-1: USB disconnect, device number 10
[  237.819071][   T12] hfsplus: b-tree write err: -5, ino 4
[  237.822679][ T9205] loop3: detected capacity change from 0 to 256
[  237.883053][ T9205] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  237.912496][ T9203] loop2: detected capacity change from 0 to 4096
[  238.057318][ T9203] ntfs: volume version 3.1.
[  238.138347][ T9209] loop3: detected capacity change from 0 to 1024
[  238.361291][   T12] hfsplus: b-tree write err: -5, ino 4
[  238.578359][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'.
[  238.599282][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'.
[  238.761860][ T9222] netlink: 'syz.1.1346': attribute type 62 has an invalid length.
[  238.853934][ T9226] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  238.871387][ T9220] syz.3.1343 (9220): drop_caches: 2
[  239.049150][ T9217] syz.3.1343 (9217): drop_caches: 2
[  239.278222][ T9233] vlan2: entered promiscuous mode
[  239.283343][ T9233] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  239.299000][ T9233] vlan2: entered allmulticast mode
[  239.304318][ T9233] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  239.463667][ T9237] loop0: detected capacity change from 0 to 2048
[  239.490471][ T9237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.497526][ T9229] loop2: detected capacity change from 0 to 32768
[  239.541623][ T9229] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.585957][   T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  239.651825][ T9229] XFS (loop2): Ending clean mount
[  239.762198][ T5785] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.790968][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.803031][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.815358][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  239.829394][   T27] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  239.839529][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.850296][   T27] usb 4-1: config 0 descriptor??
[  240.056426][ T1188] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  240.229836][ T9251] loop1: detected capacity change from 0 to 512
[  240.245910][ T1188] usb 1-1: Using ep0 maxpacket: 32
[  240.260425][ T9251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  240.274682][ T1188] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  240.297915][ T1188] usb 1-1: config 0 has no interface number 0
[  240.319393][ T1188] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  240.322253][   T27] hid-multitouch 0003:0EEF:72D0.0014: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0
[  240.343587][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.372681][ T9251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.391465][ T1188] usb 1-1: Product: syz
[  240.395705][ T1188] usb 1-1: Manufacturer: syz
[  240.415162][ T1188] usb 1-1: SerialNumber: syz
[  240.426628][ T9251] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.447626][ T1188] usb 1-1: config 0 descriptor??
[  240.474574][ T1188] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  240.518767][ T1188] usb 1-1: selecting invalid altsetting 1
[  240.524587][ T1188] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  240.529368][   T27] usb 4-1: USB disconnect, device number 13
[  240.581929][ T1188] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  240.605648][ T1188] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  240.622739][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.631880][ T1188] usb 1-1: media controller created
[  240.674760][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  240.767764][ T1188] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  240.774853][ T1188] zl10353_read_register: readreg error (reg=127, ret==-71)
[  240.806304][ T1188] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  240.882840][ T1188] usb 1-1: USB disconnect, device number 11
[  241.064041][ T9268] delete_channel: no stack
[  241.224809][   T28] audit: type=1326 audit(1756512911.202:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9257 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7fc00000
[  241.314977][ T9272] loop1: detected capacity change from 0 to 4096
[  241.410300][ T9272] ntfs: volume version 3.1.
[  241.609190][ T9279] syz.2.1366 (9279): drop_caches: 2
[  241.674137][ T9279] syz.2.1366 (9279): drop_caches: 2
[  241.837794][ T9288] tipc: Enabled bearer <udp:syz0>, priority 10
[  241.857736][ T9286] loop1: detected capacity change from 0 to 1024
[  241.928399][ T9286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.952790][ T9290] loop2: detected capacity change from 0 to 1024
[  241.973156][ T9290] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.022947][ T9290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.346115][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.643599][ T9284] loop0: detected capacity change from 0 to 40427
[  242.651960][ T9284] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  242.665863][ T9284] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  242.679625][ T9284] F2FS-fs (loop0): invalid crc value
[  242.691740][ T9284] F2FS-fs (loop0): Found nat_bits in checkpoint
[  242.754963][ T9284] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  242.770077][ T9284] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  242.957694][ T1188] tipc: Node number set to 4194305
[  242.986228][   T28] audit: type=1326 audit(1756512912.962:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079b78ebe9 code=0x7fc00000
[  243.059241][ T9313] loop2: detected capacity change from 0 to 512
[  243.133671][ T9313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.166088][ T9317] ptrace attach of "./syz-executor exec"[5782] was attempted by ""[9317]
[  243.239543][ T9319] loop3: detected capacity change from 0 to 128
[  243.266069][ T9313] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.292356][ T9319] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  243.372714][ T9313] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.1380: invalid size
[  243.415010][ T9313] EXT4-fs (loop2): Remounting filesystem read-only
[  243.568828][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.586517][ T1097] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  243.622564][ T1097] Quota error (device loop2): write_blk: dquota write failed
[  243.645160][ T1097] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[  243.664408][ T9323] loop0: detected capacity change from 0 to 4096
[  243.731504][ T9323] ntfs: volume version 3.1.
[  244.019424][ T9333] loop2: detected capacity change from 0 to 512
[  244.051390][ T9333] EXT4-fs: Ignoring removed bh option
[  244.154262][ T9333] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  244.169046][ T9333] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  244.186502][ T9333] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  244.198637][ T9333] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  244.211660][ T9333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.342278][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.386512][ T9343] loop0: detected capacity change from 0 to 2048
[  244.405907][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  244.469776][ T9343] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  244.516414][ T9343] NILFS (loop0): mounting unchecked fs
[  244.555378][ T9343] NILFS (loop0): recovery complete
[  244.598446][ T9346] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.612179][   T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  244.639577][   T23] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  244.661639][   T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  244.686357][   T23] usb 4-1: config 220 has no interface number 2
[  244.692732][   T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  244.752576][   T23] usb 4-1: config 220 interface 0 has no altsetting 0
[  244.780211][   T23] usb 4-1: config 220 interface 76 has no altsetting 0
[  244.792686][   T23] usb 4-1: config 220 interface 1 has no altsetting 0
[  244.814396][   T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  244.824899][ T9350] loop2: detected capacity change from 0 to 128
[  244.830847][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.835620][ T9349] syz.1.1395 (9349): drop_caches: 2
[  244.848451][   T23] usb 4-1: Product: syz
[  244.852679][   T23] usb 4-1: Manufacturer: syz
[  244.875900][   T23] usb 4-1: SerialNumber: syz
[  244.891825][ T9351] syz.1.1395 (9351): drop_caches: 2
[  245.141457][   T23] usb 4-1: selecting invalid altsetting 0
[  245.166711][   T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  245.185366][   T23] usb 4-1: No valid video chain found.
[  245.233494][ T9360] loop0: detected capacity change from 0 to 256
[  245.247437][   T23] usb 4-1: selecting invalid altsetting 0
[  245.263720][   T23] usbtest: probe of 4-1:220.1 failed with error -22
[  245.293066][   T23] usb 4-1: USB disconnect, device number 14
[  245.363663][ T9360] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  245.653732][ T9372] veth1_to_bridge: entered promiscuous mode
[  245.676817][ T9372] veth1_to_bridge: left promiscuous mode
[  245.724614][ T9374] loop0: detected capacity change from 0 to 256
[  245.750586][ T9374] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  245.790681][ T1188] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  245.971808][ T9378] loop0: detected capacity change from 0 to 128
[  245.994522][ T1188] usb 2-1: Using ep0 maxpacket: 16
[  246.009125][ T9378] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  246.025669][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.045329][ T9378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.056441][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.095998][ T1188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  246.123715][ T9378] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40)
[  246.152116][ T1188] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  246.164212][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.221024][ T1188] usb 2-1: config 0 descriptor??
[  246.576281][ T9395] loop0: detected capacity change from 0 to 8
[  246.682948][ T1188] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0015/input/input11
[  246.759959][ T1188] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  246.988153][    T8] usb 2-1: USB disconnect, device number 12
[  247.425676][ T9398] loop2: detected capacity change from 0 to 32768
[  247.445195][ T9398] 
[  247.445195][ T9398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.445195][ T9398] 
[  247.491637][ T9398] ERROR: (device loop2): diWrite: ixpxd invalid
[  247.491637][ T9398] 
[  247.504520][ T9398] ERROR: (device loop2): txCommit: 
[  247.504520][ T9398] 
[  247.530609][ T9416] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«=
[  247.548186][ T9415] [U] J"—E:ÀÆ"


[  247.614516][ T5785] 
[  247.614516][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.614516][ T5785] 
[  247.645094][ T5785] 
[  247.645094][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.645094][ T5785] 
[  247.995718][   T28] audit: type=1326 audit(1756512917.972:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.026779][    T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  248.080398][   T28] audit: type=1326 audit(1756512918.002:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.145958][   T28] audit: type=1326 audit(1756512918.002:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.203065][   T28] audit: type=1326 audit(1756512918.002:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.225393][    C1] vkms_vblank_simulate: vblank timer overrun
[  248.234835][    T8] usb 4-1: Using ep0 maxpacket: 16
[  248.248063][    T8] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  248.264857][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  248.267278][   T28] audit: type=1326 audit(1756512918.002:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.272929][    T8] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  248.293669][    C1] vkms_vblank_simulate: vblank timer overrun
[  248.341134][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.361186][   T28] audit: type=1326 audit(1756512918.002:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.405050][    T8] usb 4-1: config 0 descriptor??
[  248.481612][   T28] audit: type=1326 audit(1756512918.002:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.506746][ T9440] loop0: detected capacity change from 0 to 512
[  248.515135][ T9440] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  248.596405][   T28] audit: type=1326 audit(1756512918.002:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  248.665169][ T9440] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  248.732835][ T9440] FAT-fs (loop0): Filesystem has been set read-only
[  248.767405][ T9440] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  248.860977][    T8] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.06 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  249.136103][    T8] usb 4-1: USB disconnect, device number 15
[  249.272629][ T9441] fido_id[9441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  249.375811][    C1] sched: RT throttling activated
[  249.377471][ T5859] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  249.645269][ T9438] loop2: detected capacity change from 0 to 131072
[  249.688818][ T9438] F2FS-fs (loop2): build fault injection attr: rate: 7, type: 0x7ffff
[  249.697222][ T9438] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x40004
[  249.705430][ T9438] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[  249.720973][ T9438] F2FS-fs (loop2): invalid crc value
[  249.767574][ T9438] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580
[  249.779138][ T5859] usb 2-1: Using ep0 maxpacket: 32
[  249.787493][ T9438] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[  249.800094][ T9449] loop0: detected capacity change from 0 to 2048
[  249.809311][ T9438] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[  249.821733][ T9438] F2FS-fs (loop2): Found nat_bits in checkpoint
[  249.858289][ T9438] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[  249.870354][ T9438] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920
[  249.871753][ T9449] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  249.900983][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.912895][ T9438] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  249.928161][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.943204][ T9438] F2FS-fs (loop2): Failed to read root inode
[  249.949911][ T5859] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  249.973190][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.004185][ T5859] usb 2-1: config 0 descriptor??
[  250.049642][ T9449] UDF-fs: unknown compression code (0)
[  250.495492][ T5859] aquacomputer_d5next 0003:0C70:F0B6.0017: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0
[  250.773904][   T27] usb 2-1: USB disconnect, device number 13
[  250.796790][ T9467] fido_id[9467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0C70:F0B6.0017/report_descriptor': No such file or directory
[  251.023279][ T9473] loop2: detected capacity change from 0 to 8192
[  251.043764][ T9473] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  251.122000][ T9473] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  251.177150][ T9473] REISERFS (device loop2): using ordered data mode
[  251.211982][ T9473] reiserfs: using flush barriers
[  251.231315][ T9473] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  251.276485][ T9473] REISERFS (device loop2): checking transaction log (loop2)
[  251.310974][ T9473] REISERFS (device loop2): Using r5 hash to sort names
[  251.340167][ T9473] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  251.674062][ T9469] loop3: detected capacity change from 0 to 32768
[  251.685074][ T9469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  251.753888][ T5803] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.797070][ T9486] UBIFS error (pid: 9486): cannot open "usrquota", error -22
[  251.863814][ T9488] loop1: detected capacity change from 0 to 1024
[  251.947214][ T9488] EXT4-fs: Ignoring removed nomblk_io_submit option
[  251.997434][ T9488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.262243][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.309570][ T9495] netlink: 'syz.2.1457': attribute type 29 has an invalid length.
[  252.457769][ T9482] loop0: detected capacity change from 0 to 32768
[  252.492892][ T9497] loop1: detected capacity change from 0 to 512
[  252.511258][ T9497] EXT4-fs: Ignoring removed bh option
[  252.517299][ T9497] EXT4-fs: Ignoring removed mblk_io_submit option
[  252.534466][ T9497] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  252.570714][ T9482] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.581749][ T9497] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  252.605996][ T9497] EXT4-fs (loop1): orphan cleanup on readonly fs
[  252.639996][ T9497] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4
[  252.666178][ T9497] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  252.676198][ T9497] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1458: Failed to acquire dquot type 1
[  252.748168][ T9497] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1458: Invalid block bitmap block 0 in block_group 0
[  252.809837][ T9497] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1458: Invalid block bitmap block 0 in block_group 0
[  252.873024][ T9497] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1458: Invalid block bitmap block 0 in block_group 0
[  252.895067][ T9497] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1458: Failed to acquire dquot type 1
[  252.919889][ T9497] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1458: Failed to acquire dquot type 1
[  252.942211][ T9497] EXT4-fs (loop1): 1 orphan inode deleted
[  252.965200][ T9497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  253.100244][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.144482][ T9482] XFS (loop0): Ending clean mount
[  253.163935][ T9482] XFS (loop0): Quotacheck needed: Please wait.
[  253.322792][ T9482] XFS (loop0): Quotacheck: Done.
[  253.324287][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1465'.
[  253.435616][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  253.435631][   T28] audit: type=1800 audit(1756512923.412:63): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1452" name="bus" dev="loop0" ino=9290 res=0 errno=0
[  253.588434][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  253.657847][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'.
[  253.847697][ T9515] loop3: detected capacity change from 0 to 32768
[  253.876094][ T9515] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  254.011565][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'.
[  254.165499][ T5802] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  254.714243][ T9552] loop3: detected capacity change from 0 to 128
[  254.783463][ T9552] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  254.823687][ T9552] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.040268][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.065569][ T9538] loop2: detected capacity change from 0 to 32768
[  255.106019][ T9538] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1474 (9538)
[  255.170394][ T9538] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  255.193271][ T9538] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  255.219960][ T9563] autofs4:pid:9563:autofs_fill_super: called with bogus options
[  255.225955][ T9538] BTRFS info (device loop2): using free space tree
[  255.420083][ T9538] BTRFS info (device loop2): enabling ssd optimizations
[  255.448240][ T9538] BTRFS info (device loop2): auto enabling async discard
[  255.463204][ T9581] loop0: detected capacity change from 0 to 4096
[  255.482855][ T9581] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  255.563378][ T9581] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  255.787590][ T5785] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  255.992261][ T9596] netlink: 'syz.3.1494': attribute type 1 has an invalid length.
[  256.146529][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  256.152925][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  256.684585][ T9609] loop2: detected capacity change from 0 to 8192
[  256.733104][ T9609] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  256.781501][ T9609] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  256.781606][ T9616] loop1: detected capacity change from 0 to 1024
[  256.803704][ T9609] REISERFS (device loop2): using ordered data mode
[  256.810803][ T9609] reiserfs: using flush barriers
[  256.823669][ T9609] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  256.856480][ T9616] EXT4-fs: Ignoring removed bh option
[  256.862040][ T9616] EXT4-fs: Ignoring removed nobh option
[  256.874588][ T9616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  256.892717][ T9609] REISERFS (device loop2): checking transaction log (loop2)
[  256.903087][ T9609] REISERFS (device loop2): Using r5 hash to sort names
[  256.911242][ T9609] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  256.940307][ T9616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.220818][ T9618] loop0: detected capacity change from 0 to 8192
[  257.274048][ T9618] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  257.376223][ T9618] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  257.385532][ T9618] REISERFS (device loop0): using ordered data mode
[  257.462819][ T9618] reiserfs: using flush barriers
[  257.493620][ T9618] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  257.561682][ T9618] REISERFS (device loop0): checking transaction log (loop0)
[  257.657044][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.871767][ T9618] REISERFS (device loop0): Using tea hash to sort names
[  257.915066][ T9618] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  258.958448][ T9646] loop2: detected capacity change from 0 to 32768
[  258.982938][ T9646] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1515 (9646)
[  259.005098][ T9646] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  259.020869][ T9646] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  259.031230][ T9646] BTRFS info (device loop2): using free space tree
[  259.082284][ T9666] loop3: detected capacity change from 0 to 4096
[  259.127570][ T9666] ntfs3: loop3: ino=3, Correct links count -> 2.
[  259.187790][ T9646] BTRFS info (device loop2): enabling ssd optimizations
[  259.195536][ T9685] netlink: set zone limit has 8 unknown bytes
[  259.207476][ T9646] BTRFS info (device loop2): auto enabling async discard
[  259.217610][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  259.327424][ T9666] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  259.439558][    T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  259.468032][    T8] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  259.489264][ T9666] ntfs3: loop3: failed to convert "0000" to iso8859-9
[  259.510079][    T8] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  259.537884][    T8] usb 1-1: config 220 has no interface number 2
[  259.549032][ T5785] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  259.560959][ T9666] ntfs3: loop3: failed to convert name for inode 1e.
[  259.563073][    T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  259.600214][    T8] usb 1-1: config 220 interface 0 has no altsetting 0
[  259.618317][    T8] usb 1-1: config 220 interface 76 has no altsetting 0
[  259.625265][    T8] usb 1-1: config 220 interface 1 has no altsetting 0
[  259.678840][    T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  259.696976][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.766419][    T8] usb 1-1: Product: syz
[  259.770665][    T8] usb 1-1: Manufacturer: syz
[  259.813248][    T8] usb 1-1: SerialNumber: syz
[  259.919978][ T9695] loop3: detected capacity change from 0 to 64
[  260.094276][    T8] usb 1-1: selecting invalid altsetting 0
[  260.110571][    T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  260.119944][    T8] usb 1-1: No valid video chain found.
[  260.154920][    T8] usb 1-1: selecting invalid altsetting 0
[  260.182073][    T8] usbtest: probe of 1-1:220.1 failed with error -22
[  260.230251][    T8] usb 1-1: USB disconnect, device number 12
[  260.895752][   T28] audit: type=1326 audit(1756512930.872:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d4598ebe9 code=0x0
[  260.906717][ T9718] loop2: detected capacity change from 0 to 1024
[  261.121944][ T9701] loop1: detected capacity change from 0 to 32768
[  261.197311][ T9723] loop2: detected capacity change from 0 to 2048
[  261.208519][ T9701] ialloc: diAlloc returned -5!
[  261.225764][ T9723] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  261.257461][ T9723] NILFS (loop2): mounting unchecked fs
[  261.259958][ T9726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1545'.
[  261.285177][ T5797] udevd[5797]: incorrect nilfs2 checksum on /dev/loop2
[  261.295410][ T9726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1545'.
[  261.308836][ T9725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1545'.
[  261.317180][  T110] ERROR: (device loop1): diUpdatePMap: the iag is outside the map
[  261.317180][  T110] 
[  261.340559][ T9723] NILFS (loop2): recovery complete
[  261.347358][  T110] ERROR: (device loop1): remounting filesystem as read-only
[  261.372887][ T9727] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.007028][ T9741] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  262.010722][ T9743] loop2: detected capacity change from 0 to 512
[  262.047043][ T9743] EXT4-fs: Ignoring removed bh option
[  262.091162][ T9743] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  262.101591][ T9743] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  262.180645][ T9743] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  262.262803][ T9743] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  262.297613][ T9743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.411519][ T9743] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1553: bg 0: block 353: padding at end of block bitmap is not set
[  262.475087][ T9749] loop1: detected capacity change from 0 to 4096
[  262.528042][ T9735] loop3: detected capacity change from 0 to 40427
[  262.534129][ T9750] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.569995][ T9735] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  262.604458][ T9735] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  262.639487][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.685744][ T9735] F2FS-fs (loop3): invalid crc value
[  262.750721][ T9735] F2FS-fs (loop3): Found nat_bits in checkpoint
[  262.970806][ T9735] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  262.986884][ T9735] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  263.095367][   T28] audit: type=1800 audit(1756512933.072:65): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1549" name="file1" dev="loop3" ino=10 res=0 errno=0
[  263.420731][ T9746] loop0: detected capacity change from 0 to 40427
[  263.439109][ T9746] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  263.459738][ T9746] F2FS-fs (loop0): Image doesn't support compression
[  263.478616][ T9746] F2FS-fs (loop0): Image doesn't support compression
[  263.529522][ T9746] F2FS-fs (loop0): invalid crc value
[  263.546233][ T9746] F2FS-fs (loop0): Found nat_bits in checkpoint
[  263.713822][ T9746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  263.961262][ T5786] syz-executor: attempt to access beyond end of device
[  263.961262][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  264.006026][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  264.245160][ T9764] loop1: detected capacity change from 0 to 32768
[  264.292001][ T9784] program syz.2.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.304428][ T9764] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  264.394029][ T9789] binder: 9788:9789 ioctl c0306201 2000000001c0 returned -22
[  264.490877][ T9764] XFS (loop1): Ending clean mount
[  264.670883][ T5783] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  264.958332][ T1188] kernel write not supported for file /input/event2 (pid: 1188 comm: kworker/0:2)
[  265.164310][ T9802] loop0: detected capacity change from 0 to 512
[  265.211770][ T9802] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  265.280069][ T9802] EXT4-fs (loop0): 1 truncate cleaned up
[  265.347284][ T9802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.356137][ T9808] netlink: 'syz.1.1575': attribute type 27 has an invalid length.
[  265.380240][ T9810] loop3: detected capacity change from 0 to 8
[  265.470451][ T9802] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1572: bg 0: block 256: padding at end of block bitmap is not set
[  265.519053][ T9802] EXT4-fs (loop0): Remounting filesystem read-only
[  265.530923][ T9802] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  265.543737][ T9802] overlayfs: failed to verify upper root origin
[  265.590859][ T9810] SQUASHFS error: xz decompression failed, data probably corrupt
[  265.616049][ T9810] SQUASHFS error: Failed to read block 0xa8: -5
[  265.654155][ T9810] SQUASHFS error: xz decompression failed, data probably corrupt
[  265.680143][ T9810] SQUASHFS error: Failed to read block 0xa8: -5
[  265.688181][   T28] audit: type=1800 audit(1756512935.672:66): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1574" name="file0" dev="loop3" ino=3 res=0 errno=0
[  265.689844][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.701816][ T9795] loop2: detected capacity change from 0 to 32768
[  265.852763][ T9819] loop0: detected capacity change from 0 to 512
[  265.861750][ T9795] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.902463][ T9819] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  265.950049][ T9819] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  265.991869][ T9819] EXT4-fs (loop0): 1 truncate cleaned up
[  265.999453][ T9819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.046631][ T9819] EXT4-fs: group quota file already specified
[  266.129052][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.171634][ T9795] XFS (loop2): Ending clean mount
[  266.250568][ T9830] loop1: detected capacity change from 0 to 1024
[  266.281217][ T9795] XFS (loop2): Quotacheck needed: Please wait.
[  266.289463][ T9833] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0)
[  266.292898][ T9830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.408315][ T9838] loop3: detected capacity change from 0 to 4096
[  266.418231][ T9830] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.481848][ T9795] XFS (loop2): Quotacheck: Done.
[  266.524133][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.540631][ T9840] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.690038][ T5785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.861875][ T9844] binfmt_misc: register: failed to install interpreter file ./file0
[  267.208358][ T9852] loop3: detected capacity change from 0 to 512
[  267.242568][ T9852] EXT4-fs (loop3): Test dummy encryption mode enabled
[  267.266607][ T9852] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.508742][ T5782] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  267.957069][ T9876] loop0: detected capacity change from 0 to 16
[  267.996918][ T9876] erofs: (device loop0): mounted with root inode @ nid 36.
[  268.314754][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'.
[  268.368841][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1605'.
[  268.550246][ T9866] loop2: detected capacity change from 0 to 32768
[  268.586260][ T9866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1597 (9866)
[  268.632345][ T9866] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.659325][ T9866] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  268.701843][ T9866] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  268.740884][ T9866] BTRFS info (device loop2): use lzo compression, level 0
[  268.756376][ T9866] BTRFS info (device loop2): using free space tree
[  268.825395][ T9907] 9pnet_rdma: rdma_create_trans (9907): problem binding to privport: 13
[  268.889726][ T9866] BTRFS info (device loop2): enabling ssd optimizations
[  268.915132][ T9866] BTRFS info (device loop2): auto enabling async discard
[  269.097533][ T9919] nbd: must specify a size in bytes for the device
[  269.206615][ T5785] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  269.897600][ T9896] loop0: detected capacity change from 0 to 40427
[  269.939238][ T9896] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  269.984562][ T9896] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  270.021771][ T9935] loop2: detected capacity change from 0 to 16
[  270.036018][ T9896] F2FS-fs (loop0): invalid crc value
[  270.078114][ T9935] erofs: (device loop2): mounted with root inode @ nid 36.
[  270.109509][ T9896] F2FS-fs (loop0): Found nat_bits in checkpoint
[  270.324509][ T9896] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  270.341903][ T9896] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  270.479568][   T28] audit: type=1800 audit(1756512940.462:67): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1610" name="file1" dev="loop0" ino=10 res=0 errno=0
[  270.599039][ T9924] loop3: detected capacity change from 0 to 32768
[  270.636861][ T9924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1617 (9924)
[  270.706968][ T9924] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.750395][ T9924] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  270.786053][ T9924] BTRFS info (device loop3): using free space tree
[  270.958993][ T9924] BTRFS info (device loop3): enabling ssd optimizations
[  271.006411][ T9924] BTRFS info (device loop3): auto enabling async discard
[  271.229712][ T9969] loop2: detected capacity change from 0 to 64
[  271.492669][ T1097] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  271.560375][ T5782] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.671459][ T9942] loop1: detected capacity change from 0 to 32768
[  271.824711][ T9942] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.232032][ T9988] loop2: detected capacity change from 0 to 1024
[  272.514273][ T3484] hfsplus: b-tree write err: -5, ino 4
[  272.538591][ T9942] XFS (loop1): Ending clean mount
[  272.618687][ T9942] XFS (loop1): Quotacheck needed: Please wait.
[  272.630762][ T9994] binder: 9993:9994 ioctl c0306201 2000000001c0 returned -22
[  272.831149][ T9942] XFS (loop1): Quotacheck: Done.
[  272.897482][T10001] loop3: detected capacity change from 0 to 256
[  273.075765][T10005] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1637'.
[  273.123185][T10005] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  273.193201][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.222105][T10036] loop3: detected capacity change from 0 to 1024
[  274.260362][T10036] EXT4-fs: Ignoring removed nomblk_io_submit option
[  274.286258][ T5790] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  274.362496][T10036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.475977][ T5790] usb 2-1: Using ep0 maxpacket: 16
[  274.483563][ T5790] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  274.492690][ T5790] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  274.513745][ T5790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  274.530043][ T5790] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.540654][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.551003][ T5790] usb 2-1: Product: syz
[  274.555240][ T5790] usb 2-1: Manufacturer: �
[  274.560466][ T5790] usb 2-1: SerialNumber: syz
[  274.635182][T10049] loop0: detected capacity change from 0 to 512
[  274.647903][T10049] EXT4-fs: Ignoring removed bh option
[  274.679332][T10049] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  274.693519][T10052] loop2: detected capacity change from 0 to 512
[  274.700314][T10049] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  274.732558][T10049] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  274.770611][T10052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  274.771576][T10049] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  274.793366][T10049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.802457][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.827689][T10052] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  274.893489][ T5790] usb 2-1: 0:2 : does not exist
[  274.904960][T10049] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1652: bg 0: block 353: padding at end of block bitmap is not set
[  275.097746][ T5790] usb 2-1: USB disconnect, device number 14
[  275.100273][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.166985][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.308359][T10062] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1655'.
[  275.571163][T10068] loop3: detected capacity change from 0 to 1024
[  275.664968][T10068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.689644][T10075] loop2: detected capacity change from 0 to 512
[  275.698545][T10075] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  275.712536][T10068] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.820542][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.003833][T10083] loop0: detected capacity change from 0 to 1024
[  276.061864][T10083] EXT4-fs: Ignoring removed nomblk_io_submit option
[  276.110706][T10083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.166466][T10091] loop2: detected capacity change from 0 to 8
[  276.316903][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.447639][T10091] SQUASHFS error: xz decompression failed, data probably corrupt
[  276.455471][T10091] SQUASHFS error: Failed to read block 0xa8: -5
[  276.556487][T10091] SQUASHFS error: xz decompression failed, data probably corrupt
[  276.564339][T10091] SQUASHFS error: Failed to read block 0xa8: -5
[  276.592607][   T28] audit: type=1800 audit(1756512946.572:68): pid=10091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1665" name="file0" dev="loop2" ino=3 res=0 errno=0
[  276.658088][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  277.068902][T10117] loop0: detected capacity change from 0 to 2048
[  277.151939][T10121] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.248004][   T28] audit: type=1800 audit(1756512947.232:69): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1676" name="file2" dev="loop0" ino=16 res=0 errno=0
[  277.344252][T10126] loop3: detected capacity change from 0 to 8
[  277.369261][T10126] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  277.409211][ T5802] udevd[5802]: incorrect cramfs checksum on /dev/loop3
[  277.422090][T10126] cramfs: Error -5 while decompressing!
[  277.436015][T10126] cramfs: ffffffff96fda298(16)->ffff88806d751000(4096)
[  277.437799][T10117] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4)
[  277.455376][T10117] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[  277.469288][T10126] cramfs: Error -5 while decompressing!
[  277.477331][T10117] Remounting filesystem read-only
[  277.508067][ T5802] udevd[5802]: incorrect cramfs checksum on /dev/loop3
[  277.516071][T10126] cramfs: ffffffff96fda298(16)->ffff88806d751000(4096)
[  277.548419][   T28] audit: type=1800 audit(1756512947.532:70): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1681" name="file0" dev="loop3" ino=244 res=0 errno=0
[  277.603346][ T5786] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  277.626868][ T5786] NILFS (loop0): discard dirty page: offset=4096, ino=16
[  277.630908][T10131] loop1: detected capacity change from 0 to 256
[  277.634132][ T5786] NILFS (loop0): discard dirty block: blocknr=27, size=1024
[  277.651790][ T5786] NILFS (loop0): discard dirty block: blocknr=28, size=1024
[  277.661212][ T5786] NILFS (loop0): discard dirty block: blocknr=29, size=1024
[  277.688699][ T5786] NILFS (loop0): discard dirty block: blocknr=30, size=1024
[  277.703833][   T28] audit: type=1800 audit(1756512947.682:71): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1683" name="file1" dev="loop1" ino=1048703 res=0 errno=0
[  277.727398][T10131] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  277.743551][ T5786] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  277.771748][ T5786] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  277.779240][T10131] FAT-fs (loop1): Filesystem has been set read-only
[  277.795838][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.813808][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.857388][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.883737][ T5786] NILFS (loop0): discard dirty page: offset=0, ino=5
[  277.914561][ T5786] NILFS (loop0): discard dirty block: blocknr=41, size=1024
[  277.938706][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.975995][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.984945][ T5786] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.005484][T10133] loop3: detected capacity change from 0 to 4096
[  278.072690][T10133] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  278.549113][T10143] loop3: detected capacity change from 0 to 1024
[  278.699101][T10130] loop2: detected capacity change from 0 to 32768
[  278.721191][   T28] audit: type=1326 audit(1756512948.702:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.0.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4598ebe9 code=0x7ffc0000
[  278.803917][   T28] audit: type=1326 audit(1756512948.702:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.0.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4598ebe9 code=0x7ffc0000
[  278.899467][T10130] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  278.941546][   T28] audit: type=1326 audit(1756512948.712:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.0.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4d4598ebe9 code=0x7ffc0000
[  279.019630][T10155] loop0: detected capacity change from 0 to 8192
[  279.040137][   T28] audit: type=1326 audit(1756512948.712:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.0.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4598ebe9 code=0x7ffc0000
[  279.074732][ T1097] hfsplus: b-tree write err: -5, ino 4
[  279.084382][T10155] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  279.099706][T10155] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  279.110826][T10155] REISERFS (device loop0): using ordered data mode
[  279.117882][T10155] reiserfs: using flush barriers
[  279.127258][T10155] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  279.164982][T10155] REISERFS (device loop0): checking transaction log (loop0)
[  279.212129][T10155] REISERFS (device loop0): Using r5 hash to sort names
[  279.266799][T10155] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  279.280757][ T5785] (syz-executor,5785,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  279.320191][ T5785] ocfs2: Unmounting device (7,2) on (node local)
[  280.022194][T10173] netlink: 'syz.3.1703': attribute type 281 has an invalid length.
[  280.239970][T10180] loop2: detected capacity change from 0 to 128
[  280.356977][ T1188] IPVS: starting estimator thread 0...
[  280.456379][T10184] IPVS: using max 18 ests per chain, 43200 per kthread
[  280.574611][T10188] loop3: detected capacity change from 0 to 1024
[  280.750550][T10169] loop0: detected capacity change from 0 to 32768
[  280.762986][ T1076] hfsplus: b-tree write err: -5, ino 4
[  280.800261][T10169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1700 (10169)
[  280.867862][T10169] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  280.898992][T10169] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  280.907074][T10195] loop2: detected capacity change from 0 to 512
[  280.938421][T10169] BTRFS info (device loop0): using free space tree
[  280.952525][   T28] audit: type=1326 audit(1756512950.932:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f079b78ebe9 code=0x0
[  281.145316][T10169] BTRFS info (device loop0): enabling ssd optimizations
[  281.167334][T10169] BTRFS info (device loop0): auto enabling async discard
[  281.403240][  T137] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  281.471402][ T5786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.969878][T10225] loop0: detected capacity change from 0 to 512
[  282.040252][T10225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.064646][T10225] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  282.128440][T10225] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.1718: corrupted inode contents
[  282.170562][T10225] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz.0.1718: mark_inode_dirty error
[  282.216232][T10225] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.1718: corrupted inode contents
[  282.256011][T10230] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.1718: corrupted inode contents
[  282.306008][T10230] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz.0.1718: mark_inode_dirty error
[  282.344552][T10230] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.1718: corrupted inode contents
[  282.512018][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.651500][T10219] loop1: detected capacity change from 0 to 40427
[  282.697502][T10219] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  282.725923][T10219] F2FS-fs (loop1): Image doesn't support compression
[  282.743006][T10219] F2FS-fs (loop1): Image doesn't support compression
[  282.776839][T10219] F2FS-fs (loop1): invalid crc value
[  282.807972][T10219] F2FS-fs (loop1): Found nat_bits in checkpoint
[  282.988470][T10219] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  283.091567][T10226] loop3: detected capacity change from 0 to 32768
[  283.174988][T10226] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  283.207231][ T5783] syz-executor: attempt to access beyond end of device
[  283.207231][ T5783] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  283.256255][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  283.334304][T10226] XFS (loop3): Ending clean mount
[  283.358013][T10226] XFS (loop3): Quotacheck needed: Please wait.
[  283.484942][T10226] XFS (loop3): Quotacheck: Done.
[  283.639762][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  283.701246][T10243] loop2: detected capacity change from 0 to 32768
[  283.741578][T10243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1724 (10243)
[  283.849573][T10243] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  283.891717][T10243] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  283.914520][T10243] BTRFS info (device loop2): using free space tree
[  284.216135][T10243] BTRFS info (device loop2): enabling ssd optimizations
[  284.240999][T10243] BTRFS info (device loop2): auto enabling async discard
[  284.535439][T10277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1730'.
[  284.582783][ T1076] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  284.612089][T10280] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  284.648235][ T5785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.883618][ T5802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop2 scanned by udevd (5802)
[  284.964823][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1734'.
[  285.485967][ T5859] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  285.686998][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.706537][ T5878] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  285.727060][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.753896][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  285.800866][ T5859] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  285.811806][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.823632][T10309] loop0: detected capacity change from 0 to 64
[  285.837035][ T5859] usb 4-1: config 0 descriptor??
[  285.925902][ T5878] usb 2-1: Using ep0 maxpacket: 16
[  285.939065][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.966170][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  285.987156][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  286.016661][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.024783][ T5878] usb 2-1: Product: syz
[  286.038633][ T5878] usb 2-1: Manufacturer: syz
[  286.056923][ T5878] usb 2-1: SerialNumber: syz
[  286.288751][ T5859] wacom 0003:056A:0027.0018: ignoring exceeding usage max
[  286.313867][ T5859] wacom 0003:056A:0027.0018: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  286.339762][T10307] loop2: detected capacity change from 0 to 40427
[  286.346749][ T5859] wacom 0003:056A:0027.0018: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0
[  286.360776][T10307] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  286.379082][ T5859] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0018/input/input15
[  286.392691][T10307] F2FS-fs (loop2): Image doesn't support compression
[  286.404507][T10307] F2FS-fs (loop2): heap/no_heap options were deprecated
[  286.442266][T10307] F2FS-fs (loop2): Image doesn't support compression
[  286.464071][T10307] F2FS-fs (loop2): invalid crc value
[  286.510332][ T5878] usb 2-1: skipping empty audio interface (v1)
[  286.539368][ T5859] usb 4-1: USB disconnect, device number 16
[  286.546203][T10307] F2FS-fs (loop2): Found nat_bits in checkpoint
[  286.664654][ T5878] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  286.683939][T10307] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  286.718079][ T5878] usb 2-1: USB disconnect, device number 15
[  286.801512][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  286.843406][T10307] F2FS-fs (loop2): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x97f/0x19e0
[  286.871806][T10307] syz.2.1743: attempt to access beyond end of device
[  286.871806][T10307] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  286.917427][ T5785] syz-executor: attempt to access beyond end of device
[  286.917427][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  286.939649][ T5785] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  287.400989][T10326] netlink: 'syz.1.1749': attribute type 2 has an invalid length.
[  287.909892][T10343] sctp: [Deprecated]: syz.1.1758 (pid 10343) Use of int in max_burst socket option.
[  287.909892][T10343] Use struct sctp_assoc_value instead
[  287.977077][T10345] nftables ruleset with unbound set
[  288.390444][T10362] loop0: detected capacity change from 0 to 256
[  288.431313][T10362] exfat: Deprecated parameter 'namecase'
[  288.487418][T10362] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  288.734927][T10370] loop3: detected capacity change from 0 to 2048
[  288.803206][T10371] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.532568][T10389] loop3: detected capacity change from 0 to 1024
[  289.705264][   T42] hfsplus: b-tree write err: -5, ino 4
[  289.831907][T10393] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1783'.
[  289.881084][T10393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1783'.
[  289.900138][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'.
[  289.915470][T10368] loop1: detected capacity change from 0 to 32768
[  289.930360][T10393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1783'.
[  290.024905][T10368] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  290.079626][T10368] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  290.254096][T10368] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  290.293805][T10387] loop2: detected capacity change from 0 to 40427
[  290.327039][T10387] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  290.358623][T10387] F2FS-fs (loop2): invalid crc value
[  290.393438][T10387] F2FS-fs (loop2): Found nat_bits in checkpoint
[  290.400387][T10368] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  290.531707][T10387] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  290.741504][T10411] sp0: Synchronizing with TNC
[  290.792192][T10410] [U] è
[  290.827408][ T5785] syz-executor: attempt to access beyond end of device
[  290.827408][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.866305][ T5785] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  291.343805][T10424] dvmrp1: entered allmulticast mode
[  291.386211][T10424] dvmrp1: left allmulticast mode
[  291.667883][   T28] audit: type=1326 audit(1756512961.642:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  291.696901][ T1188] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  291.756608][   T28] audit: type=1326 audit(1756512961.642:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  291.816333][   T28] audit: type=1326 audit(1756512961.652:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  291.875365][   T28] audit: type=1326 audit(1756512961.652:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  291.899190][   T28] audit: type=1326 audit(1756512961.652:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  291.925213][   T28] audit: type=1326 audit(1756512961.652:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  291.955346][ T1188] usb 1-1: Using ep0 maxpacket: 32
[  291.961458][   T28] audit: type=1326 audit(1756512961.652:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  291.987772][   T28] audit: type=1326 audit(1756512961.662:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa558ebe9 code=0x7ffc0000
[  292.011397][ T1188] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  292.019671][ T1188] usb 1-1: config 0 has no interface number 0
[  292.031361][ T1188] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  292.041242][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.055266][ T1188] usb 1-1: Product: syz
[  292.070026][ T1188] usb 1-1: Manufacturer: syz
[  292.082540][ T1188] usb 1-1: SerialNumber: syz
[  292.100524][ T1188] usb 1-1: config 0 descriptor??
[  292.119466][ T1188] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  292.146099][    T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  292.346003][    T8] usb 2-1: Using ep0 maxpacket: 32
[  292.354495][    T8] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46
[  292.371293][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.389051][    T8] usb 2-1: config 0 descriptor??
[  292.466823][T10437] loop3: detected capacity change from 0 to 32768
[  292.500787][T10437] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  292.551002][T10437] XFS (loop3): Ending clean mount
[  292.571762][T10437] XFS (loop3): Quotacheck needed: Please wait.
[  292.663232][T10437] XFS (loop3): Quotacheck: Done.
[  292.685057][    T8] usb 2-1: USB disconnect, device number 16
[  292.742081][ T1188] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  292.798314][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  292.801378][ T1188] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  293.039417][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  293.039888][   T27] usb 1-1: USB disconnect, device number 13
[  293.096503][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  293.136905][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  293.191229][   T27] quatech2 1-1:0.51: device disconnected
[  293.553581][T10465] loop3: detected capacity change from 0 to 22
[  293.567603][T10465] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  293.594706][T10465] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  293.746997][T10455] loop2: detected capacity change from 0 to 32768
[  294.562449][T10489] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  294.918122][   T28] audit: type=1326 audit(1756512964.902:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4598ebe9 code=0x7fc00000
[  294.960733][   T28] audit: type=1326 audit(1756512964.902:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d4598ebe9 code=0x7fc00000
[  295.252433][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'.
[  295.457546][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1835'.
[  295.886811][   T50] Bluetooth: hci3: command 0x0405 tx timeout
[  295.933931][T10512] loop0: detected capacity change from 0 to 32768
[  296.007217][T10512] jfs_strtoUCS: char2uni returned -22.
[  296.013394][T10512] charset = iso8859-6, char = 0xdf
[  296.324084][T10523] loop1: detected capacity change from 0 to 32768
[  296.353254][T10523] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1836 (10523)
[  296.441845][T10523] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  296.514495][T10523] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  296.541638][T10523] BTRFS info (device loop1): using free space tree
[  296.723846][T10523] BTRFS info (device loop1): enabling ssd optimizations
[  296.769421][T10523] BTRFS info (device loop1): auto enabling async discard
[  296.813618][T10565] loop3: detected capacity change from 0 to 512
[  296.902688][T10565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.943670][T10565] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.147712][ T5783] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  297.165012][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  297.165029][   T28] audit: type=1800 audit(1756512967.142:115): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1847" name=0AF301 dev="loop3" ino=18 res=0 errno=0
[  297.272296][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.210886][T10572] loop0: detected capacity change from 0 to 32768
[  298.280252][T10572] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  298.395413][T10572] XFS (loop0): Ending clean mount
[  298.412157][T10572] XFS (loop0): Quotacheck needed: Please wait.
[  298.489930][ T1188] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  298.519560][T10572] XFS (loop0): Quotacheck: Done.
[  298.598515][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  298.694019][ T1188] usb 2-1: Using ep0 maxpacket: 8
[  298.718934][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.750116][ T1188] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  298.778299][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.805271][ T1188] usb 2-1: config 0 descriptor??
[  298.826153][    T8] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  299.071835][    T8] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  299.085989][    T8] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  299.094969][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  299.109992][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  299.125527][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  299.145439][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  299.156041][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  299.182362][    T8] usb 4-1: string descriptor 0 read error: -22
[  299.193825][    T8] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  299.204963][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.225541][    T8] usb 4-1: config 0 descriptor??
[  299.238978][    T8] hub 4-1:0.0: bad descriptor, ignoring hub
[  299.260414][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.272062][    T8] hub: probe of 4-1:0.0 failed with error -5
[  299.278609][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.289687][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.299410][    T8] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19
[  299.315464][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.332722][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.341706][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.353384][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.361225][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.371826][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.379946][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.388362][ T1188] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0
[  299.426223][ T1188] megaworld 0003:07B5:0312.0019: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0
[  299.470419][ T1188] megaworld 0003:07B5:0312.0019: no inputs found
[  299.558174][ T1188] usb 2-1: USB disconnect, device number 17
[  299.568970][ T5877] usb 4-1: USB disconnect, device number 17
[  299.646254][T10617] fido_id[10617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  299.933507][T10612] loop0: detected capacity change from 0 to 40427
[  299.951201][T10612] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  299.970086][T10612] F2FS-fs (loop0): Image doesn't support compression
[  299.981853][T10612] F2FS-fs (loop0): Image doesn't support compression
[  300.004778][T10612] F2FS-fs (loop0): invalid crc value
[  300.044891][T10612] F2FS-fs (loop0): Found nat_bits in checkpoint
[  300.207957][T10612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  300.237727][T10632] syz.2.1873 (10632): /proc/10631/oom_adj is deprecated, please use /proc/10631/oom_score_adj instead.
[  300.378408][ T5786] syz-executor: attempt to access beyond end of device
[  300.378408][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  300.409128][ T5786] F2FS-fs (loop0): Remounting filesystem read-only
[  300.439911][T10636] loop2: detected capacity change from 0 to 512
[  300.484307][T10636] EXT4-fs: Ignoring removed orlov option
[  300.514404][T10636] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  300.576003][ T5878] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  300.590647][T10636] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  300.633473][T10636] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1875: corrupted in-inode xattr: e_value size too large
[  300.685642][T10636] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1875: couldn't read orphan inode 15 (err -117)
[  300.725273][T10636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.758559][ T5878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  300.777223][T10630] loop1: detected capacity change from 0 to 32768
[  300.792529][ T5878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  300.814000][T10630] (syz.1.1872,10630,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  300.817762][ T5878] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  300.876898][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  300.888439][T10636] overlayfs: upper fs needs to support d_type.
[  300.903106][T10630] (syz.1.1872,10630,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  300.905890][ T5878] usb 4-1: SerialNumber: syz
[  300.980142][ T5878] cdc_ether: probe of 4-1:1.0 failed with error -22
[  301.003590][ T5878] usb-storage 4-1:1.0: USB Mass Storage device detected
[  301.005679][T10630] JBD2: Ignoring recovery information on journal
[  301.040678][ T5878] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  301.073123][ T5878] scsi host1: usb-storage 4-1:1.0
[  301.200820][T10630] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  301.216365][ T5785] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  301.276487][ T5785] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  301.319806][ T5785] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  301.380982][ T5785] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  301.439660][ T5785] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  301.482684][ T5785] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  301.537961][ T5785] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  301.572935][ T5785] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  301.595134][ T5785] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  301.626231][ T5785] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  301.743788][ T5783] ocfs2: Unmounting device (7,1) on (node local)
[  302.047482][T10651] loop1: detected capacity change from 0 to 128
[  302.092477][T10651] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  302.197653][T10651] ext4 filesystem being mounted at /464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  302.223369][T10649] loop0: detected capacity change from 0 to 32768
[  302.367185][ T5877] usb 4-1: USB disconnect, device number 18
[  302.368033][T10649] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[  302.368033][T10649] 
[  302.400267][T10649] ERROR: (device loop0): dbDiscardAG: -EIO
[  302.400267][T10649] 
[  302.438303][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.799619][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.449248][T10667] smc: net device ip_vti0 applied user defined pnetid SYZ0
[  303.732786][T10660] loop0: detected capacity change from 0 to 32768
[  303.753030][T10660] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  303.764408][T10660] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  303.803249][T10660] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  303.884430][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  303.886924][    T8] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  303.900942][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  303.910556][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  303.921872][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  303.930040][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  303.941226][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  303.950806][T10660] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  303.967539][ T5877] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  304.089919][    T8] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  304.098795][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  304.110776][    T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  304.122779][    T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  304.134712][    T8] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  304.190978][ T5877] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  304.206988][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  304.226974][ T5877] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  304.235127][ T5877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  304.286202][    T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  304.295402][    T8] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  304.325430][ T5877] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  304.377298][    T8] usb 4-1: Product: syz
[  304.381557][    T8] usb 4-1: Manufacturer: syz
[  304.398339][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  304.418216][    T8] usb 4-1: SerialNumber: syz
[  304.424500][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  304.447506][    T8] usb 4-1: config 0 descriptor??
[  304.453681][T10669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  304.463847][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  304.500952][    T8] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  304.523306][ T5877] usb 2-1: string descriptor 0 read error: -22
[  304.544994][ T5877] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  304.563857][    T8] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  304.574818][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.592431][ T5877] usb 2-1: config 0 descriptor??
[  304.602126][ T5877] hub 2-1:0.0: bad descriptor, ignoring hub
[  304.613682][T10673] chnl_net:caif_netlink_parms(): no params data found
[  304.620774][ T5877] hub: probe of 2-1:0.0 failed with error -5
[  304.658411][ T5877] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  304.782720][ T5878] usb 4-1: USB disconnect, device number 19
[  304.822602][ T5878] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  304.917612][ T5877] usb 2-1: USB disconnect, device number 18
[  305.051653][T10673] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.061622][T10673] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.070632][T10673] bridge_slave_0: entered allmulticast mode
[  305.079467][T10673] bridge_slave_0: entered promiscuous mode
[  305.088983][T10673] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.106744][T10673] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.115451][T10673] bridge_slave_1: entered allmulticast mode
[  305.123433][T10673] bridge_slave_1: entered promiscuous mode
[  305.182323][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.197166][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.279562][T10673] team0: Port device team_slave_0 added
[  305.289184][T10673] team0: Port device team_slave_1 added
[  305.392999][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.400445][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.428003][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.441822][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.449188][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.476976][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.724424][T10673] hsr_slave_0: entered promiscuous mode
[  305.751661][T10673] hsr_slave_1: entered promiscuous mode
[  305.765697][T10673] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.791785][T10673] Cannot create hsr debugfs directory
[  305.967041][   T50] Bluetooth: hci1: command tx timeout
[  306.034560][T10710] netlink: 'syz.0.1904': attribute type 3 has an invalid length.
[  306.042806][T10710] netlink: 'syz.0.1904': attribute type 1 has an invalid length.
[  306.383424][T10673] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  306.393980][T10702] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  306.409978][T10673] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  306.434242][T10705] loop1: detected capacity change from 0 to 32768
[  306.436043][T10702] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  306.460954][T10673] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  306.502213][T10705] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  306.512557][T10702] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  306.515260][T10673] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  306.519196][T10702] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  306.543187][T10702] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  306.549989][   T28] audit: type=1326 audit(1756512976.522:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4598ebe9 code=0x7ffc0000
[  306.589592][T10721] loop0: detected capacity change from 0 to 256
[  306.650656][T10702] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  306.661204][   T28] audit: type=1326 audit(1756512976.522:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4598ebe9 code=0x7ffc0000
[  306.675836][T10702] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  306.717514][T10705] XFS (loop1): Ending clean mount
[  306.725670][T10705] XFS (loop1): Quotacheck needed: Please wait.
[  306.739646][   T28] audit: type=1326 audit(1756512976.562:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4d4598ebe9 code=0x7ffc0000
[  306.783010][T10702] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  306.793846][   T28] audit: type=1326 audit(1756512976.562:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d4598ec23 code=0x7ffc0000
[  306.818336][   T28] audit: type=1326 audit(1756512976.562:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d4598d69f code=0x7ffc0000
[  306.841958][   T28] audit: type=1326 audit(1756512976.562:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4d4598ec77 code=0x7ffc0000
[  306.866442][   T28] audit: type=1326 audit(1756512976.572:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d4598d550 code=0x7ffc0000
[  306.922602][T10705] XFS (loop1): Quotacheck: Done.
[  306.976132][   T28] audit: type=1326 audit(1756512976.572:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d4598e7eb code=0x7ffc0000
[  307.066250][   T28] audit: type=1326 audit(1756512976.582:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d4598d84a code=0x7ffc0000
[  307.136382][   T28] audit: type=1326 audit(1756512976.582:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d4598d84a code=0x7ffc0000
[  307.150018][T10734] loop0: detected capacity change from 0 to 64
[  307.170613][T10673] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.235963][T10673] 8021q: adding VLAN 0 to HW filter on device team0
[  307.252869][ T5783] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  307.287103][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.294310][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.334408][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.341681][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.620523][T10738] loop0: detected capacity change from 0 to 1024
[  307.726064][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  307.784122][   T11] hfsplus: b-tree write err: -5, ino 4
[  307.838532][T10742] loop1: detected capacity change from 0 to 128
[  307.908397][T10742] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  307.940278][T10742] ext4 filesystem being mounted at /471/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  308.144934][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.158511][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  308.364464][T10756] loop1: detected capacity change from 0 to 2048
[  308.436420][T10756] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.526383][   T50] Bluetooth: hci3: command 0x0405 tx timeout
[  308.693539][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  308.976953][T10774] loop1: detected capacity change from 0 to 256
[  308.996835][T10771] loop3: detected capacity change from 0 to 4096
[  308.997816][T10673] veth0_vlan: entered promiscuous mode
[  309.021685][T10771] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  309.039712][T10673] veth1_vlan: entered promiscuous mode
[  309.048753][T10774] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  309.166932][T10673] veth0_macvtap: entered promiscuous mode
[  309.203174][T10771] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  309.221536][T10673] veth1_macvtap: entered promiscuous mode
[  309.245596][T10771] ntfs3: loop3: ino=1e, "file1" attr_set_size
[  309.301938][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.313853][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.324913][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.337629][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.348139][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.358919][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.369859][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.380626][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.393657][   T42] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  309.395718][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.405980][ T5782] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  309.420904][ T5782] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  309.431864][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.443461][ T5782] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  309.450776][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.450800][   T42] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  309.461193][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.461266][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.461279][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.461293][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.461305][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.461318][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.464243][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.602218][T10673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.629676][T10673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.641065][T10673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.659305][T10673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.745178][T10781] loop3: detected capacity change from 0 to 128
[  309.807565][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  309.852972][T10781] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  309.909561][T10785] loop0: detected capacity change from 0 to 2048
[  309.930060][T10781] ext4 filesystem being mounted at /489/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  310.017478][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.035905][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.060795][T10785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  310.096949][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  310.218314][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.236972][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.521423][T10797] tipc: Started in network mode
[  310.536192][T10797] tipc: Node identity fe931727f317, cluster identity 4711
[  310.563148][T10797] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  310.610331][   T50] Bluetooth: hci3: command 0x0405 tx timeout
[  310.656012][ T5878] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  310.766439][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  310.784547][T10802] loop1: detected capacity change from 0 to 4096
[  310.839901][ T5878] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  310.857098][ T5878] usb 1-1: config 0 has no interface number 0
[  310.866473][ T5878] usb 1-1: config 0 interface 132 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64
[  310.895454][ T5878] usb 1-1: config 0 interface 132 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  310.921036][ T5878] usb 1-1: config 0 interface 132 has no altsetting 0
[  310.950525][ T5878] usb 1-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=ff.75
[  310.969899][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.996434][ T5878] usb 1-1: Product: syz
[  311.005545][ T5878] usb 1-1: Manufacturer: syz
[  311.018512][ T5878] usb 1-1: SerialNumber: syz
[  311.025925][   T27] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  311.066772][ T5878] usb 1-1: config 0 descriptor??
[  311.074797][T10793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  311.094416][T10793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  311.266585][   T27] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  311.293679][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.320521][T10814] loop4: detected capacity change from 0 to 2048
[  311.328147][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  311.348773][   T27] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  311.358329][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.380077][   T27] usb 4-1: config 0 descriptor??
[  311.400755][T10793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  311.409664][T10793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  311.435253][T10814] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.486630][ T5878] cdc_subset 1-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Belkin, eTEK, or compatible, be:ca:4b:6a:79:74
[  311.559476][ T1188] tipc: Node number set to 226760487
[  311.767080][ T1188] usb 1-1: USB disconnect, device number 14
[  311.797516][ T1188] cdc_subset 1-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Belkin, eTEK, or compatible
[  311.854997][   T27] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0
[  311.882731][T10823] loop4: detected capacity change from 0 to 256
[  311.890343][   T27] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0
[  311.923537][   T27] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0
[  311.941620][T10823] FAT-fs (loop4): Directory bread(block 64) failed
[  311.963099][   T27] holtek_kbd 0003:04D9:A055.001A: item fetching failed at offset 5/7
[  311.967647][T10823] FAT-fs (loop4): Directory bread(block 65) failed
[  311.995443][T10823] FAT-fs (loop4): Directory bread(block 66) failed
[  312.005528][T10823] FAT-fs (loop4): Directory bread(block 67) failed
[  312.014824][   T27] holtek_kbd: probe of 0003:04D9:A055.001A failed with error -22
[  312.046478][T10823] FAT-fs (loop4): Directory bread(block 68) failed
[  312.065260][T10823] FAT-fs (loop4): Directory bread(block 69) failed
[  312.075390][   T27] usb 4-1: USB disconnect, device number 20
[  312.083571][T10823] FAT-fs (loop4): Directory bread(block 70) failed
[  312.106912][T10823] FAT-fs (loop4): Directory bread(block 71) failed
[  312.116381][T10823] FAT-fs (loop4): Directory bread(block 72) failed
[  312.134872][T10823] FAT-fs (loop4): Directory bread(block 73) failed
[  312.689583][   T50] Bluetooth: hci3: command 0x0405 tx timeout
[  312.790121][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  312.790138][   T28] audit: type=1326 audit(1756512982.772:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ff78ebe9 code=0x7ffc0000
[  312.857960][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  312.920648][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'.
[  312.930526][T10850] tipc: Invalid UDP bearer configuration
[  312.930586][T10850] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  312.953331][   T28] audit: type=1326 audit(1756512982.772:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ff78ebe9 code=0x7ffc0000
[  313.050804][   T28] audit: type=1326 audit(1756512982.812:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f54ff78ebe9 code=0x7ffc0000
[  313.115747][   T28] audit: type=1326 audit(1756512982.812:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ff78ebe9 code=0x7ffc0000
[  313.151026][   T28] audit: type=1326 audit(1756512982.812:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ff78ebe9 code=0x7ffc0000
[  313.198069][   T28] audit: type=1326 audit(1756512982.812:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f54ff78ebe9 code=0x7ffc0000
[  313.229861][   T28] audit: type=1326 audit(1756512982.812:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ff78ebe9 code=0x7ffc0000
[  313.510842][T10864] loop1: detected capacity change from 0 to 256
[  313.593014][T10864] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  313.986221][T10878] loop1: detected capacity change from 0 to 512
[  314.188544][T10841] loop0: detected capacity change from 0 to 40427
[  314.242079][T10841] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  314.260904][T10841] F2FS-fs (loop0): Image doesn't support compression
[  314.313679][T10841] F2FS-fs (loop0): Image doesn't support compression
[  314.348954][T10841] F2FS-fs (loop0): invalid crc value
[  314.373602][T10841] F2FS-fs (loop0): Found nat_bits in checkpoint
[  314.618260][T10841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  314.926301][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  315.005460][ T5786] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  315.058850][ T5786] F2FS-fs (loop0): invalid blkaddr: 1535, type: 10, run fsck to fix.
[  315.409266][T10916] loop1: detected capacity change from 0 to 64
[  315.523507][T10916] hfs: small file entry
[  315.910779][T10929] loop3: detected capacity change from 0 to 512
[  315.937292][T10929] EXT4-fs: Ignoring removed nomblk_io_submit option
[  315.943981][T10929] EXT4-fs: Ignoring removed bh option
[  315.987321][T10929] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  316.041950][T10929] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #11: comm syz.3.1978: corrupted inode contents
[  316.046021][   T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  316.096447][T10929] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #11: comm syz.3.1978: mark_inode_dirty error
[  316.125426][T10910] loop4: detected capacity change from 0 to 32768
[  316.141201][T10929] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1978: invalid indirect mapped block 1 (level 1)
[  316.175411][T10910] (syz.4.1971,10910,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  316.209143][T10929] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #11: comm syz.3.1978: corrupted inode contents
[  316.226705][T10910] (syz.4.1971,10910,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  316.246993][   T23] usb 2-1: Using ep0 maxpacket: 16
[  316.254662][   T23] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  316.264853][T10935] loop0: detected capacity change from 0 to 1024
[  316.273057][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  316.275994][T10929] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  316.299581][T10929] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #11: comm syz.3.1978: corrupted inode contents
[  316.300719][   T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  316.324952][T10929] EXT4-fs error (device loop3): ext4_truncate:4288: inode #11: comm syz.3.1978: mark_inode_dirty error
[  316.344864][T10929] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  316.374201][T10929] EXT4-fs (loop3): 1 truncate cleaned up
[  316.380092][   T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  316.380122][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  316.381870][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  316.400796][T10910] JBD2: Ignoring recovery information on journal
[  316.437290][T10929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.453444][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  316.477017][   T23] usb 2-1: SerialNumber: syz
[  316.498538][T10923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  316.526978][T10929] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.1978: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  316.562576][   T23] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  316.614638][   T23] cdc_acm: probe of 2-1:1.0 failed with error -12
[  316.627324][T10910] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  316.696792][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.789177][   T23] usb 2-1: USB disconnect, device number 19
[  316.973786][T10673] ocfs2: Unmounting device (7,4) on (node local)
[  317.006540][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  317.227083][   T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  317.422109][   T27] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[  317.450105][   T27] usb 1-1: config 0 has no interface number 1
[  317.471623][   T27] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  317.486311][ T5877] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  317.502165][   T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  317.524482][   T27] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  317.541359][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  317.554255][   T27] usb 1-1: SerialNumber: syz
[  317.575416][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  317.581998][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  317.602128][   T27] usb 1-1: config 0 descriptor??
[  317.676449][ T5877] usb 4-1: Using ep0 maxpacket: 32
[  317.682843][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.682878][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  317.685427][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  317.685457][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  317.685480][ T5877] usb 4-1: Product: syz
[  317.685495][ T5877] usb 4-1: Manufacturer: syz
[  317.685511][ T5877] usb 4-1: SerialNumber: syz
[  317.720786][ T5877] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input21
[  317.816012][   T27] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  317.816047][   T27] usb 1-1: No valid video chain found.
[  317.846703][   T27] usb 1-1: USB disconnect, device number 15
[  317.879487][T10951] loop4: detected capacity change from 0 to 32768
[  317.953711][T10951] (syz.4.1987,10951,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  317.954003][T10951] (syz.4.1987,10951,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  317.965620][T10951] JBD2: Ignoring recovery information on journal
[  318.017292][ T5877] usb 4-1: USB disconnect, device number 21
[  318.017389][    C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  318.032562][ T5799] udevd[5799]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  318.056712][T10951] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  318.078794][ T5877] appletouch 4-1:1.0: input: appletouch disconnected
[  318.201864][T10951] 
[  318.204271][T10951] ======================================================
[  318.211334][T10951] WARNING: possible circular locking dependency detected
[  318.218444][T10951] syzkaller #0 Not tainted
[  318.218458][T10951] ------------------------------------------------------
[  318.218465][T10951] syz.4.1987/10951 is trying to acquire lock:
[  318.218476][T10951] ffff88805f54bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320
[  318.247666][T10951] 
[  318.247666][T10951] but task is already holding lock:
[  318.255067][T10951] ffff88805f54bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[  318.265747][T10951] 
[  318.265747][T10951] which lock already depends on the new lock.
[  318.265747][T10951] 
[  318.276228][T10951] 
[  318.276228][T10951] the existing dependency chain (in reverse order) is:
[  318.285293][T10951] 
[  318.285293][T10951] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  318.293169][T10951]        down_read+0x46/0x2e0
[  318.297904][T10951]        ocfs2_init_acl+0x2fa/0x720
[  318.303143][T10951]        ocfs2_mknod+0x12e5/0x20f0
[  318.308354][T10951]        ocfs2_create+0x196/0x410
[  318.313385][T10951]        path_openat+0x1277/0x3190
[  318.318512][T10951]        do_filp_open+0x1c5/0x3d0
[  318.323586][T10951]        do_sys_openat2+0x12c/0x1c0
[  318.328794][T10951]        __x64_sys_openat+0x139/0x160
[  318.334178][T10951]        do_syscall_64+0x55/0xb0
[  318.339149][T10951]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.345616][T10951] 
[  318.345616][T10951] -> #3 (jbd2_handle){++++}-{0:0}:
[  318.352941][T10951]        start_this_handle+0x1e9d/0x20c0
[  318.358586][T10951]        jbd2__journal_start+0x2bb/0x5b0
[  318.364256][T10951]        jbd2_journal_start+0x2a/0x40
[  318.369654][T10951]        ocfs2_start_trans+0x376/0x6c0
[  318.375183][T10951]        ocfs2_shutdown_local_alloc+0x201/0xa10
[  318.381445][T10951]        ocfs2_dismount_volume+0x1e2/0x890
[  318.387266][T10951]        generic_shutdown_super+0x134/0x2b0
[  318.393209][T10951]        kill_block_super+0x44/0x90
[  318.398426][T10951]        deactivate_locked_super+0x97/0x100
[  318.404335][T10951]        cleanup_mnt+0x429/0x4c0
[  318.409286][T10951]        task_work_run+0x1ce/0x250
[  318.414412][T10951]        exit_to_user_mode_loop+0xe6/0x110
[  318.420241][T10951]        exit_to_user_mode_prepare+0xb1/0x140
[  318.426325][T10951]        syscall_exit_to_user_mode+0x1a/0x50
[  318.432326][T10951]        do_syscall_64+0x61/0xb0
[  318.437284][T10951]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.443718][T10951] 
[  318.443718][T10951] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  318.452688][T10951]        down_read+0x46/0x2e0
[  318.457411][T10951]        ocfs2_start_trans+0x36a/0x6c0
[  318.462888][T10951]        ocfs2_shutdown_local_alloc+0x201/0xa10
[  318.469141][T10951]        ocfs2_dismount_volume+0x1e2/0x890
[  318.474959][T10951]        generic_shutdown_super+0x134/0x2b0
[  318.480875][T10951]        kill_block_super+0x44/0x90
[  318.486081][T10951]        deactivate_locked_super+0x97/0x100
[  318.491990][T10951]        cleanup_mnt+0x429/0x4c0
[  318.496939][T10951]        task_work_run+0x1ce/0x250
[  318.502150][T10951]        exit_to_user_mode_loop+0xe6/0x110
[  318.507972][T10951]        exit_to_user_mode_prepare+0xb1/0x140
[  318.514068][T10951]        syscall_exit_to_user_mode+0x1a/0x50
[  318.520063][T10951]        do_syscall_64+0x61/0xb0
[  318.525369][T10951]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.531890][T10951] 
[  318.531890][T10951] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  318.539400][T10951]        ocfs2_start_trans+0x26b/0x6c0
[  318.544903][T10951]        ocfs2_setattr+0x102f/0x1b20
[  318.550205][T10951]        notify_change+0xb0d/0xe10
[  318.555333][T10951]        chown_common+0x3f9/0x5a0
[  318.560384][T10951]        do_fchownat+0x168/0x270
[  318.565346][T10951]        __x64_sys_chown+0x82/0x90
[  318.570479][T10951]        do_syscall_64+0x55/0xb0
[  318.575437][T10951]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.581888][T10951] 
[  318.581888][T10951] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  318.590683][T10951]        __lock_acquire+0x2ddb/0x7c80
[  318.596077][T10951]        lock_acquire+0x197/0x410
[  318.601127][T10951]        down_write+0x97/0x1f0
[  318.605911][T10951]        ocfs2_try_remove_refcount_tree+0xb7/0x320
[  318.612427][T10951]        ocfs2_xattr_set+0x596/0x11f0
[  318.617815][T10951]        ocfs2_set_acl+0x4e1/0x590
[  318.622939][T10951]        ocfs2_iop_set_acl+0x1ab/0x2a0
[  318.628413][T10951]        vfs_set_acl+0x803/0xa60
[  318.633371][T10951]        __se_sys_fsetxattr+0x450/0x4b0
[  318.638929][T10951]        do_syscall_64+0x55/0xb0
[  318.643876][T10951]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.650311][T10951] 
[  318.650311][T10951] other info that might help us debug this:
[  318.650311][T10951] 
[  318.660547][T10951] Chain exists of:
[  318.660547][T10951]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  318.660547][T10951] 
[  318.674570][T10951]  Possible unsafe locking scenario:
[  318.674570][T10951] 
[  318.682039][T10951]        CPU0                    CPU1
[  318.687427][T10951]        ----                    ----
[  318.692840][T10951]   lock(&oi->ip_xattr_sem);
[  318.697450][T10951]                                lock(jbd2_handle);
[  318.704052][T10951]                                lock(&oi->ip_xattr_sem);
[  318.711189][T10951]   lock(&ocfs2_file_ip_alloc_sem_key);
[  318.716767][T10951] 
[  318.716767][T10951]  *** DEADLOCK ***
[  318.716767][T10951] 
[  318.724927][T10951] 3 locks held by syz.4.1987/10951:
[  318.730151][T10951]  #0: ffff88807db72418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200
[  318.740037][T10951]  #1: ffff88805f54c2d8 (&type->i_mutex_dir_key#15){+.+.}-{3:3}, at: vfs_set_acl+0x37a/0xa60
[  318.750264][T10951]  #2: ffff88805f54bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[  318.761345][T10951] 
[  318.761345][T10951] stack backtrace:
[  318.767247][T10951] CPU: 1 PID: 10951 Comm: syz.4.1987 Not tainted syzkaller #0
[  318.774712][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  318.784793][T10951] Call Trace:
[  318.788092][T10951]  <TASK>
[  318.791045][T10951]  dump_stack_lvl+0x16c/0x230
[  318.795776][T10951]  ? load_image+0x3b0/0x3b0
[  318.800310][T10951]  ? show_regs_print_info+0x20/0x20
[  318.805535][T10951]  ? print_circular_bug+0x12b/0x1a0
[  318.810759][T10951]  check_noncircular+0x2bd/0x3c0
[  318.815728][T10951]  ? arch_stack_walk+0x160/0x190
[  318.820679][T10951]  ? look_up_lock_class+0x75/0x140
[  318.825809][T10951]  ? print_deadlock_bug+0x5d0/0x5d0
[  318.831018][T10951]  ? lockdep_lock+0xe0/0x220
[  318.835619][T10951]  ? stack_trace_save+0x9c/0xe0
[  318.840513][T10951]  ? _find_first_zero_bit+0xd3/0x100
[  318.845824][T10951]  __lock_acquire+0x2ddb/0x7c80
[  318.850716][T10951]  ? verify_lock_unused+0x140/0x140
[  318.855935][T10951]  ? verify_lock_unused+0x140/0x140
[  318.861153][T10951]  lock_acquire+0x197/0x410
[  318.865669][T10951]  ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[  318.871857][T10951]  ? __might_sleep+0xe0/0xe0
[  318.876498][T10951]  ? read_lock_is_recursive+0x20/0x20
[  318.881886][T10951]  down_write+0x97/0x1f0
[  318.886183][T10951]  ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[  318.892359][T10951]  ? down_read_killable+0x340/0x340
[  318.897581][T10951]  ? ocfs2_xattr_set+0x56f/0x11f0
[  318.902622][T10951]  ? __lock_acquire+0x7c80/0x7c80
[  318.907666][T10951]  ? ocfs2_xattr_block_find+0x154/0x4c0
[  318.913233][T10951]  ocfs2_try_remove_refcount_tree+0xb7/0x320
[  318.919233][T10951]  ? ocfs2_remove_refcount_tree+0xd50/0xd50
[  318.925143][T10951]  ? up_write+0x1c3/0x410
[  318.929485][T10951]  ocfs2_xattr_set+0x596/0x11f0
[  318.934372][T10951]  ? __ocfs2_xattr_set_handle+0xf10/0xf10
[  318.940108][T10951]  ? mark_lock+0x94/0x320
[  318.944458][T10951]  ? __lock_acquire+0x1334/0x7c80
[  318.949510][T10951]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  318.955251][T10951]  ? do_raw_spin_lock+0x121/0x2c0
[  318.960298][T10951]  ? __rwlock_init+0x150/0x150
[  318.965114][T10951]  ? do_raw_spin_unlock+0x121/0x230
[  318.970335][T10951]  ? _raw_spin_unlock+0x28/0x40
[  318.975218][T10951]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  318.980948][T10951]  ? verify_lock_unused+0x140/0x140
[  318.986166][T10951]  ? ocfs2_inode_lock_atime+0x4e0/0x4e0
[  318.991756][T10951]  ocfs2_set_acl+0x4e1/0x590
[  318.996385][T10951]  ocfs2_iop_set_acl+0x1ab/0x2a0
[  319.001369][T10951]  ? read_lock_is_recursive+0x20/0x20
[  319.006754][T10951]  ? ocfs2_xattr_get+0x220/0x220
[  319.011713][T10951]  ? evm_inode_set_acl+0xbb/0x410
[  319.016769][T10951]  ? down_write+0x162/0x1f0
[  319.021289][T10951]  ? evm_revalidate_status+0x4f/0xb0
[  319.026595][T10951]  ? ima_inode_set_acl+0x81/0x180
[  319.031645][T10951]  ? make_vfsuid+0x51/0xb0
[  319.036128][T10951]  ? inode_owner_or_capable+0xf0/0x1c0
[  319.041604][T10951]  vfs_set_acl+0x803/0xa60
[  319.046053][T10951]  __se_sys_fsetxattr+0x450/0x4b0
[  319.051129][T10951]  ? __x64_sys_fsetxattr+0xc0/0xc0
[  319.056290][T10951]  ? lockdep_hardirqs_on+0x98/0x150
[  319.061521][T10951]  ? __x64_sys_fsetxattr+0x20/0xc0
[  319.066652][T10951]  do_syscall_64+0x55/0xb0
[  319.071114][T10951]  ? clear_bhb_loop+0x40/0x90
[  319.075804][T10951]  ? clear_bhb_loop+0x40/0x90
[  319.080500][T10951]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.086439][T10951] RIP: 0033:0x7f883df8ebe9
[  319.090884][T10951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.110525][T10951] RSP: 002b:00007f883eeb3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  319.119047][T10951] RAX: ffffffffffffffda RBX: 00007f883e1c5fa0 RCX: 00007f883df8ebe9
[  319.127028][T10951] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  319.135009][T10951] RBP: 00007f883e011e19 R08: 0000000000000003 R09: 0000000000000000
[  319.142995][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.150978][T10951] R13: 00007f883e1c6038 R14: 00007f883e1c5fa0 R15: 00007fffa1c59dd8
[  319.158980][T10951]  </TASK>
[  319.259162][T10673] ocfs2: Unmounting device (7,4) on (node local)