last executing test programs:

5.272943421s ago: executing program 2 (id=1124):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00')
exit(0xfffffffffffffff7)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200)

4.225162234s ago: executing program 2 (id=1136):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

3.96495432s ago: executing program 2 (id=1139):
r0 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @remote}, 0x14)

3.736042182s ago: executing program 2 (id=1141):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c4030002000921ca87000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="002207000000abffffffff19"], 0x0}, 0x0)

3.707977415s ago: executing program 3 (id=1142):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000001280)=[{r0}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x2, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=")

3.24658284s ago: executing program 3 (id=1148):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.160818369s ago: executing program 4 (id=1150):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000008c0), 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @struct={0x84, 0x3}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x420, 0xce83}, 0x4002, 0x5, [0x0, 0x8, 0x9c]}, {0xfffffffffffffffd, @usage=0x9, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x5c3, @struct={0x2, 0xf137}, 0x2, 0xf, [0x4, 0x1, 0x2, 0xfffffffffffffffc]}, {0x6, @struct={0x0, 0x5}, 0x0, 0x6, 0x6b, 0xfffffffffffffffe, 0xffffffffffffffff, 0x800, 0x4a, @struct={0x7ff, 0xffffffff}, 0xffffffff, 0x3, [0x80000000, 0x800003, 0x3, 0x3ff, 0x80, 0x1]}})

2.498443004s ago: executing program 1 (id=1152):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

2.171858587s ago: executing program 1 (id=1154):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x4}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe)

2.068112427s ago: executing program 0 (id=1155):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1800018, &(0x7f0000000100)=ANY=[], 0x5a, 0x213, &(0x7f0000002800)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, 0x0, 0x0)

1.718721881s ago: executing program 0 (id=1156):
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b})

1.673042716s ago: executing program 4 (id=1157):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000005000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='sys_enter\x00', r0}, 0x10)
setitimer(0x0, 0x0, 0x0)

1.535905249s ago: executing program 2 (id=1158):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000480)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r0, 0xffffffffffffffff, 0xee01)

1.442590078s ago: executing program 0 (id=1159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x4, 0x9, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

1.370781456s ago: executing program 3 (id=1160):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030362c6572726f72733d636f6e74696e75652c7379735f747a2c616c6c6f775f7574696d653d30303030303030303030303030303030303134373036342c00968868822eaa4073da2a8bad3e75bf3fa58e5fe9023e2efe14b61e42154e792855b9c44517fcaf42990fa252a8fcc76df45041b88e383db02cc075636a6b415c49ee2ad1af7ecfc73f3809bce1541b2c780705cdd96cfb760a1f342582ee152abbe3f5828666937a5068d6170f62dc427b22ae7bd20a2fb9094ffaf7b7eda15af87283045448d6cabb51f8a411539d39a9d6db38d1"], 0x1, 0x1545, &(0x7f0000001a00)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZO8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckvX/TPFXb97f+77/t19+/988389nf2Y9Z+9n7Wef55w5e2/mfNt1aK0mtas3IiL4j+CvP5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9Zzthf64HU690BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbNO0Qtfwkn2XP/v+fyzf////CH/+/y+SWWbsl2vKXNcNIOZfTeH+Z2/c//+1gn9lI+5/9pTzwk/uf3YVe6ULYH+lPpd/mN//2UGOf7iG+5+9cf8Zy86u9P3nv3KJuczxQuR/2HNw5MK12V+0vyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcoALg4vtJ1McYYY4wxxhhj7M/jc1zpChhjjDHGGGOMMfbfD0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgQS4EcrCTVAObobycAtUgFuhIlSCylAFboOqcDtUgzugOtwJNaAm1ILacBfUgbuhLtwD9eBeqA/3IcD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv91PjS4bP7z0BNegF7QG5KgD/SFF6Ef9IcB8BIMhJdhELwCg+FVSIYhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAeUmACTIS3YRK8A5PhXZgCUyEVpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQ0+hAWwENLhI1gEH0MGLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w/9Xf53RAQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwH+bD/JgfC2JBjMd4LIJF0KBBQsKiWBSjGMXiWBxLYAkshaXQocMETMCyeBOWw3JYHstjBayAFbESVsIqWAWrYlWshtWwOlbHGlgDa2EtvAvvwj5YF+tiPayH9bH+xdtT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIiJ2BE7YifshJ2xM3bBLtgVu2I37I7dM5/PAfgCvoC9sYbog32xL/bD5BwD8CV8CV/GQfgKvoKvYjIOwaH4Gr6Gr+NwPIkjcCSOwlFYVbyFY3AskhiPKZiCE3EiTsJJmFXouzgVU3EaTsfpOANn4kx8H2fjB/gBzsW5OB/TMA0X4EJMx3RchKcwAxfjElyKy3A5LsOVuApX4hpci2twPa7HjbgRN+Nm3IpbcTtux09QAeCnuBt3YzLuxb24D/fhftyPB/AAZmImHsSDeAgP4WE8jEfwCB7FY3gcj+EJPIEn8RSextN4Fs/iOXw2/uvGn5RcnQwiixJKxIgYEStiRS6RS+QWuUUekUdERETEiTiRT+QT+UV+UVAUFPEiXhQRRYQRRpAIYwBAREVUFBfFRQlRQpQSpYQTTiSIBFFWlBXlRDlRXtwiKohbRUVRSbR1VUQVUVW0c9XEHaK6qC5qiJqilqgtaos6oo6oK+qKeqKeqC/qiwbiftFQ9MEB+KDI6kwTMQSbiqHYTDQX8sJvsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHh2r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZFf91FD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6Cy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zX/7MvmDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tyF5wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvGBUKVVaOVVGJagb/518VVzdoEqokr/Lv1hf0j+or5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBeaHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1Z/6vzenyzwmOule+sk3Uf31S/qfrq/HqBf0gP1y3qQfkUP1q/qZD1ED9Wv6WH6dT1cv6FH6JF6lH5Tj9Zv6TF6rB6nx+sUPUFP1G/rSfodPVm/q6foqTpVT9PT9Xt6hp6pZ+n39Wz9gZ6j5+p5er5O0x/qBXqhTtcf6UX6Y52hF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36E71Tf6p36d16j/5M79Wf6336C71ff6kP6K90pv5aH9Tf6EP6W31Yf6eP6O/1UX1MH9c/6BP6R31Sn9Kn9Rl9Vv+kz+mf9Xnts07usz7ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiTz+Qz+U1+U9AUNPEm3hQxRUwWMmSKmqImaqKmuCluSpgSppQpZZxxJsEkmLKmrClnypnyprypYCqYiqaiqWwqm9vMbeZ2c7u5w9xh7jR3mpqmpqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlhWphWppVpbVqbNqaNaWfamfamvelgOphEk2g6mo6mk+lkOpvOpovpYrqarqab6WZ6mB6mp+lpepleJskkmb6mr+ln+pkBZoAZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdqJq3zBgz1owz402KSTETzUQzyUwyk81kM8VMMakm1Uw3080MM8PMMrPMbDPbzDFzzDwzz6SZNLPALDDpJt0sMotMhskwS8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YTJNpDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asKXDh89KbWJvT5rJX2dz2apvH5rV/Hxe0hWy8LWyLWG3z2wK/i421toQtaUvZ0tbZMjbB3viHuKKtZCvbKvY2W9Xebqv9Ia5j77Z17T22nr3X1rZ3/S6ub++zDezDtiEigG1uG9uWtol92Da1j9hmtrltYVva9vYJ28E+aRPtU7ajffoP8QK70K6yq+0au9busrvtaXvGHrLf2rP2J9vL9rYD7ct2kH3FDrav2mQ75A/xKPumHW3fsmPsWDvOjv9DPMVOtal2mp1u37Mz7Mw/xGn2Qzvbpts5dq6dZ+f/EmfVlG4/sovsxzbDBrDELrXL7HK7wq68WKvPa9fbDXaj3Wk/tVvsVrvNbrc7Lp4I2912j/3M7rWf24P2G7vffmkP2MM20379S5x1fIftd/aI/d4etcfscfuDPWF/VBezs479B/uzPW+9BUICkqQooBjKQbGUk3LRVZSbrqY8lJcidA3F0bWUj66j/FSAClIhiqfCVIQ0GbJEFFJRKkZRup4ulleKSpOjMpRAN1JZuonK0c1Unm6hCnQrVaRKVJmq0G1UlW6nanQHVac7qQbVpFpUm+6iOnQ31aV7qB7dS/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk1pxbUklrRo9SaHqM21Jba0ePUnp6gDvQkJdJT1JGepk70N+pMz1AXepa60nPUjbpTD3qeetIL1It6UxL1ob70IvWj/jSAXqKB9DINoldoML1KyTSEhtJrNIxep+H0Bo2gkTSK3qTR9BaNobE0jsZTCk2gifQ2TaJ3aDK9S1NoKqXSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoE9pJn9Iu2k176DPaS5/TPvqC9tOXdIC+okz6mg7SN3SIvqXD9J3vTd/TUTpGx+kHOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gxzhVeFucOrwzxh3jASXhPGhdeG+cLrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vD4uHN4QlwpJhqbB06MIyYUJ4Y1g2vCksF94clg9vCSuEt4YVw0rhw/dWCW8Lq4a3h9XCO8Lq4Z1hjbBmWCusHd4V1gnvDuuG94T1wnvDcuF9YYPw/rBh+EDYKHwwbBw+FDYJHw6bho+EzcLmYYuwZdgqfDRsHT4Wtgnbhu3Cx8P24RNhh/DJMDF8KuwYPv3L+vsW/uP1SWGfsG/4Yvhi6P09cl50fjQt+mF0QXRhND36UXRR9ONoRnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T72jnAoRNOOuUCF+NyuFiX0+VyV7nc7mqXx+V1EXeNi3PXunzuOpffFXAFXSEX7wq7Ik4746wjF7qirpiLuutdcXeDK+FKulKutHOujEtwLV0r18q1do+5Nq6ta+ced4+7J9wT7kn3pHvKdXRPu07ub66ze8Z1cc+6Z91zrpvr7nq4511PNyHPr+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ35617muDlunpvn0lyaW+CyzhnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL5/11UrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++eIkM432Kn+An+rf9JP+On+zf9VPOep/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/eVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w3a4wxxhhj/5IJl4bi92t+vZ3f5zI54jcb9wWAq7cWyvzt+qwzynX5fx33F/HtIwDwVO+uD15catRI+r/bZkgIis0FuPgvQVli4FK8GNrBE5AIbaHsZevvL7qfpT/On5T0m/mjtwDk+k1OLFyKL83/BQAmXWb+Rx8ftaBCeDruv5h/LkCJYpdycsKleDG0++X+Slso9w/qL9D6n9Sf88sUgDa/yckNl+JL9SfAY/A0JP5uS8YYY4wxxhhj7Ff9ReXOF68/L/6Pz7+/vs26Po9Xl3JywKX4n12fM8YYY4wxxhhj7Mp7pnuPJx9NTGzb+d8fVPt/yvqXB03hv2tmHlx24D3AxUcUAPyHEwJkDeRfeRSb/5J9JV946/z9qmVnfAD/M1r5Zwyu8C8mxhhjjDHG2J/u0kn/7x9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/orvk6Mv02AMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdvd/AgAA//8vzfwg")
r0 = open(&(0x7f00000001c0)='.\x00', 0x40480, 0x0)
getdents(r0, &(0x7f0000000280)=""/4096, 0x9005)

1.279943234s ago: executing program 4 (id=1161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010)

1.159944346s ago: executing program 1 (id=1162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0)

1.071913645s ago: executing program 0 (id=1163):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)=')', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)='9E', 0x2}], 0x1}}], 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)

866.554735ms ago: executing program 4 (id=1164):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

801.167751ms ago: executing program 3 (id=1165):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0xfffffffd, 0x0, {0x2}, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x1c}}, 0x0)

773.977324ms ago: executing program 0 (id=1166):
r0 = syz_clone(0x200, 0x0, 0xfffffffffffffef9, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x8, r0)

763.135095ms ago: executing program 1 (id=1167):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000140)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@fat=@nocase}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff9}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10000}}, {@nodots}, {@dots}, {@fat=@showexec}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@quiet}, {@dots}, {@fat=@nfs_nostale_ro}, {@fat=@errors_remount}, {@fat=@dos1xfloppy}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x72, {0xb}}, 0x0)

596.737191ms ago: executing program 3 (id=1168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

505.6653ms ago: executing program 4 (id=1169):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="5404", 0x2}], 0x1}, 0x48805)
ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0)

371.664213ms ago: executing program 1 (id=1170):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d042abd7000a0000000170000001000068008000600a60a000004"], 0x38}}, 0x4c000)

293.922612ms ago: executing program 3 (id=1171):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)

196.652861ms ago: executing program 0 (id=1172):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000000, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4)

186.542272ms ago: executing program 4 (id=1173):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51a, &(0x7f0000001200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0406619, 0x0)

85.098711ms ago: executing program 1 (id=1174):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]})

0s ago: executing program 2 (id=1175):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}}, 0x0)

kernel console output (not intermixed with test programs):

6][ T4980]  dump_stack_lvl+0x168/0x22e
[  102.646044][ T4980]  ? kobject_uevent_env+0x35f/0x8a0
[  102.651277][ T4980]  ? show_regs_print_info+0x12/0x12
[  102.656703][ T4980]  ? load_image+0x3b0/0x3b0
[  102.661242][ T4980]  ? kobject_uevent_env+0x35f/0x8a0
[  102.666479][ T4980]  gfs2_withdraw+0x143f/0x1780
[  102.671280][ T4980]  ? gfs2_lm+0x220/0x220
[  102.675544][ T4980]  ? make_kgid+0x1aa/0x640
[  102.679977][ T4980]  ? from_kuid_munged+0x690/0x690
[  102.685030][ T4980]  ? gfs2_consist_inode_i+0xf1/0x110
[  102.690354][ T4980]  gfs2_inode_refresh+0xb5e/0xfc0
[  102.695406][ T4980]  ? gfs2_inode_metasync+0xf0/0xf0
[  102.700560][ T4980]  ? gfs2_glock_nq+0xcf0/0x14e0
[  102.705475][ T4980]  gfs2_instantiate+0x15e/0x210
[  102.710368][ T4980]  gfs2_glock_wait+0x1d0/0x2a0
[  102.715167][ T4980]  check_journal_clean+0x119/0x300
[  102.720313][ T4980]  ? gfs2_trans_remove_revoke+0x370/0x370
[  102.726068][ T4980]  ? init_journal+0x1816/0x2300
[  102.730952][ T4980]  ? __rwlock_init+0x140/0x140
[  102.735753][ T4980]  ? do_raw_spin_unlock+0x11d/0x230
[  102.740983][ T4980]  ? _raw_spin_unlock+0x24/0x40
[  102.745862][ T4980]  ? gfs2_jdesc_find+0xa7/0xc0
[  102.750652][ T4980]  init_journal+0x1816/0x2300
[  102.755369][ T4980]  ? init_inodes+0xdb/0x320
[  102.759904][ T4980]  ? _compound_head+0x120/0x120
[  102.764781][ T4980]  ? vsnprintf+0x1905/0x1a00
[  102.769403][ T4980]  ? snprintf+0xd7/0x120
[  102.773671][ T4980]  ? init_inodes+0xdb/0x320
[  102.778196][ T4980]  ? vscnprintf+0x80/0x80
[  102.782543][ T4980]  ? gfs2_glock_nq_num+0x17f/0x1c0
[  102.787681][ T4980]  init_inodes+0xdb/0x320
[  102.792036][ T4980]  gfs2_fill_super+0x1718/0x1f80
[  102.797013][ T4980]  ? gfs2_reconfigure+0xcd0/0xcd0
[  102.802062][ T4980]  ? init_locking+0xb8/0x200
[  102.806675][ T4980]  ? sb_set_blocksize+0xa5/0xe0
[  102.811629][ T4980]  get_tree_bdev+0x3f1/0x610
[  102.816250][ T4980]  ? gfs2_reconfigure+0xcd0/0xcd0
[  102.821312][ T4980]  gfs2_get_tree+0x4d/0x1e0
[  102.825844][ T4980]  vfs_get_tree+0x88/0x270
[  102.830280][ T4980]  do_new_mount+0x24a/0xa40
[  102.834828][ T4980]  __se_sys_mount+0x2d6/0x3c0
[  102.839528][ T4980]  ? __x64_sys_mount+0xc0/0xc0
[  102.844312][ T4980]  ? lockdep_hardirqs_on+0x94/0x140
[  102.849531][ T4980]  ? __x64_sys_mount+0x1c/0xc0
[  102.854346][ T4980]  do_syscall_64+0x4c/0xa0
[  102.858786][ T4980]  ? clear_bhb_loop+0x60/0xb0
[  102.863479][ T4980]  ? clear_bhb_loop+0x60/0xb0
[  102.868183][ T4980]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.874093][ T4980] RIP: 0033:0x7f144b59066a
[  102.878532][ T4980] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.898348][ T4980] RSP: 002b:00007f144c4f2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  102.906792][ T4980] RAX: ffffffffffffffda RBX: 00007f144c4f2ef0 RCX: 00007f144b59066a
[  102.914775][ T4980] RDX: 0000200000000000 RSI: 0000200000037f80 RDI: 00007f144c4f2eb0
[  102.922757][ T4980] RBP: 0000200000000000 R08: 00007f144c4f2ef0 R09: 0000000000000010
[  102.930765][ T4980] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000037f80
[  102.938749][ T4980] R13: 00007f144c4f2eb0 R14: 0000000000037f6a R15: 0000200000000040
[  102.946751][ T4980]  </TASK>
[  102.951593][ T4980] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount.
[  103.038158][ T4978] loop3: detected capacity change from 0 to 8192
[  103.100443][ T4978] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  103.224910][ T4978] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  103.243722][ T4978] REISERFS (device loop3): using ordered data mode
[  103.260503][ T4978] reiserfs: using flush barriers
[  103.283065][ T4978] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  103.363607][ T4978] REISERFS (device loop3): checking transaction log (loop3)
[  103.403950][ T4978] REISERFS (device loop3): Using r5 hash to sort names
[  103.434219][ T4978] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  103.809172][ T5002] loop0: detected capacity change from 0 to 512
[  104.336842][ T5006] usb usb8: usbfs: process 5006 (syz.0.249) did not claim interface 0 before use
[  104.395649][ T4994] loop2: detected capacity change from 0 to 32768
[  104.445559][ T4987] loop1: detected capacity change from 0 to 32768
[  104.450670][ T5008] loop3: detected capacity change from 0 to 8
[  104.482390][ T4987] XFS: noikeep mount option is deprecated.
[  104.746404][ T4987] XFS (loop1): Mounting V5 Filesystem
[  104.806741][ T4998] loop4: detected capacity change from 0 to 32768
[  104.922738][ T5026] input: syz0 as /devices/virtual/input/input6
[  104.938988][ T4987] XFS (loop1): Ending clean mount
[  104.961675][ T4987] XFS (loop1): Quotacheck needed: Please wait.
[  105.059089][ T4998] XFS (loop4): Mounting V5 Filesystem
[  105.064881][ T4987] XFS (loop1): Quotacheck: Done.
[  105.225842][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'.
[  105.282688][ T4308] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 
[  105.304086][ T4270] XFS (loop1): Unmounting Filesystem
[  105.358570][ T4308] XFS (loop4): Unmount and run xfs_repair
[  105.389884][ T4308] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  105.415159][ T4308] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00  XAGF............
[  105.468241][ T4308] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[  105.507633][ T4308] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  105.538030][ T4308] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[  105.587169][ T4308] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  105.611125][ T4308] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[  105.638682][ T4308] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  105.666429][ T4308] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  105.675669][ T5046] tipc: Started in network mode
[  105.686949][ T5046] tipc: Node identity 2000007, cluster identity 4711
[  105.697132][ T4998] XFS (loop4): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74
[  105.741795][ T4998] XFS (loop4): Error -117 reserving per-AG metadata reserve pool.
[  105.753060][ T5046] tipc: Node number set to 33554439
[  105.755079][ T4998] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587).  Shutting down filesystem.
[  105.787705][ T4998] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  105.836879][ T4998] XFS (loop4): Ending clean mount
[  105.842424][ T4998] XFS (loop4): Failed to initialize disk quotas.
[  106.093181][ T4271] XFS (loop4): Unmounting Filesystem
[  106.592161][ T5048] loop0: detected capacity change from 0 to 40427
[  106.644995][ T5048] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  106.649447][ T5044] loop3: detected capacity change from 0 to 32768
[  106.652765][ T5048] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  106.685050][ T5048] F2FS-fs (loop0): invalid crc value
[  106.716695][ T5048] F2FS-fs (loop0): Found nat_bits in checkpoint
[  106.822914][ T5044] XFS (loop3): Mounting V5 Filesystem
[  106.956740][ T5050] loop2: detected capacity change from 0 to 40427
[  106.984007][ T5050] F2FS-fs (loop2): invalid crc value
[  107.001583][ T5044] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  107.060419][ T5048] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  107.071687][ T5050] F2FS-fs (loop2): Found nat_bits in checkpoint
[  107.109810][ T5044] XFS (loop3): Starting recovery (logdev: internal)
[  107.124065][ T5048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  107.198987][ T5044] XFS (loop3): Ending recovery (logdev: internal)
[  107.323709][ T5050] F2FS-fs (loop2): Start checkpoint disabled!
[  107.363615][   T26] audit: type=1800 audit(1760059244.264:4): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.262" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  107.402110][ T5050] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  107.545958][ T4265] XFS (loop3): Unmounting Filesystem
[  107.613532][ T5078] loop1: detected capacity change from 0 to 4096
[  107.732109][ T5078] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  107.737473][ T5084] loop0: detected capacity change from 0 to 736
[  107.778047][ T5078] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  107.865398][ T5078] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  107.910717][ T5084] rock: directory entry would overflow storage
[  107.924140][ T5086] loop4: detected capacity change from 0 to 512
[  107.948704][ T5084] rock: sig=0x3b10, size=4, remaining=3
[  107.955928][ T5078] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  107.956001][ T5078] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  107.958540][ T5078] ntfs: volume version 3.1.
[  108.084290][ T5086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  108.173493][ T5086] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.203558][   T51] kworker/u4:3: attempt to access beyond end of device
[  108.203558][   T51] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  108.220607][ T5078] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  108.283396][ T5078] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  108.356082][ T5078] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  108.433397][ T5078] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  108.628884][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  109.833007][  T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.903559][ T5102] loop0: detected capacity change from 0 to 32768
[  109.958251][ T5128] loop4: detected capacity change from 0 to 1024
[  110.011667][ T5102] XFS (loop0): Mounting V5 Filesystem
[  110.022152][ T5128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  110.042963][  T126] usb 2-1: Using ep0 maxpacket: 32
[  110.067336][  T126] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  110.125101][ T5111] loop2: detected capacity change from 0 to 32768
[  110.126436][  T126] usb 2-1: config 0 has no interface number 0
[  110.151500][  T126] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  110.171004][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.180160][  T126] usb 2-1: Product: syz
[  110.184588][  T126] usb 2-1: Manufacturer: syz
[  110.189229][  T126] usb 2-1: SerialNumber: syz
[  110.196649][  T126] usb 2-1: config 0 descriptor??
[  110.202685][ T5102] XFS (loop0): Ending clean mount
[  110.207839][  T126] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  110.208466][  T126] dvb-usb: bulk message failed: -22 (2/0)
[  110.234183][  T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  110.244717][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  110.299331][  T126] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  110.357055][  T126] usb 2-1: media controller created
[  110.386370][  T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.412321][ T5122] cxusb: i2c rd: len=133 is too big!
[  110.412321][ T5122] 
[  110.452531][  T126] cxusb: set interface failed
[  110.463627][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  110.501511][ T5111] XFS (loop2): Mounting V5 Filesystem
[  110.525097][ T4274] XFS (loop0): Unmounting Filesystem
[  110.653547][ T5111] XFS (loop2): Ending clean mount
[  110.757429][  T126] DVB: Unable to find symbol lgdt330x_attach()
[  110.773635][  T126] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  110.905069][ T4269] XFS (loop2): Unmounting Filesystem
[  111.162916][  T126] rc_core: IR keymap rc-dvico-portable not found
[  111.172721][  T126] Registered IR keymap rc-empty
[  111.206084][  T126] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  111.240250][  T126] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7
[  111.307369][  T126] dvb-usb: schedule remote query interval to 100 msecs.
[  111.335825][ T5125] loop3: detected capacity change from 0 to 40427
[  111.350329][  T126] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  111.380439][ T5166] loop4: detected capacity change from 0 to 512
[  111.396027][ T5125] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  111.412883][ T5125] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  111.443081][  T126] usb 2-1: USB disconnect, device number 3
[  111.455896][ T5166] EXT4-fs (loop4): Test dummy encryption mode enabled
[  111.474047][ T4309] dvb-usb: bulk message failed: -22 (1/0)
[  111.483750][ T5125] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.510790][ T5171] loop1: detected capacity change from 0 to 1024
[  111.544613][ T5166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  111.584957][ T5178] netlink: 64 bytes leftover after parsing attributes in process `syz.0.302'.
[  111.655437][ T5171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  111.695816][ T5171] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.716119][  T126] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  111.795470][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  111.808891][ T5125] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  111.828143][ T5125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  112.178000][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  112.508922][ T5202] loop1: detected capacity change from 0 to 128
[  112.615274][ T5202] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  112.663452][ T5202] hpfs: filesystem error: improperly stopped
[  112.669527][ T5202] hpfs: You really don't want any checks? You are crazy...
[  112.720503][ T5202] hpfs: hpfs_map_sector(): read error
[  112.751661][ T5202] hpfs: code page support is disabled
[  112.771001][ T5202] hpfs: hpfs_map_4sectors(): unaligned read
[  112.844364][ T5202] hpfs: hpfs_map_4sectors(): unaligned read
[  112.850327][ T5202] hpfs: filesystem error: unable to find root dir
[  113.757033][ T5225] loop0: detected capacity change from 0 to 1024
[  113.841724][ T5225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  113.878363][ T5208] loop3: detected capacity change from 0 to 32768
[  113.976085][ T5208] XFS (loop3): Mounting V5 Filesystem
[  114.043938][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  114.051999][ T5208] XFS (loop3): Ending clean mount
[  114.085876][ T5208] XFS (loop3): Quotacheck needed: Please wait.
[  114.178791][ T5242] loop1: detected capacity change from 0 to 8
[  114.197211][   T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  114.204717][ T5208] XFS (loop3): Quotacheck: Done.
[  114.209781][ T5213] loop4: detected capacity change from 0 to 32768
[  114.300876][ T5242] SQUASHFS error: xz decompression failed, data probably corrupt
[  114.372090][ T5242] SQUASHFS error: Failed to read block 0x108: -5
[  114.387947][ T5242] SQUASHFS error: Unable to read metadata cache entry [106]
[  114.430122][ T4265] XFS (loop3): Unmounting Filesystem
[  114.433282][ T5242] SQUASHFS error: Unable to read inode 0x11f
[  114.445691][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.467517][   T22] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  114.497862][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.527424][   T22] usb 3-1: config 0 descriptor??
[  114.891753][ T5251] Illegal XDP return value 3189837557 on prog  (id 23) dev N/A, expect packet loss!
[  114.948285][ T5255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.330'.
[  114.974296][ T5255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.330'.
[  114.991478][   T22] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x5
[  115.010723][   T22] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0
[  115.221076][    T7] usb 3-1: USB disconnect, device number 3
[  115.308858][ T5256] fido_id[5256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  115.522067][ T5264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.333'.
[  115.685408][ T5266] mmap: syz.3.334 (5266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  116.123796][ T5275] loop1: detected capacity change from 0 to 4096
[  116.220249][ T5275] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  116.236414][ T5277] loop4: detected capacity change from 0 to 4096
[  116.244413][  T126] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  116.250480][ T5277] __ntfs_warning: 26 callbacks suppressed
[  116.250498][ T5277] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  116.278542][    C1] vkms_vblank_simulate: vblank timer overrun
[  116.357120][ T5275] ntfs3: loop1: ino=1b, "file0" directory corrupted
[  116.389856][ T5277] ntfs: volume version 3.1.
[  116.416300][ T5277] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported.
[  116.444763][  T126] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  116.472994][  T126] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  116.481961][   T33] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[  116.488928][ T5277] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date.  Mounting read-only.  Run chkdsk.
[  116.505453][  T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  116.514592][ T4270] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  116.521123][ T4270] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  116.540360][  T126] usb 1-1: config 1 has no interface number 0
[  116.574310][  T126] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  116.586275][ T4270] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  116.593521][  T126] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  116.597208][    T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[  116.647456][  T126] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  116.654772][ T4270] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22.
[  116.693140][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.768697][  T126] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  117.187622][ T5289] Bluetooth: MGMT ver 1.22
[  117.259285][ T5273] loop2: detected capacity change from 0 to 40427
[  117.296729][  T126] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  117.326980][ T5273] F2FS-fs (loop2): invalid crc value
[  117.369809][ T5273] F2FS-fs (loop2): Found nat_bits in checkpoint
[  117.379309][ T5292] loop1: detected capacity change from 0 to 736
[  117.546271][  T126] usb 1-1: USB disconnect, device number 2
[  117.582955][ T5273] F2FS-fs (loop2): Start checkpoint disabled!
[  117.583981][  T126] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  117.642022][ T5273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  117.823774][ T5273] F2FS-fs (loop2): Unrecognized mount option "noload" or missing value
[  117.963771][ T5286] loop3: detected capacity change from 0 to 32768
[  117.985425][ T5286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.344 (5286)
[  118.083760][ T5286] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.107416][ T5286] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  118.139534][ T5286] BTRFS info (device loop3): using free space tree
[  118.171923][ T5302] loop4: detected capacity change from 0 to 4096
[  118.236623][ T5310] loop2: detected capacity change from 0 to 128
[  118.590525][ T4271] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  118.598465][ T5286] BTRFS info (device loop3): enabling ssd optimizations
[  118.644024][ T4271] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  119.248332][ T4265] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.304840][ T5346] loop4: detected capacity change from 0 to 8
[  119.447230][ T4374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4374)
[  119.589561][ T5350] loop0: detected capacity change from 0 to 4096
[  119.749242][ T5358] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.724329][ T5390] loop3: detected capacity change from 0 to 1024
[  120.730936][ T5390] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.793885][ T5390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  120.958479][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  120.993470][ T5399] netlink: 'syz.1.385': attribute type 1 has an invalid length.
[  121.502325][ T5420] loop0: detected capacity change from 0 to 128
[  121.581549][ T5420] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.642720][ T5420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.066306][ T5429] loop0: detected capacity change from 0 to 64
[  122.202992][   T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  122.280793][ T5433] loop4: detected capacity change from 0 to 64
[  122.312494][ T5433] hfs: gid requires an argument
[  122.333504][ T5433] hfs: unable to parse mount options
[  122.359237][ T5410] loop1: detected capacity change from 0 to 40427
[  122.393211][  T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  122.404203][   T14] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  122.410861][ T5410] F2FS-fs (loop1): invalid crc value
[  122.432282][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.471892][   T14] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  122.499946][   T14] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  122.517832][   T14] usb 3-1: Manufacturer: syz
[  122.528335][ T5410] F2FS-fs (loop1): Found nat_bits in checkpoint
[  122.536996][   T14] usb 3-1: config 0 descriptor??
[  122.625056][  T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.660247][  T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.691027][  T126] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  122.707272][ T5410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  122.731420][  T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  122.757231][ T5446] netlink: 260 bytes leftover after parsing attributes in process `syz.4.405'.
[  122.777489][  T126] usb 4-1: SerialNumber: syz
[  122.793794][ T5446] netlink: 260 bytes leftover after parsing attributes in process `syz.4.405'.
[  122.812881][   T14] rc_core: IR keymap rc-hauppauge not found
[  122.818881][   T14] Registered IR keymap rc-empty
[  122.828913][ T5446] netlink: 260 bytes leftover after parsing attributes in process `syz.4.405'.
[  122.844206][   T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  122.875267][   T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9
[  123.032517][  T126] usb 4-1: 0:2 : does not exist
[  123.108078][    C0] igorplugusb 3-1:0.0: receive overflow, at least 8 lost
[  123.186884][  T126] usb 4-1: USB disconnect, device number 2
[  123.332613][   T14] usb 3-1: USB disconnect, device number 4
[  123.535560][ T4395] udevd[4395]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.601639][ T5458] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  123.621871][ T5448] loop0: detected capacity change from 0 to 40427
[  123.638647][ T5448] F2FS-fs (loop0): build fault injection attr: rate: 691, type: 0x3ffff
[  123.664715][ T5448] F2FS-fs (loop0): invalid crc value
[  123.688244][ T5448] F2FS-fs (loop0): Found nat_bits in checkpoint
[  123.745720][ T5462] loop4: detected capacity change from 0 to 512
[  123.768210][ T5462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  123.790924][ T5448] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  123.851506][ T5465] loop3: detected capacity change from 0 to 256
[  123.945821][ T5462] EXT4-fs (loop4): 1 orphan inode deleted
[  123.971282][ T5462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  123.972208][    T9] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  124.005293][ T5462] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.069191][    T9] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 1
[  124.095927][ T5448] syz.0.406: attempt to access beyond end of device
[  124.095927][ T5448] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  124.150882][ T5448] syz.0.406: attempt to access beyond end of device
[  124.150882][ T5448] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  124.301965][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  124.355298][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.415'.
[  125.037313][ T5489] loop3: detected capacity change from 0 to 128
[  125.066501][ T5469] loop1: detected capacity change from 0 to 32768
[  125.076593][ T5489] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  125.100526][ T5469] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.413 (5469)
[  125.124480][ T5489] FAT-fs (loop3): bogus number of directory entries (203)
[  125.131661][ T5489] FAT-fs (loop3): Can't find a valid FAT filesystem
[  125.171438][ T5469] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  125.201886][ T5469] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  125.220261][ T5469] BTRFS info (device loop1): using free space tree
[  125.486884][ T5516] loop3: detected capacity change from 0 to 64
[  125.535578][ T5469] BTRFS info (device loop1): enabling ssd optimizations
[  125.930839][ T4270] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  125.953377][   T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  126.146026][   T27] usb 3-1: Using ep0 maxpacket: 16
[  126.163837][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.193115][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.212836][   T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  126.251779][   T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  126.272877][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.308269][ T4374] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (4374)
[  126.310629][   T27] usb 3-1: config 0 descriptor??
[  126.760171][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.782505][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.804020][ T5526] loop4: detected capacity change from 0 to 32768
[  126.829744][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.862516][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.876807][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.885223][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.894662][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.902126][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.910703][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.919595][   T27] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  126.928199][   T27] HID 045e:07da: Invalid code 65791 type 1
[  126.936536][ T5526] XFS (loop4): Mounting V5 Filesystem
[  126.949191][   T27] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input10
[  127.048447][ T5530] loop3: detected capacity change from 0 to 32768
[  127.078860][   T27] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  127.097908][ T5526] XFS (loop4): Ending clean mount
[  127.119949][ T5526] XFS (loop4): Quotacheck needed: Please wait.
[  127.141938][   T27] usb 3-1: USB disconnect, device number 5
[  127.255907][ T5526] XFS (loop4): Quotacheck: Done.
[  127.314148][ T5530] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  127.494430][ T4271] XFS (loop4): Unmounting Filesystem
[  127.560088][ T5550] fido_id[5550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  127.696223][ T5537] loop1: detected capacity change from 0 to 32768
[  127.729015][ T4265] ocfs2: Unmounting device (7,3) on (node local)
[  127.814674][ T5537] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  128.173398][ T4270] ocfs2: Unmounting device (7,1) on (node local)
[  128.443037][    T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  128.643054][    T7] usb 4-1: Using ep0 maxpacket: 16
[  128.650327][    T7] usb 4-1: config 28 has an invalid interface number: 169 but max is 0
[  128.679377][    T7] usb 4-1: config 28 has no interface number 0
[  128.709789][    T7] usb 4-1: config 28 interface 169 has no altsetting 0
[  128.753753][    T7] usb 4-1: string descriptor 0 read error: -71
[  128.783156][    T7] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48
[  128.810022][ T5584] loop4: detected capacity change from 0 to 4096
[  128.826920][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.854451][ T5584] EXT4-fs: Ignoring removed mblk_io_submit option
[  128.893423][    T7] r8152-cfgselector 4-1: rejected 1 configuration due to insufficient available bus power
[  128.917457][ T5584] EXT4-fs (loop4): Test dummy encryption mode enabled
[  128.932064][    T7] r8152-cfgselector 4-1: no configuration chosen from 1 choice
[  128.975524][    T7] r8152-cfgselector 4-1: Unknown version 0x0000
[  129.005245][    T7] r8152-cfgselector 4-1: USB disconnect, device number 3
[  129.050205][ T5584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  129.060485][ T5592] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  129.081199][ T5592] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  129.208316][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  129.742233][ T5618] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.752024][ T5618] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.761467][ T5618] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.770591][ T5618] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.818990][ T5620] loop1: detected capacity change from 0 to 512
[  129.878044][ T5620] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.469: invalid indirect mapped block 2185560079 (level 0)
[  129.911217][ T5620] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.469: invalid indirect mapped block 2683928664 (level 1)
[  130.042437][ T5620] EXT4-fs (loop1): 1 truncate cleaned up
[  130.062940][ T5620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  130.106338][ T5620] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.469: Invalid inode table block 1633771873 in block_group 0
[  130.171657][ T5620] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  130.208607][ T5620] EXT4-fs error (device loop1): add_dirent_to_buf:2216: inode #2: comm syz.1.469: mark_inode_dirty error
[  130.260895][ T5620] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.469: Invalid inode table block 1633771873 in block_group 0
[  130.288629][ T5620] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  130.350744][ T5620] EXT4-fs error (device loop1): ext4_add_nondir:2855: inode #18: comm syz.1.469: mark_inode_dirty error
[  130.395600][ T5620] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.469: Invalid inode table block 1633771873 in block_group 0
[  130.441940][ T5620] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  130.493006][ T5620] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #18: comm syz.1.469: mark_inode_dirty error
[  130.521726][ T5620] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  131.191665][ T5641] loop4: detected capacity change from 0 to 32768
[  131.240848][ T5660] netlink: 52 bytes leftover after parsing attributes in process `syz.2.489'.
[  131.467678][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  132.128484][ T5680] loop1: detected capacity change from 0 to 1024
[  132.239885][ T5680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  132.306449][ T5680] EXT4-fs warning (device loop1): empty_inline_dir:1874: bad inline directory (dir #12) - no `..'
[  132.344124][ T5689] loop3: detected capacity change from 0 to 512
[  132.385916][ T5689] EXT4-fs (loop3): Test dummy encryption mode enabled
[  132.393033][  T126] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  132.422458][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  132.440001][ T5689] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  132.454718][ T5689] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  132.462335][ T5689] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  132.577434][  T126] usb 5-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  132.598978][  T126] usb 5-1: config 0 interface 0 has no altsetting 0
[  132.614927][  T126] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00
[  132.630174][  T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.647571][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.653988][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  132.667930][  T126] usb 5-1: config 0 descriptor??
[  132.693969][ T5682] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  132.724494][ T5689] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring
[  132.747661][   T26] audit: type=1326 audit(1760059269.644:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5698 comm="syz.2.505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71bdd8eec9 code=0x0
[  132.760790][ T5689] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  132.864063][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  133.125777][  T126] wacom 0003:056A:00DA.0004: unbalanced delimiter at end of report description
[  133.126308][  T126] wacom 0003:056A:00DA.0004: parse failed
[  133.126340][  T126] wacom: probe of 0003:056A:00DA.0004 failed with error -22
[  133.345437][  T126] usb 5-1: USB disconnect, device number 2
[  133.420348][ T5715] loop3: detected capacity change from 0 to 256
[  133.459124][ T5715] exfat: Deprecated parameter 'namecase'
[  133.509064][ T5715] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  133.540302][ T5719] cifs: Bad value for 'port'
[  133.721743][  T126] kernel write not supported for file /input/event2 (pid: 126 comm: kworker/0:2)
[  133.957469][ T5729] loop0: detected capacity change from 0 to 64
[  134.376016][   T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.419677][ T5745] loop4: detected capacity change from 0 to 4096
[  134.577123][   T22] usb 4-1: unable to get BOS descriptor or descriptor too short
[  134.594280][   T22] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  134.683680][   T22] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  134.723271][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.731342][   T22] usb 4-1: Product: syz
[  134.750790][   T22] usb 4-1: Manufacturer: syz
[  134.773298][   T22] usb 4-1: SerialNumber: syz
[  135.034359][ T5758] Bluetooth: MGMT ver 1.22
[  135.336716][ T5746] loop2: detected capacity change from 0 to 40427
[  135.369849][ T5746] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  135.400662][ T5746] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  135.459764][ T5746] F2FS-fs (loop2): Found nat_bits in checkpoint
[  135.590845][ T5746] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  135.638793][ T5746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  135.691234][ T5750] loop4: detected capacity change from 0 to 32768
[  135.698390][   T22] usb 4-1: reset high-speed USB device number 4 using dummy_hcd
[  135.862083][ T4269] syz-executor: attempt to access beyond end of device
[  135.862083][ T4269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  135.917338][   T22] usb 4-1: unable to get BOS descriptor or descriptor too short
[  135.960677][  T107] ERROR: (device loop4): diUpdatePMap: the inode is not allocated in the working map
[  135.960677][  T107] 
[  136.014664][  T107] ERROR: (device loop4): remounting filesystem as read-only
[  136.092257][ T5762] loop1: detected capacity change from 0 to 32768
[  136.142549][ T5762] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.536 (5762)
[  136.171831][ T5762] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  136.190017][ T5762] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  136.191897][   T22] usb 4-1: USB disconnect, device number 4
[  136.200852][ T5762] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  136.228479][ T5762] BTRFS info (device loop1): use lzo compression, level 0
[  136.248195][ T5762] BTRFS info (device loop1): using free space tree
[  136.531459][ T5762] BTRFS info (device loop1): enabling ssd optimizations
[  136.620080][ T5787] loop2: detected capacity change from 0 to 1024
[  136.647080][ T5770] loop0: detected capacity change from 0 to 40427
[  136.684927][ T5787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.703926][ T5770] F2FS-fs (loop0): invalid crc value
[  136.764275][ T5770] F2FS-fs (loop0): Found nat_bits in checkpoint
[  136.800266][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  136.946828][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  137.030983][ T4270] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  137.068166][ T5770] F2FS-fs (loop0): Start checkpoint disabled!
[  137.101715][ T5770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  137.126010][ T4268] Bluetooth: hci0: command 0x0c20 tx timeout
[  137.493114][   T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  137.545607][   T51] kworker/u4:3: attempt to access beyond end of device
[  137.545607][   T51] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  137.701177][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  137.713242][   T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  137.720859][ T4959] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  137.721349][   T14] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  137.745117][   T14] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.794065][   T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  137.813006][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.831296][   T14] usb 4-1: Product: syz
[  137.841414][   T14] usb 4-1: Manufacturer: syz
[  137.851529][   T14] usb 4-1: SerialNumber: syz
[  137.865236][   T14] hub 4-1:1.0: bad descriptor, ignoring hub
[  137.876844][   T14] hub: probe of 4-1:1.0 failed with error -5
[  137.923609][   T22] usb 5-1: Using ep0 maxpacket: 16
[  137.935370][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.949265][ T4959] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[  137.965514][ T4959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.975901][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.014761][ T4959] usb 3-1: config 0 descriptor??
[  138.029626][   T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.048331][   T22] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  138.058414][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.077531][   T22] usb 5-1: config 0 descriptor??
[  138.107302][   T14] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  138.474728][    T7] usb 4-1: USB disconnect, device number 5
[  138.487549][ T4959] cypress 0003:04B4:ED81.0005: hidraw0: USB HID v0.07 Device [HID 04b4:ed81] on usb-dummy_hcd.2-1/input0
[  138.493807][    T7] usblp0: removed
[  138.520426][   T22] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[  138.521704][ T5823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'.
[  138.534348][   T22] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[  138.545884][   T22] microsoft 0003:045E:07DA.0006: usage index exceeded
[  138.552742][   T22] microsoft 0003:045E:07DA.0006: item 0 0 2 2 parsing failed
[  138.560943][   T22] microsoft 0003:045E:07DA.0006: parse failed
[  138.568275][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'.
[  138.584703][   T22] microsoft: probe of 0003:045E:07DA.0006 failed with error -22
[  138.644606][ T5816] loop1: detected capacity change from 0 to 32768
[  138.659119][ T5816] XFS: attr2 mount option is deprecated.
[  138.689741][   T22] usb 3-1: USB disconnect, device number 6
[  138.749873][    T7] usb 5-1: USB disconnect, device number 3
[  138.809196][ T5816] XFS (loop1): Mounting V5 Filesystem
[  138.821048][ T5824] fido_id[5824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  138.877435][ T5816] XFS (loop1): Ending clean mount
[  138.890492][ T5816] XFS (loop1): Quotacheck needed: Please wait.
[  138.961791][ T5816] XFS (loop1): Quotacheck: Done.
[  139.183698][ T4270] XFS (loop1): Unmounting Filesystem
[  139.411186][ T5848] loop2: detected capacity change from 0 to 256
[  139.745021][ T5856] loop4: detected capacity change from 0 to 128
[  139.849280][ T5856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  139.870489][ T5856] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.094360][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  140.654021][ T5888] loop1: detected capacity change from 0 to 1024
[  140.796828][ T5892] loop2: detected capacity change from 0 to 128
[  140.898666][   T33] hfsplus: b-tree write err: -5, ino 4
[  141.176524][ T5868] loop3: detected capacity change from 0 to 32768
[  141.522905][ T4958] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  141.713455][ T4958] usb 5-1: Using ep0 maxpacket: 32
[  141.735682][ T4958] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.802173][ T4958] usb 5-1: config 0 interface 0 has no altsetting 0
[  141.834023][ T4958] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  141.875407][ T4958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.926363][ T4958] usb 5-1: config 0 descriptor??
[  142.386772][ T4958] magicmouse 0003:05AC:0265.0007: unknown main item tag 0x0
[  142.404486][ T4958] magicmouse 0003:05AC:0265.0007: unknown main item tag 0x0
[  142.422152][ T4958] magicmouse 0003:05AC:0265.0007: unknown main item tag 0x0
[  142.426694][ T5904] loop1: detected capacity change from 0 to 131072
[  142.447363][ T5904] F2FS-fs (loop1): Invalid log sectors per block(570425347) log sectorsize(9)
[  142.456956][ T5904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  142.468207][ T5904] F2FS-fs (loop1): invalid crc value
[  142.473030][ T4958] magicmouse 0003:05AC:0265.0007: unknown main item tag 0x0
[  142.476100][ T5909] loop3: detected capacity change from 0 to 512
[  142.501628][ T5909] EXT4-fs: Ignoring removed mblk_io_submit option
[  142.527219][ T4958] magicmouse 0003:05AC:0265.0007: unknown main item tag 0x0
[  142.546729][ T5904] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  142.581154][ T4958] magicmouse 0003:05AC:0265.0007: hidraw0: USB HID v4.06 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0
[  142.606957][ T5904] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  142.617653][ T5904] F2FS-fs (loop1): Bad quota inode 2:50331648
[  142.623871][ T5904] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  142.634042][ T4958] magicmouse 0003:05AC:0265.0007: magicmouse input not registered
[  142.634206][ T5904] F2FS-fs (loop1): Cannot turn on quotas: error -22
[  142.651570][ T5909] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  142.680456][ T5904] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  142.687913][ T5904] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[  142.694896][ T4958] magicmouse: probe of 0003:05AC:0265.0007 failed with error -12
[  142.707240][ T5909] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.588: attempt to clear invalid blocks 2 len 1
[  142.757640][ T5909] EXT4-fs (loop3): Remounting filesystem read-only
[  142.771254][ T4958] usb 5-1: USB disconnect, device number 4
[  142.787813][ T5909] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  142.872517][ T5909] EXT4-fs (loop3): Remounting filesystem read-only
[  142.922918][ T5909] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.588: invalid indirect mapped block 1819239214 (level 0)
[  142.970482][ T5909] EXT4-fs (loop3): Remounting filesystem read-only
[  142.995697][ T5909] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.588: invalid indirect mapped block 1819239214 (level 1)
[  143.048419][ T5909] EXT4-fs (loop3): Remounting filesystem read-only
[  143.092373][ T5907] loop0: detected capacity change from 0 to 32768
[  143.101294][ T5909] EXT4-fs (loop3): 1 truncate cleaned up
[  143.123001][ T5909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  143.236826][ T5920] fido_id[5920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  143.278813][ T5907] XFS (loop0): Mounting V5 Filesystem
[  143.382213][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  143.538722][ T5907] XFS (loop0): Ending clean mount
[  143.763766][ T4274] XFS (loop0): Unmounting Filesystem
[  144.066769][ T5940] loop4: detected capacity change from 0 to 8192
[  144.119356][ T5940] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  144.158384][ T5940] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  144.203534][ T5940] REISERFS (device loop4): using ordered data mode
[  144.210107][ T5940] reiserfs: using flush barriers
[  144.225602][ T5940] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  144.296547][ T5940] REISERFS (device loop4): checking transaction log (loop4)
[  144.334023][ T5940] REISERFS (device loop4): Using r5 hash to sort names
[  144.379185][ T5940] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  144.871284][ T5959] loop1: detected capacity change from 0 to 256
[  144.912298][ T5959] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.957725][ T5922] loop2: detected capacity change from 0 to 40427
[  144.970467][ T5959] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  145.035651][ T5959] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  145.059004][ T5922] F2FS-fs (loop2): invalid crc value
[  145.110869][ T5922] F2FS-fs (loop2): Found nat_bits in checkpoint
[  145.168360][ T5968] input: syz0 as /devices/virtual/input/input11
[  145.288719][ T5970] loop4: detected capacity change from 0 to 2048
[  145.350622][ T5922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  145.351402][ T5970] EXT4-fs: Ignoring removed mblk_io_submit option
[  145.535376][ T5970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  145.568530][ T5922] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  145.729065][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  145.778323][ T5985] loop1: detected capacity change from 0 to 16
[  145.808707][ T5985] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  146.092470][ T5991] netlink: 216 bytes leftover after parsing attributes in process `syz.3.620'.
[  146.116987][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'.
[  146.127529][ T4958] kernel write not supported for file /uinput (pid: 4958 comm: kworker/1:15)
[  146.131835][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'.
[  146.578636][ T5999] loop3: detected capacity change from 0 to 2048
[  146.633198][ T5999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.001962][ T6013] loop4: detected capacity change from 0 to 1024
[  147.040578][ T6013] EXT4-fs: Ignoring removed bh option
[  147.079252][ T6013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  147.147896][ T6013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  147.191282][ T6016] loop2: detected capacity change from 0 to 4096
[  147.233450][ T6016] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  147.293580][ T6013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  147.338508][ T6013] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  147.363924][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  147.378591][ T6025] loop0: detected capacity change from 0 to 64
[  147.491232][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  147.690817][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'.
[  147.718618][ T6034] loop4: detected capacity change from 0 to 1024
[  147.759361][ T6032] device gretap0 entered promiscuous mode
[  147.955239][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  148.061846][ T6040] loop3: detected capacity change from 0 to 512
[  148.159998][ T6040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  148.200940][ T6040] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.304691][ T6029] loop2: detected capacity change from 0 to 32768
[  148.406311][ T6029] XFS (loop2): Mounting V5 Filesystem
[  148.447543][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  148.552522][ T6029] XFS (loop2): Ending clean mount
[  148.649574][ T4269] XFS (loop2): Unmounting Filesystem
[  148.710944][ T6038] loop4: detected capacity change from 0 to 32768
[  148.919035][ T6038] read_mapping_page failed!
[  148.926323][ T6038] ERROR: (device loop4): txCommit: 
[  148.926323][ T6038] 
[  148.970270][ T6061] jfs_unlink: dtDelete returned -116
[  149.012371][ T6061] jfs_unlink: dtDelete returned -116
[  149.309097][ T6071] device wlan1 entered promiscuous mode
[  149.337108][ T6071] device macvtap1 entered promiscuous mode
[  149.382798][ T6071] device wlan1 left promiscuous mode
[  149.565454][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'.
[  150.005725][  T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  150.082142][ T6098] loop2: detected capacity change from 0 to 128
[  150.222886][  T126] usb 1-1: Using ep0 maxpacket: 32
[  150.241113][  T126] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  150.280284][  T126] usb 1-1: config 0 has no interface number 0
[  150.297018][  T126] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  150.323695][ T6103] loop3: detected capacity change from 0 to 64
[  150.358572][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.415368][  T126] usb 1-1: Product: syz
[  150.419643][  T126] usb 1-1: Manufacturer: syz
[  150.478083][  T126] usb 1-1: SerialNumber: syz
[  150.503855][  T126] usb 1-1: config 0 descriptor??
[  150.534678][  T126] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  150.662724][ T6110] loop1: detected capacity change from 0 to 1024
[  150.735043][  T126] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  150.823648][  T126] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  150.987291][   T11] hfsplus: b-tree write err: -5, ino 4
[  151.204470][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  151.214764][  T126] usb 1-1: USB disconnect, device number 3
[  151.253181][  T126] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  151.310848][  T126] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  151.389059][  T126] quatech2 1-1:0.51: device disconnected
[  151.509636][ T6125] loop2: detected capacity change from 0 to 4096
[  151.541642][ T6129] loop3: detected capacity change from 0 to 2048
[  151.560136][ T6125] ntfs: (device loop2): load_attribute_list(): Cannot read attribute list since runlist is missing.
[  151.587749][ T6125] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to load attribute list attribute.
[  151.640710][ T6125] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  151.685700][ T6135] IPVS: ip_vs_edit_dest(): server weight less than zero
[  151.703256][ T6125] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  151.703408][ T6107] loop4: detected capacity change from 0 to 32768
[  151.728770][ T6129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  151.751011][ T6125] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  151.783054][ T6129] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.807610][ T6107] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.664 (6107)
[  151.829678][ T6125] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  151.851069][ T6125] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup $DATA attribute.
[  151.911446][ T6125] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x3 as bad.  Run chkdsk.
[  151.954162][ T6107] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.985410][ T6125] ntfs: (device loop2): load_system_files(): Failed to load $Volume.
[  152.022805][ T6125] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files.
[  152.024146][ T6107] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  152.095178][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  152.143022][ T6107] BTRFS info (device loop4): enabling disk space caching
[  152.150137][ T6107] BTRFS info (device loop4): use no compression
[  152.204586][ T6107] BTRFS info (device loop4): force clearing of disk cache
[  152.211773][ T6107] BTRFS info (device loop4): turning on sync discard
[  152.300394][ T6107] BTRFS info (device loop4): disabling disk space caching
[  152.812940][ T6107] BTRFS info (device loop4): enabling ssd optimizations
[  152.873187][ T6107] BTRFS info (device loop4): rebuilding free space tree
[  153.043364][ T6107] BTRFS info (device loop4): disabling free space tree
[  153.075707][ T6186] loop0: detected capacity change from 0 to 2048
[  153.082336][ T6107] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  153.120672][ T6107] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  153.163020][ T6189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.206033][ T6191] syz.3.686 (6191) used obsolete PPPIOCDETACH ioctl
[  153.434482][ T6163] loop2: detected capacity change from 0 to 32768
[  153.520006][ T6163] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  153.533415][ T4271] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  153.655277][ T6163] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  154.095889][ T4269] ocfs2: Unmounting device (7,2) on (node local)
[  154.583436][ T6223] loop2: detected capacity change from 0 to 512
[  154.606117][ T6223] EXT4-fs: Ignoring removed bh option
[  154.619620][ T6223] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.652592][ T6223] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  154.653657][ T6199] loop1: detected capacity change from 0 to 40427
[  154.720725][ T6223] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  154.755886][ T6199] F2FS-fs (loop1): invalid crc value
[  154.791941][ T6223] EXT4-fs (loop2): orphan cleanup on readonly fs
[  154.817190][ T6199] F2FS-fs (loop1): Found nat_bits in checkpoint
[  154.882264][ T6223] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.695: Failed to acquire dquot type 1
[  154.917000][ T6199] F2FS-fs (loop1): Start checkpoint disabled!
[  154.950656][ T6199] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  154.962020][ T6223] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.695: Invalid block bitmap block 0 in block_group 0
[  155.020169][ T6223] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.695: Failed to acquire dquot type 1
[  155.065832][ T6223] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.695: Failed to acquire dquot type 1
[  155.098874][ T6223] EXT4-fs (loop2): 1 orphan inode deleted
[  155.118588][ T6199] syz.1.687: attempt to access beyond end of device
[  155.118588][ T6199] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.124908][ T6223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  155.437706][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  155.863097][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  156.062934][    T7] usb 4-1: Using ep0 maxpacket: 8
[  156.077249][    T7] usb 4-1: config 0 has an invalid interface number: 33 but max is 1
[  156.110254][    T7] usb 4-1: config 0 has no interface number 1
[  156.137747][    T7] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  156.175717][    T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[  156.207852][    T7] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  156.231845][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.251337][ T6256] loop0: detected capacity change from 0 to 2048
[  156.257836][    T7] usb 4-1: Product: syz
[  156.281663][    T7] usb 4-1: Manufacturer: syz
[  156.299481][    T7] usb 4-1: SerialNumber: syz
[  156.318763][    T7] usb 4-1: config 0 descriptor??
[  156.335738][    T7] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  156.346117][ T6256] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  156.360862][ T6256] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.528062][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  156.541194][ T2310] pvrusb2: Invalid read control endpoint
[  156.542049][    T7] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  156.613335][ T2310] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  156.642080][    T7] usb 4-1: USB disconnect, device number 6
[  156.694064][ T2310] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  157.102928][ T4961] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  157.242540][ T6276] loop3: detected capacity change from 0 to 512
[  157.324882][ T4961] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  157.343028][ T4961] usb 3-1: config 0 has no interface number 0
[  157.351996][ T6276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  157.359445][ T4961] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.382355][ T4961] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.394321][ T6269] loop1: detected capacity change from 0 to 40427
[  157.401975][ T4961] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  157.412406][ T4961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.424817][ T4961] usb 3-1: config 0 descriptor??
[  157.432543][ T6276] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  157.460150][ T6269] F2FS-fs (loop1): invalid crc value
[  157.525162][ T6269] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.631972][ T6264] loop0: detected capacity change from 0 to 32768
[  157.669957][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  157.671724][ T6269] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  157.725492][ T6264] XFS: attr2 mount option is deprecated.
[  157.842476][ T4961] prodikeys 0003:041E:2801.0008: item fetching failed at offset 5/7
[  157.859930][ T4961] prodikeys 0003:041E:2801.0008: hid parse failed
[  157.877272][ T4961] prodikeys: probe of 0003:041E:2801.0008 failed with error -22
[  157.908476][ T6264] XFS (loop0): Mounting V5 Filesystem
[  158.052203][ T4961] usb 3-1: USB disconnect, device number 7
[  158.116368][ T6264] XFS (loop0): Ending clean mount
[  158.154040][ T6264] XFS (loop0): Quotacheck needed: Please wait.
[  158.216704][ T6264] XFS (loop0): Quotacheck: Done.
[  158.297315][ T4961] kernel write not supported for file /dsp (pid: 4961 comm: kworker/1:18)
[  158.406053][ T4274] XFS (loop0): Unmounting Filesystem
[  158.758991][ T6314] process 'syz.4.729' launched '/dev/fd/3' with NULL argv: empty string added
[  158.993954][ T4948] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  159.039342][ T6324] loop0: detected capacity change from 0 to 512
[  159.062374][ T6324] EXT4-fs: Ignoring removed mblk_io_submit option
[  159.100286][ T6324] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  159.141974][ T6324] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.733: attempt to clear invalid blocks 2 len 1
[  159.187486][ T6324] EXT4-fs (loop0): Remounting filesystem read-only
[  159.202934][ T4948] usb 3-1: Using ep0 maxpacket: 8
[  159.209898][ T4948] usb 3-1: config 0 has an invalid interface number: 33 but max is 1
[  159.221691][ T6324] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  159.228366][ T4948] usb 3-1: config 0 has no interface number 1
[  159.263452][ T4948] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  159.282971][ T4948] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[  159.287088][ T6324] EXT4-fs (loop0): Remounting filesystem read-only
[  159.305832][ T4948] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  159.319966][ T6324] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.733: invalid indirect mapped block 1819239214 (level 0)
[  159.325416][ T4948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.344512][ T6318] loop1: detected capacity change from 0 to 32768
[  159.362342][ T4948] usb 3-1: Product: syz
[  159.370189][ T4948] usb 3-1: Manufacturer: syz
[  159.372663][ T6324] EXT4-fs (loop0): Remounting filesystem read-only
[  159.375224][ T4948] usb 3-1: SerialNumber: syz
[  159.391055][ T4948] usb 3-1: config 0 descriptor??
[  159.400875][ T6318] XFS (loop1): Mounting V5 Filesystem
[  159.406991][ T4948] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  159.415741][ T6324] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.733: invalid indirect mapped block 1819239214 (level 1)
[  159.456307][ T6324] EXT4-fs (loop0): Remounting filesystem read-only
[  159.468557][ T6324] EXT4-fs (loop0): 1 truncate cleaned up
[  159.475672][ T6324] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  159.552423][ T6318] XFS (loop1): Ending clean mount
[  159.605923][ T4948] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  159.657248][ T4948] usb 3-1: USB disconnect, device number 8
[  159.688182][ T4948] pvrusb2: Device being rendered inoperable
[  159.689039][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  159.733560][ T4948] pvrusb2: Device being rendered inoperable
[  159.798917][ T4270] XFS (loop1): Unmounting Filesystem
[  160.036587][ T6322] loop4: detected capacity change from 0 to 40427
[  160.089199][ T6322] F2FS-fs (loop4): invalid crc value
[  160.115113][ T6322] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.256535][ T6338] loop0: detected capacity change from 0 to 8192
[  160.258301][ T6322] F2FS-fs (loop4): Start checkpoint disabled!
[  160.330898][ T6322] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  160.350148][ T6338] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.559572][ T6322] F2FS-fs (loop4): Unrecognized mount option "noload" or missing value
[  160.959127][ T6357] loop0: detected capacity change from 0 to 736
[  161.453580][ T6369] netlink: 44 bytes leftover after parsing attributes in process `syz.0.750'.
[  161.510136][ T6369] netlink: 43 bytes leftover after parsing attributes in process `syz.0.750'.
[  161.552947][ T6369] netlink: 'syz.0.750': attribute type 5 has an invalid length.
[  161.581633][ T6369] netlink: 43 bytes leftover after parsing attributes in process `syz.0.750'.
[  161.931124][ T6379] netlink: 'syz.4.757': attribute type 6 has an invalid length.
[  161.956777][ T6379] netlink: 14573 bytes leftover after parsing attributes in process `syz.4.757'.
[  161.999963][ T6375] loop3: detected capacity change from 0 to 32768
[  162.017359][ T6375] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  162.025718][ T6375] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  162.047333][ T6375] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error
[  162.047333][ T6375]   inode = 1 71
[  162.047333][ T6375]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  162.066207][ T6375] gfs2: fsid=syz:syz.s: G:  s:SH n:2/47 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  162.075623][ T6375] gfs2: fsid=syz:syz.s:  H: s:SH f:eEcH e:0 p:6375 [syz.3.753] init_journal+0x1816/0x2300
[  162.085691][ T6375] gfs2: fsid=syz:syz.s:  I: n:1/71 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  162.094233][ T6375] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  162.101461][ T6375] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  162.110348][ T6375] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  162.118798][ T6375] gfs2: fsid=syz:syz.s: File system withdrawn
[  162.124993][ T6375] CPU: 1 PID: 6375 Comm: syz.3.753 Not tainted syzkaller #0
[  162.132309][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  162.142391][ T6375] Call Trace:
[  162.145698][ T6375]  <TASK>
[  162.148656][ T6375]  dump_stack_lvl+0x168/0x22e
[  162.153377][ T6375]  ? kobject_uevent_env+0x35f/0x8a0
[  162.158620][ T6375]  ? show_regs_print_info+0x12/0x12
[  162.163861][ T6375]  ? load_image+0x3b0/0x3b0
[  162.168415][ T6375]  ? kobject_uevent_env+0x35f/0x8a0
[  162.173674][ T6375]  gfs2_withdraw+0x143f/0x1780
[  162.178521][ T6375]  ? gfs2_lm+0x220/0x220
[  162.182799][ T6375]  ? make_kgid+0x1aa/0x640
[  162.187236][ T6375]  ? from_kuid_munged+0x690/0x690
[  162.192280][ T6375]  ? gfs2_consist_inode_i+0xf1/0x110
[  162.197593][ T6375]  gfs2_inode_refresh+0xb5e/0xfc0
[  162.202638][ T6375]  ? gfs2_inode_metasync+0xf0/0xf0
[  162.207767][ T6375]  ? gfs2_glock_nq+0xcf0/0x14e0
[  162.212658][ T6375]  gfs2_instantiate+0x15e/0x210
[  162.217524][ T6375]  gfs2_glock_wait+0x1d0/0x2a0
[  162.222312][ T6375]  check_journal_clean+0x119/0x300
[  162.227446][ T6375]  ? gfs2_trans_remove_revoke+0x370/0x370
[  162.233185][ T6375]  ? init_journal+0x1816/0x2300
[  162.238058][ T6375]  ? __rwlock_init+0x140/0x140
[  162.242842][ T6375]  ? do_raw_spin_unlock+0x11d/0x230
[  162.248057][ T6375]  ? _raw_spin_unlock+0x24/0x40
[  162.252925][ T6375]  ? gfs2_jdesc_find+0xa7/0xc0
[  162.257714][ T6375]  init_journal+0x1816/0x2300
[  162.262418][ T6375]  ? init_inodes+0xdb/0x320
[  162.266946][ T6375]  ? _compound_head+0x120/0x120
[  162.271814][ T6375]  ? vsnprintf+0x1905/0x1a00
[  162.276427][ T6375]  ? snprintf+0xd7/0x120
[  162.280689][ T6375]  ? init_inodes+0xdb/0x320
[  162.285216][ T6375]  ? vscnprintf+0x80/0x80
[  162.289572][ T6375]  ? gfs2_glock_nq_num+0x17f/0x1c0
[  162.294712][ T6375]  init_inodes+0xdb/0x320
[  162.299088][ T6375]  gfs2_fill_super+0x1718/0x1f80
[  162.304052][ T6375]  ? gfs2_reconfigure+0xcd0/0xcd0
[  162.309089][ T6375]  ? init_locking+0xb8/0x200
[  162.313698][ T6375]  ? sb_set_blocksize+0xa5/0xe0
[  162.318580][ T6375]  get_tree_bdev+0x3f1/0x610
[  162.323184][ T6375]  ? gfs2_reconfigure+0xcd0/0xcd0
[  162.328229][ T6375]  gfs2_get_tree+0x4d/0x1e0
[  162.332768][ T6375]  vfs_get_tree+0x88/0x270
[  162.337203][ T6375]  do_new_mount+0x24a/0xa40
[  162.341728][ T6375]  __se_sys_mount+0x2d6/0x3c0
[  162.346423][ T6375]  ? __x64_sys_mount+0xc0/0xc0
[  162.351209][ T6375]  ? lockdep_hardirqs_on+0x94/0x140
[  162.356430][ T6375]  ? __x64_sys_mount+0x1c/0xc0
[  162.361206][ T6375]  do_syscall_64+0x4c/0xa0
[  162.365636][ T6375]  ? clear_bhb_loop+0x60/0xb0
[  162.370356][ T6375]  ? clear_bhb_loop+0x60/0xb0
[  162.375094][ T6375]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.381010][ T6375] RIP: 0033:0x7f3efcb9066a
[  162.385456][ T6375] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.405101][ T6375] RSP: 002b:00007f3efd9f7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  162.413556][ T6375] RAX: ffffffffffffffda RBX: 00007f3efd9f7ef0 RCX: 00007f3efcb9066a
[  162.421559][ T6375] RDX: 0000200000000000 RSI: 0000200000037f80 RDI: 00007f3efd9f7eb0
[  162.429561][ T6375] RBP: 0000200000000000 R08: 00007f3efd9f7ef0 R09: 0000000000000010
[  162.437551][ T6375] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000037f80
[  162.445536][ T6375] R13: 00007f3efd9f7eb0 R14: 0000000000037f6a R15: 0000200000000040
[  162.453536][ T6375]  </TASK>
[  162.457692][ T6375] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount.
[  162.505523][ T6385] sd 0:0:1:0: device reset
[  162.520240][ T6386] loop2: detected capacity change from 0 to 1024
[  162.644959][ T6389] netlink: 72 bytes leftover after parsing attributes in process `syz.4.759'.
[  162.710912][ T6389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.759'.
[  162.780799][ T6389] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  162.968710][ T6395] loop2: detected capacity change from 0 to 64
[  163.076363][ T6395] hfs: request for non-existent node 196608 in B*Tree
[  163.087062][ T6395] hfs: request for non-existent node 196608 in B*Tree
[  163.442695][ T6392] loop0: detected capacity change from 0 to 32768
[  163.456769][ T6392] XFS: noikeep mount option is deprecated.
[  163.577430][ T6392] XFS (loop0): Mounting V5 Filesystem
[  163.728204][ T6392] XFS (loop0): Ending clean mount
[  163.750892][ T6392] XFS (loop0): Quotacheck needed: Please wait.
[  163.785125][ T6423] loop1: detected capacity change from 0 to 512
[  163.905229][ T6392] XFS (loop0): Quotacheck: Done.
[  163.950108][ T6423] EXT4-fs (loop1): 1 orphan inode deleted
[  163.963451][ T6423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  163.981053][ T6423] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.988038][ T4357] __quota_error: 6 callbacks suppressed
[  163.988056][ T4357] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  164.050634][ T6429] loop2: detected capacity change from 0 to 1024
[  164.078534][ T6429] hfsplus: bad catalog entry type
[  164.102724][ T4357] EXT4-fs error (device loop1): ext4_release_dquot:6852: comm kworker/u4:7: Failed to release dquot type 1
[  164.212743][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  164.223734][ T4274] XFS (loop0): Unmounting Filesystem
[  164.255851][    T9] hfsplus: b-tree write err: -5, ino 4
[  164.895731][ T6450] loop4: detected capacity change from 0 to 64
[  164.953576][ T6450] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  164.993080][ T6450] hfs: filesystem is marked locked, mounting read-only.
[  165.029745][ T6454] device wlan1 entered promiscuous mode
[  165.055294][ T6454] device macvtap1 entered promiscuous mode
[  165.072386][ T6454] device wlan1 left promiscuous mode
[  165.206515][ T6456] loop2: detected capacity change from 0 to 512
[  165.299090][ T6456] EXT4-fs (loop2): 1 orphan inode deleted
[  165.313745][    T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  165.352867][ T6456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  165.360616][    T9] EXT4-fs error (device loop2): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 1
[  165.392572][ T6456] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.460161][ T6448] loop0: detected capacity change from 0 to 32768
[  165.561786][ T6448] XFS (loop0): Mounting V5 Filesystem
[  165.655697][ T6448] XFS (loop0): Ending clean mount
[  165.678473][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  165.739037][ T4274] XFS (loop0): Unmounting Filesystem
[  165.823172][   T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  166.039925][   T14] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  166.060310][   T14] usb 5-1: config 0 interface 0 has no altsetting 0
[  166.097539][   T14] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  166.127227][   T14] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  166.138231][   T14] usb 5-1: Product: syz
[  166.142451][   T14] usb 5-1: Manufacturer: syz
[  166.147881][   T14] usb 5-1: SerialNumber: syz
[  166.170360][   T14] usb 5-1: config 0 descriptor??
[  166.195873][   T14] usb 5-1: selecting invalid altsetting 0
[  166.418624][   T14] usb 5-1: USB disconnect, device number 5
[  166.448063][ T6482] loop1: detected capacity change from 0 to 40427
[  166.487215][ T6482] F2FS-fs (loop1): invalid crc value
[  166.541693][ T6482] F2FS-fs (loop1): Found nat_bits in checkpoint
[  166.555038][ T6487] sp0: Synchronizing with TNC
[  166.570734][ T6485] [U] è
[  166.621070][ T6482] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  166.662063][ T6482] F2FS-fs (loop1): Can't flush 3 in 0 for segs_per_sec 1 != 1
[  166.799783][ T4270] syz-executor: attempt to access beyond end of device
[  166.799783][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.117024][ T6498] loop0: detected capacity change from 0 to 1024
[  167.413201][ T4357] hfsplus: b-tree write err: -5, ino 4
[  167.856174][ T6496] loop2: detected capacity change from 0 to 32768
[  167.885328][ T6496] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.797 (6496)
[  167.953186][ T6496] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.970324][ T6496] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  167.979639][ T6496] BTRFS info (device loop2): setting nodatasum
[  167.996736][ T6496] BTRFS info (device loop2): force zlib compression, level 3
[  168.008580][ T6496] BTRFS info (device loop2): enabling ssd optimizations
[  168.019495][ T6496] BTRFS info (device loop2): allowing degraded mounts
[  168.029049][ T6496] BTRFS info (device loop2): using free space tree
[  168.163073][  T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  168.193415][ T4948] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  168.318877][ T4269] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.354610][  T126] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  168.373016][  T126] usb 1-1: config 0 has no interface number 0
[  168.381547][  T126] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.393543][ T4948] usb 2-1: Using ep0 maxpacket: 16
[  168.400455][  T126] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.410711][  T126] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  168.435419][ T4948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.457159][ T4948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.478701][ T4948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  168.575017][ T4948] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  168.647800][ T4948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.714238][ T4948] usb 2-1: config 0 descriptor??
[  169.206549][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.233452][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.291626][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.353444][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.384052][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.388848][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.476970][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.515163][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.557813][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.568543][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.621090][ T4948] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  169.653598][ T4948] HID 045e:07da: Invalid code 65791 type 1
[  169.681966][ T4948] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input12
[  169.732279][ T4948] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  169.799473][ T4948] usb 2-1: USB disconnect, device number 4
[  169.891865][  T126] usb 1-1: config 0 descriptor??
[  169.910006][ T4374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4374)
[  170.040514][ T6562] loop3: detected capacity change from 0 to 512
[  170.081322][ T6559] fido_id[6559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  170.181039][ T6562] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  170.199515][ T6562] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.238817][ T6562] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 49 (only 1 groups)
[  170.304223][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  170.335643][  T126] prodikeys 0003:041E:2801.000A: item fetching failed at offset 5/7
[  170.373370][  T126] prodikeys 0003:041E:2801.000A: hid parse failed
[  170.379901][  T126] prodikeys: probe of 0003:041E:2801.000A failed with error -22
[  170.545344][  T126] usb 1-1: USB disconnect, device number 4
[  171.091631][ T6586] loop2: detected capacity change from 0 to 4096
[  171.171579][ T6586] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  171.234089][ T6586] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  171.314041][ T6586] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  171.394396][ T6586] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  171.474868][ T6586] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr.
[  171.502197][ T6586] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  171.577568][ T6586] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  171.613582][ T6586] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  171.687976][ T6586] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  171.737385][ T6586] ntfs: volume version 3.1.
[  171.760625][ T6586] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  171.998637][ T6617] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  172.031234][ T6611] loop3: detected capacity change from 0 to 4096
[  172.039861][ T4316] kernel write not supported for file task/349/attr/keycreate (pid: 4316 comm: kworker/1:4)
[  172.104100][ T6611] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  172.290323][ T4948] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  172.497854][ T4948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.529811][ T6627] loop0: detected capacity change from 0 to 256
[  172.541938][ T4948] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  172.571868][ T6627] FAT-fs (loop0): Directory bread(block 1285) failed
[  172.594577][ T4948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.612515][ T4948] usb 2-1: config 0 descriptor??
[  172.641529][ T6627] FAT-fs (loop0): Directory bread(block 1285) failed
[  173.017185][ T6633] loop4: detected capacity change from 0 to 4096
[  173.058890][ T4948] acrux 0003:1A34:0802.000B: unknown global tag 0xc
[  173.067158][ T6633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  173.099410][ T4948] acrux 0003:1A34:0802.000B: item 0 1 1 12 parsing failed
[  173.113961][ T6633] EXT4-fs (loop4): Test dummy encryption mode enabled
[  173.143356][ T4948] acrux 0003:1A34:0802.000B: parse failed
[  173.149168][ T4948] acrux: probe of 0003:1A34:0802.000B failed with error -22
[  173.179155][ T6633] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  173.280019][ T4948] usb 2-1: USB disconnect, device number 5
[  173.336698][ T6647] loop3: detected capacity change from 0 to 1024
[  173.359435][ T6647] EXT4-fs: Ignoring removed mblk_io_submit option
[  173.385343][ T6647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  173.406075][ T6647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  173.412736][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  173.534351][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  173.836112][ T6654] loop4: detected capacity change from 0 to 16
[  173.880778][ T6654] erofs: (device loop4): mounted with root inode @ nid 36.
[  173.882940][ T6656] bridge0: port 3(hsr0) entered blocking state
[  173.937138][ T6656] bridge0: port 3(hsr0) entered disabled state
[  174.006632][ T6656] device hsr0 entered promiscuous mode
[  174.031471][ T6656] bridge0: port 3(hsr0) entered blocking state
[  174.038479][ T6656] bridge0: port 3(hsr0) entered forwarding state
[  174.131856][ T6635] loop2: detected capacity change from 0 to 32768
[  174.230635][ T6664] can0: slcan on ttyS3.
[  174.281008][ T6670] loop0: detected capacity change from 0 to 128
[  174.311420][ T6635] XFS (loop2): Mounting V5 Filesystem
[  174.344178][ T6663] can0 (unregistered): slcan off ttyS3.
[  174.454426][ T6670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  174.552910][ T6670] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.579074][ T6635] XFS (loop2): Ending clean mount
[  174.670152][   T14] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 
[  174.722988][   T14] XFS (loop2): Unmount and run xfs_repair
[  174.755044][   T14] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  174.762590][   T14] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  174.809784][   T14] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  174.852685][   T14] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  174.892880][   T14] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  174.901802][   T14] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  174.957893][   T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  174.998592][   T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.010871][   T14] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.038871][ T6635] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74
[  175.067740][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  175.182435][ T6694] loop3: detected capacity change from 0 to 4096
[  175.248124][ T6699] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  175.265438][ T4269] XFS (loop2): Unmounting Filesystem
[  175.300698][ T6694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  175.530616][ T6708] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  175.632033][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  175.856060][ T6715] loop1: detected capacity change from 0 to 1024
[  175.888507][ T6715] EXT4-fs: Ignoring removed oldalloc option
[  175.918071][ T6715] EXT4-fs: Ignoring removed bh option
[  175.942244][ T6715] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.050343][ T6715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  176.079487][ T6726] netlink: 56 bytes leftover after parsing attributes in process `syz.3.886'.
[  176.312718][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  176.312735][   T26] audit: type=1326 audit(1760059313.204:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb3f8eec9 code=0x7ffc0000
[  176.374056][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  176.464358][   T26] audit: type=1326 audit(1760059313.204:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb3f8eec9 code=0x7ffc0000
[  176.556904][   T26] audit: type=1326 audit(1760059313.244:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fdfb3f8eec9 code=0x7ffc0000
[  176.599459][   T26] audit: type=1326 audit(1760059313.244:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb3f8eec9 code=0x7ffc0000
[  176.627965][   T26] audit: type=1326 audit(1760059313.244:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb3f8eec9 code=0x7ffc0000
[  177.275896][ T6730] loop4: detected capacity change from 0 to 32768
[  177.344333][ T6730] (syz.4.888,6730,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.367475][ T6730] (syz.4.888,6730,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.458100][ T6730] (syz.4.888,6730,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  177.540003][ T6730] JBD2: Ignoring recovery information on journal
[  177.699153][ T6730] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  177.871980][ T6777] loop2: detected capacity change from 0 to 512
[  177.914201][ T6777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  177.920523][ T6730] (syz.4.888,6730,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  177.964249][ T6730] (syz.4.888,6730,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  178.000431][ T6777] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.910: corrupted in-inode xattr
[  178.037014][ T6782] loop1: detected capacity change from 0 to 256
[  178.045043][ T6777] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.910: couldn't read orphan inode 15 (err -117)
[  178.059136][ T6730] (syz.4.888,6730,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  178.081410][ T6730] (syz.4.888,6730,1):ocfs2_quota_read:201 ERROR: status = -5
[  178.102268][ T6777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  178.127717][ T6783] loop0: detected capacity change from 0 to 128
[  178.129867][ T6782] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  178.148600][ T6730] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5
[  178.185837][ T6730] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  178.232690][ T6782] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  178.240038][ T6783] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  178.253369][ T6730] (syz.4.888,6730,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  178.266973][ T6730] (syz.4.888,6730,1):ocfs2_mknod:314 ERROR: status = -5
[  178.299158][ T4268] Bluetooth: hci0: unexpected event for opcode 0x2060
[  178.316895][ T6730] (syz.4.888,6730,1):ocfs2_mknod:502 ERROR: status = -5
[  178.332835][ T6783] hpfs: filesystem error: improperly stopped
[  178.338883][ T6783] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  178.415035][ T6783] hpfs: You really don't want any checks? You are crazy...
[  178.418685][ T6730] (syz.4.888,6730,0):ocfs2_mkdir:659 ERROR: status = -5
[  178.422681][ T6783] hpfs: hpfs_map_sector(): read error
[  178.461551][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  178.502834][ T6783] hpfs: code page support is disabled
[  178.508803][ T6783] hpfs: hpfs_map_4sectors(): unaligned read
[  178.537242][ T6783] hpfs: hpfs_map_4sectors(): unaligned read
[  178.571708][ T6783] hpfs: filesystem error: unable to find root dir
[  178.796915][ T4271] ocfs2: Unmounting device (7,4) on (node local)
[  179.857264][ T6827] loop1: detected capacity change from 0 to 164
[  179.900976][ T6827] Unable to read rock-ridge attributes
[  179.939463][ T6827] Unable to read rock-ridge attributes
[  180.011286][ T6827] iso9660: Corrupted directory entry in block 4 of inode 1792
[  180.506943][ T4316] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  180.715927][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  180.748479][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  180.791804][ T4316] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  180.822502][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.867128][ T4316] usb 3-1: config 0 descriptor??
[  180.873065][ T6839] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  181.010324][ T6868] loop4: detected capacity change from 0 to 128
[  181.053857][ T6868] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  181.093304][ T6868] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  181.327559][ T4316] hid-rmi 0003:0461:4E72.000C: global environment stack underflow
[  181.346814][ T4316] hid-rmi 0003:0461:4E72.000C: item 0 0 1 11 parsing failed
[  181.374462][ T4316] hid-rmi 0003:0461:4E72.000C: parse failed
[  181.404079][ T4316] hid-rmi: probe of 0003:0461:4E72.000C failed with error -22
[  181.568269][ T4316] usb 3-1: USB disconnect, device number 9
[  182.071842][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.090557][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.101814][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.111494][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.122552][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.137769][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.145748][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.153471][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.162896][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.170332][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.199018][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.209176][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.229471][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.249823][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.260058][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.290765][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320707][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320808][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320861][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320885][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320908][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320931][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320954][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.320977][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321000][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321023][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321197][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321222][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321246][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321269][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321292][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321315][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321338][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321361][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321384][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321408][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321431][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321453][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321476][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321500][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321522][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321545][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321568][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321592][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321615][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321638][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321662][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321684][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321707][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321731][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321754][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321777][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321800][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321823][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321856][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321879][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321902][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321926][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321949][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.321972][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322006][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322029][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322058][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322081][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322104][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322126][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322149][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322171][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322194][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322216][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322239][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322261][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322284][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322306][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322329][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322351][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322373][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322396][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322418][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322440][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322463][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322486][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.322508][   T14] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  182.345780][   T14] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  182.726666][ T6911] fido_id[6911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  183.020228][ T6920] loop3: detected capacity change from 0 to 512
[  183.021127][ T6920] EXT4-fs: Ignoring removed bh option
[  183.101153][ T6920] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  183.195906][ T6920] EXT4-fs (loop3): 1 truncate cleaned up
[  183.195943][ T6920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  183.215813][ T6905] loop1: detected capacity change from 0 to 32768
[  183.422721][ T6905] XFS (loop1): Mounting V5 Filesystem
[  183.457095][ T6929] overlayfs: upper fs needs to support d_type.
[  183.608312][ T6905] XFS (loop1): Ending clean mount
[  183.777721][ T4270] XFS (loop1): Unmounting Filesystem
[  183.785794][ T4265] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  183.793045][ T4265] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  183.820029][ T4265] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  183.939432][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  183.996422][ T6949] device bridge0 entered promiscuous mode
[  184.008240][ T6949] bridge0: port 3(macvlan2) entered blocking state
[  184.008371][ T6949] bridge0: port 3(macvlan2) entered disabled state
[  184.045857][ T6949] device bridge0 left promiscuous mode
[  185.244907][ T6975] loop3: detected capacity change from 0 to 256
[  185.297549][ T6975] exfat: Deprecated parameter 'namecase'
[  185.339431][ T6975] exfat: Bad value for 'allow_utime'
[  185.622324][ T6961] loop1: detected capacity change from 0 to 32768
[  185.670619][ T6961] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.979 (6961)
[  185.751176][ T6961] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  185.792589][ T6961] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  185.812481][ T6961] BTRFS info (device loop1): enabling ssd optimizations
[  185.828544][ T6967] loop0: detected capacity change from 0 to 32768
[  185.864000][ T6961] BTRFS info (device loop1): not using ssd optimizations
[  185.882446][ T6961] BTRFS info (device loop1): turning off barriers
[  185.892983][ T6967] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.981 (6967)
[  185.925295][ T6961] BTRFS info (device loop1): using free space tree
[  185.960790][ T6967] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  186.023569][ T6967] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  186.042852][ T6967] BTRFS info (device loop0): using free space tree
[  186.076061][ T6994] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  186.094120][ T6994] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  186.100662][ T6994] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  186.133781][ T6994] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  186.160256][ T6972] loop2: detected capacity change from 0 to 40427
[  186.168473][ T6994] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  186.214049][ T6972] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  186.221009][ T6994] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  186.221110][ T6994] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  186.237488][ T6994] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  186.258413][ T6994] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  186.270647][ T6994] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  186.294042][ T6967] BTRFS info (device loop0): enabling ssd optimizations
[  186.300901][ T6972] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  186.384083][ T6972] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff
[  186.422960][ T6961] BTRFS warning (device loop1): this kernel does not support the compat:0 feature bit
[  186.451053][ T6972] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  186.519443][ T6972] F2FS-fs (loop2): invalid crc value
[  186.620959][ T4270] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  186.635460][ T6972] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.635845][ T4274] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  186.880864][ T6972] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  186.937070][ T6972] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  187.275395][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.997'.
[  187.287681][ T4374] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop1 scanned by udevd (4374)
[  187.345600][ T4269] syz-executor: attempt to access beyond end of device
[  187.345600][ T4269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.662410][ T7058] netlink: 'syz.3.1001': attribute type 6 has an invalid length.
[  187.714223][ T4330] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  187.926335][ T4330] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  187.941459][ T7062] loop3: detected capacity change from 0 to 128
[  187.947169][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.984040][ T7062] EXT4-fs: Ignoring removed nomblk_io_submit option
[  188.007386][ T4330] usb 5-1: config 0 descriptor??
[  188.018595][ T7062] EXT4-fs (loop3): Test dummy encryption mode enabled
[  188.046007][ T4330] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  188.067553][ T7062] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  188.084687][ T7062] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  188.096889][ T4330] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22
[  188.175120][ T7051] loop0: detected capacity change from 0 to 32768
[  188.195631][ T7051] (syz.0.995,7051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  188.251006][ T7047] usb 5-1: USB disconnect, device number 6
[  188.274423][ T7051] (syz.0.995,7051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  188.315194][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  188.393521][ T7051] (syz.0.995,7051,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  188.449283][ T7051] JBD2: Ignoring recovery information on journal
[  188.603047][ T7051] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  188.780788][ T7051] (syz.0.995,7051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  188.883636][ T7051] (syz.0.995,7051,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  188.943949][ T7051] (syz.0.995,7051,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  188.974302][ T7051] (syz.0.995,7051,1):ocfs2_quota_read:201 ERROR: status = -5
[  188.983847][ T7051] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5
[  189.014008][ T7051] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  189.053964][ T7051] (syz.0.995,7051,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  189.061778][ T7051] (syz.0.995,7051,1):ocfs2_mknod:314 ERROR: status = -5
[  189.103717][ T7051] (syz.0.995,7051,1):ocfs2_mknod:502 ERROR: status = -5
[  189.110747][ T7051] (syz.0.995,7051,1):ocfs2_mkdir:659 ERROR: status = -5
[  189.335383][ T4274] ocfs2: Unmounting device (7,0) on (node local)
[  189.630657][ T7074] loop2: detected capacity change from 0 to 32768
[  189.677009][ T7074] XFS: ikeep mount option is deprecated.
[  189.845889][ T7106] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  189.852394][ T7106] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  189.869381][ T7074] XFS (loop2): Mounting V5 Filesystem
[  189.904433][ T7108] can0: slcan on ttyS3.
[  189.910252][ T7106] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  189.929492][ T7106] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  189.986084][ T7106] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  189.992653][ T7106] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  190.039077][ T7108] can0 (unregistered): slcan off ttyS3.
[  190.088035][ T7106] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  190.113999][ T7106] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  190.130613][ T7106] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  190.160034][ T7074] XFS (loop2): Ending clean mount
[  190.171294][ T7074] XFS (loop2): Quotacheck needed: Please wait.
[  190.184546][ T7106] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  190.272691][ T7074] XFS (loop2): Quotacheck: Done.
[  190.409857][ T7074] XFS (loop2): syz.2.1000 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  190.458045][ T7112] loop3: detected capacity change from 0 to 32768
[  190.541896][ T4269] XFS (loop2): Unmounting Filesystem
[  190.656290][ T7121] loop4: detected capacity change from 0 to 64
[  190.707179][ T7121] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  190.771796][ T7123] program syz.0.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.141946][ T7129] loop3: detected capacity change from 0 to 128
[  191.179114][ T7129] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  191.221314][ T7129] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  191.761523][ T7145] loop4: detected capacity change from 0 to 512
[  191.825208][ T7145] EXT4-fs: Ignoring removed bh option
[  191.898556][ T7145] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  191.995758][ T7145] EXT4-fs (loop4): 1 truncate cleaned up
[  192.051073][ T7145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  192.162657][ T7145] overlayfs: upper fs needs to support d_type.
[  192.464650][ T4271] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  192.534031][ T4271] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  192.590644][ T4271] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  192.680161][ T7143] loop2: detected capacity change from 0 to 131072
[  192.693463][ T7143] F2FS-fs (loop2): Test dummy encryption mode enabled
[  192.712849][ T7143] F2FS-fs (loop2): invalid crc value
[  192.744575][ T7143] F2FS-fs (loop2): Found nat_bits in checkpoint
[  192.757858][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  192.795161][ T7143] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  192.822032][ T7143] F2FS-fs (loop2): Failed to read root inode
[  193.025439][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1042'.
[  193.074761][ T7127] loop1: detected capacity change from 0 to 32768
[  193.146458][ T7166] syz.2.1045 uses old SIOCAX25GETINFO
[  193.456469][ T7172] loop2: detected capacity change from 0 to 64
[  193.515268][ T7174] Bluetooth: MGMT ver 1.22
[  193.549505][ T7168] loop4: detected capacity change from 0 to 4096
[  193.599003][ T7168] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  193.638004][ T7152] loop3: detected capacity change from 0 to 32768
[  193.728414][ T7168] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  193.803015][ T7168] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  193.811969][ T7168] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  193.919392][ T7152] XFS (loop3): Mounting V5 Filesystem
[  193.934127][ T7168] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  194.090634][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.097029][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.116488][ T7168] ntfs: volume version 3.1.
[  194.124063][ T7152] XFS (loop3): Ending clean mount
[  194.134619][ T7168] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[  194.186794][ T7152] XFS (loop3): Quotacheck needed: Please wait.
[  194.253842][ T7152] XFS (loop3): Quotacheck: Done.
[  194.349719][ T7168] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  194.432727][ T7168] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  194.508508][ T7195] loop2: detected capacity change from 0 to 1764
[  194.538191][ T4265] XFS (loop3): Unmounting Filesystem
[  194.610531][ T7168] ntfs: (device loop4): ntfs_readdir(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[  194.659748][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  194.720468][ T7193] loop0: detected capacity change from 0 to 8192
[  195.258034][ T7199] loop2: detected capacity change from 0 to 2048
[  195.298288][ T7199] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  195.333903][ T7199] NILFS (loop2): mounting unchecked fs
[  195.434039][ T7199] NILFS (loop2): recovery complete
[  195.459026][ T7203] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.544906][ T7191] loop1: detected capacity change from 0 to 32768
[  195.571448][ T7191] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1053 (7191)
[  195.668244][ T7207] loop0: detected capacity change from 0 to 256
[  195.671229][ T7191] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  195.696067][ T7207] exfat: Deprecated parameter 'namecase'
[  195.742894][ T7191] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  195.752218][ T7191] BTRFS info (device loop1): using free space tree
[  195.777704][ T7207] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d)
[  196.038545][ T7222] loop2: detected capacity change from 0 to 1024
[  196.080705][ T7219] device macsec2 entered promiscuous mode
[  196.161665][ T7191] BTRFS info (device loop1): enabling ssd optimizations
[  196.163080][ T4282] Bluetooth: hci4: command 0x0406 tx timeout
[  196.174991][ T4268] Bluetooth: hci3: command 0x0406 tx timeout
[  196.175025][ T4280] Bluetooth: hci0: command 0x0406 tx timeout
[  196.181009][ T4268] Bluetooth: hci1: command 0x0406 tx timeout
[  196.181041][ T4268] Bluetooth: hci2: command 0x0406 tx timeout
[  196.236509][   T11] hfsplus: b-tree write err: -5, ino 4
[  196.495058][ T7190] BTRFS info (device loop1): balance: start -susage=21474836480,drange=6..107,limit=2047..4294967295
[  196.596789][ T7190] BTRFS info (device loop1): balance: ended with status: 0
[  196.663097][ T7046] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  196.679492][ T7200] loop4: detected capacity change from 0 to 32768
[  196.787013][ T7200] XFS (loop4): Mounting V5 Filesystem
[  196.798125][ T4270] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  196.864584][ T7046] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  196.886126][ T7046] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.906590][ T7046] usb 1-1: config 0 interface 0 has no altsetting 0
[  196.947140][ T7046] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  196.991875][ T7046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.033692][ T7200] XFS (loop4): Ending clean mount
[  197.060968][ T7046] usb 1-1: config 0 descriptor??
[  197.140124][ T7200] XFS (loop4): Quotacheck needed: Please wait.
[  197.174063][ T4395] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (4395)
[  197.357319][ T7200] XFS (loop4): Quotacheck: Done.
[  197.414800][ T7257] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1072'.
[  197.461803][ T7257] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1072'.
[  197.533211][ T7046] megaworld 0003:07B5:0312.000E: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0
[  197.591618][ T7046] megaworld 0003:07B5:0312.000E: no inputs found
[  197.646114][ T4271] XFS (loop4): Unmounting Filesystem
[  197.784156][ T7042] usb 1-1: USB disconnect, device number 5
[  197.946856][ T7264] fido_id[7264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  198.904624][ T7263] loop3: detected capacity change from 0 to 32768
[  199.098784][ T7295] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1090'.
[  199.133737][ T7295] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  199.554665][ T7306] dlm: non-version read from control device 2
[  199.645307][ T7310] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0)
[  199.889915][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'.
[  199.964392][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'.
[  199.995031][ T7315] netlink: 'syz.3.1097': attribute type 15 has an invalid length.
[  200.030366][ T7321] loop4: detected capacity change from 0 to 256
[  200.201016][ T7286] loop0: detected capacity change from 0 to 32768
[  200.263909][ T7286] XFS: attr2 mount option is deprecated.
[  200.396169][ T7286] XFS (loop0): Mounting V5 Filesystem
[  200.533654][ T7286] XFS (loop0): Ending clean mount
[  200.562304][ T7286] XFS (loop0): Quotacheck needed: Please wait.
[  200.790854][ T7286] XFS (loop0): Quotacheck: Done.
[  200.927085][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1107'.
[  200.979393][ T4274] XFS (loop0): Unmounting Filesystem
[  201.242090][ T7355] netlink: 'syz.3.1112': attribute type 3 has an invalid length.
[  201.673635][ T4959] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  201.679843][ T7372] loop3: detected capacity change from 0 to 1024
[  201.893384][ T4357] hfsplus: b-tree write err: -5, ino 4
[  201.895865][ T4959] usb 2-1: Using ep0 maxpacket: 8
[  201.913755][ T4959] usb 2-1: unable to get BOS descriptor or descriptor too short
[  201.934266][ T4959] usb 2-1: config 4 interface 0 has no altsetting 0
[  201.958280][ T4959] usb 2-1: string descriptor 0 read error: -22
[  201.978518][ T4959] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  202.008959][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'.
[  202.018881][ T4959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.085406][ T4959] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  202.134691][ T4959] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  202.157702][ T4959] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  202.167751][ T4959] usb 2-1: media controller created
[  202.202227][ T4959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  202.771959][ T7394] loop0: detected capacity change from 0 to 4096
[  202.875835][ T7399] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.295706][ T4959] zl10353_read_register: readreg error (reg=127, ret==0)
[  203.304612][ T7361] usb 2-1: dvb_usb_au6610: wlen=0, aborting
[  203.402370][ T4959] usb 2-1: USB disconnect, device number 6
[  203.413876][ T4308] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  203.605634][ T4308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  203.638169][ T4308] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  203.659076][ T4308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.677950][ T4308] usb 1-1: config 0 descriptor??
[  203.816063][ T7427] program syz.4.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.828786][ T7425] loop3: detected capacity change from 0 to 4096
[  203.883510][ T7425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  203.974067][ T4959] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  204.078102][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  204.129511][ T4308] aquacomputer_d5next 0003:0C70:F00D.000F: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0
[  204.179285][ T4959] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  204.204821][ T4959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.254063][ T4959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.303962][ T4959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  204.390922][ T4959] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  204.424612][ T4959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.464649][ T4959] usb 3-1: config 0 descriptor??
[  204.530726][ T4961] usb 1-1: USB disconnect, device number 6
[  204.595334][ T7444] loop1: detected capacity change from 0 to 1024
[  204.759314][ T7442] fido_id[7442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  204.816097][   T11] hfsplus: b-tree write err: -5, ino 8
[  204.901066][ T4959] holtek_kbd 0003:04D9:A055.0010: unbalanced delimiter at end of report description
[  204.929177][ T4959] holtek_kbd: probe of 0003:04D9:A055.0010 failed with error -22
[  205.124210][ T4961] usb 3-1: USB disconnect, device number 10
[  205.322518][ T7453] loop0: detected capacity change from 0 to 64
[  205.433988][ T7441] loop4: detected capacity change from 0 to 32768
[  205.469838][ T7441] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  205.813296][ T7457] syz.4.1157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  205.826479][ T4395] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  206.082657][ T7463] loop3: detected capacity change from 0 to 256
[  206.132534][ T7463] exfat: Deprecated parameter 'namecase'
[  206.174934][ T7463] exfat: Deprecated parameter 'utf8'
[  206.237930][ T7463] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  206.306431][ T7467] netlink: 'syz.1.1162': attribute type 5 has an invalid length.
[  206.361222][ T7467] device ip6erspan0 entered promiscuous mode
[  206.645139][ T7472] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1164' sets config #0
[  206.688614][ T7477] loop1: detected capacity change from 0 to 512
[  206.745110][ T7477] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  207.060622][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'.
[  207.077891][ T7459] loop2: detected capacity change from 0 to 32768
[  207.308790][ T7489] loop4: detected capacity change from 0 to 512
[  207.331610][ T7492] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
[  207.343391][ T7492] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  207.351829][ T7492] CPU: 1 PID: 7492 Comm: syz.1.1174 Not tainted syzkaller #0
[  207.359239][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  207.369322][ T7492] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0
[  207.374910][ T7492] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 96 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 96 15 fa 4d 8b 24 24 48 83 c3
[  207.394564][ T7492] RSP: 0018:ffffc90003237a80 EFLAGS: 00010206
[  207.400671][ T7492] RAX: 0000000000000005 RBX: ffff888056069e00 RCX: 0000000000080000
[  207.408674][ T7492] RDX: ffffc90006189000 RSI: 0000000000000425 RDI: 0000000000000426
[  207.416662][ T7492] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1029960d26
[  207.424641][ T7492] R10: ffffed1029960d26 R11: 1ffff11029960d25 R12: 0000000000000028
[  207.432625][ T7492] R13: dffffc0000000000 R14: ffff88814cb06800 R15: dffffc0000000000
[  207.440613][ T7492] FS:  00007ff50e6566c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  207.449559][ T7492] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.456151][ T7492] CR2: 00007f144b5721e0 CR3: 00000000289bd000 CR4: 00000000003506e0
[  207.464132][ T7492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  207.472110][ T7492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  207.480096][ T7492] Call Trace:
[  207.483390][ T7492]  <TASK>
[  207.486333][ T7492]  pcl818_detach+0x62/0xd0
[  207.490772][ T7492]  comedi_device_detach_locked+0x16e/0x710
[  207.496601][ T7492]  comedi_unlocked_ioctl+0xd0b/0x1050
[  207.501995][ T7492]  ? __lock_acquire+0x7c50/0x7c50
[  207.507055][ T7492]  ? comedi_poll+0x8b0/0x8b0
[  207.511680][ T7492]  ? __fget_files+0x28/0x4d0
[  207.516290][ T7492]  ? bpf_lsm_file_ioctl+0x5/0x10
[  207.521239][ T7492]  ? security_file_ioctl+0x7c/0xa0
[  207.526391][ T7492]  ? comedi_poll+0x8b0/0x8b0
[  207.531028][ T7492]  __se_sys_ioctl+0xfa/0x170
[  207.535644][ T7492]  do_syscall_64+0x4c/0xa0
[  207.540078][ T7492]  ? clear_bhb_loop+0x60/0xb0
[  207.544773][ T7492]  ? clear_bhb_loop+0x60/0xb0
[  207.549488][ T7492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.555488][ T7492] RIP: 0033:0x7ff50d78eec9
[  207.559921][ T7492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.579536][ T7492] RSP: 002b:00007ff50e656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  207.587971][ T7492] RAX: ffffffffffffffda RBX: 00007ff50d9e5fa0 RCX: 00007ff50d78eec9
[  207.595957][ T7492] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  207.603937][ T7492] RBP: 00007ff50d811f91 R08: 0000000000000000 R09: 0000000000000000
[  207.611916][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.619897][ T7492] R13: 00007ff50d9e6038 R14: 00007ff50d9e5fa0 R15: 00007fff8cc49048
[  207.627891][ T7492]  </TASK>
[  207.630936][ T7492] Modules linked in:
[  207.683494][ T7489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  207.727036][ T7489] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.732445][ T7492] ---[ end trace 0000000000000000 ]---
[  207.745332][ T7492] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0
[  207.750954][ T7492] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 96 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 96 15 fa 4d 8b 24 24 48 83 c3
[  207.776891][ T7492] RSP: 0018:ffffc90003237a80 EFLAGS: 00010206
[  207.784403][ T7492] RAX: 0000000000000005 RBX: ffff888056069e00 RCX: 0000000000080000
[  207.794422][ T7492] RDX: ffffc90006189000 RSI: 0000000000000425 RDI: 0000000000000426
[  207.802508][ T7492] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1029960d26
[  207.812404][ T7492] R10: ffffed1029960d26 R11: 1ffff11029960d25 R12: 0000000000000028
[  207.821699][ T7492] R13: dffffc0000000000 R14: ffff88814cb06800 R15: dffffc0000000000
[  207.831312][ T7492] FS:  00007ff50e6566c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  207.841543][ T7492] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.849624][ T7492] CR2: 00007ff50e634f98 CR3: 00000000289bd000 CR4: 00000000003506e0
[  207.858047][ T7492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  207.866776][ T7492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  207.881185][ T7492] Kernel panic - not syncing: Fatal exception
[  207.887605][ T7492] Kernel Offset: disabled
[  207.891941][ T7492] Rebooting in 86400 seconds..