last executing test programs:

57.758783755s ago: executing program 3 (id=845):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, ' '}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\''}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x24000000)

57.50162427s ago: executing program 3 (id=847):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
sendfile(r1, r0, 0x0, 0x1c)

57.261578963s ago: executing program 3 (id=851):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x149202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

56.877784281s ago: executing program 3 (id=857):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80040c, &(0x7f0000000440)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYBLOB="3ef628a9ecf9e1751ed9b65d6a5359bd9afb81136cbff69e1bdbcb39d60e9b32d9f142ac189ae0d659610ddf0bf8c95e8f1a51f27bbb9098900d07e5f0303418856a470de86ec769d69ea60f0ea33a2089c2a2d372ec5958bbc02c2b4d00f71d7062876aa812e57f7333fa60a4d976aba0ce610efbc27f6cd9f0eee7074c05c92ae57e5e1b9afed08d27df4b8b9fb9a30a14a0b4a82028df4924d31f4c15fe48e62ddf7437e325ec87679945ecbaeda079054d10574c0036c82e2fbc9d073f4f6644162662a8dc5700d5943d13b93f9868919746c86a6d48", @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc666859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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")
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000))

56.433505245s ago: executing program 3 (id=862):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x69}]}, 0x28}}, 0x4)

55.861574522s ago: executing program 3 (id=868):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYBLOB="ba29b889190f85c5f2d10d0dd5e3b2a8ee52ec6555dd208028b6b67d99335ad8fd687d1168eebb25947c46b93fb50c9b0cc14ff52fefc9b30e382f00c152b0666359cb400c3e7b036f1ebacae43a22c47e55b428c3341311cc05af28dc7e366ba8223a7651ff8afb0fe73cfff4af", @ANYRES8], 0x6, 0x2aa, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

55.309686726s ago: executing program 32 (id=868):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYBLOB="ba29b889190f85c5f2d10d0dd5e3b2a8ee52ec6555dd208028b6b67d99335ad8fd687d1168eebb25947c46b93fb50c9b0cc14ff52fefc9b30e382f00c152b0666359cb400c3e7b036f1ebacae43a22c47e55b428c3341311cc05af28dc7e366ba8223a7651ff8afb0fe73cfff4af", @ANYRES8], 0x6, 0x2aa, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

5.294774609s ago: executing program 0 (id=1269):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0f011001daa18c4089612d187301010203010902240001000000000904ef0002caea760009050102df0303000009058202ff01"], 0x0)
openat(0xffffffffffffff9c, 0x0, 0x18ba42, 0x15)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.441877491s ago: executing program 4 (id=1282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0)

3.279312167s ago: executing program 4 (id=1284):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x0, 0x80000)

3.009626104s ago: executing program 4 (id=1286):
io_setup(0x8, &(0x7f0000000540)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000140)="010000003c5628046e", 0x9, 0x2a21}])

2.949070959s ago: executing program 5 (id=1288):
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x20008000)

2.711622073s ago: executing program 5 (id=1291):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c95239c, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x0, 0x4, 0x8000000, 0xdffffffa]})

2.677095826s ago: executing program 4 (id=1292):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file3\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="646973636172642c6f726465723d7374726963742c6e6f646973636172642c6e6f7265636f766572792c6f726465723d72656c617865642c6e6f7265636f766572792c6e6f626172726965722c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c00b2046d5fdd1cb9dab415e5a13630981c056d1ae39434f0f2763afc84a94a2d50a1eff2e585432c1d9225f160642201d7e9"], 0x1, 0xa88, &(0x7f0000002140)="$eJzs3V2IXNUBAOBzZ3c2f2t3YpO6atS0tmh/3HVj0mpTTcRAKYUQ6ENB+xJiTEPWtDQiVYSmPpS+iIKYpz7E0pe+KG0p6ksJPhQpKKW0CH2y0tcUhD5IQafszDmzsyc73Jnsz53Z+T64c+bec+aec2fu3Llz7/kJwNiqtR4PHtweQnjlrZeP3fbqOy8uLTnSSdFoPU52zdVDCEWcn8zW98FEO/zko+dOrRYW4UDrMc2H41c7r90VQrgY9ocroRFeeOzS5PtvHH/vtXDu6RPH3n1zY7Z+WbHRGQAAwBA4ceXwwb3/+uutu//3+u1Hw7bO8nR+3ojz0/G8/2g8UU7ny7Wwcr7omrpNZekm41TL0k2skq47n3qWbrJH/lPZeus90m0ryX+ia9lq2w2jLO3HjVDU5lbM12pzc+3/5KH1v36qmDt/dvGJCxUVFFh3/70jhLDfZDKN49ScqfoIBNCW3y+8xsX1vVPXWdtkf/lffbi2+uu71Ne1hIyF7e1gs/f/nPyHO//f/FxNBdbPFtyb/n5D13al79F0nM/vI+T1lwb9/qf15fcj+j0H6HUfYVTuL/Qq58Qml+N69Sp/vl9sVQ/GML0PD2Xx8XvQup2Wf6aj8hkDq/vY9X/T2EzxT/YGrf/mourtG3xqVn0AAoZWXm+uGaX4vF5fHr+tJH57SfyOkvidJfG7SuJhnP3hqRfDS8Xy9a78P/2g18Oms1V8ZsDy5NcjB80/r/c7qLXmn9cnhqG268+X7n/80b+16/8Xnf3/07i/74/zjfjduhITpOuF+XX1Tt3/xspsaj3S3ZgV54ZV0ree71mZrtizvJ7QdZy5phyz6RXtK7ozvdLtW7n+RpZuR5y2Z+XNz092Zq9L5x/poDi9ojTL21vPtmMqK0c6ruyOYV4OuB5pf1xZ/39p72vV/+/cxpoN9eKJs4un743zaT99Z6K+bWn5wmYXHFizftv/zIaV7X+mO8vrte7jwszy8qL7uNDIlh/osfy+OJ9+5344saO1fO7UjxYfX++NhzF34Zlnz51cXDz9kyF7ks6nh6U8FTwJF0MYgmJ4Mk5P0nHh5GJ1xyRgc8w/9eSP5y888+w9Z588eeb0mdPnFw4t3P/AoYWFrz8w3zqvn+8+u9+K1YVhfC3/+lddEgAAAAAAAAAAAKBfZz6cv/yPt7/xz3b7/+X2f6n9f6r5m9r//zJr/5818+9UEE7tAFM7vmva22cdrE5l6epx+my2/j1ZPnuz130uhp1x/GL7/5Rd3q9rKs9N2fK8/96UbjZbnveXMpX1QVKEX+zsLt8XYvh8DH8doELFjtUXx7Csf+u0r6f+KfRLMZrS55b2htSPSWr/ndp7p/5KUv8P6fi/exPKyPrbjHaFVW8jsLr/bOX+v9NJTNXlMJmGdGo2jeIBDIeqx/9M1z1TeP5P39m+NKVkVx9eebzM+y+FtRj28SflX/n4n+s6vHBn/Lu+j3/ZiHn5DaA+HX7+u//uyjbc0m/++finqR/oPYPl/62Yf9qau0J/+TdfzfLPbwj16cEs/5195n/N9u+7vvwfivmnt+3uO/vNv13iorayHPl145l4STldN/5+lv+RbPtT354Db/91DtR4NOYP42xUxpkd1KiM/9tLXg/jUJxPB8JUzyEf72TQ8qf6Fel3YG+2/qLk920Ljv/b/Fmz+atxGcflmzEs+z5Mx8807Y9Lp30TM8vpGvG9TPH1Vd7brXqsgVH1wVa+/2ca/WnHEJRh7VP7Z7V7WfoxrLhszWaz0j59dShcrarf/6r/J1Sdf9Xvf5l8/N/8HD4f/zePz8f//V4Wn4//m78+H18vj8/H/83fz3z83zz+pmy9+fjAsyXxN5fE31ISf2tJ/L6S+NtK4j9fEn97SfwdJfE3lsTfWRL/xZL4L/WO/7g7aa/X312y/i+XxG91qT3KuG4/jLO8fZ7vP4yPdP+n1/d/T0k8MLouvb7wyKO//0Gj3f5/qnM9JN3HOxrn6/G/80/jfH7fO3TNL8W9Hec/zOKH/XoHjJO8/4z89/2uknhgdKV6Xr7fMIaK1Xvsye+39eq3qtd5PqPlKzH8agy/FsN7YjgXw/kYLsTwwCaVj43xyO/+ePilYvn//kwW32998rw9UN5P1H19lie/PjBoffa8H79BrTX/62wOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJla6/HgwdkihFfeevnY5b98+7dLS450UjRaj5Ndc/XO60K4N4YTMbwcn3zy0XOnusNPY1iEA6EIRWd5OH61k9OuEMLFsD9cCY3wwmOXJt9/4/h7r4VzT5849u6bG/cOtBUbnQEAAABU6P8BAAD//6d4CFY=")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsync(r0)

2.53358829s ago: executing program 1 (id=1293):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x83)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x15)

2.33119839s ago: executing program 5 (id=1295):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x6}}}}}}, 0x0)

2.224486651s ago: executing program 4 (id=1296):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

2.090877024s ago: executing program 5 (id=1297):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}], 0x18, 0x8000}, 0x2800c051)

2.02967766s ago: executing program 0 (id=1298):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1)
ioctl$TCSETS(r0, 0x8925, 0x0)

1.838778499s ago: executing program 1 (id=1300):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
socket$can_j1939(0x1d, 0x2, 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

1.72239565s ago: executing program 2 (id=1301):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000400)=0xf0000000, 0x4)

1.696780033s ago: executing program 0 (id=1302):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2)
r1 = dup2(r0, r0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x6e})

1.618113171s ago: executing program 5 (id=1303):
r0 = socket$kcm(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)

1.548361067s ago: executing program 1 (id=1304):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x18)
setpgid(0x0, 0x0)

1.397543542s ago: executing program 0 (id=1305):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9)

1.379448984s ago: executing program 2 (id=1306):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x005'])

1.31245463s ago: executing program 1 (id=1307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

1.279662034s ago: executing program 5 (id=1308):
syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x443a, &(0x7f00000088c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0xa00801, 0x0, 0x1, 0x0, &(0x7f0000000200))
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)

1.165639135s ago: executing program 0 (id=1309):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00')
faccessat2(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x1200)

1.100519071s ago: executing program 2 (id=1310):
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
sendto$inet(r0, &(0x7f0000000000)="bb9a0d460136", 0x6, 0x800, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)

1.067623045s ago: executing program 1 (id=1311):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c95239c, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x2, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffe, 0xa, 0xfffffff5, 0xffffcadb, 0x3, 0x0, 0x0, 0x4, 0x8000000, 0xdffffffa]})

971.074224ms ago: executing program 0 (id=1312):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
fchown(r0, 0x0, 0xffffffffffffffff)

817.656599ms ago: executing program 2 (id=1313):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

755.685495ms ago: executing program 1 (id=1314):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[], 0x1, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)

377.460803ms ago: executing program 2 (id=1315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

94.81001ms ago: executing program 2 (id=1316):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x683, &(0x7f00000003c0)="$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")
mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0)

0s ago: executing program 4 (id=1317):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = eventfd(0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1)

kernel console output (not intermixed with test programs):

e
[  135.756176][ T5639] nbd: couldn't find a device at index 1996488704
[  136.058861][ T5650] loop2: detected capacity change from 0 to 256
[  136.141907][ T5650] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  136.169262][ T5618] loop4: detected capacity change from 0 to 32768
[  136.185572][ T5654] loop1: detected capacity change from 0 to 164
[  136.194213][ T5618] XFS: attr2 mount option is deprecated.
[  136.241430][ T5654] isofs: isofs_export_get_parent(): child directory not normalized!
[  136.275282][ T5618] XFS (loop4): Mounting V5 Filesystem
[  136.447260][ T5618] XFS (loop4): Ending clean mount
[  136.463946][ T5667] loop1: detected capacity change from 0 to 64
[  136.471917][ T5618] XFS (loop4): Quotacheck needed: Please wait.
[  136.536151][ T5618] XFS (loop4): Quotacheck: Done.
[  136.711569][ T4267] XFS (loop4): Unmounting Filesystem
[  137.191060][ T5647] loop0: detected capacity change from 0 to 40427
[  137.212329][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'.
[  137.250893][ T5647] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  137.301227][ T5647] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  137.354598][ T5647] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6
[  137.397633][ T5647] F2FS-fs (loop0): invalid crc value
[  137.433286][ T5647] F2FS-fs (loop0): Found nat_bits in checkpoint
[  137.447308][ T5690] loop3: detected capacity change from 0 to 64
[  137.532502][ T5686] loop2: detected capacity change from 0 to 8192
[  137.596340][ T5686] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  137.619484][ T5647] F2FS-fs (loop0): Start checkpoint disabled!
[  137.635581][ T5686] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  137.646856][ T5686] REISERFS (device loop2): using ordered data mode
[  137.654497][ T5686] reiserfs: using flush barriers
[  137.666343][ T5686] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  137.668392][ T5647] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  137.683981][ T5686] REISERFS (device loop2): checking transaction log (loop2)
[  137.711094][ T5686] REISERFS (device loop2): Using r5 hash to sort names
[  137.725926][ T5686] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  137.755245][ T5686] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  137.767303][ T5647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  137.920700][ T5696] sg_write: data in/out 209152/4 bytes for SCSI command 0xf2-- guessing data in;
[  137.920700][ T5696]    program syz.4.486 not setting count and/or reply_len properly
[  138.218047][    T9] kworker/u4:0: attempt to access beyond end of device
[  138.218047][    T9] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  138.296166][   T26] audit: type=1326 audit(1761105616.621:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43b8efc9 code=0x7ffc0000
[  138.398944][   T26] audit: type=1326 audit(1761105616.671:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5d43b8efc9 code=0x7ffc0000
[  138.476195][   T26] audit: type=1326 audit(1761105616.671:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43b8efc9 code=0x7ffc0000
[  138.570026][   T26] audit: type=1326 audit(1761105616.671:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43b8efc9 code=0x7ffc0000
[  138.625211][ T4327] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  138.649083][   T26] audit: type=1326 audit(1761105616.681:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f5d43b8efc9 code=0x7ffc0000
[  138.705540][   T26] audit: type=1326 audit(1761105616.681:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d43b8efc9 code=0x7ffc0000
[  138.807222][ T4327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.825332][ T4327] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  138.865403][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.896740][ T4327] usb 2-1: config 0 descriptor??
[  138.915281][ T5030] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  138.947158][ T5719] loop0: detected capacity change from 0 to 256
[  139.034693][ T5719] FAT-fs (loop0): Directory bread(block 64) failed
[  139.064545][ T5719] FAT-fs (loop0): Directory bread(block 65) failed
[  139.084449][ T5719] FAT-fs (loop0): Directory bread(block 66) failed
[  139.116199][ T5030] usb 3-1: Using ep0 maxpacket: 16
[  139.121856][ T5719] FAT-fs (loop0): Directory bread(block 67) failed
[  139.130258][ T5030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.145418][ T5719] FAT-fs (loop0): Directory bread(block 68) failed
[  139.172464][ T5719] FAT-fs (loop0): Directory bread(block 69) failed
[  139.190763][ T5030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.201072][ T5719] FAT-fs (loop0): Directory bread(block 70) failed
[  139.218766][ T5030] usb 3-1: New USB device found, idVendor=1bd2, idProduct=6007, bcdDevice= 0.00
[  139.221239][ T5719] FAT-fs (loop0): Directory bread(block 71) failed
[  139.229839][ T5030] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0
[  139.246230][ T5030] usb 3-1: Product: syz
[  139.266903][ T5030] usb 3-1: config 0 descriptor??
[  139.275464][ T5719] FAT-fs (loop0): Directory bread(block 72) failed
[  139.282076][ T5719] FAT-fs (loop0): Directory bread(block 73) failed
[  139.311142][ T4327] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  139.345304][ T4327] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  139.362456][ T4327] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  139.369450][ T4327] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  139.417106][ T4327] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  139.423926][ T4327] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  139.458847][ T4327] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  139.502643][ T4327] kye 0003:0458:0153.000B: hidraw0: USB HID v10.00 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0
[  139.599981][ T4327] usb 2-1: USB disconnect, device number 6
[  139.704968][ T5030] hid-generic 0003:1BD2:6007.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  139.855973][ T5733] fido_id[5733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  139.923631][ T5030] usb 3-1: USB disconnect, device number 4
[  140.222992][ T5749] loop1: detected capacity change from 0 to 164
[  140.270544][ T5744] fido_id[5744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  140.286947][ T5749] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  140.405837][ T5749] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  140.908858][ T5754] loop2: detected capacity change from 0 to 8192
[  140.935408][ T5762] loop0: detected capacity change from 0 to 1024
[  140.956690][ T5754] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.051945][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.104150][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.127298][ T5746] loop3: detected capacity change from 0 to 32768
[  141.198422][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.237523][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.285453][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.294730][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.301648][ T5746] XFS (loop3): Mounting V5 Filesystem
[  141.336022][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.363878][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364010][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364050][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364093][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364106][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364239][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364253][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364292][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364305][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364343][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364356][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364406][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364419][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364532][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364545][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364642][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364655][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364697][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364710][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364746][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.364759][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.498848][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.618692][ T5746] XFS (loop3): Ending clean mount
[  141.625371][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.632174][ T5746] XFS (loop3): Quotacheck needed: Please wait.
[  141.632744][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.717594][ T5746] XFS (loop3): Quotacheck: Done.
[  141.896683][ T4269] XFS (loop3): Unmounting Filesystem
[  141.900646][ T5758] loop1: detected capacity change from 0 to 32768
[  141.917186][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.941379][ T5758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.515 (5758)
[  141.964006][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.975789][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  141.990391][ T5758] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.004197][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.012059][ T5758] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  142.022403][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.031111][ T5758] BTRFS info (device loop1): turning on sync discard
[  142.041602][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.061030][ T5758] BTRFS info (device loop1): enabling disk space caching
[  142.112683][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.132598][ T5758] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  142.146659][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.168623][ T5758] BTRFS info (device loop1): trying to use backup root at mount time
[  142.184416][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.202621][ T5758] BTRFS info (device loop1): force clearing of disk cache
[  142.210553][ T5758] BTRFS info (device loop1): disk space caching is enabled
[  142.235384][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235404][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235453][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235466][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235598][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235613][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235658][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235670][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235710][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235723][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235758][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235770][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235872][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235885][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235922][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235935][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235971][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.235983][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236020][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236034][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236147][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236160][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236197][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236210][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236245][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236258][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236296][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236308][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236408][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236421][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236493][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236506][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236542][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236555][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236594][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236606][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236713][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236725][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236764][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236777][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236813][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236825][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236864][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236877][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236982][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.236993][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237033][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237044][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237080][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237092][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237131][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237143][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237782][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.237801][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.238023][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.238036][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.238074][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.238087][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.238123][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.238136][ T5762] hfsplus: request for non-existent node 16777216 in B*Tree
[  142.238319][   T26] audit: type=1800 audit(1761105620.561:87): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.517" name="file1" dev="loop0" ino=20 res=0 errno=0
[  142.482796][ T5799] loop2: detected capacity change from 0 to 4096
[  143.022347][ T5758] BTRFS info (device loop1): rebuilding free space tree
[  143.124274][ T5758] BTRFS info (device loop1): disabling free space tree
[  143.165314][ T5758] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.195273][ T5758] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.267341][ T4272] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  143.340867][ T4272] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  143.405363][ T5758] BTRFS warning (device loop1: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  143.453142][ T5758] BTRFS info (device loop1: state M): trying to use backup root at mount time
[  143.468580][ T5803] loop0: detected capacity change from 0 to 32768
[  143.469871][ T5758] BTRFS info (device loop1: state M): force clearing of disk cache
[  143.588776][ T5758] BTRFS warning (device loop1: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  143.600864][ T5758] BTRFS info (device loop1: state M): trying to use backup root at mount time
[  143.610566][ T5758] BTRFS info (device loop1: state M): force clearing of disk cache
[  143.689953][ T5826] loop4: detected capacity change from 0 to 1024
[  143.725289][ T5803] XFS (loop0): Mounting V5 Filesystem
[  143.736073][ T4274] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.846406][ T5826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  143.908735][ T5826] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.020905][ T5826] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  144.273962][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  144.294214][ T5803] XFS (loop0): Ending clean mount
[  144.589857][ T4268] XFS (loop0): Unmounting Filesystem
[  144.859979][ T5819] loop2: detected capacity change from 0 to 32768
[  145.007635][ T5817] loop3: detected capacity change from 0 to 40427
[  145.115517][ T5819] XFS (loop2): Mounting V5 Filesystem
[  145.122279][ T5817] F2FS-fs (loop3): invalid crc value
[  145.183028][ T5817] F2FS-fs (loop3): Found nat_bits in checkpoint
[  145.295914][ T5819] XFS (loop2): Ending clean mount
[  145.306846][ T5819] XFS (loop2): Quotacheck needed: Please wait.
[  145.315834][ T5817] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  145.334339][ T5817] F2FS-fs (loop3): Start checkpoint disabled!
[  145.380616][ T5817] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  145.411446][ T5819] XFS (loop2): Quotacheck: Done.
[  145.615425][ T4272] XFS (loop2): Unmounting Filesystem
[  145.882159][ T5838] loop4: detected capacity change from 0 to 40427
[  145.906839][ T5837] loop1: detected capacity change from 0 to 32768
[  145.922486][ T5838] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  145.976529][ T5838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  146.022548][ T5838] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  146.065238][ T5838] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  146.095962][ T5838] F2FS-fs (loop4): invalid crc value
[  146.136671][ T5838] F2FS-fs (loop4): Found nat_bits in checkpoint
[  146.315412][ T5838] F2FS-fs (loop4): Start checkpoint disabled!
[  146.389873][ T5838] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  146.420514][ T5852] loop0: detected capacity change from 0 to 32768
[  146.430706][ T5838] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  146.480844][ T5852] XFS: noikeep mount option is deprecated.
[  146.591661][ T5838] F2FS-fs (loop4) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980
[  146.673206][ T5852] XFS (loop0): Mounting V5 Filesystem
[  146.685659][ T5838] syz.4.535: attempt to access beyond end of device
[  146.685659][ T5838] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  146.777786][ T5852] XFS (loop0): Ending clean mount
[  146.787055][ T5852] XFS (loop0): Quotacheck needed: Please wait.
[  146.968794][ T5852] XFS (loop0): Quotacheck: Done.
[  147.094741][ T4268] XFS (loop0): Unmounting Filesystem
[  147.107575][   T56] kworker/u4:4: attempt to access beyond end of device
[  147.107575][   T56] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  148.040974][ T5873] loop1: detected capacity change from 0 to 32768
[  148.063073][ T5885] loop2: detected capacity change from 0 to 65536
[  148.162992][ T5885] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  148.261903][   T27] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x18d/0x250, xfs_agi block 0x8002 
[  148.308974][   T27] XFS (loop2): Unmount and run xfs_repair
[  148.314774][   T27] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  148.374001][   T27] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00  XAGI..........@.
[  148.393493][   T27] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00  ................
[  148.413574][   T27] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.445326][   T27] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.474854][   T27] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.495306][   T27] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.514886][ T5883] loop3: detected capacity change from 0 to 32768
[  148.521580][   T27] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.565239][   T27] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.572678][ T5883] JBD2: Ignoring recovery information on journal
[  148.577271][ T5885] XFS (loop2): metadata I/O error in "xfs_read_agi+0x295/0x650" at daddr 0x8002 len 1 error 74
[  148.718829][ T5892] loop4: detected capacity change from 0 to 32768
[  148.751632][ T5892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.549 (5892)
[  148.786819][ T5883] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  148.812212][ T5892] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.844529][ T5892] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  148.995326][ T5892] BTRFS info (device loop4): using free space tree
[  149.437025][ T4269] ocfs2: Unmounting device (7,3) on (node local)
[  149.565574][ T5892] BTRFS info (device loop4): enabling ssd optimizations
[  149.603507][ T5932] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  149.620768][ T5934] loop1: detected capacity change from 0 to 128
[  149.805771][ T4267] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.179899][   T46] kworker/u4:3: attempt to access beyond end of device
[  150.179899][   T46] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  150.300284][ T5940] loop3: detected capacity change from 0 to 8192
[  150.338140][ T5940] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  150.402660][ T5940] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  150.413615][ T5940] REISERFS (device loop3): using ordered data mode
[  150.420486][ T5940] reiserfs: using flush barriers
[  150.525282][ T5940] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  150.585659][ T5940] REISERFS (device loop3): checking transaction log (loop3)
[  150.613117][ T5940] REISERFS (device loop3): Using r5 hash to sort names
[  150.656906][ T5940] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  150.705260][ T5940] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  150.818893][ T5960] loop1: detected capacity change from 0 to 512
[  150.993209][ T5946] loop0: detected capacity change from 0 to 32768
[  150.994294][ T5960] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  151.064809][ T5946] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  151.095335][ T5960] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.147944][ T5970] loop4: detected capacity change from 0 to 512
[  151.153828][ T5946] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.175322][ T5960] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  151.192790][ T5970] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.570: bad orphan inode 13
[  151.231879][ T5970] ext4_test_bit(bit=12, block=4) = 1
[  151.256423][ T5970] is_bad_inode(inode)=0
[  151.271154][ T5970] NEXT_ORPHAN(inode)=0
[  151.329679][ T5970] max_ino=32
[  151.347895][ T5970] i_nlink=1
[  151.362456][   T26] audit: type=1326 audit(1761105629.681:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a6b8efc9 code=0x7ffc0000
[  151.376456][ T5970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  151.455242][   T26] audit: type=1326 audit(1761105629.721:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f00a6b8efc9 code=0x7ffc0000
[  151.531002][ T5970] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.570: Unrecognised inode hash code 20
[  151.551826][ T4268] ocfs2: Unmounting device (7,0) on (node local)
[  151.591046][   T26] audit: type=1326 audit(1761105629.721:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a6b8efc9 code=0x7ffc0000
[  151.610301][ T5970] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.570: Corrupt directory, running e2fsck is recommended
[  151.660083][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  151.702768][   T26] audit: type=1326 audit(1761105629.721:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a6b8efc9 code=0x7ffc0000
[  151.725910][   T26] audit: type=1326 audit(1761105629.721:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f00a6b8efc9 code=0x7ffc0000
[  151.748848][   T26] audit: type=1326 audit(1761105629.731:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a6b8efc9 code=0x7ffc0000
[  151.769846][ T5970] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.570: Unrecognised inode hash code 20
[  151.830160][   T26] audit: type=1326 audit(1761105629.731:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a6b8efc9 code=0x7ffc0000
[  151.870743][ T5970] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.570: Corrupt directory, running e2fsck is recommended
[  151.910696][ T5986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'.
[  151.986162][ T5970] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.570: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  152.189032][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  152.502787][ T5996] loop1: detected capacity change from 0 to 8192
[  152.555422][ T5996] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  152.584640][ T5996] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  152.640071][ T5996] REISERFS (device loop1): using ordered data mode
[  152.683612][ T5996] reiserfs: using flush barriers
[  152.717103][ T5996] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  152.745647][ T5996] REISERFS (device loop1): checking transaction log (loop1)
[  152.764623][ T5996] REISERFS (device loop1): Using r5 hash to sort names
[  152.783240][ T5996] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  152.825170][ T5996] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  153.326131][ T6022] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  153.413583][ T6004] loop2: detected capacity change from 0 to 32768
[  153.460688][ T6004] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  153.498915][ T6004] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  153.586570][ T6012] loop4: detected capacity change from 0 to 32768
[  153.606530][ T6012] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.588 (6012)
[  153.633803][ T6012] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.646669][ T6012] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  153.659221][ T6012] BTRFS info (device loop4): allowing degraded mounts
[  153.666291][ T6012] BTRFS info (device loop4): enabling ssd optimizations
[  153.673292][ T6012] BTRFS info (device loop4): allowing degraded mounts
[  153.680305][ T6012] BTRFS info (device loop4): using free space tree
[  153.702354][ T4272] ocfs2: Unmounting device (7,2) on (node local)
[  153.731860][ T4281] Bluetooth: hci2: command 0x2021 tx timeout
[  153.739017][ T1169] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  153.925463][ T5030] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  153.942498][ T1169] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  153.971023][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.025013][ T1169] usb 2-1: Product: syz
[  154.061862][ T1169] usb 2-1: Manufacturer: syz
[  154.083200][ T1169] usb 2-1: SerialNumber: syz
[  154.110972][ T1169] usb 2-1: config 0 descriptor??
[  154.135340][ T5030] usb 1-1: Using ep0 maxpacket: 16
[  154.143130][ T5030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.171298][ T1169] usb 2-1: interface 1 not found
[  154.218535][ T5030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.265436][ T5030] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  154.291119][ T5030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.311243][ T4267] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.333434][ T5030] usb 1-1: config 0 descriptor??
[  154.372593][ T1169] usb 2-1: USB disconnect, device number 7
[  154.771917][ T5030] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  154.812944][ T6070] loop2: detected capacity change from 0 to 512
[  154.873339][ T6070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  154.939586][ T6070] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  154.982437][ T5155] usb 1-1: USB disconnect, device number 10
[  155.133649][ T6070] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.607: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  155.159912][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  155.218529][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  155.299538][ T6063] loop3: detected capacity change from 0 to 32768
[  155.324000][ T6063] XFS (loop3): Mounting V5 Filesystem
[  155.390649][ T6063] XFS (loop3): Ending clean mount
[  155.398211][ T6063] XFS (loop3): Quotacheck needed: Please wait.
[  155.446303][ T6063] XFS (loop3): Quotacheck: Done.
[  155.560790][ T4269] XFS (loop3): Unmounting Filesystem
[  155.812765][ T6091] loop0: detected capacity change from 0 to 64
[  155.872068][ T6091] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  155.926916][ T6096] loop1: detected capacity change from 0 to 256
[  155.971649][ T6096] FAT-fs (loop1): Directory bread(block 64) failed
[  156.011216][ T6096] FAT-fs (loop1): Directory bread(block 65) failed
[  156.042149][ T6096] FAT-fs (loop1): Directory bread(block 66) failed
[  156.087544][ T6096] FAT-fs (loop1): Directory bread(block 67) failed
[  156.094228][ T6096] FAT-fs (loop1): Directory bread(block 68) failed
[  156.135387][ T6096] FAT-fs (loop1): Directory bread(block 69) failed
[  156.174894][ T6096] FAT-fs (loop1): Directory bread(block 70) failed
[  156.215250][ T6096] FAT-fs (loop1): Directory bread(block 71) failed
[  156.255383][ T6096] FAT-fs (loop1): Directory bread(block 72) failed
[  156.262020][ T6096] FAT-fs (loop1): Directory bread(block 73) failed
[  156.425062][ T6108] loop0: detected capacity change from 0 to 47
[  156.662475][ T6112] loop2: detected capacity change from 0 to 256
[  156.693642][ T6113] loop1: detected capacity change from 0 to 64
[  156.716654][ T6112] exfat: Deprecated parameter 'namecase'
[  156.725042][ T6112] exfat: Deprecated parameter 'utf8'
[  156.881254][ T6112] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  157.206673][ T6123] loop2: detected capacity change from 0 to 128
[  157.236453][ T6123] EXT4-fs: Ignoring removed oldalloc option
[  157.249764][ T6123] EXT4-fs: inline encryption not supported
[  157.301977][ T6123] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  157.384012][ T6123] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  157.402094][ T6109] loop3: detected capacity change from 0 to 32768
[  157.431761][ T6109] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  157.482668][ T6109] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.784833][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  157.877563][ T4269] ocfs2: Unmounting device (7,3) on (node local)
[  158.115671][ T6148] loop3: detected capacity change from 0 to 2048
[  158.152027][ T6148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.047692][ T6169] netlink: 140 bytes leftover after parsing attributes in process `syz.4.645'.
[  159.109198][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.646'.
[  159.410440][ T6161] loop1: detected capacity change from 0 to 32768
[  159.427000][ T6179] netlink: 'syz.4.649': attribute type 1 has an invalid length.
[  159.466000][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'.
[  159.513129][ T6161] 
[  159.513129][ T6161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  159.513129][ T6161] 
[  159.563708][ T6161] ERROR: (device loop1): diWrite: ixpxd invalid
[  159.563708][ T6161] 
[  159.631732][ T6161] ERROR: (device loop1): txCommit: 
[  159.631732][ T6161] 
[  159.841513][ T4274] 
[  159.841513][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  159.841513][ T4274] 
[  159.894795][ T4274] 
[  159.894795][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  159.894795][ T4274] 
[  160.085566][ T6192] loop2: detected capacity change from 0 to 256
[  160.609142][ T6202] loop1: detected capacity change from 0 to 512
[  160.629689][ T6202] EXT4-fs: Ignoring removed oldalloc option
[  160.645220][ T5030] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  160.660772][ T6202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  160.749687][ T6202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002]
[  160.773215][ T6186] loop4: detected capacity change from 0 to 32768
[  160.803940][ T6202] System zones: 1-3, 19-19, 35-38
[  160.835310][ T5030] usb 4-1: Using ep0 maxpacket: 32
[  160.842559][ T5030] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.865415][ T5030] usb 4-1: config 0 interface 0 has no altsetting 0
[  160.872271][ T5030] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  160.882448][ T5030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.884252][ T6202] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  160.900412][ T6202] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.936369][ T6186] XFS (loop4): Mounting V5 Filesystem
[  160.952936][ T5030] usb 4-1: config 0 descriptor??
[  161.089528][ T6217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.663'.
[  161.121381][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.663'.
[  161.145320][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.663'.
[  161.160804][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  161.176758][ T6186] XFS (loop4): Ending clean mount
[  161.193540][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'.
[  161.206809][ T6186] XFS (loop4): Quotacheck needed: Please wait.
[  161.342757][ T6186] XFS (loop4): Quotacheck: Done.
[  161.465496][ T5030] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf3 found
[  161.473215][ T5030] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf4 found
[  161.621769][ T5030] usb 4-1: USB disconnect, device number 5
[  161.641633][ T4267] XFS (loop4): Unmounting Filesystem
[  162.375956][ T6233] loop0: detected capacity change from 0 to 4096
[  162.515250][ T6247] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.600115][   T26] audit: type=1800 audit(1761105640.921:95): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.670" name="file1" dev="loop0" ino=15 res=0 errno=0
[  162.665983][ T6248] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 524288
[  162.715222][ T6248] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15)
[  162.891031][ T6248] Remounting filesystem read-only
[  162.900097][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'.
[  162.931167][ T6248] NILFS (loop0): error -5 truncating bmap (ino=15)
[  162.952068][ T6258] netlink: 5 bytes leftover after parsing attributes in process `syz.4.682'.
[  163.126127][ T4268] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  163.441683][ T6266] loop0: detected capacity change from 0 to 8
[  163.678332][ T6254] loop2: detected capacity change from 0 to 32768
[  163.768321][ T6254] XFS (loop2): Mounting V5 Filesystem
[  163.816471][ T6266] SQUASHFS error: zlib decompression failed, data probably corrupt
[  163.890713][ T6266] SQUASHFS error: Failed to read block 0x13e: -5
[  163.893161][ T6262] loop3: detected capacity change from 0 to 32768
[  163.941394][ T6254] XFS (loop2): Ending clean mount
[  163.958939][ T6254] XFS (loop2): Quotacheck needed: Please wait.
[  163.962771][ T6266] SQUASHFS error: Unable to read metadata cache entry [13c]
[  164.038312][ T6262] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  164.071311][ T6254] XFS (loop2): Quotacheck: Done.
[  164.085362][ T6266] SQUASHFS error: Unable to read directory block [13c:26]
[  164.261941][ T4269] ocfs2: Unmounting device (7,3) on (node local)
[  164.336317][ T4272] XFS (loop2): Unmounting Filesystem
[  164.861854][ T6296] netlink: 'syz.1.696': attribute type 153 has an invalid length.
[  164.987959][ T6284] loop4: detected capacity change from 0 to 32768
[  165.114430][ T6284]  loop4: p1 p2 p3 < p5 p6 >
[  165.121002][ T6284] loop4: p1 size 242222080 extends beyond EOD, truncated
[  165.152735][ T6284] loop4: p2 start 4294967295 is beyond EOD, truncated
[  165.237967][ T6304] loop2: detected capacity change from 0 to 512
[  165.259256][ T6304] EXT4-fs: Ignoring removed oldalloc option
[  165.274133][ T6304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.370406][ T6304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002]
[  165.385254][ T6304] System zones: 1-3, 19-19, 35-38
[  165.455466][ T6304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  165.474784][ T6304] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.678033][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  166.497118][ T5220] udevd[5220]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  166.510301][ T5219] udevd[5219]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  166.524821][ T4670] udevd[4670]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  166.548909][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  166.625994][ T6339] loop4: detected capacity change from 0 to 512
[  166.633675][ T6339] EXT4-fs: Ignoring removed nomblk_io_submit option
[  166.712447][ T6339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  166.853137][ T6339] EXT4-fs (loop4): 1 truncate cleaned up
[  166.880175][ T6322] loop2: detected capacity change from 0 to 32768
[  166.891280][ T6339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  166.918707][ T6322] 
[  166.918707][ T6322]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  166.918707][ T6322] 
[  166.958070][ T6322] ERROR: (device loop2): diWrite: ixpxd invalid
[  166.958070][ T6322] 
[  166.974354][ T6322] ERROR: (device loop2): txCommit: 
[  166.974354][ T6322] 
[  167.230774][ T4272] 
[  167.230774][ T4272]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  167.230774][ T4272] 
[  167.256912][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  167.271125][ T4272] 
[  167.271125][ T4272]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  167.271125][ T4272] 
[  167.665364][ T4655] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  167.737741][ T6369] loop0: detected capacity change from 0 to 64
[  167.769334][ T6368] loop2: detected capacity change from 0 to 512
[  167.865274][ T4655] usb 4-1: Using ep0 maxpacket: 8
[  167.872343][ T4655] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  167.896362][ T6368] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  167.921648][ T6368] EXT4-fs (loop2): orphan cleanup on readonly fs
[  167.924885][ T4655] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  167.950758][ T4655] usb 4-1: config 0 interface 0 has no altsetting 0
[  167.958839][ T4655] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  167.968211][ T4655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.979876][ T4655] usb 4-1: config 0 descriptor??
[  168.030765][ T6368] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.727: iget: bad i_size value: 38620345925642
[  168.121667][ T6368] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.727: couldn't read orphan inode 15 (err -117)
[  168.160828][ T6368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  168.366827][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  168.395508][ T4655] gt683r_led 0003:1770:FF00.000F: item fetching failed at offset 1/5
[  168.426406][ T4655] gt683r_led 0003:1770:FF00.000F: hid parsing failed
[  168.433231][ T4655] gt683r_led: probe of 0003:1770:FF00.000F failed with error -22
[  168.598019][ T4655] usb 4-1: USB disconnect, device number 6
[  168.937787][ T6374] loop4: detected capacity change from 0 to 32768
[  169.439593][ T6399] loop4: detected capacity change from 0 to 256
[  169.478972][ T6380] loop0: detected capacity change from 0 to 32768
[  169.497107][ T6399] exfat: Deprecated parameter 'utf8'
[  169.527057][ T6380] 
[  169.527057][ T6380]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.527057][ T6380] 
[  169.560479][ T6399] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  169.581834][ T6380] ERROR: (device loop0): diWrite: ixpxd invalid
[  169.581834][ T6380] 
[  169.606716][ T6380] ERROR: (device loop0): txCommit: 
[  169.606716][ T6380] 
[  169.633882][ T6388] loop2: detected capacity change from 0 to 32768
[  169.704567][ T6388] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  169.753030][ T6388] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  169.862157][ T4268] 
[  169.862157][ T4268]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.862157][ T4268] 
[  169.883383][ T4268] 
[  169.883383][ T4268]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.883383][ T4268] 
[  169.930345][ T6406] loop1: detected capacity change from 0 to 1024
[  169.972521][ T6406] EXT4-fs: Ignoring removed bh option
[  170.050882][ T4272] ocfs2: Unmounting device (7,2) on (node local)
[  170.139429][ T6406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  170.260142][   T26] audit: type=1326 audit(1761105648.581:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe778efc9 code=0x7ffc0000
[  170.378264][   T26] audit: type=1326 audit(1761105648.581:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe778efc9 code=0x7ffc0000
[  170.434618][ T6418] loop4: detected capacity change from 0 to 1024
[  170.514240][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  170.565372][   T26] audit: type=1326 audit(1761105648.601:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2fe778efc9 code=0x7ffc0000
[  170.705727][   T26] audit: type=1326 audit(1761105648.601:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe778efc9 code=0x7ffc0000
[  170.745687][ T6397] loop3: detected capacity change from 0 to 32768
[  170.750818][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[  170.775590][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'.
[  170.784466][ T6424] netlink: 'syz.1.750': attribute type 7 has an invalid length.
[  170.805543][   T26] audit: type=1326 audit(1761105648.601:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe778efc9 code=0x7ffc0000
[  170.829562][   T11] hfsplus: b-tree write err: -5, ino 4
[  170.952876][ T6397] XFS (loop3): Mounting V5 Filesystem
[  171.053929][ T6439] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1
[  171.100304][ T6397] XFS (loop3): Ending clean mount
[  171.124477][ T6397] XFS (loop3): Quotacheck needed: Please wait.
[  171.243961][ T6397] XFS (loop3): Quotacheck: Done.
[  171.440989][ T4269] XFS (loop3): Unmounting Filesystem
[  171.669450][ T6453] loop2: detected capacity change from 0 to 1024
[  171.698699][ T6456] loop4: detected capacity change from 0 to 1024
[  171.721294][ T6456] EXT4-fs: inline encryption not supported
[  171.728250][ T6456] EXT4-fs: Ignoring removed i_version option
[  171.816654][ T6453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  171.847485][ T6456] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.762: lblock 2 mapped to illegal pblock 2 (length 1)
[  171.927070][ T6456] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  171.995422][ T6456] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.762: lblock 0 mapped to illegal pblock 48 (length 1)
[  172.067636][ T6456] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  172.106387][ T6456] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.762: Failed to acquire dquot type 0
[  172.153550][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  172.164694][ T6456] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  172.214324][ T6456] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.762: mark_inode_dirty error
[  172.291358][ T6456] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  172.338452][ T6456] EXT4-fs (loop4): 1 orphan inode deleted
[  172.344402][ T6456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  172.355457][   T56] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  172.435622][ T6456] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.762: Invalid inode table block 1 in block_group 0
[  172.448590][   T56] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  172.475841][ T6444] loop1: detected capacity change from 0 to 32768
[  172.483191][ T6444] XFS: attr2 mount option is deprecated.
[  172.493308][   T56] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:4: Failed to release dquot type 0
[  172.543677][ T6456] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  172.639901][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  172.677280][ T4267] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[  172.705179][ T6444] XFS (loop1): Mounting V5 Filesystem
[  172.792540][ T4267] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  172.831587][ T6444] XFS (loop1): Ending clean mount
[  172.852740][ T6444] XFS (loop1): Quotacheck needed: Please wait.
[  172.865538][ T4267] EXT4-fs error (device loop4): ext4_quota_off:7122: inode #3: comm syz-executor: mark_inode_dirty error
[  172.992747][ T6444] XFS (loop1): Quotacheck: Done.
[  173.020764][ T6473] loop0: detected capacity change from 0 to 32768
[  173.108347][ T6473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.767 (6473)
[  173.189081][ T6473] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  173.216875][ T6473] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  173.259287][ T4274] XFS (loop1): Unmounting Filesystem
[  173.271460][ T6473] BTRFS info (device loop0): enabling auto defrag
[  173.283418][ T6473] BTRFS info (device loop0): turning on sync discard
[  173.309563][ T6473] BTRFS info (device loop0): force clearing of disk cache
[  173.325249][ T4645] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  173.347899][ T6473] BTRFS info (device loop0): using default commit interval 30s
[  173.386735][ T6473] BTRFS info (device loop0): max_inline at 0
[  173.392802][ T6473] BTRFS info (device loop0): disabling free space tree
[  173.410275][ T4283] Bluetooth: hci0: command 0x201b tx timeout
[  173.535222][ T4645] usb 3-1: Using ep0 maxpacket: 32
[  173.545684][ T4645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.556865][ T4645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.567474][ T4645] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  173.576977][ T4645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.587658][ T4645] usb 3-1: config 0 descriptor??
[  173.605897][ T4645] hub 3-1:0.0: USB hub found
[  173.655407][ T6068] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  173.722495][ T6515] loop3: detected capacity change from 0 to 64
[  173.762181][ T6473] BTRFS info (device loop0): enabling ssd optimizations
[  173.779879][ T6473] BTRFS info (device loop0): rebuilding free space tree
[  173.799829][ T4645] hub 3-1:0.0: 1 port detected
[  173.812227][ T6473] BTRFS info (device loop0): disabling free space tree
[  173.860093][ T6473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  173.876018][ T6068] usb 5-1: Using ep0 maxpacket: 8
[  173.883007][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  173.924194][ T6473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  173.954841][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.977721][ T6068] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  174.006053][ T4645] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  174.012468][ T4645] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  174.020250][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  174.058433][ T6068] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  174.075628][ T4645] usbhid 3-1:0.0: can't add hid device: -71
[  174.085250][ T4645] usbhid: probe of 3-1:0.0 failed with error -71
[  174.098075][ T6068] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  174.131608][ T4645] usb 3-1: USB disconnect, device number 5
[  174.144371][ T6068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.158322][ T6520] loop3: detected capacity change from 0 to 2048
[  174.177155][ T6068] usb 5-1: config 0 descriptor??
[  174.185179][ T6495] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  174.229941][ T6520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.558680][ T4268] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.604039][ T6527] netlink: 'syz.3.780': attribute type 11 has an invalid length.
[  174.667099][ T6527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.780'.
[  174.691086][ T4283] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  174.906158][    T7] usb 5-1: USB disconnect, device number 6
[  175.113347][ T6533] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  175.639825][ T6560] loop0: detected capacity change from 0 to 256
[  175.686026][ T6560] exfat: Deprecated parameter 'utf8'
[  175.714340][ T6560] exfat: Deprecated parameter 'namecase'
[  175.731559][ T6561] usb usb1: check_ctrlrecip: process 6561 (syz.4.795) requesting ep 01 but needs 81
[  175.799189][ T6560] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d)
[  176.319781][ T6572] loop1: detected capacity change from 0 to 8192
[  176.361715][ T6572]  loop1: p1 p2 p4[EZD]
[  176.370595][ T6572] loop1: p1 start 589823 is beyond EOD, truncated
[  176.401954][ T6572] loop1: p2 size 4294924146 extends beyond EOD, truncated
[  176.445470][ T6586] capability: warning: `syz.3.804' uses 32-bit capabilities (legacy support in use)
[  176.463082][ T6572] loop1: p4 size 262912 extends beyond EOD, truncated
[  176.666298][ T6589] loop4: detected capacity change from 0 to 512
[  176.740249][ T6594] nbd: must specify an index to disconnect
[  176.771587][ T6589] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.806: invalid indirect mapped block 2185560079 (level 0)
[  176.850205][ T6565] loop2: detected capacity change from 0 to 32768
[  176.888623][ T6601] tipc: Started in network mode
[  176.896997][ T6589] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.806: invalid indirect mapped block 2683928664 (level 1)
[  176.924109][ T6601] tipc: Node identity ac141414, cluster identity 4711
[  176.957026][ T6601] tipc: Enabled bearer <udp:s>, priority 10
[  176.978303][ T6565] XFS (loop2): Mounting V5 Filesystem
[  176.984587][ T6589] EXT4-fs (loop4): 1 truncate cleaned up
[  177.016156][ T6589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  177.019660][ T6606] netlink: 'syz.0.811': attribute type 4 has an invalid length.
[  177.115391][ T6589] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.806: Invalid inode table block 1633771873 in block_group 0
[  177.148435][ T4670] udevd[4670]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  177.196094][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  177.208522][ T6565] XFS (loop2): Ending clean mount
[  177.252319][ T6589] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  177.265609][ T6565] XFS (loop2): Quotacheck needed: Please wait.
[  177.290542][ T6589] EXT4-fs error (device loop4): add_dirent_to_buf:2216: inode #2: comm syz.4.806: mark_inode_dirty error
[  177.345819][ T6565] XFS (loop2): Quotacheck: Done.
[  177.361501][ T6589] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.806: Invalid inode table block 1633771873 in block_group 0
[  177.465733][ T6589] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  177.515718][ T6589] EXT4-fs error (device loop4): ext4_add_nondir:2855: inode #18: comm syz.4.806: mark_inode_dirty error
[  177.574106][ T6589] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.806: Invalid inode table block 1633771873 in block_group 0
[  177.639165][ T6589] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  177.665631][ T4272] XFS (loop2): Unmounting Filesystem
[  177.685360][ T6589] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #18: comm syz.4.806: mark_inode_dirty error
[  177.745648][ T6589] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  177.912952][ T6597] loop1: detected capacity change from 0 to 32768
[  177.955957][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  177.965523][ T4655] tipc: Node number set to 2886997012
[  178.062572][ T6597] XFS (loop1): Mounting V5 Filesystem
[  178.176362][ T6597] XFS (loop1): Ending clean mount
[  178.285039][ T6613] loop3: detected capacity change from 0 to 32768
[  178.418531][ T6613] JBD2: Ignoring recovery information on journal
[  178.432486][ T4274] XFS (loop1): Unmounting Filesystem
[  178.574898][ T6614] loop0: detected capacity change from 0 to 32768
[  178.582401][ T6614] XFS: noikeep mount option is deprecated.
[  178.618103][ T6613] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  178.686077][ T6614] XFS (loop0): Mounting V5 Filesystem
[  178.872999][ T6614] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  178.903628][ T4269] ocfs2: Unmounting device (7,3) on (node local)
[  178.915368][ T4655] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  178.999241][ T6614] XFS (loop0): Starting recovery (logdev: internal)
[  179.071310][ T6614] XFS (loop0): Ending recovery (logdev: internal)
[  179.090453][ T6653] No buffer was provided with the request
[  179.135244][ T4655] usb 3-1: Using ep0 maxpacket: 32
[  179.145713][ T4655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.191465][ T4655] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  179.221193][ T4655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.287013][ T4655] usb 3-1: config 0 descriptor??
[  179.425796][ T4268] XFS (loop0): Unmounting Filesystem
[  179.747040][ T4655] lenovo 0003:17EF:60A3.0010: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0
[  179.923403][ T4655] usb 3-1: USB disconnect, device number 6
[  180.040334][ T6668] fido_id[6668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  180.308484][ T6680] dlm: non-version read from control device 2
[  180.610102][ T6688] netlink: 'syz.3.840': attribute type 1 has an invalid length.
[  180.713634][ T6694] loop0: detected capacity change from 0 to 512
[  180.761656][ T6694] EXT4-fs (loop0): Test dummy encryption mode enabled
[  180.819348][ T6694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  180.878621][ T6670] loop1: detected capacity change from 0 to 32768
[  180.941891][ T6694] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.843: Directory hole found for htree leaf block 0
[  181.032968][ T6694] EXT4-fs (loop0): Remounting filesystem read-only
[  181.164332][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  181.835031][ T6725] loop3: detected capacity change from 0 to 1024
[  181.897103][ T6725] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  181.951688][ T6725] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  182.086411][ T4269] hfsplus: bad catalog entry type
[  182.102637][ T4269] hfsplus: bad catalog entry type
[  182.741696][ T6722] loop1: detected capacity change from 0 to 32768
[  182.788406][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.951927][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.293324][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.461526][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.955283][   T11] tipc: Disabling bearer <udp:s>
[  183.975734][   T11] tipc: Left network mode
[  184.263853][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.275733][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.284162][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.292526][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.310366][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  184.317904][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.372690][ T6751] loop2: detected capacity change from 0 to 32768
[  184.455402][ T6751] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  184.504794][ T6751] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  184.523785][ T6775] QAT: Invalid ioctl 21531
[  184.849588][ T6784] loop0: detected capacity change from 0 to 512
[  184.853332][ T4272] ocfs2: Unmounting device (7,2) on (node local)
[  184.977762][ T6784] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  185.049077][ T6784] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  185.057791][ T6790] sctp: [Deprecated]: syz.2.885 (pid 6790) Use of int in max_burst socket option.
[  185.057791][ T6790] Use struct sctp_assoc_value instead
[  185.151072][ T6784] EXT4-fs (loop0): 1 truncate cleaned up
[  185.189371][ T6784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  185.201479][   T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  185.283153][ T6784] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 4: comm syz.0.884: lblock 0 mapped to illegal pblock 4 (length 1)
[  185.380765][ T6784] EXT4-fs (loop0): Remounting filesystem read-only
[  185.395131][   T27] usb 5-1: Using ep0 maxpacket: 32
[  185.402182][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.459193][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.505229][   T27] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  185.514341][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.548907][ T6801] loop2: detected capacity change from 0 to 512
[  185.567644][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  185.586123][   T27] usb 5-1: config 0 descriptor??
[  185.593047][ T6801] EXT4-fs: Ignoring removed i_version option
[  185.669167][ T6801] EXT4-fs (loop2): orphan cleanup on readonly fs
[  185.688570][ T6801] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.887: bg 0: block 131: padding at end of block bitmap is not set
[  185.711185][ T6766] chnl_net:caif_netlink_parms(): no params data found
[  185.771879][ T6771] loop1: detected capacity change from 0 to 40427
[  185.785713][ T6801] EXT4-fs (loop2): Remounting filesystem read-only
[  185.799898][ T6771] F2FS-fs (loop1): invalid crc value
[  185.821639][ T6801] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  185.867590][ T6771] F2FS-fs (loop1): Found nat_bits in checkpoint
[  185.892651][ T6801] EXT4-fs (loop2): Remounting filesystem read-only
[  185.899965][ T6801] EXT4-fs (loop2): 1 truncate cleaned up
[  185.906327][ T6801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  186.007393][   T27] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[  186.026878][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  186.042188][   T27] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[  186.080490][   T27] ft260 0003:0403:6030.0011: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[  186.081853][ T6771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  186.216951][   T27] ft260 0003:0403:6030.0011: failed to retrieve chip version
[  186.256265][   T27] ft260: probe of 0003:0403:6030.0011 failed with error -71
[  186.284013][   T27] usb 5-1: USB disconnect, device number 7
[  186.366650][ T4283] Bluetooth: hci2: command 0x0409 tx timeout
[  186.623811][ T6817] fido_id[6817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  187.041552][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.055698][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.102060][ T6766] device bridge_slave_0 entered promiscuous mode
[  187.142622][ T6836] loop0: detected capacity change from 0 to 512
[  187.168401][ T6838] loop1: detected capacity change from 0 to 64
[  187.214097][ T6836] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  187.291735][ T6836] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  187.334725][ T6836] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  187.362266][ T6836] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  187.370661][ T6836] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080]
[  187.383589][ T6836] EXT4-fs (loop0): orphan cleanup on readonly fs
[  187.391980][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.416022][ T6836] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.898: bg 0: block 34: padding at end of block bitmap is not set
[  187.429079][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.444263][ T6836] Quota error (device loop0): write_blk: dquota write failed
[  187.529056][ T6836] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  187.530010][ T6766] device bridge_slave_1 entered promiscuous mode
[  187.553386][ T6836] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.898: Failed to acquire dquot type 1
[  187.640028][ T6836] EXT4-fs (loop0): 1 truncate cleaned up
[  187.678121][ T6836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  187.693473][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.758312][   T11] device hsr_slave_0 left promiscuous mode
[  187.789119][   T11] device hsr_slave_1 left promiscuous mode
[  187.813717][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.843693][ T6853] loop1: detected capacity change from 0 to 512
[  187.857588][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.903938][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.913189][ T6853] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  187.942750][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.987928][   T11] device bridge_slave_1 left promiscuous mode
[  187.996998][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.046514][ T6853] EXT4-fs (loop1): 1 truncate cleaned up
[  188.052245][ T6853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  188.098619][   T11] device bridge_slave_0 left promiscuous mode
[  188.099363][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  188.108959][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.263929][ T6853] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.904: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  188.332750][   T11] device veth1_macvtap left promiscuous mode
[  188.356625][   T11] device veth0_macvtap left promiscuous mode
[  188.395494][ T6853] EXT4-fs (loop1): Remounting filesystem read-only
[  188.431201][   T11] device veth1_vlan left promiscuous mode
[  188.439694][ T6853] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem
[  188.440128][   T11] device veth0_vlan left promiscuous mode
[  188.464056][ T4283] Bluetooth: hci2: command 0x041b tx timeout
[  188.486799][ T6853] EXT4-fs (loop1): Remounting filesystem read-only
[  188.514700][ T6871] loop4: detected capacity change from 0 to 1024
[  188.547959][ T6853] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.904: Deleting old file: nlink 5, error=-117
[  188.818004][ T4358] hfsplus: b-tree write err: -5, ino 4
[  188.837811][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  189.333834][ T6864] loop2: detected capacity change from 0 to 32768
[  189.432121][ T6864] (syz.2.909,6864,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=10, slot=0
[  189.482856][ T6864] (syz.2.909,6864,0):ocfs2_init_local_system_inodes:501 ERROR: status = -22
[  189.492123][ T6864] (syz.2.909,6864,0):ocfs2_mount_volume:1815 ERROR: status = -22
[  189.528287][ T6864] (syz.2.909,6864,0):ocfs2_fill_super:1176 ERROR: status = -22
[  189.592681][ T6864] VFS: could not find a valid V7 on loop2.
[  190.293731][   T11] team0 (unregistering): Port device team_slave_1 removed
[  190.367480][   T11] team0 (unregistering): Port device team_slave_0 removed
[  190.423578][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.476299][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.525343][ T4283] Bluetooth: hci2: command 0x040f tx timeout
[  190.601910][ T6910] loop2: detected capacity change from 0 to 512
[  190.644079][ T6910] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.924: iget: bad extended attribute block 1
[  190.668702][ T6910] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.924: couldn't read orphan inode 15 (err -117)
[  190.681641][ T6910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  190.710941][ T6910] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  190.805613][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  191.433724][ T6915] loop2: detected capacity change from 0 to 32768
[  191.468488][   T11] bond0 (unregistering): Released all slaves
[  191.611444][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.654294][ T6879] netlink: 76 bytes leftover after parsing attributes in process `syz.4.913'.
[  191.737605][ T6766] team0: Port device team_slave_0 added
[  191.805902][ T6766] team0: Port device team_slave_1 added
[  191.937669][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.944695][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.005293][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.044400][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.070496][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.150021][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.399283][ T6766] device hsr_slave_0 entered promiscuous mode
[  192.447325][ T6766] device hsr_slave_1 entered promiscuous mode
[  192.455982][ T6766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.472920][ T6766] Cannot create hsr debugfs directory
[  192.605354][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[  192.685755][ T6940] loop4: detected capacity change from 0 to 512
[  192.717989][ T6940] EXT4-fs: Ignoring removed mblk_io_submit option
[  192.771535][ T6940] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.937: Invalid inode bitmap blk 4 in block_group 0
[  192.806253][ T6940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  192.846239][ T6766] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  192.917593][ T6766] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.972908][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  192.985983][ T6766] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  193.082377][ T6766] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  193.345736][ T6927] loop1: detected capacity change from 0 to 32768
[  193.374220][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.421855][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.492152][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.516731][ T6927] XFS (loop1): Mounting V5 Filesystem
[  193.540774][ T6766] 8021q: adding VLAN 0 to HW filter on device team0
[  193.604989][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.630317][ T6927] XFS (loop1): Ending clean mount
[  193.636395][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.675959][ T6927] XFS (loop1): Quotacheck needed: Please wait.
[  193.685573][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.692747][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.749544][ T6927] XFS (loop1): Quotacheck: Done.
[  193.788570][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.817740][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.847861][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.905922][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.913091][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.983945][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.034541][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.055508][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.055919][ T6986] loop4: detected capacity change from 0 to 1024
[  194.088934][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.128876][ T6986] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  194.136419][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.152853][ T6986] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  194.176440][ T6986] EXT4-fs (loop4): orphan cleanup on readonly fs
[  194.183387][ T6986] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.947: Inode bitmap for bg 0 marked uninitialized
[  194.197766][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.213773][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.220149][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  194.230091][ T6986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  194.241342][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.262886][ T6766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.305523][ T6986] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.947: Block bitmap for bg 0 marked uninitialized
[  194.330582][ T6766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.366585][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.405815][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.446138][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.468879][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  194.485686][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.535252][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.685320][ T4281] Bluetooth: hci2: command 0x0c12 tx timeout
[  194.747234][ T6970] loop2: detected capacity change from 0 to 32768
[  194.842207][ T6983] loop0: detected capacity change from 0 to 32768
[  194.852869][ T6970] XFS (loop2): Mounting V5 Filesystem
[  194.984571][ T6983] (syz.0.946,6983,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=10, slot=0
[  195.041265][ T6970] XFS (loop2): Ending clean mount
[  195.107888][ T6983] (syz.0.946,6983,1):ocfs2_init_local_system_inodes:501 ERROR: status = -22
[  195.124050][ T6970] XFS (loop2): Quotacheck needed: Please wait.
[  195.152119][ T6983] (syz.0.946,6983,1):ocfs2_mount_volume:1815 ERROR: status = -22
[  195.217729][ T6983] (syz.0.946,6983,1):ocfs2_fill_super:1176 ERROR: status = -22
[  195.266294][ T6970] XFS (loop2): Quotacheck: Done.
[  195.282477][ T6983] VFS: could not find a valid V7 on loop0.
[  195.394570][ T4274] XFS (loop1): Unmounting Filesystem
[  195.502539][ T4272] XFS (loop2): Unmounting Filesystem
[  195.509363][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.525400][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.648259][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.661331][ T7017] loop0: detected capacity change from 0 to 1024
[  195.716421][ T7017] EXT4-fs: Ignoring removed nobh option
[  195.761316][ T7017] EXT4-fs: Ignoring removed bh option
[  195.792322][ T7017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  195.804125][ T5156] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  195.880417][ T7017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  195.929431][   T26] audit: type=1800 audit(1761105674.251:101): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.954" name="file2" dev="loop0" ino=16 res=0 errno=0
[  195.997958][ T5156] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  196.007598][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  196.016314][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.036503][ T5156] usb 5-1: config 0 descriptor??
[  196.057222][ T5156] cp210x 5-1:0.0: cp210x converter detected
[  196.285429][ T4281] Bluetooth: hci0: command 0x0406 tx timeout
[  196.291589][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  196.297734][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[  196.303808][ T4283] Bluetooth: hci3: command 0x0406 tx timeout
[  196.460714][ T5156] usb 5-1: cp210x converter now attached to ttyUSB0
[  196.671237][ T4655] usb 5-1: USB disconnect, device number 8
[  196.711893][ T4655] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  196.810355][ T4655] cp210x 5-1:0.0: device disconnected
[  197.156238][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  197.175628][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  197.240614][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  197.269077][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  197.308314][ T6766] device veth0_vlan entered promiscuous mode
[  197.323531][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  197.341254][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  197.374558][ T6766] device veth1_vlan entered promiscuous mode
[  197.463597][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.506245][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  197.514699][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.537054][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.587523][ T6766] device veth0_macvtap entered promiscuous mode
[  197.624849][ T6766] device veth1_macvtap entered promiscuous mode
[  197.685364][   T27] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  197.690891][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.723727][ T7049] loop2: detected capacity change from 0 to 32768
[  197.731117][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.741497][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.755028][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.778764][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.794650][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.816671][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.825347][ T7049] XFS (loop2): Mounting V5 Filesystem
[  197.828009][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.844680][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.861851][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  197.886048][   T27] usb 5-1: Using ep0 maxpacket: 8
[  197.889340][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  197.895222][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.926038][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  197.934932][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.009481][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.052720][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.064287][   T27] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  198.095243][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.105587][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.112492][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.116623][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.135015][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.147772][   T27] usb 5-1: config 0 descriptor??
[  198.157177][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.169734][ T7049] XFS (loop2): Ending clean mount
[  198.174108][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.186625][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.198477][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.210588][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  198.220265][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.274111][ T6766] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.335277][ T6766] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.344088][ T6766] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.359112][ T7049] syz.2.959: attempt to access beyond end of device
[  198.359112][ T7049] loop2: rw=4096, sector=40266819, nr_sectors = 1 limit=32768
[  198.395178][ T6766] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.404775][   T26] audit: type=1326 audit(1761105676.721:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.0.967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb63bd8efc9 code=0x0
[  198.520132][ T4272] XFS (loop2): Unmounting Filesystem
[  198.571473][   T27] topre 0003:0853:0148.0012: hidraw0: USB HID v0.07 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0
[  198.603719][ T7063] loop1: detected capacity change from 0 to 32768
[  198.671957][ T7063] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.963 (7063)
[  198.706437][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.750579][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.756103][ T7063] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  198.809080][ T4371] usb 5-1: USB disconnect, device number 9
[  198.838694][ T7063] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  198.839575][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.858446][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  198.913544][ T7063] BTRFS info (device loop1): using free space tree
[  198.937038][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.988659][ T7082] fido_id[7082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  199.003428][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  199.189137][ T7063] BTRFS info (device loop1): enabling ssd optimizations
[  199.462137][ T7110] binder_alloc: binder_alloc_mmap_handler: 7109 200000ffc000-200001000000 already mapped failed -16
[  199.540528][ T4274] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  199.594236][ T7113] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  200.195757][ T5156] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  200.366547][  T127] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  200.414109][ T5156] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  200.445319][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.474708][ T5156] usb 5-1: config 0 descriptor??
[  200.517581][ T5156] usb 5-1: selecting invalid altsetting 3
[  200.532304][ T5156] comedi comedi5: could not set alternate setting 3 in high speed
[  200.542311][ T5156] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  200.555202][  T127] usb 3-1: Using ep0 maxpacket: 32
[  200.562501][  T127] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  200.571355][ T5156] usbduxsigma: probe of 5-1:0.0 failed with error -22
[  200.585484][  T127] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  200.610671][  T127] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  200.640194][  T127] usb 3-1: config 1 has no interface number 0
[  200.671055][  T127] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  200.722880][  T127] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  200.741052][ T5156] usb 5-1: USB disconnect, device number 10
[  200.771715][  T127] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  200.792084][  T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.833503][  T127] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  201.022925][  T127] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  201.100522][ T7132] loop1: detected capacity change from 0 to 32768
[  201.107361][ T4656] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  201.172452][ T7132] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  201.233392][ T7132] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  201.315242][ T4656] usb 6-1: Using ep0 maxpacket: 16
[  201.322844][ T4656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.374835][ T4656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.406023][ T4656] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  201.432721][ T4656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.440703][ T4274] ocfs2: Unmounting device (7,1) on (node local)
[  201.467714][ T5156] usb 3-1: USB disconnect, device number 7
[  201.470966][ T7160] loop4: detected capacity change from 0 to 8
[  201.486119][ T4656] usb 6-1: config 0 descriptor??
[  201.505803][ T5156] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  201.534686][ T7160] SQUASHFS error: lzo decompression failed, data probably corrupt
[  201.564206][ T7160] SQUASHFS error: Failed to read block 0x91: -5
[  201.620923][ T7160] SQUASHFS error: Unable to read metadata cache entry [8f]
[  201.663391][ T7160] SQUASHFS error: Unable to read inode 0x11f
[  201.929304][ T4656] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  201.977491][ T7168] netlink: 156 bytes leftover after parsing attributes in process `syz.1.989'.
[  201.993159][ T7172] program syz.4.991 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  202.174597][  T127] usb 6-1: USB disconnect, device number 2
[  202.393698][ T7183] loop4: detected capacity change from 0 to 256
[  202.472548][ T7183] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  203.826477][ T7218] loop4: detected capacity change from 0 to 4096
[  203.864954][ T7218] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  203.962980][ T7218] ntfs3: loop4: Failed to load $Extend.
[  204.079137][   T26] audit: type=1804 audit(1761105682.401:103): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1008" name="/newroot/212/file0/file0" dev="loop4" ino=0 res=1 errno=0
[  204.099210][ T7199] loop0: detected capacity change from 0 to 32768
[  204.159672][ T7199] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1002 (7199)
[  204.263692][ T7199] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  204.324987][ T7199] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  204.362164][ T7199] BTRFS info (device loop0): using free space tree
[  204.679994][ T7203] loop1: detected capacity change from 0 to 32768
[  204.687318][ T7199] BTRFS info (device loop0): enabling ssd optimizations
[  204.801398][ T7203] XFS (loop1): Mounting V5 Filesystem
[  205.021974][ T7203] XFS (loop1): Ending clean mount
[  205.031336][ T4268] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  205.062159][ T7203] XFS (loop1): Quotacheck needed: Please wait.
[  205.198844][ T7203] XFS (loop1): Quotacheck: Done.
[  205.443847][ T7242] loop4: detected capacity change from 0 to 32768
[  205.511092][ T7242] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  205.511092][ T7242] 
[  205.764870][ T4274] XFS (loop1): Unmounting Filesystem
[  205.813746][ T7226] loop2: detected capacity change from 0 to 32768
[  205.899800][ T7226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1011 (7226)
[  206.001194][ T7226] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.040753][ T7226] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  206.095238][ T7226] BTRFS info (device loop2): using free space tree
[  206.459070][ T7297] Invalid ELF header magic: != ELF
[  206.574244][ T7226] BTRFS info (device loop2): enabling ssd optimizations
[  207.001390][ T7308] loop5: detected capacity change from 0 to 32768
[  207.024568][ T7312] loop4: detected capacity change from 0 to 256
[  207.066053][ T7308] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  207.074356][ T7308] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  207.106863][ T7308] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms
[  207.115440][ T7308] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent points beyond end of block (not first in block)
[  207.126787][ T7308] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  207.126787][ T7308]   inode = 4 4153
[  207.126787][ T7308]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[  207.145589][ T7308] gfs2: fsid=syz:syz.0: G:  s:SH n:2/1039 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  207.154776][ T7308] gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:7308 [syz.5.1025] gfs2_lookup_simple+0xa3/0xf0
[  207.166130][ T7308] gfs2: fsid=syz:syz.0:  I: n:4/4153 t:4 f:0x00 d:0x00000201 s:1816 p:0
[  207.174527][ T7308] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  207.189361][ T7308] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  207.198254][ T7308] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  207.204905][ T7308] gfs2: fsid=syz:syz.0: File system withdrawn
[  207.211126][ T7308] CPU: 1 PID: 7308 Comm: syz.5.1025 Not tainted syzkaller #0
[  207.218551][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  207.228651][ T7308] Call Trace:
[  207.231971][ T7308]  <TASK>
[  207.234939][ T7308]  dump_stack_lvl+0x168/0x22e
[  207.239680][ T7308]  ? kobject_uevent_env+0x35f/0x8a0
[  207.244938][ T7308]  ? show_regs_print_info+0x12/0x12
[  207.250191][ T7308]  ? load_image+0x3b0/0x3b0
[  207.254758][ T7308]  ? kobject_uevent_env+0x35f/0x8a0
[  207.260046][ T7308]  gfs2_withdraw+0x143f/0x1780
[  207.264884][ T7308]  ? gfs2_lm+0x220/0x220
[  207.269275][ T7308]  ? load_image+0x3b0/0x3b0
[  207.273847][ T7308]  ? gfs2_consist_inode_i+0xf1/0x110
[  207.279198][ T7308]  gfs2_dirent_scan+0x525/0x650
[  207.284111][ T7308]  ? gfs2_dirent_search+0x7e0/0x7e0
[  207.289377][ T7308]  ? gfs2_dirent_search+0x7e0/0x7e0
[  207.294640][ T7308]  gfs2_dirent_search+0x2dd/0x7e0
[  207.299731][ T7308]  ? inode_owner_or_capable+0x200/0x200
[  207.305342][ T7308]  ? gfs2_inode_metasync+0xf0/0xf0
[  207.310510][ T7308]  ? gfs2_dir_search+0x220/0x220
[  207.315598][ T7308]  ? gfs2_glock_nq+0xcf0/0x14e0
[  207.320506][ T7308]  gfs2_dir_search+0x49/0x220
[  207.325220][ T7308]  gfs2_lookupi+0x45f/0x640
[  207.329769][ T7308]  ? gfs2_lookup_simple+0xf0/0xf0
[  207.334832][ T7308]  ? gfs2_lookup_simple+0xa3/0xf0
[  207.339884][ T7308]  ? crc32_le_base+0x755/0xcf0
[  207.344676][ T7308]  ? sprintf+0xd6/0x120
[  207.348865][ T7308]  gfs2_lookup_simple+0xa3/0xf0
[  207.353745][ T7308]  ? gfs2_lookup_by_inum+0xf0/0xf0
[  207.358902][ T7308]  init_journal+0x12b6/0x2300
[  207.363622][ T7308]  ? init_inodes+0xdb/0x320
[  207.368155][ T7308]  ? _compound_head+0x120/0x120
[  207.373130][ T7308]  ? snprintf+0xd7/0x120
[  207.377398][ T7308]  ? init_inodes+0xdb/0x320
[  207.381934][ T7308]  ? vscnprintf+0x80/0x80
[  207.386305][ T7308]  ? gfs2_glock_nq_num+0x17f/0x1c0
[  207.391467][ T7308]  init_inodes+0xdb/0x320
[  207.395832][ T7308]  gfs2_fill_super+0x1718/0x1f80
[  207.400808][ T7308]  ? gfs2_reconfigure+0xcd0/0xcd0
[  207.405860][ T7308]  ? init_locking+0xb8/0x200
[  207.410498][ T7308]  ? sb_set_blocksize+0xa5/0xe0
[  207.415378][ T7308]  get_tree_bdev+0x3f1/0x610
[  207.419993][ T7308]  ? gfs2_reconfigure+0xcd0/0xcd0
[  207.425041][ T7308]  gfs2_get_tree+0x4d/0x1e0
[  207.429577][ T7308]  vfs_get_tree+0x88/0x270
[  207.434010][ T7308]  do_new_mount+0x24a/0xa40
[  207.438535][ T7308]  __se_sys_mount+0x2d6/0x3c0
[  207.443227][ T7308]  ? __x64_sys_mount+0xc0/0xc0
[  207.448011][ T7308]  ? lockdep_hardirqs_on+0x94/0x140
[  207.453225][ T7308]  ? __x64_sys_mount+0x1c/0xc0
[  207.458005][ T7308]  do_syscall_64+0x4c/0xa0
[  207.462440][ T7308]  ? clear_bhb_loop+0x60/0xb0
[  207.467133][ T7308]  ? clear_bhb_loop+0x60/0xb0
[  207.471866][ T7308]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.477779][ T7308] RIP: 0033:0x7ff18619076a
[  207.482223][ T7308] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.501856][ T7308] RSP: 002b:00007ff186f40e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  207.510289][ T7308] RAX: ffffffffffffffda RBX: 00007ff186f40ef0 RCX: 00007ff18619076a
[  207.518300][ T7308] RDX: 0000200000000340 RSI: 0000200000000440 RDI: 00007ff186f40eb0
[  207.526287][ T7308] RBP: 0000200000000340 R08: 00007ff186f40ef0 R09: 0000000000000000
[  207.534369][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000440
[  207.542355][ T7308] R13: 00007ff186f40eb0 R14: 000000000001f803 R15: 0000200000000000
[  207.550445][ T7308]  </TASK>
[  207.554833][ T7308] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5
[  207.838359][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  208.148675][ T7328] netlink: 'syz.5.1032': attribute type 1 has an invalid length.
[  208.172244][ T4372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4372)
[  208.737419][ T7339] loop5: detected capacity change from 0 to 47
[  209.069424][ T7346] loop1: detected capacity change from 0 to 128
[  209.874622][ T7333] loop4: detected capacity change from 0 to 32768
[  210.298777][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  210.374044][ T7381] device bond_slave_0 entered promiscuous mode
[  210.381011][ T7381] device bond_slave_1 entered promiscuous mode
[  210.461227][ T7381] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  210.554221][ T7381] device bond_slave_0 left promiscuous mode
[  210.560400][ T7381] device bond_slave_1 left promiscuous mode
[  210.690885][ T7392] tipc: Started in network mode
[  210.699737][ T7392] tipc: Node identity ac141427, cluster identity 4711
[  210.711417][ T7392] vxcan0: MTU too low for tipc bearer
[  210.721650][ T7392] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  211.120440][ T7406] loop5: detected capacity change from 0 to 1024
[  211.298060][ T7411] loop0: detected capacity change from 0 to 1024
[  211.484809][ T7414] loop1: detected capacity change from 0 to 4096
[  211.535253][ T7414] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  211.573507][ T7414] ntfs3: loop1: Failed to load $Extend.
[  211.594287][   T11] hfsplus: b-tree write err: -5, ino 4
[  211.624509][ T7421] loop4: detected capacity change from 0 to 16
[  211.742058][   T26] audit: type=1804 audit(1761105690.061:104): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1066" name="/newroot/211/file0/file0" dev="loop1" ino=0 res=1 errno=0
[  211.840210][ T7421] erofs: (device loop4): mounted with root inode @ nid 36.
[  211.847851][ T7428] loop0: detected capacity change from 0 to 256
[  212.471685][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'.
[  213.109752][ T7459] loop0: detected capacity change from 0 to 4096
[  213.151510][ T7459] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  213.261937][ T7459] ntfs3: loop0: Failed to load $Extend.
[  213.318290][ T7474] loop2: detected capacity change from 0 to 256
[  213.359856][   T26] audit: type=1804 audit(1761105691.681:105): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1085" name="/newroot/206/file0/file0" dev="loop0" ino=0 res=1 errno=0
[  213.485006][   T26] audit: type=1800 audit(1761105691.761:106): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1085" name="file0" dev="loop0" ino=0 res=0 errno=0
[  213.671074][ T7444] loop1: detected capacity change from 0 to 32768
[  213.746476][ T7484] vxcan1: MTU too low for tipc bearer
[  213.784084][ T7484] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  213.859958][ T7444] XFS (loop1): Mounting V5 Filesystem
[  214.068697][ T7499] loop0: detected capacity change from 0 to 2048
[  214.077592][ T7444] XFS (loop1): Ending clean mount
[  214.084778][ T7444] XFS (loop1): Quotacheck needed: Please wait.
[  214.185229][ T7503] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.236396][ T7444] XFS (loop1): Quotacheck: Done.
[  214.318622][ T7503] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  214.365372][ T7503] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  214.460741][ T7503] Remounting filesystem read-only
[  214.486705][ T4274] XFS (loop1): Unmounting Filesystem
[  214.737245][ T4268] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  215.172083][ T7480] loop4: detected capacity change from 0 to 40427
[  215.235342][ T7480] F2FS-fs (loop4): invalid crc value
[  215.294186][ T7480] F2FS-fs (loop4): Found nat_bits in checkpoint
[  215.509305][ T7480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  215.592440][ T7532] tipc: Enabled bearer <udp:syz2>, priority 10
[  215.770432][ T4267] syz-executor: attempt to access beyond end of device
[  215.770432][ T4267] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  215.931774][ T7540] loop0: detected capacity change from 0 to 512
[  216.001904][ T7540] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  216.054747][ T7540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  216.144978][ T7540] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1115: Invalid block bitmap block 0 in block_group 0
[  216.251313][ T7540] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  216.305687][ T7540] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.1115: attempt to clear invalid blocks 983261 len 1
[  216.345574][ T7540] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1115: Invalid inode table block 0 in block_group 0
[  216.392687][ T7540] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  216.413439][ T7540] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  216.433127][ T7540] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1115: Invalid inode table block 0 in block_group 0
[  216.475666][ T7540] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5921: Corrupt filesystem
[  216.513238][ T7540] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.1115: mark_inode_dirty error
[  216.543623][ T7540] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  216.580841][ T7540] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1115: Invalid inode table block 0 in block_group 0
[  216.614072][ T7540] EXT4-fs (loop0): 1 truncate cleaned up
[  216.635285][ T4334] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  216.643267][ T7540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  216.848036][ T4334] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.869962][ T4334] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  216.896789][ T4334] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  216.935275][ T4334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.965781][ T4334] usb 6-1: config 0 descriptor??
[  216.974310][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  216.983173][ T4334] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  217.011067][ T4334] dvb-usb: bulk message failed: -22 (3/0)
[  217.038708][ T4334] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  217.093597][ T4334] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  217.124576][ T4334] usb 6-1: media controller created
[  217.144691][ T4334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  217.178299][ T7551] dvb-usb: bulk message failed: -22 (2/0)
[  217.192313][ T4334] dvb-usb: bulk message failed: -22 (6/0)
[  217.210589][ T4334] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  217.266664][ T4334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8
[  217.317435][ T4334] dvb-usb: schedule remote query interval to 150 msecs.
[  217.324459][ T4334] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  217.380480][ T4334] usb 6-1: USB disconnect, device number 3
[  217.455607][ T7577] loop4: detected capacity change from 0 to 4096
[  217.463174][ T4334] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  218.080688][ T7600] loop2: detected capacity change from 0 to 256
[  218.122472][ T7600] exfat: Deprecated parameter 'namecase'
[  218.153840][ T7600] exfat: Deprecated parameter 'utf8'
[  218.209263][ T7600] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  218.347406][ T7600] fuse: Bad value for 'fd'
[  218.443939][ T7610] loop1: detected capacity change from 0 to 1024
[  218.541215][ T7610] hfsplus: bad catalog entry type
[  218.667929][ T7607] loop5: detected capacity change from 0 to 8192
[  218.771864][    T9] hfsplus: b-tree write err: -5, ino 4
[  219.173082][ T7622] loop1: detected capacity change from 0 to 4096
[  219.834636][ T7611] loop4: detected capacity change from 0 to 32768
[  219.976579][ T7645] loop1: detected capacity change from 0 to 4096
[  219.991765][ T7611] XFS (loop4): Mounting V5 Filesystem
[  220.023242][ T7653] loop2: detected capacity change from 0 to 2048
[  220.106713][ T7653] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  220.170304][ T7611] XFS (loop4): Ending clean mount
[  220.244154][ T7667] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.262478][ T7645] ntfs3: loop1: failed to convert "0080" to cp864
[  220.343743][ T7611] xfs: Unexpected value for 'quota'
[  220.522384][ T4267] XFS (loop4): Unmounting Filesystem
[  220.654400][ T7673] loop2: detected capacity change from 0 to 512
[  220.823622][ T7673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  220.865255][ T7673] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.023532][ T7673] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.1153: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  221.080117][ T7673] EXT4-fs (loop2): Remounting filesystem read-only
[  221.088272][ T7673] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.1153: couldn't truncate inode 15 (err -117)
[  221.113988][ T7673] EXT4-fs (loop2): Remounting filesystem read-only
[  221.187871][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  221.540389][ T7670] loop1: detected capacity change from 0 to 32768
[  221.570638][ T7670] JBD2: unrecognised superblock format ID
[  221.579798][ T7670] (syz.1.1155,7670,0):ocfs2_journal_wipe:1183 ERROR: status = -22
[  221.600578][ T7670] (syz.1.1155,7670,0):ocfs2_check_volume:2420 ERROR: status = -22
[  221.602235][ T7691] loop2: detected capacity change from 0 to 512
[  221.614354][ T7670] (syz.1.1155,7670,0):ocfs2_check_volume:2489 ERROR: status = -22
[  221.625426][ T7670] (syz.1.1155,7670,1):ocfs2_mount_volume:1821 ERROR: status = -22
[  221.658943][ T7691] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value
[  221.680237][ T7670] (syz.1.1155,7670,1):ocfs2_fill_super:1176 ERROR: status = -22
[  221.867135][ T7691] loop2: detected capacity change from 0 to 2048
[  221.897197][ T7691] NILFS (loop2): unrecognized mount option "uni_xlate=1"
[  221.962303][ T7691] cifs: Unknown parameter ']gû@Œ?8`}ò둃–Ÿ?÷;¨õ–Ÿ?O£ìõsO]øâÓgo6Ÿÿ/ZÛÿݸ½ŽéZün݈3¤ë…ùuõÖ³ÿµÎr*'
[  222.207688][ T5027] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  222.421757][ T5027] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  222.445223][ T5027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.451842][ T7709] loop5: detected capacity change from 0 to 256
[  222.505447][ T5027] usb 2-1: config 0 descriptor??
[  222.511708][ T7709] exfat: Deprecated parameter 'namecase'
[  222.526380][ T5027] cp210x 2-1:0.0: cp210x converter detected
[  222.549769][ T7709] exfat: Deprecated parameter 'namecase'
[  222.586925][ T7712] loop0: detected capacity change from 0 to 8
[  222.631350][ T7709] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d)
[  222.719866][ T5027] usb 2-1: cp210x converter now attached to ttyUSB0
[  222.925000][ T4334] usb 2-1: USB disconnect, device number 8
[  222.949036][ T4334] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  222.994939][ T4334] cp210x 2-1:0.0: device disconnected
[  224.561019][ T7772] vim2m vim2m.0: vidioc_s_fmt queue busy
[  225.020642][ T7784] loop2: detected capacity change from 0 to 4096
[  225.184255][ T7784] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  225.769760][ T7769] loop0: detected capacity change from 0 to 40427
[  225.832513][ T7769] F2FS-fs (loop0): invalid crc value
[  225.858928][ T7769] F2FS-fs (loop0): Found nat_bits in checkpoint
[  226.022590][ T7769] F2FS-fs (loop0): Start checkpoint disabled!
[  226.051547][ T7769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  226.250975][ T7769] F2FS-fs (loop0): Skipping Checkpoint. Checkpoints currently disabled.
[  226.279049][ T7781] loop1: detected capacity change from 0 to 40427
[  226.328978][ T7781] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512)
[  226.355130][ T7781] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  226.406650][ T7781] F2FS-fs (loop1): invalid crc value
[  226.467474][ T7781] F2FS-fs (loop1): Found nat_bits in checkpoint
[  226.505170][ T4334] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  226.574396][   T46] kworker/u4:3: attempt to access beyond end of device
[  226.574396][   T46] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  226.667734][ T7781] F2FS-fs (loop1): Start checkpoint disabled!
[  226.696912][ T4334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  226.720977][ T7781] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  226.732296][ T7781] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  226.749220][ T4334] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  226.795173][ T4334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.847713][ T4334] usb 6-1: config 0 descriptor??
[  227.131570][ T4358] kworker/u4:7: attempt to access beyond end of device
[  227.131570][ T4358] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  227.163038][ T7798] loop4: detected capacity change from 0 to 40427
[  227.191652][ T4358] kworker/u4:7: attempt to access beyond end of device
[  227.191652][ T4358] loop1: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  227.230346][ T7798] F2FS-fs (loop4): invalid crc value
[  227.264770][ T4334] logitech 0003:046D:C626.0014: unbalanced delimiter at end of report description
[  227.301454][ T7798] F2FS-fs (loop4): Found nat_bits in checkpoint
[  227.316638][ T4334] logitech 0003:046D:C626.0014: parse failed
[  227.351480][ T4334] logitech: probe of 0003:046D:C626.0014 failed with error -22
[  227.471991][ T4334] usb 6-1: USB disconnect, device number 4
[  227.491561][ T7836] loop0: detected capacity change from 0 to 512
[  227.503900][ T7798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  227.567446][ T7836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  227.635605][ T7836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  227.666883][ T7798] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0
[  227.695329][ T7836] EXT4-fs (loop0): 1 truncate cleaned up
[  227.701184][ T7836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  227.755324][ T7798] CPU: 0 PID: 7798 Comm: syz.4.1207 Not tainted syzkaller #0
[  227.762792][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.772896][ T7798] Call Trace:
[  227.776222][ T7798]  <TASK>
[  227.779199][ T7798]  dump_stack_lvl+0x168/0x22e
[  227.783957][ T7798]  ? show_regs_print_info+0x12/0x12
[  227.789229][ T7798]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  227.795202][ T7798]  f2fs_is_valid_blkaddr+0xc3b/0x1250
[  227.800643][ T7798]  f2fs_get_read_data_page+0x3ed/0x610
[  227.806181][ T7798]  ? f2fs_get_block+0x130/0x130
[  227.811113][ T7798]  f2fs_find_data_page+0x9b/0x3a0
[  227.816203][ T7798]  f2fs_readdir+0x47b/0x990
[  227.820776][ T7798]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  227.826003][ T7798]  ? lockdep_hardirqs_on+0x94/0x140
[  227.831231][ T7798]  ? __fdget_pos+0x2ae/0x360
[  227.835850][ T7798]  ? end_current_label_crit_section+0x14b/0x170
[  227.842152][ T7798]  ? preempt_count_add+0x8d/0x190
[  227.847223][ T7798]  ? down_read_killable+0x1cc/0x340
[  227.852469][ T7798]  ? fsnotify_perm+0x248/0x550
[  227.857265][ T7798]  iterate_dir+0x218/0x560
[  227.861802][ T7798]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  227.867040][ T7798]  __se_sys_getdents64+0xe5/0x260
[  227.872115][ T7798]  ? __x64_sys_getdents64+0x80/0x80
[  227.877351][ T7798]  ? filldir+0x700/0x700
[  227.881664][ T7798]  ? lockdep_hardirqs_on+0x94/0x140
[  227.886915][ T7798]  do_syscall_64+0x4c/0xa0
[  227.891374][ T7798]  ? clear_bhb_loop+0x60/0xb0
[  227.896162][ T7798]  ? clear_bhb_loop+0x60/0xb0
[  227.900869][ T7798]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.906783][ T7798] RIP: 0033:0x7fcaecd8efc9
[  227.911216][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.930864][ T7798] RSP: 002b:00007fcaedc8a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  227.939311][ T7798] RAX: ffffffffffffffda RBX: 00007fcaecfe5fa0 RCX: 00007fcaecd8efc9
[  227.947308][ T7798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  227.955297][ T7798] RBP: 00007fcaece11f91 R08: 0000000000000000 R09: 0000000000000000
[  227.963279][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.971281][ T7798] R13: 00007fcaecfe6038 R14: 00007fcaecfe5fa0 R15: 00007ffd3ac23298
[  227.979297][ T7798]  </TASK>
[  227.982384][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.230709][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  228.461906][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.480879][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.510309][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.536800][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.561171][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.594472][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.628622][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.646786][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.654333][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.670359][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.693663][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.714947][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.733305][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.754872][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.780069][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.802438][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.824133][ T4334] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  228.872374][ T4334] hid-generic 0006:0004:0009.0015: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  229.253276][ T7865] fido_id[7865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  229.279341][ T7850] loop1: detected capacity change from 0 to 32768
[  229.305598][ T7850] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  229.709619][ T7882] loop2: detected capacity change from 0 to 256
[  229.744065][ T5220] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  230.107286][ T7889] loop1: detected capacity change from 0 to 1024
[  230.194720][ T7889] syz.1.1234: attempt to access beyond end of device
[  230.194720][ T7889] loop1: rw=2057, sector=262, nr_sectors = 65274 limit=1024
[  230.307456][ T7889] syz.1.1234: attempt to access beyond end of device
[  230.307456][ T7889] loop1: rw=1, sector=262, nr_sectors = 2048 limit=1024
[  230.425549][ T7889] syz.1.1234: attempt to access beyond end of device
[  230.425549][ T7889] loop1: rw=1, sector=2310, nr_sectors = 2048 limit=1024
[  230.494922][ T7889] syz.1.1234: attempt to access beyond end of device
[  230.494922][ T7889] loop1: rw=1, sector=4358, nr_sectors = 2048 limit=1024
[  230.548081][ T7889] syz.1.1234: attempt to access beyond end of device
[  230.548081][ T7889] loop1: rw=1, sector=6406, nr_sectors = 2048 limit=1024
[  230.577606][ T7903] program syz.0.1239 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  230.609934][ T7889] syz.1.1234: attempt to access beyond end of device
[  230.609934][ T7889] loop1: rw=1, sector=8454, nr_sectors = 2048 limit=1024
[  230.683553][ T7889] syz.1.1234: attempt to access beyond end of device
[  230.683553][ T7889] loop1: rw=1, sector=10502, nr_sectors = 2048 limit=1024
[  231.253652][ T7913] loop0: detected capacity change from 0 to 8192
[  231.853530][ T7946] loop2: detected capacity change from 0 to 256
[  231.890156][ T7940] loop4: detected capacity change from 0 to 4096
[  231.900673][ T7948] loop5: detected capacity change from 0 to 8
[  232.012474][ T7946] FAT-fs (loop2): Directory bread(block 64) failed
[  232.055509][ T7946] FAT-fs (loop2): Directory bread(block 65) failed
[  232.071065][ T7948] SQUASHFS error: Unable to read directory block [1d0:62]
[  232.117108][ T7946] FAT-fs (loop2): Directory bread(block 66) failed
[  232.123870][ T7946] FAT-fs (loop2): Directory bread(block 67) failed
[  232.201103][ T7946] FAT-fs (loop2): Directory bread(block 68) failed
[  232.241385][ T7946] FAT-fs (loop2): Directory bread(block 69) failed
[  232.284446][ T7946] FAT-fs (loop2): Directory bread(block 70) failed
[  232.311725][ T7946] FAT-fs (loop2): Directory bread(block 71) failed
[  232.355443][ T7946] FAT-fs (loop2): Directory bread(block 72) failed
[  232.384133][ T7946] FAT-fs (loop2): Directory bread(block 73) failed
[  232.637957][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1258'.
[  232.927795][ T7971] mkiss: ax0: crc mode is auto.
[  233.263457][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'.
[  233.805180][ T5034] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  233.849853][ T8005] loop1: detected capacity change from 0 to 64
[  233.995186][ T5034] usb 3-1: Using ep0 maxpacket: 8
[  234.004257][ T5034] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  234.029097][ T5034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.046339][ T5034] usb 3-1: Product: syz
[  234.055656][ T5034] usb 3-1: Manufacturer: syz
[  234.064843][ T5034] usb 3-1: SerialNumber: syz
[  234.083670][ T5034] usb 3-1: config 0 descriptor??
[  234.090825][ T8008] loop4: detected capacity change from 0 to 4096
[  234.131989][ T8008] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  234.253168][ T8008] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  234.305454][ T5034] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  234.408844][ T8014] overlayfs: upper fs does not support tmpfile.
[  234.491437][ T8014] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  234.587147][ T4281] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  234.729238][ T5034] usb write operation failed. (-71)
[  234.759727][ T5034] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  234.781941][ T5034] dvbdev: DVB: registering new adapter (Terratec H7)
[  234.796266][ T5034] usb 3-1: media controller created
[  234.812052][ T5034] usb read operation failed. (-71)
[  234.820217][ T5034] usb write operation failed. (-71)
[  234.844469][ T5034] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5
[  234.864729][ T5034] usb 3-1: USB disconnect, device number 8
[  235.200408][ T8036] device gtp0 entered promiscuous mode
[  235.368891][ T8038] loop1: detected capacity change from 0 to 4096
[  235.449304][ T8044] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.969089][ T8057] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  235.996002][ T8057] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  236.002549][ T8057] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  236.010248][ T8061] loop2: detected capacity change from 0 to 1024
[  236.044853][ T8057] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  236.057599][ T8060] loop4: detected capacity change from 0 to 2048
[  236.073557][ T8057] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  236.095226][ T8057] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  236.095269][ T8057] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  236.095350][ T8057] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  236.095393][ T8057] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  236.095427][ T8057] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  236.095488][ T8057] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  236.095522][ T8057] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  236.122536][ T8060] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  236.166455][ T8066] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.166942][ T8060] bio_check_eod: 26 callbacks suppressed
[  236.166957][ T8060] syz.4.1292: attempt to access beyond end of device
[  236.166957][ T8060] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  236.222267][ T1185] hfsplus: b-tree write err: -5, ino 4
[  236.605475][ T4283] Bluetooth: hci4: command 0x2016 tx timeout
[  237.330465][ T8101] program syz.2.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.830335][ T8075] loop4: detected capacity change from 0 to 40427
[  237.912430][ T8075] F2FS-fs (loop4): invalid crc value
[  237.935616][ T8075] F2FS-fs (loop4): Found nat_bits in checkpoint
[  238.124815][ T8075] F2FS-fs (loop4): Start checkpoint disabled!
[  238.176062][ T8075] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  238.278954][ T8126] xt_HMARK: proto mask must be zero with L3 mode
[  238.367084][ T8075] F2FS-fs (loop4): Unrecognized mount option "noload" or missing value
[  238.664983][ T8134] loop2: detected capacity change from 0 to 1024
[  238.685383][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[  238.703656][ T8106] loop5: detected capacity change from 0 to 32768
[  238.751644][ T8106] JBD2: Ignoring recovery information on journal
[  238.903919][ T8106] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  238.985960][ T8116] loop0: detected capacity change from 0 to 32768
[  239.026606][ T8134] 
[  239.028986][ T8134] ======================================================
[  239.036013][ T8134] WARNING: possible circular locking dependency detected
[  239.043050][ T8134] syzkaller #0 Not tainted
[  239.047570][ T8134] ------------------------------------------------------
[  239.054610][ T8134] syz.2.1316/8134 is trying to acquire lock:
[  239.060599][ T8134] ffff88807e126d08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1b3/0x1950
[  239.071765][ T8134] 
[  239.071765][ T8134] but task is already holding lock:
[  239.079145][ T8134] ffff888023c300b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0
[  239.088865][ T8134] 
[  239.088865][ T8134] which lock already depends on the new lock.
[  239.088865][ T8134] 
[  239.099372][ T8134] 
[  239.099372][ T8134] the existing dependency chain (in reverse order) is:
[  239.108400][ T8134] 
[  239.108400][ T8134] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}:
[  239.116333][ T8134]        __mutex_lock+0x120/0xaf0
[  239.121383][ T8134]        hfsplus_find_init+0x150/0x1c0
[  239.126858][ T8134]        hfsplus_get_block+0x8da/0x1530
[  239.132419][ T8134]        block_read_full_folio+0x3c9/0xed0
[  239.138245][ T8134]        read_pages+0x5fd/0x840
[  239.143115][ T8134]        page_cache_ra_unbounded+0x690/0x770
[  239.149161][ T8134]        filemap_read+0x5ff/0x2f80
[  239.154390][ T8134]        generic_file_read_iter+0x115/0x670
[  239.160308][ T8134]        __kernel_read+0x2dc/0x6b0
[  239.165447][ T8134]        integrity_kernel_read+0x86/0xd0
[  239.171104][ T8134]        ima_calc_file_hash+0x96b/0x17c0
[  239.176766][ T8134]        ima_collect_measurement+0x4b3/0xac0
[  239.182770][ T8134]        process_measurement+0xfae/0x1a10
[  239.188508][ T8134]        ima_file_check+0xc2/0x100
[  239.193637][ T8134]        path_openat+0x2679/0x2e70
[  239.198759][ T8134]        do_filp_open+0x1c1/0x3c0
[  239.203887][ T8134]        do_sys_openat2+0x142/0x490
[  239.209128][ T8134]        __x64_sys_openat+0x135/0x160
[  239.214527][ T8134]        do_syscall_64+0x4c/0xa0
[  239.219487][ T8134]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.225915][ T8134] 
[  239.225915][ T8134] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  239.234962][ T8134]        __lock_acquire+0x2cf8/0x7c50
[  239.240351][ T8134]        lock_acquire+0x1b4/0x490
[  239.245398][ T8134]        __mutex_lock+0x120/0xaf0
[  239.250437][ T8134]        hfsplus_file_extend+0x1b3/0x1950
[  239.256165][ T8134]        hfsplus_bmap_reserve+0x11e/0x4f0
[  239.261896][ T8134]        __hfsplus_ext_write_extent+0x28d/0x5b0
[  239.268149][ T8134]        __hfsplus_ext_cache_extent+0x89/0xe20
[  239.274311][ T8134]        hfsplus_file_truncate+0x455/0xb30
[  239.280152][ T8134]        hfsplus_setattr+0x1c0/0x280
[  239.285446][ T8134]        notify_change+0xc74/0xf40
[  239.290573][ T8134]        do_truncate+0x197/0x220
[  239.295521][ T8134]        vfs_truncate+0x262/0x2f0
[  239.300556][ T8134]        do_sys_truncate+0xdc/0x190
[  239.305771][ T8134]        do_syscall_64+0x4c/0xa0
[  239.310723][ T8134]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.317150][ T8134] 
[  239.317150][ T8134] other info that might help us debug this:
[  239.317150][ T8134] 
[  239.327384][ T8134]  Possible unsafe locking scenario:
[  239.327384][ T8134] 
[  239.334856][ T8134]        CPU0                    CPU1
[  239.340226][ T8134]        ----                    ----
[  239.345592][ T8134]   lock(&tree->tree_lock/1);
[  239.350287][ T8134]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  239.358644][ T8134]                                lock(&tree->tree_lock/1);
[  239.365864][ T8134]   lock(&HFSPLUS_I(inode)->extents_lock);
[  239.371683][ T8134] 
[  239.371683][ T8134]  *** DEADLOCK ***
[  239.371683][ T8134] 
[  239.379834][ T8134] 4 locks held by syz.2.1316/8134:
[  239.384947][ T8134]  #0: ffff888029156460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  239.394210][ T8134]  #1: ffff888055245400 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: do_truncate+0x183/0x220
[  239.404589][ T8134]  #2: ffff888055245208 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30
[  239.415074][ T8134]  #3: ffff888023c300b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0
[  239.425201][ T8134] 
[  239.425201][ T8134] stack backtrace:
[  239.431104][ T8134] CPU: 1 PID: 8134 Comm: syz.2.1316 Not tainted syzkaller #0
[  239.438483][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  239.448552][ T8134] Call Trace:
[  239.451874][ T8134]  <TASK>
[  239.454822][ T8134]  dump_stack_lvl+0x168/0x22e
[  239.459518][ T8134]  ? load_image+0x3b0/0x3b0
[  239.464040][ T8134]  ? show_regs_print_info+0x12/0x12
[  239.469253][ T8134]  ? print_circular_bug+0x12b/0x1a0
[  239.474471][ T8134]  check_noncircular+0x274/0x310
[  239.479428][ T8134]  ? add_chain_block+0x940/0x940
[  239.484384][ T8134]  ? lockdep_lock+0xdc/0x1e0
[  239.488994][ T8134]  ? is_bpf_text_address+0x22/0x2a0
[  239.494216][ T8134]  ? _find_first_zero_bit+0xcf/0x100
[  239.499530][ T8134]  __lock_acquire+0x2cf8/0x7c50
[  239.504409][ T8134]  ? unwind_get_return_address+0x49/0x80
[  239.510063][ T8134]  ? stack_trace_save+0xe0/0xe0
[  239.515020][ T8134]  ? verify_lock_unused+0x140/0x140
[  239.520270][ T8134]  ? stack_trace_save+0x98/0xe0
[  239.525139][ T8134]  ? stack_trace_snprint+0xf0/0xf0
[  239.530269][ T8134]  lock_acquire+0x1b4/0x490
[  239.534790][ T8134]  ? hfsplus_file_extend+0x1b3/0x1950
[  239.540186][ T8134]  ? add_lock_to_list+0x191/0x280
[  239.545232][ T8134]  ? __might_sleep+0xd0/0xd0
[  239.549855][ T8134]  ? read_lock_is_recursive+0x10/0x10
[  239.555259][ T8134]  ? __lock_acquire+0x28b5/0x7c50
[  239.560343][ T8134]  __mutex_lock+0x120/0xaf0
[  239.564870][ T8134]  ? hfsplus_file_extend+0x1b3/0x1950
[  239.570265][ T8134]  ? hfsplus_file_extend+0x1b3/0x1950
[  239.575652][ T8134]  ? mutex_lock_nested+0x10/0x10
[  239.580713][ T8134]  hfsplus_file_extend+0x1b3/0x1950
[  239.585940][ T8134]  ? hfsplus_get_block+0x1530/0x1530
[  239.591239][ T8134]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.597317][ T8134]  ? __mutex_trylock_common+0x14f/0x250
[  239.602877][ T8134]  ? trace_raw_output_contention_end+0xd0/0xd0
[  239.609052][ T8134]  ? rcu_is_watching+0x11/0xa0
[  239.613839][ T8134]  ? trace_contention_end+0x5f/0x170
[  239.619141][ T8134]  ? hfsplus_brec_find+0x18e/0x500
[  239.624263][ T8134]  ? __mutex_lock+0x19e/0xaf0
[  239.628954][ T8134]  hfsplus_bmap_reserve+0x11e/0x4f0
[  239.634170][ T8134]  __hfsplus_ext_write_extent+0x28d/0x5b0
[  239.639899][ T8134]  __hfsplus_ext_cache_extent+0x89/0xe20
[  239.645543][ T8134]  hfsplus_file_truncate+0x455/0xb30
[  239.650849][ T8134]  ? hfsplus_add_extent+0x890/0x890
[  239.656083][ T8134]  ? __up_read+0x27c/0x660
[  239.660528][ T8134]  ? unmap_mapping_range+0x91/0x100
[  239.665802][ T8134]  hfsplus_setattr+0x1c0/0x280
[  239.670577][ T8134]  ? hfsplus_fileattr_set+0x330/0x330
[  239.675979][ T8134]  notify_change+0xc74/0xf40
[  239.680591][ T8134]  do_truncate+0x197/0x220
[  239.685019][ T8134]  ? put_page_bootmem+0x2c0/0x2c0
[  239.690064][ T8134]  ? bpf_lsm_path_truncate+0x5/0x10
[  239.695280][ T8134]  vfs_truncate+0x262/0x2f0
[  239.699798][ T8134]  do_sys_truncate+0xdc/0x190
[  239.704520][ T8134]  ? break_lease+0xd0/0xd0
[  239.708966][ T8134]  ? lockdep_hardirqs_on+0x94/0x140
[  239.714201][ T8134]  do_syscall_64+0x4c/0xa0
[  239.718633][ T8134]  ? clear_bhb_loop+0x60/0xb0
[  239.723326][ T8134]  ? clear_bhb_loop+0x60/0xb0
[  239.728019][ T8134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.733928][ T8134] RIP: 0033:0x7f5d43b8efc9
[  239.738358][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.757999][ T8134] RSP: 002b:00007f5d4496c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  239.766426][ T8134] RAX: ffffffffffffffda RBX: 00007f5d43de5fa0 RCX: 00007f5d43b8efc9
[  239.774408][ T8134] RDX: 0000000000000000 RSI: 000000000000fbb0 RDI: 0000200000000000
[  239.782395][ T8134] RBP: 00007f5d43c11f91 R08: 0000000000000000 R09: 0000000000000000
[  239.790379][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.798367][ T8134] R13: 00007f5d43de6038 R14: 00007f5d43de5fa0 R15: 00007ffe39b35338
[  239.806359][ T8134]  </TASK>
[  239.831050][ T8106] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  239.903379][ T8106] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  239.944172][ T8106] OCFS2: File system is now read-only.
[  239.974487][ T8106] (syz.5.1308,8106,1):ocfs2_search_one_group:1684 ERROR: status = -30
[  239.978940][ T8119] loop1: detected capacity change from 0 to 40427
[  239.997043][ T8106] (syz.5.1308,8106,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30
[  240.015587][ T8119] F2FS-fs (loop1): invalid crc value
[  240.042065][ T8119] F2FS-fs (loop1): Found nat_bits in checkpoint
[  240.058456][ T8106] (syz.5.1308,8106,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  240.093083][ T8106] (syz.5.1308,8106,1):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  240.108117][ T8106] (syz.5.1308,8106,0):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  240.125022][ T8106] (syz.5.1308,8106,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  240.134016][ T8119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  240.148254][ T8106] (syz.5.1308,8106,0):ocfs2_mknod:385 ERROR: status = -30
[  240.156367][ T8106] (syz.5.1308,8106,0):ocfs2_mknod:502 ERROR: status = -30
[  240.163599][ T8106] (syz.5.1308,8106,0):ocfs2_create:676 ERROR: status = -30
[  240.189691][ T8116] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  240.202443][ T6766] ocfs2: Unmounting device (7,5) on (node local)
[  240.210603][ T8116] JBD2: Ignoring recovery information on journal
[  240.234752][ T6903] hfsplus: b-tree write err: -5, ino 3
[  240.280462][ T4274] syz-executor: attempt to access beyond end of device
[  240.280462][ T4274] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.350896][ T8116] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  240.551485][ T4268] ocfs2: Unmounting device (7,0) on (node local)