last executing test programs:

1m18.56691122s ago: executing program 4 (id=504):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc)

1m18.120609323s ago: executing program 4 (id=510):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7)
ioctl$TCFLSH(r0, 0x8926, 0xffffffffffff7ffe)

1m17.483109567s ago: executing program 4 (id=520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

1m17.287221085s ago: executing program 4 (id=521):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1m16.693085656s ago: executing program 4 (id=526):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r0, 0x1)
pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

1m15.851362263s ago: executing program 4 (id=532):
unshare(0x22020400)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, 0x0, 0x0)

1m15.277679588s ago: executing program 32 (id=532):
unshare(0x22020400)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, 0x0, 0x0)

4.672443633s ago: executing program 5 (id=1186):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="fccba0d50b90deb92d2778a481774525f9deb562396c8b2ca2cf0e6422e58c7f21cedf6b843b1546e1b47fef24f45084ee98cfbfa4e5977b544b6eb0bc1602b7281a9eb7c40c097b9fbfc4de1846b922cbfe15accd9c2a6eb5888c78deccf02d78f5db0559ca6978e5a349174f9762d8423ad42042f36babb248831a6a563b900a", 0x81)

4.613105687s ago: executing program 2 (id=1187):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001})
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2)

4.55118743s ago: executing program 5 (id=1188):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000cb440)={{0x0, 0x81, 0x8, 0x6, 0x100000000, 0x5, 0x3, 0x1, 0x4, 0xffff, 0x800, 0xfffffffffffffffe, 0x2, 0x100000001, 0x7f}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000cc440))

4.351347021s ago: executing program 1 (id=1191):
r0 = memfd_create(&(0x7f0000000000)='\\\\&\x0e\x00', 0x4)
setuid(0xee00)
fchmod(r0, 0x84)

4.096370637s ago: executing program 2 (id=1193):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x5, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0xffffffffffffffff, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d})

3.999344203s ago: executing program 1 (id=1194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x84}}, 0x0)

3.749965282s ago: executing program 1 (id=1199):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23489, 0x53f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc)

3.69510299s ago: executing program 2 (id=1201):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x20000000)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

3.495487896s ago: executing program 1 (id=1202):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60)

3.34330779s ago: executing program 2 (id=1204):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x40, 0x9, 0x5, 0x200004, 0x24}, 0xff56)

3.047113777s ago: executing program 2 (id=1207):
syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000000)='./file2\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0x1, 0x556e, &(0x7f0000004000)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
mount$9p_rdma(0x0, &(0x7f0000000080)='./file2\x00', 0x0, 0x20110a0, 0x0)

2.577254299s ago: executing program 5 (id=1210):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

2.328042638s ago: executing program 0 (id=1211):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14)

2.233077084s ago: executing program 3 (id=1212):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
io_setup(0x6, &(0x7f0000001000)=<r0=>0x0)
io_destroy(r0)

1.996682804s ago: executing program 0 (id=1213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)

1.601502697s ago: executing program 3 (id=1215):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

1.485534444s ago: executing program 0 (id=1216):
setreuid(0x0, 0xee00)
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7ffe, @loopback, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000100)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x24000084)

1.470800061s ago: executing program 6 (id=1217):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@private=0xa010102, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x30, 0x20}, {0x0, 0x0, 0x400000, 0xb, 0x0, 0x0, 0x9, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6085a900009c8800fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e000e22009c90"], 0x0)

1.383270802s ago: executing program 1 (id=1218):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80)

1.211154133s ago: executing program 0 (id=1219):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc769}, 0x94)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)

1.202802126s ago: executing program 6 (id=1220):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xa24a07471d67276b}, 0x3})

1.043387014s ago: executing program 3 (id=1221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.003234482s ago: executing program 5 (id=1222):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x100)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)

905.519382ms ago: executing program 0 (id=1223):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000b40)={0x6, 0x118, 0xfa00, {{0x0, 0x1, "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", 0x2, 0x2, 0x8, 0xd, 0x64, 0x57, 0xf, 0x1}}}, 0x120)

813.888331ms ago: executing program 6 (id=1224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, r1, 0x1, 0x70bd29, 0x7, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6ebeb0cd}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)

735.04082ms ago: executing program 3 (id=1225):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0xff}, {0x0}, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/128, 0x80}, {&(0x7f0000000940)=""/125, 0x7d}, {&(0x7f00000009c0)=""/83, 0x53}], 0x3, 0x20, 0x7}}], 0x48}, 0x0)

478.809817ms ago: executing program 5 (id=1226):
r0 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

442.639344ms ago: executing program 6 (id=1227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x4004)

342.262218ms ago: executing program 3 (id=1228):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
recvfrom$inet_nvme(r0, 0x0, 0x0, 0x2040, 0x0, 0x0)

256.509237ms ago: executing program 6 (id=1229):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000600)=0x6, 0x4)

199.670199ms ago: executing program 1 (id=1230):
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x80, 0x7ffffffc, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x2}]})

103.314324ms ago: executing program 6 (id=1231):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9, 0x2, 0x0, 0x0, 0x4], [0x0, 0x1, 0x86a9, 0x0, 0x0, 0x80102], [0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xffffffff, 0x200}, {0xffffffe, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1}, {0x1000000}, {0x0, 0x4}, {}, {0x2}, {}, {0xfffffff8}], '\x00', 0x1, 0x0, 0x0, 0xf8})

48.241301ms ago: executing program 0 (id=1232):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

32.283633ms ago: executing program 5 (id=1233):
io_setup(0x8, &(0x7f00000002c0)=<r0=>0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x0, 0x0, 0x3fde36c1, 0x0, 0x0, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f0000000180), 0x0, 0x28000, 0x0, 0x2}])

3.360458ms ago: executing program 3 (id=1234):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6d)
connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6d)

0s ago: executing program 2 (id=1235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)

kernel console output (not intermixed with test programs):

e (4096) and media sector size (512).
[  142.403084][ T7026] ntfs3(loop5): Failed to load $Extend (-22).
[  142.440930][ T7026] ntfs3(loop5): Failed to initialize $Extend.
[  142.442295][ T6992] loop1: detected capacity change from 0 to 32768
[  142.659933][ T6992] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  142.703041][ T7041] loop0: detected capacity change from 0 to 128
[  142.869434][ T6999] loop3: detected capacity change from 0 to 32768
[  142.916936][ T6992] XFS (loop1): Ending clean mount
[  143.300284][ T5832] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  143.421542][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  143.592193][ T7060] loop0: detected capacity change from 0 to 512
[  143.611044][   T10] usb 3-1: Using ep0 maxpacket: 32
[  143.617698][ T7060] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  143.629705][ T7060] EXT4-fs (loop0): external journal has bad superblock
[  143.644288][   T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.705835][   T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  143.783981][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  143.806359][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  143.836371][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.891896][   T10] usb 3-1: config 0 descriptor??
[  144.237219][ T5938] kernel write not supported for file /uhid (pid: 5938 comm: kworker/0:6)
[  144.324748][   T10] kye 0003:0458:5014.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  144.351971][   T10] kye 0003:0458:5014.0009: ignoring exceeding usage max
[  144.427093][   T10] kye 0003:0458:5014.0009: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0
[  144.470894][   T10] kye 0003:0458:5014.0009: tablet-enabling feature report not found
[  144.520370][   T10] kye 0003:0458:5014.0009: tablet enabling failed
[  144.539643][ T7084] loop0: detected capacity change from 0 to 1024
[  144.572628][   T10] usb 3-1: USB disconnect, device number 6
[  144.697707][   T30] audit: type=1800 audit(1762347409.166:12): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.354" name="file1" dev="loop0" ino=20 res=0 errno=0
[  144.699050][ T7088] fido_id[7088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  144.844227][   T36] hfsplus: b-tree write err: -5, ino 4
[  144.850141][ T7094] loop3: detected capacity change from 0 to 256
[  144.905539][ T7094] exfat: Deprecated parameter 'namecase'
[  144.938868][ T7094] exfat: Deprecated parameter 'utf8'
[  144.985448][ T7094] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  145.070553][ T7098] loop0: detected capacity change from 0 to 2048
[  145.195477][ T7101] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.356556][ T7109] loop2: detected capacity change from 0 to 64
[  145.402184][ T7105] loop4: detected capacity change from 0 to 1024
[  145.805985][ T7112] loop0: detected capacity change from 0 to 4096
[  145.922501][ T7124] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.955712][ T7123] loop1: detected capacity change from 0 to 1024
[  146.148859][ T7081] loop5: detected capacity change from 0 to 40427
[  146.203956][   T36] hfsplus: b-tree write err: -5, ino 4
[  146.273041][ T7081] F2FS-fs (loop5): invalid crc value
[  146.656136][ T7081] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  146.721993][ T7081] F2FS-fs (loop5): Start checkpoint disabled!
[  146.772284][ T7081] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  146.813016][ T7081] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  146.880041][ T7081] F2FS-fs (loop5): Skipping Checkpoint. Checkpoints currently disabled.
[  146.925948][ T7119] loop2: detected capacity change from 0 to 32768
[  147.004257][ T7119] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.047587][ T1156] kworker/u8:7: attempt to access beyond end of device
[  147.047587][ T1156] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.067786][ T7156] loop0: detected capacity change from 0 to 764
[  147.147495][ T7154] loop1: detected capacity change from 0 to 1024
[  147.148439][ T7154] EXT4-fs: Ignoring removed nobh option
[  147.155252][ T1156] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  147.155281][ T1156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  147.155297][ T1156] Workqueue: writeback wb_workfn (flush-7:5)
[  147.155334][ T1156] Call Trace:
[  147.155344][ T1156]  <TASK>
[  147.155353][ T1156]  dump_stack_lvl+0x189/0x250
[  147.155392][ T1156]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.155426][ T1156]  ? __pfx_queue_work_on+0x10/0x10
[  147.155462][ T1156]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.155493][ T1156]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.155538][ T1156]  f2fs_handle_critical_error+0x37c/0x540
[  147.155583][ T1156]  f2fs_write_end_io+0x886/0xb60
[  147.155630][ T1156]  __submit_merged_bio+0x27a/0x6a0
[  147.155674][ T1156]  __submit_merged_write_cond+0x255/0x530
[  147.155718][ T1156]  f2fs_write_data_pages+0x261d/0x3000
[  147.155783][ T1156]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.155823][ T1156]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  147.155849][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.155919][ T1156]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  147.155955][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.155981][ T1156]  ? look_up_lock_class+0x74/0x170
[  147.156026][ T1156]  ? trace_f2fs_writepages+0x7f/0x200
[  147.156064][ T1156]  ? f2fs_write_node_pages+0x478/0x6e0
[  147.156104][ T1156]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  147.156144][ T1156]  ? __lock_acquire+0xab9/0xd20
[  147.156177][ T1156]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.156203][ T1156]  do_writepages+0x32e/0x550
[  147.156240][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.156266][ T1156]  ? reacquire_held_locks+0x127/0x1d0
[  147.156294][ T1156]  ? writeback_sb_inodes+0x384/0x1010
[  147.156339][ T1156]  __writeback_single_inode+0x145/0xff0
[  147.156373][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.156399][ T1156]  ? do_raw_spin_unlock+0x122/0x240
[  147.156445][ T1156]  writeback_sb_inodes+0x6c7/0x1010
[  147.156511][ T1156]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  147.156595][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.156621][ T1156]  ? rcu_is_watching+0x15/0xb0
[  147.156649][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.156687][ T1156]  wb_writeback+0x43b/0xaf0
[  147.156730][ T1156]  ? queue_io+0x3d1/0x590
[  147.156767][ T1156]  ? __pfx_wb_writeback+0x10/0x10
[  147.156811][ T1156]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.156848][ T1156]  wb_workfn+0x409/0xef0
[  147.156895][ T1156]  ? __pfx_wb_workfn+0x10/0x10
[  147.156928][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.156955][ T1156]  ? __lock_acquire+0xab9/0xd20
[  147.156992][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.157022][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.157053][ T1156]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.157081][ T1156]  ? process_scheduled_works+0x9ef/0x17b0
[  147.157107][ T1156]  ? process_scheduled_works+0x9ef/0x17b0
[  147.157135][ T1156]  process_scheduled_works+0xae1/0x17b0
[  147.157197][ T1156]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.157233][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.157270][ T1156]  worker_thread+0x8a0/0xda0
[  147.157300][ T1156]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.157341][ T1156]  ? __kthread_parkme+0x7b/0x200
[  147.157382][ T1156]  kthread+0x711/0x8a0
[  147.157419][ T1156]  ? __pfx_worker_thread+0x10/0x10
[  147.157451][ T1156]  ? __pfx_kthread+0x10/0x10
[  147.157479][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.157511][ T1156]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.157539][ T1156]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.157565][ T1156]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.157594][ T1156]  ? __pfx_kthread+0x10/0x10
[  147.157629][ T1156]  ret_from_fork+0x4bc/0x870
[  147.157658][ T1156]  ? __pfx_ret_from_fork+0x10/0x10
[  147.157692][ T1156]  ? __switch_to_asm+0x39/0x70
[  147.157712][ T1156]  ? __switch_to_asm+0x33/0x70
[  147.157731][ T1156]  ? __pfx_kthread+0x10/0x10
[  147.157764][ T1156]  ret_from_fork_asm+0x1a/0x30
[  147.157807][ T1156]  </TASK>
[  147.157817][ T1156] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  147.358505][ T7154] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  147.389510][ T7156] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  147.622243][ T7154] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.383: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  147.624458][ T7154] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.383: couldn't read orphan inode 11 (err -117)
[  147.665200][ T7156] Symlink component flag not implemented
[  147.665349][ T7156] Symlink component flag not implemented (7)
[  147.673526][ T7119] XFS (loop2): Ending clean mount
[  147.742537][ T7154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.922211][ T5834] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  148.057494][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.303723][ T7176] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20000
[  148.581645][ T7182] netlink: 'syz.3.396': attribute type 1 has an invalid length.
[  148.589616][ T7182] nbd: illegal input index -2147418100
[  148.746830][ T7186] loop1: detected capacity change from 0 to 512
[  148.788693][ T7188] loop4: detected capacity change from 0 to 512
[  148.824034][ T7188] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  148.854258][ T7186] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  148.878580][ T7188] EXT4-fs (loop4): 1 truncate cleaned up
[  148.908294][ T7188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.954909][ T7186] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.398: invalid indirect mapped block 4294967295 (level 0)
[  149.018386][ T7186] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.398: invalid indirect mapped block 4294967295 (level 1)
[  149.114156][ T7186] EXT4-fs (loop1): 1 orphan inode deleted
[  149.119925][ T7186] EXT4-fs (loop1): 1 truncate cleaned up
[  149.135045][ T7186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.263002][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.362011][ T7206] delete_channel: no stack
[  149.367754][ T7205] delete_channel: no stack
[  149.410639][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.594855][ T7212] overlay: filesystem on ./file0 is read-only
[  150.031276][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  150.068939][ T7232] loop3: detected capacity change from 0 to 1024
[  150.180862][   T24] usb 6-1: Using ep0 maxpacket: 32
[  150.184865][ T7234] loop2: detected capacity change from 0 to 256
[  150.204998][   T24] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  150.246903][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.302278][   T24] usb 6-1: config 0 descriptor??
[  150.312954][   T13] hfsplus: b-tree write err: -5, ino 4
[  150.347294][   T24] gspca_main: sq930x-2.14.0 probing 041e:403c
[  150.370751][ T7234] FAT-fs (loop2): Directory bread(block 64) failed
[  150.380289][ T7234] FAT-fs (loop2): Directory bread(block 65) failed
[  150.439616][ T7234] FAT-fs (loop2): Directory bread(block 66) failed
[  150.485591][ T7234] FAT-fs (loop2): Directory bread(block 67) failed
[  150.514507][ T7234] FAT-fs (loop2): Directory bread(block 68) failed
[  150.542397][ T7246] loop3: detected capacity change from 0 to 512
[  150.548980][ T7234] FAT-fs (loop2): Directory bread(block 69) failed
[  150.556120][ T7234] FAT-fs (loop2): Directory bread(block 70) failed
[  150.565728][ T7234] FAT-fs (loop2): Directory bread(block 71) failed
[  150.569804][ T7246] EXT4-fs: Ignoring removed nobh option
[  150.572967][ T7234] FAT-fs (loop2): Directory bread(block 72) failed
[  150.584877][ T7234] FAT-fs (loop2): Directory bread(block 73) failed
[  150.631815][ T7246] EXT4-fs (loop3): Test dummy encryption mode enabled
[  150.691379][ T7246] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  150.751119][ T7246] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.423: invalid indirect mapped block 2683928664 (level 1)
[  150.801616][ T7246] EXT4-fs (loop3): Remounting filesystem read-only
[  150.808791][ T7246] EXT4-fs (loop3): 1 truncate cleaned up
[  150.819111][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.900899][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  150.927706][ T7256] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  151.011261][   T24] gspca_sq930x: reg_w 0305 fd00 failed -71
[  151.017343][   T24] sq930x 6-1:0.0: probe with driver sq930x failed with error -71
[  151.059944][   T24] usb 6-1: USB disconnect, device number 5
[  151.080876][ T5838] usb 5-1: Using ep0 maxpacket: 32
[  151.090022][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.112981][ T5838] usb 5-1: unable to get BOS descriptor or descriptor too short
[  151.136846][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.150645][ T5838] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  151.160547][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.190466][ T5838] usb 5-1: Product: syz
[  151.200585][ T5838] usb 5-1: Manufacturer: syz
[  151.219713][ T5838] usb 5-1: SerialNumber: syz
[  151.242873][ T5838] usb 5-1: config 0 descriptor??
[  151.451927][ T7271] loop3: detected capacity change from 0 to 512
[  151.490782][ T5838] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7
[  151.571910][ T7271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.659064][ T7271] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.711560][ T5838] usb 5-1: USB disconnect, device number 5
[  151.858402][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.906148][ T7269] loop0: detected capacity change from 0 to 32768
[  151.975247][ T7269] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  152.064400][ T7269] (syz.0.435,7269,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  152.082110][ T7269] (syz.0.435,7269,1):__ocfs2_delete_entry:1170 ERROR: status = -5
[  152.089947][ T7269] (syz.0.435,7269,1):ocfs2_unlink:993 ERROR: status = -5
[  152.101529][ T7269] (syz.0.435,7269,1):ocfs2_unlink:1046 ERROR: status = -5
[  152.172270][ T5842] ocfs2: Unmounting device (7,0) on (node local)
[  152.309830][ T7291] loop1: detected capacity change from 0 to 164
[  152.326585][ T7292] loop0: detected capacity change from 0 to 512
[  152.414498][ T7292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  152.560008][ T7298] mmap: syz.4.444 (7298) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  152.581998][ T7292] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.442: corrupted xattr block 13: invalid checksum
[  152.866795][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.982827][ T7309] loop5: detected capacity change from 0 to 256
[  152.996267][ T7309] exfat: Deprecated parameter 'namecase'
[  153.029677][ T7309] exfat: Deprecated parameter 'namecase'
[  153.103616][ T7309] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  153.314262][ T7286] loop3: detected capacity change from 0 to 32768
[  153.326800][ T5837] Bluetooth: unknown link type 97
[  153.333392][ T5837] Bluetooth: hci1: connection err: -111
[  153.339683][ T7286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.440 (7286)
[  153.395737][ T7286] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.410886][ T5966] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  153.410986][ T7286] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  153.483700][ T7332] netlink: 'syz.0.457': attribute type 1 has an invalid length.
[  153.537001][ T7286] BTRFS info (device loop3): rebuilding free space tree
[  153.570753][ T7286] BTRFS info (device loop3): disabling free space tree
[  153.586242][ T7286] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  153.596881][ T7286] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  153.612986][ T7286] BTRFS info (device loop3): checking UUID tree
[  153.622807][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.629911][ T7286] BTRFS info (device loop3): setting nodatasum
[  153.651442][ T7286] BTRFS info (device loop3): enabling ssd optimizations
[  153.658566][ T7286] BTRFS info (device loop3): turning off barriers
[  153.674505][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.691655][ T5966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  153.693745][ T7286] BTRFS info (device loop3): disabling tree log
[  153.704856][ T5966] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  153.754022][ T7286] BTRFS info (device loop3): turning on flush-on-commit
[  153.775672][ T7286] BTRFS info (device loop3): force clearing of disk cache
[  153.807217][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.814046][ T7286] BTRFS info (device loop3): max_inline set to 0
[  153.874304][ T5966] usb 3-1: config 0 descriptor??
[  154.024426][ T7350] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  154.110980][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  154.166617][ T5839] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.284281][   T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  154.299025][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.338534][   T10] usb 1-1: Product: syz
[  154.346085][ T5966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  154.360917][   T10] usb 1-1: Manufacturer: syz
[  154.387305][   T10] usb 1-1: SerialNumber: syz
[  154.392620][ T5966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  154.418795][ T5966] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  154.420668][   T10] usb 1-1: config 0 descriptor??
[  154.456661][ T5966] plantronics 0003:047F:FFFF.000A: unbalanced collection at end of report description
[  154.480145][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  154.499045][ T5966] plantronics 0003:047F:FFFF.000A: parse failed
[  154.521214][ T5966] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22
[  154.554814][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  154.590036][ T5966] usb 3-1: USB disconnect, device number 7
[  154.598411][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  154.628647][   T10] usb 1-1: media controller created
[  154.766980][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  154.778190][ T7368] loop5: detected capacity change from 0 to 22
[  154.817197][ T7368] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  154.884032][ T7368] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  154.987186][   T10] DVB: Unable to find symbol mt352_attach()
[  155.164895][   T10] DVB: Unable to find symbol nxt6000_attach()
[  155.201491][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  155.216299][ T7383] loop5: detected capacity change from 0 to 128
[  155.255833][ T7383] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  155.263297][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  155.311646][ T7383] hpfs: filesystem error: improperly stopped
[  155.317680][ T7383] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  155.340349][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  155.360271][ T7383] hpfs: You really don't want any checks? You are crazy...
[  155.387820][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  155.400995][ T5966] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  155.417637][ T7383] hpfs: hpfs_map_sector(): read error
[  155.430917][ T6028] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  155.454321][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  155.461872][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  155.466175][ T7383] hpfs: code page support is disabled
[  155.488308][ T7383] hpfs: hpfs_map_4sectors(): unaligned read
[  155.520931][   T10] usb 1-1: USB disconnect, device number 5
[  155.534962][ T7383] hpfs: hpfs_map_4sectors(): unaligned read
[  155.557927][ T7383] hpfs: filesystem error: unable to find root dir
[  155.620879][ T5966] usb 5-1: Using ep0 maxpacket: 32
[  155.645222][ T5966] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  155.671821][ T6028] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.699057][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.718079][ T6028] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.741887][ T5966] usb 5-1: Product: syz
[  155.742452][ T6028] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.761770][ T5966] usb 5-1: Manufacturer: syz
[  155.794203][ T5966] usb 5-1: SerialNumber: syz
[  155.813834][ T6028] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  155.839761][ T7394] loop2: detected capacity change from 0 to 1024
[  155.844353][ T5966] usb 5-1: config 0 descriptor??
[  155.866233][ T6028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.882107][ T5966] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  155.882912][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  155.929297][ T6028] usb 2-1: config 0 descriptor??
[  155.941319][ T5966] dvb-usb: bulk message failed: -22 (2/0)
[  155.961082][ T7394] hfsplus: request for non-existent node 211 in B*Tree
[  155.968073][ T7394] hfsplus: request for non-existent node 211 in B*Tree
[  155.972219][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  156.005354][ T7397] loop3: detected capacity change from 0 to 256
[  156.061530][ T7397] exfat: Deprecated parameter 'utf8'
[  156.067396][ T5966] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  156.084371][ T7395] loop0: detected capacity change from 0 to 4096
[  156.100959][ T7397] exfat: Deprecated parameter 'namecase'
[  156.107701][ T7381] dvb-usb: bulk message failed: -22 (3/0)
[  156.116527][ T5966] usb 5-1: media controller created
[  156.159935][ T7397] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5be3a17, utbl_chksum : 0xe619d30d)
[  156.194950][ T7395] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  156.218571][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  156.352413][ T7395] ntfs3(loop0): ino=18, mi_enum_attr
[  156.365199][ T5966] usb 5-1: selecting invalid altsetting 7
[  156.381829][ T7395] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  156.397547][ T5966] cxusb: set interface failed
[  156.413454][ T5966] dvb-usb: bulk message failed: -22 (1/0)
[  156.571617][ T5966] DVB: Unable to find symbol lgdt330x_attach()
[  156.583272][ T5966] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  156.638739][   T10] usb 2-1: USB disconnect, device number 6
[  156.843698][ T5966] rc_core: IR keymap rc-dvico-portable not found
[  156.850085][ T5966] Registered IR keymap rc-empty
[  156.918383][ T5966] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  156.978361][ T5966] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9
[  157.026333][ T5966] dvb-usb: schedule remote query interval to 100 msecs.
[  157.080863][ T5966] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  157.123659][ T5966] usb 5-1: USB disconnect, device number 6
[  157.311921][ T7425] loop3: detected capacity change from 0 to 128
[  157.353448][ T7425] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.375054][ T7427] pim6reg: entered allmulticast mode
[  157.375180][ T7425] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.402658][ T5966] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  157.404062][ T7432] pim6reg: left allmulticast mode
[  157.709708][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.917470][ T7443] mkiss: ax0: crc mode is auto.
[  157.976577][ T7406] loop5: detected capacity change from 0 to 32768
[  158.049535][ T7406] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.333488][ T7406] XFS (loop5): Ending clean mount
[  158.363544][ T7406] XFS (loop5): Quotacheck needed: Please wait.
[  158.372913][ T7466] loop0: detected capacity change from 0 to 8
[  158.426728][ T7464] sp0: Synchronizing with TNC
[  158.566027][ T7406] XFS (loop5): Quotacheck: Done.
[  158.573837][ T7473] capability: warning: `syz.3.513' uses 32-bit capabilities (legacy support in use)
[  158.857758][ T5826] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.878227][ T7471] loop1: detected capacity change from 0 to 8192
[  159.234665][ T7489] loop4: detected capacity change from 0 to 512
[  159.271551][ T5838] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  159.298160][ T7489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  159.330740][ T7489] EXT4-fs (loop4): 1 truncate cleaned up
[  159.378039][ T7489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.453486][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  159.476463][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.496323][ T5838] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  159.527784][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.548315][ T7498] bridge0: entered promiscuous mode
[  159.582380][ T5838] usb 3-1: config 0 descriptor??
[  159.601060][ T7498] macvlan2: entered promiscuous mode
[  159.736049][ T7500] xt_l2tp: v2 tid > 0xffff: 1114244
[  159.785752][ T7486] loop0: detected capacity change from 0 to 32768
[  159.856200][ T7486] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  159.889639][ T7497] loop1: detected capacity change from 0 to 4096
[  159.994539][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.037945][ T5838] isku 0003:1E7D:319C.000C: report_id 0 is invalid
[  160.064576][ T7497] ntfs3(loop1): ino=b, mi_enum_attr
[  160.065078][ T5842] (syz-executor,5842,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  160.076495][ T5838] isku 0003:1E7D:319C.000C: item 0 4 1 8 parsing failed
[  160.108672][ T7497] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  160.152475][ T5838] isku 0003:1E7D:319C.000C: parse failed
[  160.161409][ T7497] ntfs3(loop1): Failed to load $Extend (-22).
[  160.175738][ T5838] isku 0003:1E7D:319C.000C: probe with driver isku failed with error -22
[  160.176136][ T5842] ocfs2: Unmounting device (7,0) on (node local)
[  160.194780][ T7497] ntfs3(loop1): Failed to initialize $Extend.
[  160.251854][ T7497] ntfs3(loop1): ino=1e, "file1" attr_set_size
[  160.267233][ T5838] usb 3-1: USB disconnect, device number 8
[  160.359965][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.705898][ T5954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.974246][ T5954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.064669][ T5954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.168813][ T7527] loop1: detected capacity change from 0 to 128
[  161.169076][ T7528] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  161.182666][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.541'.
[  161.184083][ T7524] mkiss: ax0: crc mode is auto.
[  161.222117][ T7528] VFS: Can't find a romfs filesystem on dev nullb0.
[  161.222117][ T7528] 
[  161.288236][ T7527] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.372874][ T7527] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.379210][ T5954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.487473][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.636232][ T7535] vim2m vim2m.0: vidioc_s_fmt queue busy
[  161.642738][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  161.654592][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.662582][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.681362][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.699450][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  162.337526][ T5954] bridge_slave_1: left allmulticast mode
[  162.353576][ T5954] bridge_slave_1: left promiscuous mode
[  162.392181][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.558486][ T5954] bridge_slave_0: left allmulticast mode
[  162.572003][ T5954] bridge_slave_0: left promiscuous mode
[  162.588685][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.602369][ T7565] loop2: detected capacity change from 0 to 8192
[  162.648493][ T7567] process 'syz.1.556' launched './file2' with NULL argv: empty string added
[  163.010711][ T7547] loop3: detected capacity change from 0 to 32768
[  163.044614][ T7547] (syz.3.548,7547,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.087951][ T7547] (syz.3.548,7547,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.136055][ T7547] JBD2: Ignoring recovery information on journal
[  163.176378][ T5938] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  163.179715][ T7579] loop5: detected capacity change from 0 to 512
[  163.251359][ T7547] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  163.334739][ T7579] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.563: corrupted inode contents
[  163.345293][ T5938] usb 2-1: Using ep0 maxpacket: 32
[  163.364828][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.388365][ T7579] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.563: mark_inode_dirty error
[  163.396200][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.408816][ T7579] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.563: bg 0: block 112: padding at end of block bitmap is not set
[  163.431512][ T5938] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  163.442677][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.470408][ T5938] usb 2-1: config 0 descriptor??
[  163.478913][ T7579] Quota error (device loop5): write_blk: dquota write failed
[  163.512988][ T7579] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  163.523886][ T7579] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.563: Failed to acquire dquot type 0
[  163.539065][ T7579] EXT4-fs (loop5): 1 truncate cleaned up
[  163.555462][ T7579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.571558][ T7579] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.596823][ T5839] ocfs2: Unmounting device (7,3) on (node local)
[  163.643491][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.741224][ T5837] Bluetooth: hci4: command tx timeout
[  163.785745][ T5954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.819016][ T5954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.840913][ T5954] bond0 (unregistering): Released all slaves
[  163.931817][ T5938] greenasia 0003:0E8F:0012.000D: item fetching failed at offset 0/3
[  163.951926][ T5938] greenasia 0003:0E8F:0012.000D: parse failed
[  163.958062][ T5938] greenasia 0003:0E8F:0012.000D: probe with driver greenasia failed with error -22
[  164.155802][ T6028] usb 2-1: USB disconnect, device number 7
[  164.583949][ T7601] loop0: detected capacity change from 0 to 4096
[  164.685747][ T7601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.837845][ T7608] loop3: detected capacity change from 0 to 8192
[  164.958346][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.084212][ T7536] chnl_net:caif_netlink_parms(): no params data found
[  165.281619][ T5954] hsr_slave_0: left promiscuous mode
[  165.324129][ T5954] hsr_slave_1: left promiscuous mode
[  165.350781][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.398343][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.437724][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.464291][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.529454][ T7591] loop2: detected capacity change from 0 to 32768
[  165.576010][ T7597] loop5: detected capacity change from 0 to 32768
[  165.626001][   T30] audit: type=1800 audit(1762347430.096:13): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.568" name="file1" dev="loop2" ino=4 res=0 errno=0
[  165.662341][ T7597] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  165.702031][ T5954] veth1_macvtap: left promiscuous mode
[  165.758238][ T5954] veth0_macvtap: left promiscuous mode
[  165.810124][ T5954] veth1_vlan: left promiscuous mode
[  165.826003][ T5837] Bluetooth: hci4: command tx timeout
[  165.846506][ T7597] XFS (loop5): Ending clean mount
[  165.873877][ T5954] veth0_vlan: left promiscuous mode
[  165.902336][ T7597] XFS (loop5): Quotacheck needed: Please wait.
[  166.021670][ T7597] XFS (loop5): Quotacheck: Done.
[  166.061904][ T7643] loop3: detected capacity change from 0 to 2048
[  166.176531][ T7643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.277517][ T7643] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.579: bit already cleared for inode 15
[  166.291556][ T5826] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.370504][ T7652] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.579: reserved inode found cleared - inode=1
[  166.401632][ T7651] loop2: detected capacity change from 0 to 128
[  166.612825][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.743304][ T7656] loop2: detected capacity change from 0 to 512
[  166.804927][ T7656] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  166.877919][ T7656] EXT4-fs (loop2): 1 truncate cleaned up
[  166.896807][ T7661] loop3: detected capacity change from 0 to 256
[  166.918793][ T7656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.010030][ T7667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.583'.
[  167.029457][ T7667] netlink: 56 bytes leftover after parsing attributes in process `syz.5.583'.
[  167.167973][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.591243][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  167.669386][ T7683] program syz.3.597 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.785702][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short
[  167.803647][ T5838] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  167.853998][ T5838] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  167.868193][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.894720][ T5838] usb 6-1: Product: syz
[  167.898894][ T5838] usb 6-1: Manufacturer: syz
[  167.900965][ T5837] Bluetooth: hci4: command tx timeout
[  167.949759][ T5838] usb 6-1: SerialNumber: syz
[  168.096356][ T7693] loop1: detected capacity change from 0 to 8192
[  168.451304][ T5954] team0 (unregistering): Port device team_slave_1 removed
[  168.627621][ T5954] team0 (unregistering): Port device team_slave_0 removed
[  168.855103][ T5838] usb 6-1: reset high-speed USB device number 6 using dummy_hcd
[  169.033927][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short
[  169.140306][ T7703] loop1: detected capacity change from 0 to 32768
[  169.176842][ T7703] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.295782][ T5838] usb 6-1: USB disconnect, device number 6
[  169.302119][ T7703] XFS (loop1): Ending clean mount
[  169.307494][ T7703] XFS (loop1): Quotacheck needed: Please wait.
[  169.380209][ T7703] XFS (loop1): Quotacheck: Done.
[  169.438920][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.518381][ T7712] batadv0: entered promiscuous mode
[  169.552658][ T7712] macvtap1: entered promiscuous mode
[  169.559566][ T7712] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  169.639434][ T7712] batadv0: left promiscuous mode
[  169.981546][ T5837] Bluetooth: hci4: command tx timeout
[  170.267044][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.284402][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.303061][ T7536] bridge_slave_0: entered allmulticast mode
[  170.339304][ T7536] bridge_slave_0: entered promiscuous mode
[  170.371661][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.380024][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.396081][ T7536] bridge_slave_1: entered allmulticast mode
[  170.414772][ T7536] bridge_slave_1: entered promiscuous mode
[  170.651881][ T7757] loop0: detected capacity change from 0 to 512
[  170.655276][ T7536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.659879][ T7757] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.715446][ T7536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.716595][ T7757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.778601][ T7757] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.626: bad orphan inode 131083
[  170.864463][ T7757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.868662][ T5954] IPVS: stop unused estimator thread 0...
[  170.976292][ T7536] team0: Port device team_slave_0 added
[  171.048595][ T7536] team0: Port device team_slave_1 added
[  171.136026][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.180331][ T7751] loop1: detected capacity change from 0 to 32768
[  171.190695][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.251509][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.320966][ T7536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.343818][ T7751] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  171.348015][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.399879][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.479936][ T7751] XFS (loop1): Ending clean mount
[  171.514444][ T7536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.614506][ T5832] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  171.786937][ T6028] kernel read not supported for file /vga_arbiter (pid: 6028 comm: kworker/0:7)
[  171.994532][ T7536] hsr_slave_0: entered promiscuous mode
[  172.022394][ T7536] hsr_slave_1: entered promiscuous mode
[  172.040031][ T7536] debugfs: 'hsr0' already exists in 'hsr'
[  172.056138][ T7536] Cannot create hsr debugfs directory
[  172.217105][ T7764] loop5: detected capacity change from 0 to 32768
[  172.801869][ T6028] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  172.941048][   T10] kernel write not supported for file /input/event0 (pid: 10 comm: kworker/0:1)
[  172.982919][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.026983][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.080953][ T6028] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  173.141030][ T6028] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.167368][ T6028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.210907][ T6028] usb 1-1: config 0 descriptor??
[  173.367429][ T7536] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  173.420103][ T7536] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  173.466732][ T7536] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  173.495364][ T7536] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  173.657899][ T6028] plantronics 0003:047F:FFFF.000E: collection stack underflow
[  173.688202][ T6028] plantronics 0003:047F:FFFF.000E: item 0 2 0 12 parsing failed
[  173.708923][ T7844] loop5: detected capacity change from 0 to 256
[  173.712940][ T6028] plantronics 0003:047F:FFFF.000E: parse failed
[  173.734603][ T6028] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22
[  173.816126][ T7844] FAT-fs (loop5): Directory bread(block 64) failed
[  173.844415][ T7844] FAT-fs (loop5): Directory bread(block 65) failed
[  173.860362][ T7536] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.867977][ T7844] FAT-fs (loop5): Directory bread(block 66) failed
[  173.874750][ T7844] FAT-fs (loop5): Directory bread(block 67) failed
[  173.883683][ T6028] usb 1-1: USB disconnect, device number 6
[  173.905916][ T7844] FAT-fs (loop5): Directory bread(block 68) failed
[  173.928578][ T7536] 8021q: adding VLAN 0 to HW filter on device team0
[  173.940898][ T7844] FAT-fs (loop5): Directory bread(block 69) failed
[  173.967191][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.974426][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.978915][ T7818] loop1: detected capacity change from 0 to 32768
[  173.983828][ T7844] FAT-fs (loop5): Directory bread(block 70) failed
[  174.021720][ T7844] FAT-fs (loop5): Directory bread(block 71) failed
[  174.045556][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.052743][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.086880][ T7844] FAT-fs (loop5): Directory bread(block 72) failed
[  174.087053][ T7818] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  174.106021][ T7844] FAT-fs (loop5): Directory bread(block 73) failed
[  174.357145][ T7818] XFS (loop1): Ending clean mount
[  174.387893][ T7818] XFS (loop1): Quotacheck needed: Please wait.
[  174.493473][ T7818] XFS (loop1): Quotacheck: Done.
[  174.508835][ T7831] loop2: detected capacity change from 0 to 32768
[  174.593056][ T7831] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.648 (7831)
[  174.673924][ T7831] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  174.710939][ T7831] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  174.797299][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.062723][ T7831] BTRFS info (device loop2): enabling ssd optimizations
[  175.140894][ T7831] BTRFS info (device loop2): turning on async discard
[  175.147717][ T7831] BTRFS info (device loop2): enabling free space tree
[  175.229314][ T7831] BTRFS info (device loop2): use lzo compression, level 1
[  175.309437][ T7536] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.612830][ T5834] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  175.869041][ T7915] loop5: detected capacity change from 0 to 16
[  175.999278][ T7915] erofs (device loop5): mounted with root inode @ nid 36.
[  176.406245][ T7871] loop0: detected capacity change from 0 to 32768
[  176.476009][ T7871] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.655 (7871)
[  176.679452][ T7871] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  176.717798][ T7871] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  176.721238][ T5919] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  176.740523][ T7536] veth0_vlan: entered promiscuous mode
[  176.833451][ T7536] veth1_vlan: entered promiscuous mode
[  176.970896][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.028423][ T7536] veth0_macvtap: entered promiscuous mode
[  177.047503][ T7871] BTRFS info (device loop0): rebuilding free space tree
[  177.054635][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  177.095148][ T5919] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  177.101046][ T7871] BTRFS info (device loop0): disabling free space tree
[  177.130165][ T7536] veth1_macvtap: entered promiscuous mode
[  177.147411][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  177.160378][ T7871] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  177.181426][ T5919] usb 3-1: SerialNumber: syz
[  177.218080][ T7871] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  177.224309][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.294663][ T7871] BTRFS info (device loop0): setting nodatasum
[  177.314423][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.343317][ T7871] BTRFS info (device loop0): setting nodatacow
[  177.373286][ T7966] loop3: detected capacity change from 0 to 8
[  177.379980][ T7871] BTRFS info (device loop0): turning off barriers
[  177.385715][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.407830][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.427517][ T7966] squashfs image failed sanity check
[  177.433476][ T7871] BTRFS info (device loop0): force clearing of disk cache
[  177.448850][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.487447][ T5919] usb 3-1: 0:2 : does not exist
[  177.520915][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.643834][ T5919] usb 3-1: USB disconnect, device number 9
[  177.834400][ T6341] udevd[6341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.849592][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.875232][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.979046][ T5842] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  178.130197][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.150743][ T7935] loop1: detected capacity change from 0 to 32768
[  178.178524][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.448287][ T7948] loop5: detected capacity change from 0 to 32768
[  178.559711][ T7948] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.671 (7948)
[  178.663572][ T7948] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  178.750544][ T7948] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  179.076233][ T7948] BTRFS info (device loop5): enabling ssd optimizations
[  179.117791][ T7948] BTRFS info (device loop5): turning on async discard
[  179.163406][ T7948] BTRFS info (device loop5): enabling free space tree
[  179.290519][   T30] audit: type=1800 audit(1762347443.756:14): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.671" name="file1" dev="loop5" ino=260 res=0 errno=0
[  179.421819][ T5826] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  180.121733][ T8027] loop0: detected capacity change from 0 to 2048
[  180.183938][ T8029] loop2: detected capacity change from 0 to 256
[  180.343906][ T8029] FAT-fs (loop2): Directory bread(block 64) failed
[  180.385978][ T8027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.424186][ T8029] FAT-fs (loop2): Directory bread(block 65) failed
[  180.487790][ T8029] FAT-fs (loop2): Directory bread(block 66) failed
[  180.558372][ T8029] FAT-fs (loop2): Directory bread(block 67) failed
[  180.631123][ T8029] FAT-fs (loop2): Directory bread(block 68) failed
[  180.691379][ T8029] FAT-fs (loop2): Directory bread(block 69) failed
[  180.698036][ T8029] FAT-fs (loop2): Directory bread(block 70) failed
[  180.811187][ T8029] FAT-fs (loop2): Directory bread(block 71) failed
[  180.812066][ T8025] loop1: detected capacity change from 0 to 131072
[  180.827311][ T8029] FAT-fs (loop2): Directory bread(block 72) failed
[  180.837398][ T8025] F2FS-fs (loop1): Allow to mount readonly mode only
[  180.868506][ T8009] loop6: detected capacity change from 0 to 32768
[  180.892565][ T8029] FAT-fs (loop2): Directory bread(block 73) failed
[  180.917473][ T8009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.684 (8009)
[  180.946404][   T60] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  180.994253][   T60] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  181.017418][ T8009] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.038265][   T60] EXT4-fs (loop0): This should not happen!! Data will be lost
[  181.038265][   T60] 
[  181.051306][ T8009] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  181.080601][   T60] EXT4-fs (loop0): Total free blocks count 0
[  181.102875][   T60] EXT4-fs (loop0): Free/Dirty block details
[  181.141255][   T60] EXT4-fs (loop0): free_blocks=66060288
[  181.146958][   T60] EXT4-fs (loop0): dirty_blocks=64
[  181.154707][ T8016] loop3: detected capacity change from 0 to 32768
[  181.170872][   T60] EXT4-fs (loop0): Block reservation details
[  181.189277][   T60] EXT4-fs (loop0): i_reserved_data_blocks=4
[  181.197146][   T60] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 44 with error 28
[  181.396606][ T8009] BTRFS info (device loop6): rebuilding free space tree
[  181.425912][ T8016] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.521879][ T8009] BTRFS info (device loop6): disabling free space tree
[  181.561027][ T8009] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  181.605122][ T8024] loop5: detected capacity change from 0 to 32768
[  181.612307][ T8009] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  181.642980][ T8016] XFS (loop3): Ending clean mount
[  181.685752][ T8024] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 0c9fc977-3be0-46fd-8b00-71890a7bef72
[  181.703806][ T8016] XFS (loop3): Quotacheck needed: Please wait.
[  181.715730][ T8009] BTRFS info (device loop6): checking UUID tree
[  181.744534][ T8024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.688 (8024)
[  181.774372][ T8009] BTRFS info (device loop6): setting nodatasum
[  181.789788][ T8066] loop2: detected capacity change from 0 to 1024
[  181.807659][ T8009] BTRFS info (device loop6): enabling ssd optimizations
[  181.837401][ T8009] BTRFS info (device loop6): turning off barriers
[  181.864702][ T8016] XFS (loop3): Quotacheck: Done.
[  181.891063][ T8009] BTRFS info (device loop6): disabling tree log
[  181.898540][ T8009] BTRFS info (device loop6): turning on flush-on-commit
[  181.911123][ T8009] BTRFS info (device loop6): force clearing of disk cache
[  181.918252][ T8009] BTRFS info (device loop6): max_inline set to 0
[  181.931371][ T8024] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.981081][ T8024] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  182.038453][ T8066] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.090554][ T5839] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  182.302439][ T7536] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.318257][ T8024] BTRFS info (device loop5): setting nodatasum
[  182.361156][ T8024] BTRFS info (device loop5): setting nodatacow
[  182.367349][ T8024] BTRFS info (device loop5): turning on async discard
[  182.429569][ T8024] BTRFS info (device loop5): enabling free space tree
[  182.447705][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  182.494204][ T8024] BTRFS info (device loop5): max_inline set to 0
[  182.942151][ T5826] BTRFS info (device loop5): last unmount of filesystem 0c9fc977-3be0-46fd-8b00-71890a7bef72
[  183.048038][   T30] audit: type=1800 audit(1762347447.516:15): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.703" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  183.271299][ T8111] netlink: 'syz.6.707': attribute type 11 has an invalid length.
[  183.279068][ T8111] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.707'.
[  183.524224][ T8120] ptrace attach of "./syz-executor exec"[5826] was attempted by ""[8120]
[  184.191360][ T8126] loop3: detected capacity change from 0 to 4096
[  184.335854][ T8139] loop2: detected capacity change from 0 to 1024
[  184.381544][ T8138] Invalid logical block size (2310)
[  184.654166][ T8106] loop1: detected capacity change from 0 to 32768
[  184.743835][ T5954] hfsplus: b-tree write err: -5, ino 4
[  184.866580][ T8106] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  185.096746][ T8106] XFS (loop1): Ending clean mount
[  185.220496][   T30] audit: type=1326 audit(1762347449.686:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.0.726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f512198f6c9 code=0x0
[  185.296177][ T8173] loop6: detected capacity change from 0 to 512
[  185.417118][ T8173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.418306][ T5832] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  185.452761][ T8173] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.568846][ T8173] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 14: comm syz.6.728: lblock 19 mapped to illegal pblock 14 (length 15)
[  185.788800][ T8188] netlink: 'syz.1.731': attribute type 10 has an invalid length.
[  185.836382][ T7536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.136591][ T8193] loop6: detected capacity change from 0 to 16
[  186.208380][ T8195] loop1: detected capacity change from 0 to 256
[  186.215775][ T8193] erofs (device loop6): mounted with root inode @ nid 36.
[  186.229871][ T8146] loop5: detected capacity change from 0 to 40427
[  186.301310][ T8193] erofs (device loop6): readahead error at folio 7 @ nid 36
[  186.308841][ T8193] erofs (device loop6): bogus lookback distance 26160 @ lcn 6 of nid 36
[  186.354899][ T8146] F2FS-fs (loop5): invalid crc value
[  186.376607][ T8193] erofs (device loop6): readahead error at folio 6 @ nid 36
[  186.420452][ T8193] erofs (device loop6): readahead error at folio 5 @ nid 36
[  186.464520][ T8193] erofs (device loop6): readahead error at folio 4 @ nid 36
[  186.509163][ T8193] erofs (device loop6): inconsistent algorithmtype 0 for nid 36
[  186.584706][ T8193] erofs (device loop6): readahead error at folio 3 @ nid 36
[  186.633440][ T8193] erofs (device loop6): inconsistent algorithmtype 0 for nid 36
[  186.664831][ T8193] erofs (device loop6): readahead error at folio 1 @ nid 36
[  186.684860][ T8193] erofs (device loop6): bogus lookback distance 0 @ lcn 0 of nid 36
[  186.693835][ T8209] loop2: detected capacity change from 0 to 1024
[  186.736606][ T8211] ip6gre1: entered promiscuous mode
[  186.746152][ T8146] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.756357][ T8193] erofs (device loop6): readahead error at folio 0 @ nid 36
[  186.759222][ T8211] ip6gre1: entered allmulticast mode
[  186.791100][ T8193] syz.6.734: attempt to access beyond end of device
[  186.791100][ T8193] loop6: rw=524288, sector=525136, nr_sectors = 8 limit=16
[  186.812138][ T8146] F2FS-fs (loop5): Start checkpoint disabled!
[  186.818993][ T5838] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  186.854492][ T8146] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  186.881017][ T8193] erofs (device loop6): bogus lookback distance 0 @ lcn 0 of nid 36
[  186.894102][ T8146] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  186.905877][ T8193] erofs (device loop6): bogus lookback distance 0 @ lcn 0 of nid 36
[  186.924852][ T8214] netlink: 320 bytes leftover after parsing attributes in process `syz.1.744'.
[  186.938357][ T8193] erofs (device loop6): read error -117 @ 0 of nid 36
[  187.027036][ T8193] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  187.036333][ T5838] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  187.050983][ T5838] usb 1-1: config 0 has no interface number 0
[  187.065470][   T36] kworker/u8:2: attempt to access beyond end of device
[  187.065470][   T36] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.083453][ T5838] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  187.093160][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.114360][ T5838] usb 1-1: Product: syz
[  187.121820][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  187.121852][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  187.121869][   T36] Workqueue: writeback wb_workfn (flush-7:5)
[  187.121909][   T36] Call Trace:
[  187.121920][   T36]  <TASK>
[  187.121930][   T36]  dump_stack_lvl+0x189/0x250
[  187.122006][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.122041][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  187.122068][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.122102][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.122152][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  187.122202][   T36]  f2fs_write_end_io+0x886/0xb60
[  187.122256][   T36]  __submit_merged_bio+0x27a/0x6a0
[  187.122303][   T36]  __submit_merged_write_cond+0x255/0x530
[  187.122351][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  187.122434][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.122481][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  187.122564][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  187.122601][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.122630][   T36]  ? look_up_lock_class+0x74/0x170
[  187.122680][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  187.122720][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  187.122766][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  187.122809][   T36]  ? __lock_acquire+0xab9/0xd20
[  187.122846][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.122877][   T36]  do_writepages+0x32e/0x550
[  187.122918][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.122946][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  187.122974][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  187.123024][   T36]  __writeback_single_inode+0x145/0xff0
[  187.123060][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.123088][   T36]  ? do_raw_spin_unlock+0x122/0x240
[  187.123129][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  187.123205][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  187.123305][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.123333][   T36]  ? rcu_is_watching+0x15/0xb0
[  187.123363][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.123410][   T36]  wb_writeback+0x43b/0xaf0
[  187.123459][   T36]  ? queue_io+0x3d1/0x590
[  187.123499][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  187.123548][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.123589][   T36]  wb_workfn+0x409/0xef0
[  187.123643][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  187.123680][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.123707][   T36]  ? __lock_acquire+0xab9/0xd20
[  187.123749][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.123782][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.123815][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.123845][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  187.123872][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  187.123902][   T36]  process_scheduled_works+0xae1/0x17b0
[  187.123977][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  187.124016][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.124058][   T36]  worker_thread+0x8a0/0xda0
[  187.124129][   T36]  kthread+0x711/0x8a0
[  187.124168][   T36]  ? __pfx_worker_thread+0x10/0x10
[  187.124196][   T36]  ? __pfx_kthread+0x10/0x10
[  187.124225][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.124259][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.124288][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.124315][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.124345][   T36]  ? __pfx_kthread+0x10/0x10
[  187.124382][   T36]  ret_from_fork+0x4bc/0x870
[  187.124421][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  187.124460][   T36]  ? __switch_to_asm+0x39/0x70
[  187.124480][   T36]  ? __switch_to_asm+0x33/0x70
[  187.124499][   T36]  ? __pfx_kthread+0x10/0x10
[  187.124534][   T36]  ret_from_fork_asm+0x1a/0x30
[  187.124584][   T36]  </TASK>
[  187.124856][   T36] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  187.167221][ T5838] usb 1-1: Manufacturer: syz
[  187.207707][ T8216] loop2: detected capacity change from 0 to 2048
[  187.257556][ T5838] usb 1-1: SerialNumber: syz
[  187.605747][ T5838] usb 1-1: config 0 descriptor??
[  187.631895][ T8216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.709290][ T8229] loop1: detected capacity change from 0 to 64
[  187.733855][ T8216] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.745: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  187.776467][ T8216] EXT4-fs (loop2): Remounting filesystem read-only
[  187.836404][ T5838] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823)
[  187.861432][ T5838] uvcvideo 1-1:0.64: No valid video chain found.
[  187.873110][ T5838] usb 1-1: USB disconnect, device number 7
[  188.005461][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.632487][ T8250] loop0: detected capacity change from 0 to 64
[  188.825367][   T36] kworker/u8:2: attempt to access beyond end of device
[  188.825367][   T36] loop1: rw=1, sector=161, nr_sectors = 1 limit=64
[  188.890119][   T36] Buffer I/O error on dev loop1, logical block 161, lost async page write
[  188.920398][   T36] kworker/u8:2: attempt to access beyond end of device
[  188.920398][   T36] loop1: rw=1, sector=162, nr_sectors = 1 limit=64
[  188.962056][ T8257] loop2: detected capacity change from 0 to 512
[  188.989643][   T36] Buffer I/O error on dev loop1, logical block 162, lost async page write
[  189.000903][ T8257] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  189.036289][   T36] kworker/u8:2: attempt to access beyond end of device
[  189.036289][   T36] loop1: rw=1, sector=163, nr_sectors = 1 limit=64
[  189.096287][   T36] Buffer I/O error on dev loop1, logical block 163, lost async page write
[  189.113179][ T8257] EXT4-fs (loop2): 1 truncate cleaned up
[  189.163547][ T8257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.194461][   T36] kworker/u8:2: attempt to access beyond end of device
[  189.194461][   T36] loop1: rw=1, sector=167, nr_sectors = 1 limit=64
[  189.296871][   T36] Buffer I/O error on dev loop1, logical block 167, lost async page write
[  189.341521][   T36] kworker/u8:2: attempt to access beyond end of device
[  189.341521][   T36] loop1: rw=1, sector=169, nr_sectors = 1 limit=64
[  189.411292][   T36] Buffer I/O error on dev loop1, logical block 169, lost async page write
[  189.419908][   T36] kworker/u8:2: attempt to access beyond end of device
[  189.419908][   T36] loop1: rw=1, sector=171, nr_sectors = 1 limit=64
[  189.508182][   T36] Buffer I/O error on dev loop1, logical block 171, lost async page write
[  189.551144][   T36] kworker/u8:2: attempt to access beyond end of device
[  189.551144][   T36] loop1: rw=1, sector=172, nr_sectors = 1 limit=64
[  189.551621][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.625040][   T36] Buffer I/O error on dev loop1, logical block 172, lost async page write
[  189.635810][ T8276] loop0: detected capacity change from 0 to 8
[  189.654513][   T36] kworker/u8:2: attempt to access beyond end of device
[  189.654513][   T36] loop1: rw=1, sector=173, nr_sectors = 1 limit=64
[  189.700422][ T8249] loop6: detected capacity change from 0 to 32768
[  189.726458][   T36] Buffer I/O error on dev loop1, logical block 173, lost async page write
[  189.804470][   T36] Buffer I/O error on dev loop1, logical block 174, lost async page write
[  189.834772][   T36] Buffer I/O error on dev loop1, logical block 175, lost async page write
[  189.861471][   T30] audit: type=1800 audit(1762347454.326:17): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.757" name="file1" dev="loop6" ino=4 res=0 errno=0
[  190.075741][ T8286] loop3: detected capacity change from 0 to 128
[  190.141794][ T8286] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  190.234876][ T8286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.279662][ T8293] loop5: detected capacity change from 0 to 16
[  190.382649][ T8293] erofs (device loop5): mounted with root inode @ nid 36.
[  190.513811][   T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  190.731513][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  190.761525][   T43] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  190.797285][   T43] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  190.797323][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.797348][   T43] usb 7-1: Product: syz
[  190.797367][   T43] usb 7-1: Manufacturer: syz
[  190.797386][   T43] usb 7-1: SerialNumber: syz
[  191.214158][ T8313] loop5: detected capacity change from 0 to 1024
[  191.293701][ T8313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.310917][ T5966] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  191.390621][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.511204][ T5966] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  191.536283][ T5966] usb 2-1: config 0 has no interface number 0
[  191.552873][ T5966] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.590705][ T8288] loop0: detected capacity change from 0 to 32768
[  191.607567][ T5966] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.633293][ T5966] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  191.652513][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.659575][ T8288] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.664554][ T5966] usb 2-1: config 0 descriptor??
[  191.688234][ T8323] loop2: detected capacity change from 0 to 1024
[  191.690992][   T43] usb 7-1: reset high-speed USB device number 2 using dummy_hcd
[  191.739851][ T8288] XFS (loop0): Ending clean mount
[  191.754871][ T8288] XFS (loop0): Quotacheck needed: Please wait.
[  191.768360][ T8335] loop3: detected capacity change from 0 to 512
[  191.807884][ T8339] loop5: detected capacity change from 0 to 128
[  191.836049][ T8288] XFS (loop0): Quotacheck: Done.
[  191.893682][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  191.932961][ T8335] EXT4-fs (loop3): 1 orphan inode deleted
[  191.954266][   T60] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  191.978366][   T60] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1
[  192.002766][ T8335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.034202][ T5842] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  192.044871][ T8335] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.098480][ T5966] prodikeys 0003:041E:2801.000F: item fetching failed at offset 3/7
[  192.122210][ T5966] prodikeys 0003:041E:2801.000F: hid parse failed
[  192.140938][ T5966] prodikeys 0003:041E:2801.000F: probe with driver prodikeys failed with error -22
[  192.186810][   T43] usb 7-1: USB disconnect, device number 2
[  192.348817][ T5966] usb 2-1: USB disconnect, device number 8
[  192.392001][ T8345] loop2: detected capacity change from 0 to 2048
[  192.419327][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.501248][ T8349] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.553648][ T8345] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  192.640765][ T8345] Remounting filesystem read-only
[  192.665160][ T8353] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  192.704025][ T8352] loop5: detected capacity change from 0 to 512
[  192.868590][ T8352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.970237][ T8352] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  193.215555][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.408853][ T8378] loop0: detected capacity change from 0 to 256
[  193.502386][ T8380] loop2: detected capacity change from 0 to 512
[  193.510710][ T8380] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  193.579516][ T8378] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d)
[  193.579641][ T8389] loop5: detected capacity change from 0 to 256
[  193.621875][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  193.628730][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  193.665124][ T8380] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  193.757436][ T8380] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.801: bg 0: block 248: padding at end of block bitmap is not set
[  193.790779][ T8389] FAT-fs (loop5): Directory bread(block 64) failed
[  193.797441][ T8389] FAT-fs (loop5): Directory bread(block 65) failed
[  193.817453][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.807'.
[  193.844217][ T8380] Quota error (device loop2): write_blk: dquota write failed
[  193.871666][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.807'.
[  193.883973][ T8380] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  193.912569][ T8397] netlink: 'syz.6.807': attribute type 15 has an invalid length.
[  193.930205][ T8389] FAT-fs (loop5): Directory bread(block 66) failed
[  193.944629][ T8380] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.801: Failed to acquire dquot type 1
[  193.960267][ T8389] FAT-fs (loop5): Directory bread(block 67) failed
[  194.032421][ T8380] EXT4-fs (loop2): 1 truncate cleaned up
[  194.040452][ T8389] FAT-fs (loop5): Directory bread(block 68) failed
[  194.094307][ T8389] FAT-fs (loop5): Directory bread(block 69) failed
[  194.122133][ T8380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  194.150999][ T8389] FAT-fs (loop5): Directory bread(block 70) failed
[  194.172225][ T8403] loop0: detected capacity change from 0 to 512
[  194.206785][ T8389] FAT-fs (loop5): Directory bread(block 71) failed
[  194.234150][ T8389] FAT-fs (loop5): Directory bread(block 72) failed
[  194.265362][ T8389] FAT-fs (loop5): Directory bread(block 73) failed
[  194.277414][   T30] audit: type=1800 audit(1762347458.746:18): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.801" name="file1" dev="loop2" ino=15 res=0 errno=0
[  194.354966][ T8403] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.403013][ T8410] loop1: detected capacity change from 0 to 1024
[  194.474121][   T60] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  194.491796][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  194.516181][   T60] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1
[  194.538738][ T8413] loop6: detected capacity change from 0 to 128
[  194.631614][ T8415] netlink: 'syz.3.815': attribute type 2 has an invalid length.
[  194.866941][ T8422] loop2: detected capacity change from 0 to 256
[  194.867195][ T5842] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  194.907328][ T8422] exfat: Deprecated parameter 'namecase'
[  194.951554][ T8422] exfat: Deprecated parameter 'utf8'
[  195.071119][ T8422] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  195.296859][ T8433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.818'.
[  195.630651][ T8452] loop5: detected capacity change from 0 to 256
[  195.725815][ T8452] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  195.972882][ T8460] loop3: detected capacity change from 0 to 1764
[  196.052594][ T8460] iso9660: Corrupted directory entry in block 2 of inode 1920
[  196.533476][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'.
[  196.572262][   T30] audit: type=1400 audit(1762347461.026:19): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=",-" pid=8476 comm="syz.5.838"
[  197.017720][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.845'.
[  197.080966][ T8495] netlink: 7 bytes leftover after parsing attributes in process `syz.1.845'.
[  197.172998][ T8503] loop6: detected capacity change from 0 to 64
[  197.412044][ T8508] F2FS-fs: Conflicting test_dummy_encryption options
[  197.721169][ T8520] netlink: 'syz.2.855': attribute type 2 has an invalid length.
[  198.262411][   T13] bio_check_eod: 64 callbacks suppressed
[  198.262443][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.262443][   T13] loop6: rw=1, sector=161, nr_sectors = 1 limit=64
[  198.321410][   T13] buffer_io_error: 54 callbacks suppressed
[  198.321439][   T13] Buffer I/O error on dev loop6, logical block 161, lost async page write
[  198.343480][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  198.350922][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.350922][   T13] loop6: rw=1, sector=162, nr_sectors = 1 limit=64
[  198.364788][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  198.391198][   T13] Buffer I/O error on dev loop6, logical block 162, lost async page write
[  198.410181][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.410181][   T13] loop6: rw=1, sector=163, nr_sectors = 1 limit=64
[  198.461233][   T13] Buffer I/O error on dev loop6, logical block 163, lost async page write
[  198.493408][ T8499] loop5: detected capacity change from 0 to 32768
[  198.508764][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.508764][   T13] loop6: rw=1, sector=167, nr_sectors = 1 limit=64
[  198.534205][   T13] Buffer I/O error on dev loop6, logical block 167, lost async page write
[  198.537115][   T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  198.550973][   T24] usb 2-1: Using ep0 maxpacket: 16
[  198.558598][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  198.572572][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.572572][   T13] loop6: rw=1, sector=169, nr_sectors = 1 limit=64
[  198.594750][ T8499] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  198.596916][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.610869][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  198.639778][   T13] Buffer I/O error on dev loop6, logical block 169, lost async page write
[  198.643404][   T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  198.659909][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  198.678410][   T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  198.695448][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.695448][   T13] loop6: rw=1, sector=171, nr_sectors = 1 limit=64
[  198.708889][   T10] usb 3-1: Manufacturer: syz
[  198.713567][ T8499] XFS (loop5): Ending clean mount
[  198.754011][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.765829][   T13] Buffer I/O error on dev loop6, logical block 171, lost async page write
[  198.775507][   T10] usb 3-1: config 0 descriptor??
[  198.786305][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.786305][   T13] loop6: rw=1, sector=172, nr_sectors = 1 limit=64
[  198.809213][   T13] Buffer I/O error on dev loop6, logical block 172, lost async page write
[  198.815892][   T24] usb 2-1: config 0 descriptor??
[  198.840917][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.840917][   T13] loop6: rw=1, sector=173, nr_sectors = 1 limit=64
[  198.880625][   T13] Buffer I/O error on dev loop6, logical block 173, lost async page write
[  198.928666][   T13] kworker/u8:1: attempt to access beyond end of device
[  198.928666][   T13] loop6: rw=1, sector=174, nr_sectors = 1 limit=64
[  198.930843][ T5826] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  198.951146][   T10] rc_core: IR keymap rc-hauppauge not found
[  198.957063][   T10] Registered IR keymap rc-empty
[  198.967651][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  198.997934][   T13] Buffer I/O error on dev loop6, logical block 174, lost async page write
[  199.009422][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10
[  199.021051][   T13] kworker/u8:1: attempt to access beyond end of device
[  199.021051][   T13] loop6: rw=1, sector=175, nr_sectors = 1 limit=64
[  199.052291][   T13] Buffer I/O error on dev loop6, logical block 175, lost async page write
[  199.163846][ T8559] nbd: must specify a size in bytes for the device
[  199.320252][   T24] logitech-hidpp-device 0003:046D:C262.0010: item fetching failed at offset 6/11
[  199.380383][   T24] logitech-hidpp-device 0003:046D:C262.0010: hidpp_probe:parse failed
[  199.381271][ T8557] rc rc0: two consecutive events of type space
[  199.431361][   T24] logitech-hidpp-device 0003:046D:C262.0010: probe with driver logitech-hidpp-device failed with error -22
[  199.556513][   T24] usb 2-1: USB disconnect, device number 9
[  199.605102][   T10] usb 3-1: USB disconnect, device number 10
[  199.944053][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'.
[  200.139452][ T8561] loop0: detected capacity change from 0 to 32768
[  200.194741][ T8561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.869 (8561)
[  200.295591][ T8561] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.337950][ T8561] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  200.524347][ T8561] BTRFS info (device loop0): enabling ssd optimizations
[  200.546068][ T8561] BTRFS info (device loop0): turning on async discard
[  200.558333][ T8603] loop1: detected capacity change from 0 to 1764
[  200.576985][ T8561] BTRFS info (device loop0): enabling free space tree
[  200.943553][ T5842] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.500576][ T5919] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  201.649613][ T8622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.889'.
[  201.712388][ T5919] usb 2-1: Using ep0 maxpacket: 8
[  201.735526][ T5919] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.783297][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0
[  201.789977][ T5919] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[  201.843257][ T8624] loop5: detected capacity change from 0 to 16
[  201.913430][ T8624] erofs (device loop5): mounted with root inode @ nid 36.
[  201.933182][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.942662][ T8612] loop6: detected capacity change from 0 to 131072
[  201.962162][ T8612] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0)
[  201.974222][ T8612] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  202.016750][   T30] audit: type=1800 audit(1762347466.486:20): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.890" name="file1" dev="loop5" ino=86 res=0 errno=0
[  202.047747][ T8612] F2FS-fs (loop6): invalid crc value
[  202.063464][ T5919] usb 2-1: config 0 descriptor??
[  202.211126][ T8612] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.228482][ T8607] loop2: detected capacity change from 0 to 32768
[  202.235676][ T8612] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  202.242846][ T8612] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  202.407170][ T8607] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  202.599249][ T5919] lenovo 0003:17EF:60FE.0011: unknown main item tag 0x0
[  202.647416][ T5919] lenovo 0003:17EF:60FE.0011: unknown main item tag 0x0
[  202.667977][ T5919] lenovo 0003:17EF:60FE.0011: unknown main item tag 0x0
[  202.668227][ T8607] XFS (loop2): Ending clean mount
[  202.691402][ T5919] lenovo 0003:17EF:60FE.0011: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0
[  202.732251][ T8607] XFS (loop2): Quotacheck needed: Please wait.
[  202.782121][ T5919] usb 2-1: USB disconnect, device number 10
[  202.881246][ T8607] XFS (loop2): Quotacheck: Done.
[  203.037530][ T8650] fido_id[8650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  203.180031][ T5834] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.197564][ T8641] loop3: detected capacity change from 0 to 32768
[  203.254683][ T8641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.895 (8641)
[  203.331011][ T8641] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.381027][ T8641] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  203.443695][ T8658] loop0: detected capacity change from 0 to 1024
[  203.536931][ T8658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  203.569407][ T8658] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.676844][ T8641] BTRFS info (device loop3): enabling ssd optimizations
[  203.741249][ T8641] BTRFS info (device loop3): turning on async discard
[  203.748230][ T8641] BTRFS info (device loop3): enabling free space tree
[  203.750972][ T8673] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  203.919811][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  204.162877][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.558432][ T8697] netlink: 204 bytes leftover after parsing attributes in process `syz.3.907'.
[  204.601844][ T8697] netlink: 72 bytes leftover after parsing attributes in process `syz.3.907'.
[  204.610757][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.907'.
[  204.616074][ T8700] macsec1: entered promiscuous mode
[  204.666001][ T8700] macsec1: entered allmulticast mode
[  204.800922][   T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  205.002909][   T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  205.041016][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  205.047828][   T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  205.085933][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.140445][   T10] usb 1-1: config 0 descriptor??
[  205.182516][ T8698] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  205.206166][ T8710] netlink: 104 bytes leftover after parsing attributes in process `syz.3.916'.
[  205.258973][ T8688] loop5: detected capacity change from 0 to 32768
[  205.293641][ T8688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.905 (8688)
[  205.364551][ T8688] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.391063][ T8688] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  205.602852][ T8733] loop6: detected capacity change from 0 to 4096
[  205.635205][   T10] cypress 0003:04B4:DE61.0012: unknown main item tag 0x0
[  205.659788][ T8688] BTRFS info (device loop5): enabling ssd optimizations
[  205.663784][   T10] cypress 0003:04B4:DE61.0012: unknown main item tag 0x0
[  205.706117][ T8688] BTRFS info (device loop5): turning on async discard
[  205.712373][   T10] cypress 0003:04B4:DE61.0012: unknown main item tag 0x0
[  205.720198][   T10] cypress 0003:04B4:DE61.0012: unknown main item tag 0x0
[  205.744738][ T8688] BTRFS info (device loop5): enabling free space tree
[  205.745297][   T10] cypress 0003:04B4:DE61.0012: unknown main item tag 0x0
[  205.805853][ T8733] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  205.828553][ T8739] loop1: detected capacity change from 0 to 1024
[  205.833416][   T10] cypress 0003:04B4:DE61.0012: hidraw0: USB HID v0.05 Device [HID 04b4:de61] on usb-dummy_hcd.0-1/input0
[  205.931701][   T10] usb 1-1: USB disconnect, device number 8
[  205.942514][ T8733] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[  206.128404][ T5826] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.218484][ T8741] fido_id[8741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  206.268378][ T7536] ntfs3(loop6): ino=1b, "file0" ntfs_readdir
[  206.372100][   T13] ntfs3(loop6): ino=9, ntfs3_write_inode failed, -22.
[  206.390923][ T7536] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22.
[  206.449199][ T8706] loop2: detected capacity change from 0 to 32768
[  206.536366][ T8706] non-latin1 character 0x3ff found in JFS file name
[  206.592945][ T8706] mount with iocharset=utf8 to access
[  206.745364][ T8754] loop1: detected capacity change from 0 to 512
[  206.764801][ T8754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  206.823919][ T8754] EXT4-fs error (device loop1): __ext4_iget:5443: inode #2: block 256: comm syz.1.928: invalid block
[  206.862795][ T8754] EXT4-fs (loop1): Remounting filesystem read-only
[  206.944001][ T8754] EXT4-fs (loop1): get root inode failed
[  206.991024][ T8754] EXT4-fs (loop1): mount failed
[  207.110887][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  207.284324][ T5838] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  207.317429][ T8765] loop6: detected capacity change from 0 to 4096
[  207.326780][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.365602][ T5838] usb 4-1: config 0 descriptor??
[  207.616897][ T8765] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  207.731735][ T8765] ntfs3(loop6): Failed to load $Extend (-22).
[  207.738799][ T8765] ntfs3(loop6): Failed to initialize $Extend.
[  207.789087][ T8774] pim6reg9: entered allmulticast mode
[  207.839849][ T5838] nzxt-smart2 0003:1E71:2009.0013: ignoring exceeding usage max
[  207.895236][ T5838] nzxt-smart2 0003:1E71:2009.0013: unbalanced collection at end of report description
[  207.950397][ T5838] nzxt-smart2 0003:1E71:2009.0013: probe with driver nzxt-smart2 failed with error -22
[  208.103289][   T10] usb 4-1: USB disconnect, device number 5
[  208.279736][ T8788] loop2: detected capacity change from 0 to 1024
[  208.297477][ T8788] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  208.332046][ T8788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.468912][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.627878][ T8802] loop6: detected capacity change from 0 to 1024
[  208.756097][ T8802] hfsplus: invalid extended attribute record
[  208.934965][ T1103] hfsplus: b-tree write err: -5, ino 8
[  208.955025][ T8805] loop2: detected capacity change from 0 to 4096
[  209.036667][ T8813] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.578478][ T8796] loop0: detected capacity change from 0 to 32768
[  209.650290][ T8796] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.762609][ T8796] XFS (loop0): Ending clean mount
[  209.784842][ T8796] XFS (loop0): Quotacheck needed: Please wait.
[  209.889598][ T8796] XFS (loop0): Quotacheck: Done.
[  210.087136][ T8841] loop5: detected capacity change from 0 to 2048
[  210.188351][ T5842] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.287540][ T8847] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.480923][ T5937] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  210.622984][ T8851] loop5: detected capacity change from 0 to 256
[  210.642339][ T5937] usb 7-1: Using ep0 maxpacket: 16
[  210.652503][ T5937] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  210.706500][ T5937] usb 7-1: config 0 interface 0 has no altsetting 0
[  210.721329][ T8851] FAT-fs (loop5): Directory bread(block 64) failed
[  210.747115][ T8851] FAT-fs (loop5): Directory bread(block 65) failed
[  210.761160][ T5937] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  210.783271][ T8851] FAT-fs (loop5): Directory bread(block 66) failed
[  210.789795][ T8851] FAT-fs (loop5): Directory bread(block 67) failed
[  210.802362][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.810443][ T5937] usb 7-1: Product: syz
[  210.829127][ T8851] FAT-fs (loop5): Directory bread(block 68) failed
[  210.851142][ T5937] usb 7-1: Manufacturer: syz
[  210.866053][ T5937] usb 7-1: SerialNumber: syz
[  210.883161][ T8851] FAT-fs (loop5): Directory bread(block 69) failed
[  210.915316][ T5937] usb 7-1: config 0 descriptor??
[  210.937115][ T8851] FAT-fs (loop5): Directory bread(block 70) failed
[  210.964243][ T8851] FAT-fs (loop5): Directory bread(block 71) failed
[  211.001494][ T8851] FAT-fs (loop5): Directory bread(block 72) failed
[  211.026422][ T8851] FAT-fs (loop5): Directory bread(block 73) failed
[  211.043188][ T8825] loop2: detected capacity change from 0 to 32768
[  211.152416][ T5937] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input11
[  211.193108][ T8861] loop3: detected capacity change from 0 to 256
[  211.218264][ T8861] exfat: Deprecated parameter 'utf8'
[  211.290035][ T8861] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  211.349118][    C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored
[  211.552313][    C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  211.562875][ T5937] imon:send_packet: packet tx failed (-71)
[  211.592967][ T5937] imon 7-1:0.0: panel buttons/knobs setup failed
[  211.680285][ T8872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.974'.
[  211.748036][ T8875] hfs: can't find a HFS filesystem on dev nullb0
[  211.781996][ T5937] rc_core: IR keymap rc-imon-pad not found
[  211.787861][ T5937] Registered IR keymap rc-empty
[  211.833353][ T5937] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  211.853877][ T5937] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  211.899586][ T5937] imon:send_packet: packet tx failed (-71)
[  211.951131][ T5937] imon 7-1:0.0: remote input dev register failed
[  211.987701][ T5937] imon 7-1:0.0: imon_init_intf0: rc device setup failed
[  212.126281][ T5937] imon 7-1:0.0: unable to initialize intf0, err 0
[  212.148347][ T5937] imon:imon_probe: failed to initialize context!
[  212.169969][ T8885] loop2: detected capacity change from 0 to 1024
[  212.211258][ T5937] imon 7-1:0.0: unable to register, err -19
[  212.257843][ T8885] EXT4-fs: Ignoring removed oldalloc option
[  212.271487][ T8886] loop0: detected capacity change from 0 to 4096
[  212.278235][ T5937] usb 7-1: USB disconnect, device number 3
[  212.300973][ T8885] EXT4-fs: Ignoring removed bh option
[  212.308393][ T8886] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  212.363305][ T8895] loop3: detected capacity change from 0 to 8
[  212.471836][ T8885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.738897][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.902272][ T8902] syz_tun: refused to change device tx_queue_len
[  212.911706][ T8904] netlink: 240 bytes leftover after parsing attributes in process `syz.0.989'.
[  212.943045][ T8902] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  213.724492][ T8888] loop5: detected capacity change from 0 to 40427
[  213.779094][ T8888] F2FS-fs (loop5): build fault injection rate: 14
[  213.810995][ T8888] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  213.857679][ T8888] F2FS-fs (loop5): invalid crc value
[  213.878137][ T8938] loop2: detected capacity change from 0 to 764
[  213.907800][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  213.924153][ T8938] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  213.962500][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  214.001897][ T8942] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1005'.
[  214.176670][ T8944] loop0: detected capacity change from 0 to 1024
[  214.248913][ T8944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.333852][ T8888] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  214.357838][ T8950] binder: 8949:8950 ioctl 40046205 0 returned -22
[  214.416561][ T8888] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  214.441910][ T8951] binder: 8949:8951 ioctl c038943b 0 returned -22
[  214.474015][ T8888] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  214.536830][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.765772][ T8921] loop1: detected capacity change from 0 to 32768
[  214.800418][ T8966] loop3: detected capacity change from 0 to 256
[  214.839964][ T8966] exfat: Deprecated parameter 'namecase'
[  214.881527][ T8966] exfat: Deprecated parameter 'namecase'
[  214.897709][ T8966] exfat: Deprecated parameter 'utf8'
[  214.945828][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'.
[  214.948227][ T8966] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d)
[  215.100312][ T8972] loop0: detected capacity change from 0 to 256
[  215.162865][ T8972] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.747185][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'.
[  215.811230][ T8988] nbd: socks must be embedded in a SOCK_ITEM attr
[  216.145944][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  216.152298][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  216.158354][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  216.164763][ T5845] Bluetooth: hci5: command 0x0406 tx timeout
[  216.834181][ T9028] loop3: detected capacity change from 0 to 512
[  216.883555][ T9028] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  217.054753][ T9028] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1040: bg 0: block 104: invalid block bitmap
[  217.161771][ T9028] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  217.206178][ T9028] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1040: invalid indirect mapped block 1 (level 1)
[  217.273266][ T9028] EXT4-fs (loop3): 1 truncate cleaned up
[  217.293631][ T9028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.491547][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.492475][ T9045] loop2: detected capacity change from 0 to 512
[  217.530525][ T9045] EXT4-fs: Ignoring removed i_version option
[  217.549263][ T9022] loop5: detected capacity change from 0 to 32768
[  217.560592][ T9045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  217.595461][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1037 (9022)
[  217.609564][ T9009] loop0: detected capacity change from 0 to 32768
[  217.618902][ T9045] EXT4-fs (loop2): 1 truncate cleaned up
[  217.673382][ T9009] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  217.682978][ T9022] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.706282][ T9045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.718389][ T9022] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  217.741877][ T9009] XFS (loop0): Ending clean mount
[  217.751121][ T9058] loop6: detected capacity change from 0 to 16
[  217.759459][ T9058] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  217.773197][ T9009] XFS (loop0): Quotacheck needed: Please wait.
[  217.835196][ T9009] XFS (loop0): Quotacheck: Done.
[  217.870060][ T6553] udevd[6553]: incorrect cramfs checksum on /dev/loop6
[  217.964606][ T9022] BTRFS info (device loop5): rebuilding free space tree
[  217.984655][ T5842] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  218.045430][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.052179][ T9022] BTRFS info (device loop5): checking UUID tree
[  218.086335][ T9022] BTRFS info (device loop5): allowing degraded mounts
[  218.153244][ T9022] BTRFS info (device loop5): enabling ssd optimizations
[  218.163551][ T9022] BTRFS info (device loop5): enabling free space tree
[  218.186200][ T9022] BTRFS info (device loop5): force clearing of disk cache
[  218.212433][ T9022] BTRFS info (device loop5): force zlib compression, level 3
[  218.271957][ T9082] hsr0: entered promiscuous mode
[  218.288013][ T9082] macsec1: entered promiscuous mode
[  218.472839][ T9087] loop0: detected capacity change from 0 to 2048
[  218.588161][ T9092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.656380][ T5826] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.166541][ T9104] loop5: detected capacity change from 0 to 256
[  219.355861][ T9104] FAT-fs (loop5): Directory bread(block 64) failed
[  219.387076][ T9104] FAT-fs (loop5): Directory bread(block 65) failed
[  219.433683][ T9104] FAT-fs (loop5): Directory bread(block 66) failed
[  219.467095][ T9104] FAT-fs (loop5): Directory bread(block 67) failed
[  219.511037][ T9104] FAT-fs (loop5): Directory bread(block 68) failed
[  219.518763][ T5142] Bluetooth: hci4: command tx timeout
[  219.577768][ T9104] FAT-fs (loop5): Directory bread(block 69) failed
[  219.623679][ T9104] FAT-fs (loop5): Directory bread(block 70) failed
[  219.630408][ T9104] FAT-fs (loop5): Directory bread(block 71) failed
[  219.725825][ T9104] FAT-fs (loop5): Directory bread(block 72) failed
[  219.764146][ T9104] FAT-fs (loop5): Directory bread(block 73) failed
[  219.983029][ T9089] loop3: detected capacity change from 0 to 32768
[  220.099611][ T9089] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  220.138467][ T9123] loop2: detected capacity change from 0 to 2048
[  220.190175][   T30] audit: type=1800 audit(1762347484.656:21): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1053" name="file2" dev="loop3" ino=17058 res=0 errno=0
[  220.224034][ T9089] (syz.3.1053,9089,1):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -14
[  220.254653][ T9131] loop5: detected capacity change from 0 to 512
[  220.307470][ T9133] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.321886][ T5838] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  220.340425][ T9131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.438944][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  220.483774][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  220.507496][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.507904][ T9131] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.531369][ T5838] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  220.540412][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.561103][ T5839] ocfs2: Unmounting device (7,3) on (node local)
[  220.635133][ T5838] usb 1-1: config 0 descriptor??
[  220.654991][ T9123] Remounting filesystem read-only
[  220.707509][ T9131] EXT4-fs: Cannot change journaled quota options when quota turned on
[  220.722593][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  220.770691][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  220.834177][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  220.892811][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  220.915168][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.923207][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  220.984951][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  221.038508][ T9123] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  221.091412][   T30] audit: type=1800 audit(1762347485.556:22): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1071" name="file2" dev="loop2" ino=16 res=0 errno=0
[  221.255151][ T5838] usb 1-1: string descriptor 0 read error: -71
[  221.280236][ T5838] uclogic 0003:5543:0047.0014: failed retrieving string descriptor #200: -71
[  221.313650][ T5838] uclogic 0003:5543:0047.0014: failed retrieving pen parameters: -71
[  221.366868][ T5838] uclogic 0003:5543:0047.0014: failed probing pen v2 parameters: -71
[  221.412200][ T5838] uclogic 0003:5543:0047.0014: failed probing parameters: -71
[  221.425007][ T9132] loop6: detected capacity change from 0 to 32768
[  221.432197][ T5838] uclogic 0003:5543:0047.0014: probe with driver uclogic failed with error -71
[  221.458604][ T5838] usb 1-1: USB disconnect, device number 9
[  221.482677][ T9155] netlink: 'syz.2.1080': attribute type 4 has an invalid length.
[  221.491582][ T9155] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1080'.
[  221.939105][ T9167] Bluetooth: MGMT ver 1.23
[  222.059209][ T9165] loop3: detected capacity change from 0 to 4096
[  222.231295][ T9165] ntfs3(loop3): ino=5, "/" indx_read
[  222.236673][ T9165] ntfs3(loop3): ino=5, "/" ntfs_readdir
[  222.465626][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  222.828699][ T9196] loop2: detected capacity change from 0 to 128
[  222.877490][ T9196] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  222.892437][ T9196] hpfs: filesystem error: improperly stopped
[  222.907047][ T9196] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  222.920330][ T9196] hpfs: You really don't want any checks? You are crazy...
[  222.942438][ T9199] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  222.969369][ T9199] team0: Device ipvlan2 is already an upper device of the team interface
[  223.009531][ T9196] hpfs: hpfs_map_sector(): read error
[  223.032333][ T9196] hpfs: code page support is disabled
[  223.037896][ T9196] hpfs: hpfs_map_4sectors(): unaligned read
[  223.085854][ T9196] hpfs: hpfs_map_4sectors(): unaligned read
[  223.130888][ T9196] hpfs: filesystem error: unable to find root dir
[  223.874465][ T9230] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1116'.
[  223.940566][ T9232] loop1: detected capacity change from 0 to 512
[  224.035034][ T9232] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1117: error while reading EA inode 32 err=-116
[  224.158759][ T9232] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1117: error while reading EA inode 32 err=-116
[  224.296572][ T9232] EXT4-fs (loop1): 1 orphan inode deleted
[  224.330033][ T9238] loop0: detected capacity change from 0 to 512
[  224.365955][ T9232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.459195][ T9238] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  224.576699][ T9238] EXT4-fs (loop0): mount failed
[  224.844849][ T9227] loop2: detected capacity change from 0 to 131072
[  224.869140][ T9227] F2FS-fs (loop2): Test dummy encryption mode enabled
[  224.921417][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.951497][ T9227] F2FS-fs (loop2): invalid crc value
[  225.010912][ T5938] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  225.048050][ T9227] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  225.059051][ T9227] F2FS-fs (loop2): Start checkpoint disabled!
[  225.089046][ T9227] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  225.100902][ T9227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  225.160912][ T5938] usb 1-1: Using ep0 maxpacket: 32
[  225.184273][ T5938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.225668][ T5938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.255109][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  225.282500][ T5938] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  225.302267][ T5938] usb 1-1: Product: syz
[  225.341724][ T5938] usb 1-1: Manufacturer: syz
[  225.371573][ T5938] hub 1-1:4.0: USB hub found
[  225.571368][ T5938] hub 1-1:4.0: 2 ports detected
[  225.772632][ T5938] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  225.799882][ T5938] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  225.881489][ T5938] usb 1-1: USB disconnect, device number 10
[  226.049294][ T9246] loop3: detected capacity change from 0 to 32768
[  226.069979][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'.
[  226.159870][ T9246] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.294353][ T9246] XFS (loop3): Ending clean mount
[  226.489589][ T9252] loop5: detected capacity change from 0 to 32768
[  226.525636][ T5839] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.588417][ T9289] loop0: detected capacity change from 0 to 2048
[  226.634783][ T9252] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  226.676775][ T9293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.751694][   T30] audit: type=1800 audit(1762347491.216:23): pid=9289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1137" name="file2" dev="loop0" ino=16 res=0 errno=0
[  226.907027][ T9252] XFS (loop5): Ending clean mount
[  227.085612][ T9300] loop6: detected capacity change from 0 to 2048
[  227.211364][ T5826] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  227.274224][ T9307] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  227.696266][ T9317] loop6: detected capacity change from 0 to 16
[  227.727649][ T9315] loop3: detected capacity change from 0 to 2048
[  227.783342][ T9315] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  227.808642][ T9317] erofs (device loop6): mounted with root inode @ nid 36.
[  227.872366][ T9319] 9pnet_rdma: rdma_create_trans (9319): problem binding to privport: 13
[  227.904023][ T6035] udevd[6035]: incorrect nilfs2 checksum on /dev/loop3
[  227.915814][ T9321] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  227.966276][ T9317] erofs (device loop6): inline data across blocks @ nid 36
[  228.007539][ T9317] bio_check_eod: 108 callbacks suppressed
[  228.007558][ T9317] syz.6.1146: attempt to access beyond end of device
[  228.007558][ T9317] loop6: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  228.210254][ T9321] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  228.235043][ T9321] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  228.285840][ T9321] Remounting filesystem read-only
[  228.295528][ T5839] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  228.425003][ T9325] loop2: detected capacity change from 0 to 8192
[  228.524294][ T9332] loop0: detected capacity change from 0 to 2048
[  228.527664][ T6555]  loop2: p1 p2[DM] p4
[  228.560879][ T5937] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  228.562687][ T9332] EXT4-fs (loop0): Test dummy encryption mode enabled
[  228.568691][ T6555] loop2: p1 size 196608 extends beyond EOD, truncated
[  228.653233][ T9332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.675504][ T6555] loop2: p2 start 4292936063 is beyond EOD, truncated
[  228.685007][ T6555] loop2: p4 size 50331648 extends beyond EOD, truncated
[  228.752330][ T9325]  loop2: p1 p2[DM] p4
[  228.769293][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.790476][ T9325] loop2: p1 size 196608 extends beyond EOD, truncated
[  228.827136][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.863522][ T9325] loop2: p2 start 4292936063 is beyond EOD, truncated
[  228.879257][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  228.911225][ T9325] loop2: p4 size 50331648 extends beyond EOD, truncated
[  228.930179][ T5937] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  228.979383][ T9349] loop3: detected capacity change from 0 to 512
[  228.992473][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.041235][ T5937] usb 6-1: config 0 descriptor??
[  229.109738][ T9332] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  229.135286][ T9349] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1159: lblock 0 mapped to illegal pblock 3 (length 1)
[  229.245727][ T9349] EXT4-fs (loop3): Remounting filesystem read-only
[  229.278422][ T9349] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1159: error -117 reading directory block
[  229.295826][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.319889][ T6341] udevd[6341]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  229.335755][ T6551] udevd[6551]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  229.346508][ T9349] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  229.403553][ T9349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.501063][ T9349] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1159: error -117 reading directory block
[  229.524561][ T5937] plantronics 0003:047F:FFFF.0015: unbalanced delimiter at end of report description
[  229.568966][ T6035] udevd[6035]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  229.581644][ T5937] plantronics 0003:047F:FFFF.0015: parse failed
[  229.589931][ T5937] plantronics 0003:047F:FFFF.0015: probe with driver plantronics failed with error -22
[  229.635576][ T6551] udevd[6551]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  229.688000][ T9349] EXT4-fs: group quota file already specified
[  229.743400][ T9361] loop6: detected capacity change from 0 to 4096
[  229.750936][ T5937] usb 6-1: USB disconnect, device number 7
[  229.778245][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'.
[  229.799491][ T9361] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  229.874398][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.351903][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  230.459168][ T9376] loop1: detected capacity change from 0 to 2048
[  230.522567][ T9376] EXT4-fs: Ignoring removed bh option
[  230.543985][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.591556][   T24] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  230.618736][ T9382] loop5: detected capacity change from 0 to 2048
[  230.618899][ T9376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.642420][ T9386] loop2: detected capacity change from 0 to 512
[  230.651691][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.684024][ T9364] loop0: detected capacity change from 0 to 32768
[  230.691592][   T24] usb 4-1: config 0 descriptor??
[  230.698042][ T9382] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00
[  230.731289][   T30] audit: type=1800 audit(1762347495.196:24): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1172" name="file1" dev="loop1" ino=15 res=0 errno=0
[  230.760219][ T9364] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  230.760219][ T9364] 
[  230.787162][ T9382] UDF-fs: warning (device loop5): udf_fill_super: No fileset found
[  231.028639][ T1156] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  231.056693][ T1156] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28
[  231.072435][ T9390] loop6: detected capacity change from 0 to 8
[  231.100863][ T1156] EXT4-fs (loop1): This should not happen!! Data will be lost
[  231.100863][ T1156] 
[  231.110548][ T1156] EXT4-fs (loop1): Total free blocks count 0
[  231.151450][ T9390] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  231.165443][   T24] waltop 0003:172F:0037.0016: item fetching failed at offset 0/3
[  231.185938][ T1156] EXT4-fs (loop1): Free/Dirty block details
[  231.194524][   T24] waltop 0003:172F:0037.0016: probe with driver waltop failed with error -22
[  231.199892][ T6551] udevd[6551]: incorrect cramfs checksum on /dev/loop6
[  231.221109][ T1156] EXT4-fs (loop1): free_blocks=2415919104
[  231.240567][ T1156] EXT4-fs (loop1): dirty_blocks=208
[  231.274256][ T1156] EXT4-fs (loop1): Block reservation details
[  231.280248][ T1156] EXT4-fs (loop1): i_reserved_data_blocks=13
[  231.309372][ T6551] udevd[6551]: incorrect cramfs checksum on /dev/loop6
[  231.354705][   T24] usb 4-1: USB disconnect, device number 6
[  231.451666][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.518689][ T9402] loop0: detected capacity change from 0 to 512
[  231.632062][ T9402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.729618][ T9402] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.910888][ T9402] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #12: comm syz.0.1183: Directory hole found for htree leaf block 0
[  232.135810][ T9422] netlink: 'syz.3.1190': attribute type 11 has an invalid length.
[  232.142557][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.175886][ T9422] netlink: 'syz.3.1190': attribute type 11 has an invalid length.
[  232.223666][ T9422] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1190'.
[  232.723218][ T9439] loop6: detected capacity change from 0 to 8
[  232.740410][ T9440] 8021q: adding VLAN 0 to HW filter on device bond1
[  232.767999][ T9439] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  232.802174][ T6551] udevd[6551]: incorrect cramfs checksum on /dev/loop6
[  232.940039][ T6551] udevd[6551]: incorrect cramfs checksum on /dev/loop6
[  233.088955][ T9417] loop5: detected capacity change from 0 to 32768
[  233.164959][ T9417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1188 (9417)
[  233.258327][ T9417] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.293540][ T9417] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  233.320577][ T9456] loop0: detected capacity change from 0 to 256
[  233.356302][ T9454] loop6: detected capacity change from 0 to 2048
[  233.432211][ T9454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.454132][ T9456] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d)
[  233.505996][ T9417] BTRFS info (device loop5): enabling ssd optimizations
[  233.549856][ T9417] BTRFS info (device loop5): turning on async discard
[  233.572198][ T9417] BTRFS info (device loop5): enabling free space tree
[  233.776195][ T5826] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.912355][ T9445] loop3: detected capacity change from 0 to 32768
[  234.262428][ T9448] loop1: detected capacity change from 0 to 32768
[  234.436896][ T9448] JBD2: Ignoring recovery information on journal
[  234.706994][ T9448] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  234.780939][   T30] audit: type=1800 audit(1762347499.246:25): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1202" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  235.102206][ T5832] ocfs2: Unmounting device (7,1) on (node local)
[  235.371652][ T9469] loop2: detected capacity change from 0 to 40427
[  235.402704][ T9469] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  235.410272][ T9469] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  235.486670][ T9506] loop5: detected capacity change from 0 to 1024
[  235.505024][ T9469] F2FS-fs (loop2): invalid crc value
[  235.537259][ T9506] EXT4-fs: Ignoring removed oldalloc option
[  235.576855][ T9506] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  235.641125][ T9511] loop0: detected capacity change from 0 to 1024
[  235.695028][ T9506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.743541][ T9511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  235.773227][ T9469] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.811180][ T9511] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.889918][ T9511] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1223: lblock 0 mapped to illegal pblock 0 (length 1)
[  235.909057][ T9511] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  235.921406][ T9469] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  235.921448][ T9469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  235.959896][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.028274][ T9526] F2FS-fs (loop2): Corrupted max_depth of 3: 255
[  236.066169][ T9526] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  236.101784][ T9511] EXT4-fs (loop0): This should not happen!! Data will be lost
[  236.101784][ T9511] 
[  236.280153][ T9534] loop1: detected capacity change from 0 to 128
[  236.322392][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  236.345457][ T5834] ------------[ cut here ]------------
[  236.351897][ T5834] kernel BUG at fs/f2fs/inode.c:965!
[  236.376590][ T5834] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  236.379492][ T9534] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  236.383189][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  236.383218][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  236.383236][ T5834] RIP: 0010:f2fs_evict_inode+0x1b35/0x1b60
[  236.383279][ T5834] Code: ce b7 fd 40 84 ed 75 32 e8 28 cb b7 fd 49 bd 00 00 00 00 00 fc ff df e9 e8 e6 ff ff e8 14 cb b7 fd 90 0f 0b e8 0c cb b7 fd 90 <0f> 0b e8 04 cb b7 fd 90 0f 0b 90 e9 f9 fe ff ff e8 f6 ca b7 fd e8
[  236.383301][ T5834] RSP: 0018:ffffc9000212f8d0 EFLAGS: 00010293
[  236.383323][ T5834] RAX: ffffffff84083b84 RBX: ffff888067bc88f8 RCX: ffff888031425ac0
[  236.383343][ T5834] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  236.383359][ T5834] RBP: 0000000000000000 R08: ffff888067bc8d8f R09: 1ffff1100cf791b1
[  236.383376][ T5834] R10: dffffc0000000000 R11: ffffed100cf791b2 R12: ffff888067bc8d88
[  236.383396][ T5834] R13: dffffc0000000000 R14: 1ffff1100cf791b1 R15: 0000000000000002
[  236.383417][ T5834] FS:  000055555ecbd500(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000
[  236.383445][ T5834] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.383463][ T5834] CR2: 00007fc9d91e7dac CR3: 000000005865d000 CR4: 0000000000350ef0
[  236.510360][ T5834] Call Trace:
[  236.513628][ T5834]  <TASK>
[  236.516547][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  236.522185][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  236.527390][ T5834]  ? __pfx_f2fs_evict_inode+0x10/0x10
[  236.532776][ T5834]  evict+0x504/0x9c0
[  236.536674][ T5834]  ? __pfx_evict+0x10/0x10
[  236.541085][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  236.546712][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  236.552334][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  236.557534][ T5834]  evict_inodes+0x64c/0x6d0
[  236.562030][ T5834]  ? __pfx_evict_inodes+0x10/0x10
[  236.567049][ T5834]  ? dput+0x37/0x2b0
[  236.570934][ T5834]  generic_shutdown_super+0x9a/0x2c0
[  236.576222][ T5834]  kill_block_super+0x44/0x90
[  236.580910][ T5834]  kill_f2fs_super+0x399/0x6d0
[  236.585682][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  236.591327][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  236.596613][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  236.602234][ T5834]  ? shrinker_free+0x2ce/0x3e0
[  236.606991][ T5834]  deactivate_locked_super+0xbc/0x130
[  236.612356][ T5834]  cleanup_mnt+0x425/0x4c0
[  236.616760][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  236.622382][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.627670][ T5834]  task_work_run+0x1d4/0x260
[  236.632260][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  236.637367][ T5834]  ? __x64_sys_umount+0x122/0x160
[  236.642390][ T5834]  ? exit_to_user_mode_loop+0x40/0x130
[  236.647844][ T5834]  exit_to_user_mode_loop+0xe9/0x130
[  236.653116][ T5834]  do_syscall_64+0x2bd/0xfa0
[  236.657703][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.662897][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.668952][ T5834]  ? srso_alias_return_thunk+0x5/0xfbef5
[  236.674579][ T5834]  ? exc_page_fault+0xab/0x100
[  236.679342][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.685575][ T5834] RIP: 0033:0x7fcf8f9909f7
[  236.689978][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  236.709570][ T5834] RSP: 002b:00007fffc31a63c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  236.717976][ T5834] RAX: 0000000000000000 RBX: 00007fcf8fa11d7d RCX: 00007fcf8f9909f7
[  236.725934][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc31a6480
[  236.733897][ T5834] RBP: 00007fffc31a6480 R08: 0000000000000000 R09: 0000000000000000
[  236.741852][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc31a7510
[  236.749809][ T5834] R13: 00007fcf8fa11d7d R14: 0000000000039a8b R15: 00007fffc31a7550
[  236.757775][ T5834]  </TASK>
[  236.760774][ T5834] Modules linked in:
[  236.766149][ T5834] ---[ end trace 0000000000000000 ]---
[  236.791105][ T9534] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  236.811012][ T5834] RIP: 0010:f2fs_evict_inode+0x1b35/0x1b60
[  236.831782][ T5834] Code: ce b7 fd 40 84 ed 75 32 e8 28 cb b7 fd 49 bd 00 00 00 00 00 fc ff df e9 e8 e6 ff ff e8 14 cb b7 fd 90 0f 0b e8 0c cb b7 fd 90 <0f> 0b e8 04 cb b7 fd 90 0f 0b 90 e9 f9 fe ff ff e8 f6 ca b7 fd e8
[  236.852450][ T5834] RSP: 0018:ffffc9000212f8d0 EFLAGS: 00010293
[  236.858523][ T5834] RAX: ffffffff84083b84 RBX: ffff888067bc88f8 RCX: ffff888031425ac0
[  236.912482][ T5834] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  236.920491][ T5834] RBP: 0000000000000000 R08: ffff888067bc8d8f R09: 1ffff1100cf791b1
[  236.943866][ T5834] R10: dffffc0000000000 R11: ffffed100cf791b2 R12: ffff888067bc8d88
[  236.944767][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.951881][ T5834] R13: dffffc0000000000 R14: 1ffff1100cf791b1 R15: 0000000000000002
[  236.951908][ T5834] FS:  000055555ecbd500(0000) GS:ffff88812623d000(0000) knlGS:0000000000000000
[  236.982548][ T5834] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.999164][ T9543] trusted_key: encrypted_key: key user:syz not found
[  237.025787][ T5834] CR2: 00007fc9d91b12f8 CR3: 000000005865d000 CR4: 0000000000350ef0
[  237.040889][ T5834] Kernel panic - not syncing: Fatal exception
[  237.047491][ T5834] Kernel Offset: disabled
[  237.051803][ T5834] Rebooting in 86400 seconds..