last executing test programs:

1.203716725s ago: executing program 2 (id=3085):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000280)="03", 0x1}], 0x1)

1.154627349s ago: executing program 2 (id=3087):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x7, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

998.916461ms ago: executing program 2 (id=3092):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x10, &(0x7f0000000280)='nfs_export=on')

950.751314ms ago: executing program 2 (id=3093):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3})

867.703761ms ago: executing program 2 (id=3101):
r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000})
io_uring_enter(r0, 0x0, 0xcbffffff, 0x7, 0x0, 0x0)

648.295608ms ago: executing program 4 (id=3113):
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2)

577.133614ms ago: executing program 0 (id=3115):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x10, 0x61b198b07777e9c3)

577.070224ms ago: executing program 4 (id=3116):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408)

505.94658ms ago: executing program 0 (id=3129):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78)

472.506893ms ago: executing program 4 (id=3120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x7fffffff, 0x7, 0x7, 0x4, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

468.951322ms ago: executing program 0 (id=3131):
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5dc2, &(0x7f0000005d80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

431.513636ms ago: executing program 4 (id=3123):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='veth1_virt_wifi\x00'})

396.583649ms ago: executing program 4 (id=3124):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x29, 0x0, @private, @multicast1}}}})

371.140981ms ago: executing program 1 (id=3127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000800000900020073797a3000000000240007800c00028008000140e00000020c00018008000140e0000002050014001f00000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

339.538963ms ago: executing program 4 (id=3128):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001640)={{r0}, "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"})

338.624243ms ago: executing program 3 (id=3140):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @loopback, 0x6}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x10002}}]}, 0xa0}}, 0x0)

306.474766ms ago: executing program 1 (id=3130):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0xfffffffffffffffe)

213.913743ms ago: executing program 1 (id=3132):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00')
lseek(r0, 0x38, 0x0)

213.841603ms ago: executing program 3 (id=3133):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000f00)=""/154}, 0x20)

213.152753ms ago: executing program 3 (id=3134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010037"], 0x1c}}, 0x804)

174.294166ms ago: executing program 3 (id=3135):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB="5bde435ad0eb8b22e424d351b29c5c1ac72eaae1145c78bfee3f4d7fa3cc4119a826aae2be530e53a9e51599590d2896214fcd4894aa1a5d95e1c542b7c598b2073c6c", @ANYRES8], 0xfd, 0xa7a, &(0x7f0000000980)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x0)

173.311267ms ago: executing program 1 (id=3146):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}})

172.377747ms ago: executing program 0 (id=3147):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @pix_mp={0x1, 0x7e1, 0x32314142, 0x7, 0xa, [{0x3, 0x2}, {0x7, 0x7}, {0x400, 0x7}, {0xffffffff, 0x7}, {0x8a49, 0x5}, {0x3, 0xb1e4}, {0x8, 0xfffff801}, {0x0, 0x10001}], 0x5, 0x7, 0x6}})

115.156411ms ago: executing program 1 (id=3136):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r0)

59.976855ms ago: executing program 3 (id=3137):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0)

59.077885ms ago: executing program 0 (id=3150):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r0, &(0x7f0000002140)=""/245, 0xf5)

22.514638ms ago: executing program 0 (id=3138):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4002, 0x5}, 0x48)

22.441628ms ago: executing program 1 (id=3139):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)

22.370098ms ago: executing program 3 (id=3141):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0xa)

0s ago: executing program 2 (id=3142):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

 for use
[   56.773785][ T4401] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   56.778498][ T7147] loop2: detected capacity change from 0 to 8
[   56.793514][ T4401] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 19ms
[   56.794828][ T4401] gfs2: fsid=syz:syz.0: jid=0: Done
[   56.795659][ T7101] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   56.826414][ T7147] SQUASHFS error: Failed to read block 0x738: -5
[   56.827483][ T7147] SQUASHFS error: Unable to read metadata cache entry [736]
[   57.050135][ T7171] loop1: detected capacity change from 0 to 256
[   57.120673][ T7175] snd_dummy snd_dummy.0: control 0:4:0:syz0:0 is already present
[   57.127680][ T7177] __nla_validate_parse: 11 callbacks suppressed
[   57.127691][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'.
[   57.333048][ T7139] loop3: detected capacity change from 0 to 65536
[   57.356097][ T7201] ieee802154 phy0 wpan0: encryption failed: -22
[   57.375972][ T7139] XFS (loop3): Mounting V5 Filesystem
[   57.456768][ T7139] XFS (loop3): Ending clean mount
[   57.510190][ T7139] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[   57.516874][ T7139] XFS (loop3): Unmount and run xfs_repair
[   57.516900][ T7139] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   57.516920][ T7139] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[   57.516930][ T7139] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[   57.516938][ T7139] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[   57.516946][ T7139] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[   57.516954][ T7139] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   57.516962][ T7139] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[   57.516970][ T7139] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   57.516977][ T7139] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   57.516991][ T7139] XFS (loop3): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74
[   57.517190][ T7139] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   57.517208][ T7139] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[   57.554913][ T4329] XFS (loop3): Unmounting Filesystem
[   57.569397][ T7225] loop4: detected capacity change from 0 to 1024
[   57.619515][ T7144] loop0: detected capacity change from 0 to 131072
[   57.621228][ T7144] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[   57.630559][ T7144] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   57.643469][ T7144] F2FS-fs (loop0): invalid crc value
[   57.681866][ T7144] F2FS-fs (loop0): Found nat_bits in checkpoint
[   57.696815][ T7239] loop1: detected capacity change from 0 to 2048
[   57.710331][ T7144] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   57.711498][ T7144] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   57.714732][ T7241] loop2: detected capacity change from 0 to 4096
[   57.723974][ T7239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   57.905371][ T7258] loop1: detected capacity change from 0 to 256
[   57.946000][ T7262] loop3: detected capacity change from 0 to 64
[   58.023469][ T7268] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[   58.029617][ T7270] loop3: detected capacity change from 0 to 128
[   58.148092][ T7280] loop3: detected capacity change from 0 to 764
[   58.160505][ T7280] rock: directory entry would overflow storage
[   58.161655][ T7280] rock: sig=0x4f50, size=4, remaining=3
[   58.163369][ T7280] iso9660: Corrupted directory entry in block 6 of inode 1792
[   58.227358][ T7292] ieee802154 phy0 wpan0: encryption failed: -22
[   58.241507][ T7254] loop2: detected capacity change from 0 to 32768
[   58.248833][ T7254] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   58.250073][ T7254] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   58.276328][ T7290] xt_CT: No such helper "snmp_trap"
[   58.310028][ T7254] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   58.311858][ T4384] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   58.312985][ T4384] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   58.334836][ T4384] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms
[   58.336227][ T4384] gfs2: fsid=syz:syz.0: jid=0: Done
[   58.337087][ T7254] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   58.432864][ T7313] loop4: detected capacity change from 0 to 4096
[   58.434938][ T7313] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   58.511626][ T7313] ntfs3: loop4: failed to convert "c46c" to euc-jp
[   58.634108][ T7301] loop0: detected capacity change from 0 to 32768
[   58.656759][ T7331] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   58.658625][ T7331] overlayfs: missing 'lowerdir'
[   58.863291][ T7351] netlink: 'syz.0.1297': attribute type 3 has an invalid length.
[   58.925198][ T7359] loop1: detected capacity change from 0 to 64
[   58.949254][ T7361] loop2: detected capacity change from 0 to 16
[   58.955538][ T7361] erofs: (device loop2): mounted with root inode @ nid 36.
[   58.959736][ T7341] loop4: detected capacity change from 0 to 40427
[   58.975071][ T7361] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[   58.979874][ T7341] F2FS-fs (loop4): invalid crc value
[   58.980736][ T7341] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[   58.991416][ T7341] F2FS-fs (loop4): Found nat_bits in checkpoint
[   59.005443][ T7341] F2FS-fs (loop4): recover fsync data on readonly fs
[   59.006784][ T7341] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[   59.014544][ T7341] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[   59.017975][ T7341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   59.048488][ T7370] loop2: detected capacity change from 0 to 4096
[   59.163988][ T7381] loop1: detected capacity change from 0 to 128
[   59.235928][ T7393] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1314'.
[   59.241302][ T7393] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1314'.
[   59.291518][ T7399] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   59.306800][ T7403] loop4: detected capacity change from 0 to 64
[   59.353013][ T7407] loop0: detected capacity change from 0 to 1024
[   59.409102][ T4386] hfsplus: b-tree write err: -5, ino 4
[   59.462034][ T7417] device bridge1 entered promiscuous mode
[   59.582239][ T7411] loop1: detected capacity change from 0 to 32768
[   59.592743][ T7411] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.596689][ T7411] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   59.598214][ T7411] BTRFS info (device loop1): using free space tree
[   59.600907][ T7413] loop4: detected capacity change from 0 to 32768
[   59.603289][ T7425] loop0: detected capacity change from 0 to 2048
[   59.613493][ T7425] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   59.625601][ T7413] ERROR: (device loop4): diWrite: ixpxd invalid
[   59.625601][ T7413] 
[   59.627446][ T7413] ERROR: (device loop4): remounting filesystem as read-only
[   59.628682][ T7413] ERROR: (device loop4): txAbort: 
[   59.628682][ T7413] 
[   59.629902][ T7413] imap: 00000000f27bbc7c: 07ffffff 00000000 00000000 00000000
[   59.658775][ T7413] imap: 000000005e25d361: 00000004 00000002 00000000 00000000
[   59.665737][ T7413] ERROR: (device loop4): diFree: inum = 7, iagno = 0, nextiag = 0
[   59.665737][ T7413] 
[   59.675911][ T7435] netlink: 'syz.3.1330': attribute type 10 has an invalid length.
[   59.678373][ T7436] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   59.698557][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.700183][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.713375][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.714600][ T7435] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.715836][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.716922][ T7435] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.742015][ T7435] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   59.818188][ T7411] BTRFS info (device loop1): enabling ssd optimizations
[   59.909709][ T7467] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.958947][ T4319] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.307802][ T7515] loop3: detected capacity change from 0 to 164
[   60.360860][ T7520] netlink: 'syz.4.1368': attribute type 7 has an invalid length.
[   60.362215][ T7520] netlink: 'syz.4.1368': attribute type 5 has an invalid length.
[   60.379736][ T7520] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1368'.
[   60.410484][ T7492] loop1: detected capacity change from 0 to 32768
[   60.434757][ T7526] loop3: detected capacity change from 0 to 512
[   60.440508][ T7526] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   60.463806][ T7530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1373'.
[   60.493454][ T7526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   60.500801][ T7526] EXT4-fs: Cannot change quota options when quota turned on
[   60.510301][ T7510] loop0: detected capacity change from 0 to 40427
[   60.513345][ T7510] F2FS-fs (loop0): invalid crc value
[   60.542319][ T7510] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.550290][ T7540] loop2: detected capacity change from 0 to 1024
[   60.566846][ T4329] EXT4-fs (loop3): unmounting filesystem.
[   60.568014][ T7510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   60.667100][ T4386] hfsplus: b-tree write err: -5, ino 4
[   60.677145][ T7557] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1381'.
[   60.698664][ T7561] binder: 7560 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[   60.698683][ T7561] binder: 7560:7561 ioctl c018620c 20000380 returned -22
[   60.802767][ T7578] loop4: detected capacity change from 0 to 256
[   60.815854][ T7578] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   60.922996][ T7597] loop3: detected capacity change from 0 to 16
[   60.924663][ T7597] erofs: (device loop3): mounted with root inode @ nid 36.
[   60.929760][ T7597] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   60.931490][ T7597] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[   60.965862][ T7593] device xfrm1 entered promiscuous mode
[   61.099190][ T7615] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1422' sets config #0
[   61.259314][ T7643] delete_channel: no stack
[   61.271435][ T7641] loop0: detected capacity change from 0 to 4096
[   61.314873][ T7641] ntfs: volume version 3.1.
[   61.369471][ T7653] trusted_key: encrypted_key: keylen parameter is missing
[   61.408864][ T7657] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[   61.448323][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'.
[   61.524439][ T7673] loop1: detected capacity change from 0 to 256
[   61.526838][ T7637] loop4: detected capacity change from 0 to 32768
[   61.532339][ T7637] 
[   61.532339][ T7637]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.532339][ T7637] 
[   61.548914][ T7673] FAT-fs (loop1): Directory bread(block 64) failed
[   61.550013][ T7673] FAT-fs (loop1): Directory bread(block 65) failed
[   61.551043][ T7673] FAT-fs (loop1): Directory bread(block 66) failed
[   61.552057][ T7673] FAT-fs (loop1): Directory bread(block 67) failed
[   61.561007][ T7637] JFS: metapage_get_blocks failed
[   61.561977][ T7637] ERROR: (device loop4): release_metapage: write_one_page() failed
[   61.561977][ T7637] 
[   61.564280][ T7673] FAT-fs (loop1): Directory bread(block 68) failed
[   61.565310][ T7673] FAT-fs (loop1): Directory bread(block 69) failed
[   61.566437][ T7673] FAT-fs (loop1): Directory bread(block 70) failed
[   61.567560][ T7673] FAT-fs (loop1): Directory bread(block 71) failed
[   61.568683][ T7673] FAT-fs (loop1): Directory bread(block 72) failed
[   61.569673][ T7673] FAT-fs (loop1): Directory bread(block 73) failed
[   61.574756][ T7637] ERROR: (device loop4): diWrite: ixpxd invalid
[   61.574756][ T7637] 
[   61.576039][ T7637] ERROR: (device loop4): txAbort: 
[   61.576039][ T7637] 
[   61.605817][ T4328] 
[   61.605817][ T4328]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.605817][ T4328] 
[   61.608601][ T4328] 
[   61.608601][ T4328]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.608601][ T4328] 
[   61.765684][ T7703] netlink: 'syz.1.1455': attribute type 11 has an invalid length.
[   61.769870][ T7700] loop2: detected capacity change from 0 to 4096
[   61.795962][ T7700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   61.837479][ T7710] binder: 7709:7710 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   61.850941][ T7710] binder: 7709:7710 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   61.852201][ T7710] binder: 7709:7710 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   61.870712][ T7710] binder: 7710 RLIMIT_NICE not set
[   61.903466][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   61.922044][ T7715] loop0: detected capacity change from 0 to 256
[   61.922805][ T7720] netlink: zone id is out of range
[   62.029936][ T7736] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1471'.
[   62.138397][ T7750] overlayfs: bad mount option "redirect_dir=nofollow::"
[   62.151583][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1478'.
[   62.213645][ T7763] loop2: detected capacity change from 0 to 64
[   62.215068][ T7763] hfs: uid requires an argument
[   62.215807][ T7763] hfs: unable to parse mount options
[   62.261135][ T7766] loop1: detected capacity change from 0 to 1024
[   62.271487][ T7766] hfsplus: bad catalog entry type
[   62.276744][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'.
[   62.285330][    T9] hfsplus: b-tree write err: -5, ino 4
[   62.301422][ T7772] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   62.309447][ T7772] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   62.355380][ T7776] loop0: detected capacity change from 0 to 8
[   62.426807][ T7782] device xfrm2 entered promiscuous mode
[   62.517569][ T7792] loop2: detected capacity change from 0 to 16
[   62.526659][ T7792] erofs: (device loop2): mounted with root inode @ nid 36.
[   62.541505][ T7792] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   62.545361][ T7764] loop3: detected capacity change from 0 to 32768
[   62.546527][ T7792] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[   62.552016][ T7764] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   62.557517][ T7764] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   62.569649][ T7764] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[   62.579602][ T4385] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   62.580776][ T4385] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   62.605714][ T4385] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms
[   62.607210][ T4385] gfs2: fsid=syz:syz.0: jid=0: Done
[   62.608099][ T7764] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   62.610702][ T7764] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[   62.610702][ T7764]   inode = 0 2341
[   62.610702][ T7764]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[   62.614473][ T7764] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[   62.615955][ T7764] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:7764 [syz.3.1483] inode_permission+0x1d0/0x3c0
[   62.618596][ T7764] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000200 s:0 p:0
[   62.619319][ T7803] loop0: detected capacity change from 0 to 512
[   62.621075][ T7764] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   62.623423][ T7764] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   62.627108][ T7764] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[   62.629448][ T7764] gfs2: fsid=syz:syz.0: File system withdrawn
[   62.630333][ T7764] CPU: 0 PID: 7764 Comm: syz.3.1483 Not tainted 6.1.148-syzkaller #0
[   62.631640][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   62.633347][ T7764] Call trace:
[   62.633871][ T7764]  dump_backtrace+0x1c8/0x1f4
[   62.634663][ T7764]  show_stack+0x2c/0x3c
[   62.635373][ T7764]  __dump_stack+0x30/0x40
[   62.636089][ T7764]  dump_stack_lvl+0xf8/0x160
[   62.636881][ T7764]  dump_stack+0x1c/0x5c
[   62.637565][ T7764]  gfs2_withdraw+0xf9c/0x13a8
[   62.638339][ T7764]  gfs2_consist_inode_i+0xf0/0x10c
[   62.639168][ T7764]  gfs2_inode_refresh+0x920/0xd54
[   62.640013][ T7764]  inode_go_instantiate+0x4c/0x68
[   62.640825][ T7764]  gfs2_instantiate+0x17c/0x2c4
[   62.641591][ T7764]  gfs2_glock_wait+0x1b4/0x298
[   62.642367][ T7764]  gfs2_glock_nq+0x8bc/0x11d4
[   62.643111][ T7764]  gfs2_permission+0x26c/0x438
[   62.643910][ T7764]  inode_permission+0x1d0/0x3c0
[   62.644619][ T7764]  may_open+0x274/0x3b8
[   62.645302][ T7764]  path_openat+0x1e1c/0x2680
[   62.646043][ T7764]  do_filp_open+0x174/0x344
[   62.646695][ T7764]  do_sys_openat2+0x128/0x3d8
[   62.647379][ T7764]  __arm64_sys_openat+0x120/0x154
[   62.648119][ T7764]  invoke_syscall+0x98/0x2bc
[   62.648778][ T7764]  el0_svc_common+0x138/0x258
[   62.649467][ T7764]  do_el0_svc+0x58/0x13c
[   62.650104][ T7764]  el0_svc+0x58/0x138
[   62.650710][ T7764]  el0t_64_sync_handler+0x84/0xf0
[   62.651461][ T7764]  el0t_64_sync+0x18c/0x190
[   62.672774][ T7801] xt_CT: No such helper "snmp_trap"
[   62.683639][ T7803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[   62.685396][ T7803] EXT4-fs (loop0): orphan cleanup on readonly fs
[   62.693919][ T7803] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   62.707949][ T7803] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   62.712587][ T7803] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.1503: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   62.727939][ T7803] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1503: couldn't read orphan inode 13 (err -117)
[   62.731626][ T7810] sctp: [Deprecated]: syz.2.1507 (pid 7810) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.731626][ T7810] Use struct sctp_sack_info instead
[   62.734535][ T7803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   62.752721][ T7803] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   62.768556][ T7803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[   62.794413][ T7803] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   62.854139][ T4323] EXT4-fs (loop0): unmounting filesystem.
[   63.175015][ T7827] device xfrm1 entered promiscuous mode
[   63.209419][ T7831] loop4: detected capacity change from 0 to 1024
[   63.223070][ T7831] hfsplus: Filesystem is marked locked, mounting read-only.
[   63.230636][ T7831] hfsplus: invalid catalog entry type in lookup
[   63.288476][ T7838] loop4: detected capacity change from 0 to 2048
[   63.301398][ T7838] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   63.458638][ T7859] loop1: detected capacity change from 0 to 4096
[   63.462082][ T7859] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   63.465707][ T7859] ntfs3: loop1: mft corrupted
[   63.466635][ T7859] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   63.469320][ T7859] ntfs3: loop1: Failed to load $LogFile.
[   63.490173][ T7865] loop0: detected capacity change from 0 to 256
[   63.497479][ T7865] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.812079][ T7872] loop1: detected capacity change from 0 to 40427
[   63.834639][ T7898] loop3: detected capacity change from 0 to 256
[   63.835743][ T7872] F2FS-fs (loop1): invalid crc value
[   63.845917][ T7898] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.869220][ T7872] F2FS-fs (loop1): Found nat_bits in checkpoint
[   63.890939][ T7872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   63.930230][ T7885] loop0: detected capacity change from 0 to 32768
[   63.933621][ T7909] binder: 7908 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[   63.933639][ T7909] binder: 7908:7909 ioctl c018620c 20000380 returned -22
[   64.157273][ T7907] loop2: detected capacity change from 0 to 32768
[   64.187826][ T7907] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.189556][ T7907] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   64.189749][ T7928] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1564'.
[   64.190888][ T7907] BTRFS info (device loop2): force zlib compression, level 3
[   64.199970][ T7907] BTRFS info (device loop2): force clearing of disk cache
[   64.201143][ T7907] BTRFS info (device loop2): setting nodatasum
[   64.202097][ T7907] BTRFS info (device loop2): doing ref verification
[   64.203495][ T7907] BTRFS info (device loop2): allowing degraded mounts
[   64.204503][ T7907] BTRFS info (device loop2): using free space tree
[   64.206143][ T7931] netlink: 'syz.0.1563': attribute type 10 has an invalid length.
[   64.210710][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.211959][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.228469][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.229692][ T7931] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.230859][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.231983][ T7931] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.256431][ T7931] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   64.301402][ T7918] loop4: detected capacity change from 0 to 32768
[   64.305421][ T7918] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1560 (7918)
[   64.309359][ T7918] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.314825][ T7918] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   64.316238][ T7918] BTRFS info (device loop4): using free space tree
[   64.344538][ T7957] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1568'.
[   64.345908][ T7957] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1568'.
[   64.361407][ T7907] BTRFS info (device loop2): enabling ssd optimizations
[   64.368821][ T7907] BTRFS info (device loop2): rebuilding free space tree
[   64.455797][ T4324] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.501990][ T4328] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.504483][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[   64.505212][   T14] cfg80211: failed to load regulatory.db
[   64.505436][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[   64.649640][ T4558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4558)
[   64.697072][ T7942] loop3: detected capacity change from 0 to 40427
[   64.717178][ T7942] F2FS-fs (loop3): invalid crc value
[   64.748539][ T7942] F2FS-fs (loop3): Found nat_bits in checkpoint
[   64.780478][ T7942] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   64.855137][ T8017] delete_channel: no stack
[   64.925050][ T8022] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1590' sets config #0
[   64.955559][ T7990] loop4: detected capacity change from 0 to 32768
[   64.980930][ T8027] loop2: detected capacity change from 0 to 1024
[   64.993643][ T8025] loop3: detected capacity change from 0 to 4096
[   64.995046][ T8025] __ntfs_warning: 16 callbacks suppressed
[   64.995052][ T8025] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   65.000721][ T8027] hfsplus: bad catalog entry type
[   65.025319][ T8025] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[   65.035254][ T8025] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[   65.049359][ T8025] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[   65.049574][ T4386] hfsplus: b-tree write err: -5, ino 4
[   65.051395][ T8025] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   65.076578][ T8025] ntfs: volume version 3.1.
[   65.078121][ T8025] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[   65.087966][ T8025] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   65.089739][ T8025] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[   65.107891][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'.
[   65.140166][ T8015] loop1: detected capacity change from 0 to 32768
[   65.144758][ T8025] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[   65.147905][ T8025] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[   65.154100][ T8015] 
[   65.154100][ T8015]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   65.154100][ T8015] 
[   65.161913][ T8015] JFS: metapage_get_blocks failed
[   65.174341][ T8015] ERROR: (device loop1): release_metapage: write_one_page() failed
[   65.174341][ T8015] 
[   65.177340][ T8039] loop4: detected capacity change from 0 to 64
[   65.178873][ T8039] hfs: uid requires an argument
[   65.179576][ T8039] hfs: unable to parse mount options
[   65.180901][ T8015] ERROR: (device loop1): diWrite: ixpxd invalid
[   65.180901][ T8015] 
[   65.182231][ T8015] ERROR: (device loop1): txAbort: 
[   65.182231][ T8015] 
[   65.256854][ T4319] 
[   65.256854][ T4319]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   65.256854][ T4319] 
[   65.258610][ T4319] 
[   65.258610][ T4319]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   65.258610][ T4319] 
[   65.332229][ T8059] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[   65.338432][ T8058] loop4: detected capacity change from 0 to 256
[   65.358382][ T8058] FAT-fs (loop4): Directory bread(block 64) failed
[   65.359486][ T8058] FAT-fs (loop4): Directory bread(block 65) failed
[   65.360608][ T8058] FAT-fs (loop4): Directory bread(block 66) failed
[   65.361662][ T8058] FAT-fs (loop4): Directory bread(block 67) failed
[   65.368991][ T8058] FAT-fs (loop4): Directory bread(block 68) failed
[   65.370048][ T8058] FAT-fs (loop4): Directory bread(block 69) failed
[   65.371106][ T8058] FAT-fs (loop4): Directory bread(block 70) failed
[   65.372184][ T8058] FAT-fs (loop4): Directory bread(block 71) failed
[   65.382668][ T8058] FAT-fs (loop4): Directory bread(block 72) failed
[   65.383633][ T8058] FAT-fs (loop4): Directory bread(block 73) failed
[   65.421262][ T8065] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[   65.446696][ T8065] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[   65.488617][ T8067] loop0: detected capacity change from 0 to 4096
[   65.513429][ T8067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   65.531840][ T8043] loop2: detected capacity change from 0 to 40427
[   65.560639][ T4323] EXT4-fs (loop0): unmounting filesystem.
[   65.564123][ T8043] F2FS-fs (loop2): invalid crc value
[   65.583059][ T8043] F2FS-fs (loop2): Found nat_bits in checkpoint
[   65.586287][ T8053] loop1: detected capacity change from 0 to 32768
[   65.589751][ T8053] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   65.592747][ T8053] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   65.602767][ T8053] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[   65.607207][ T5996] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   65.608337][ T5996] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   65.616069][ T8043] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   65.632232][ T5996] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 23ms
[   65.636079][ T5996] gfs2: fsid=syz:syz.0: jid=0: Done
[   65.636953][ T8053] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   65.639910][ T8053] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[   65.639910][ T8053]   inode = 0 2341
[   65.639910][ T8053]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[   65.643236][ T8053] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[   65.648086][ T8053] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:8053 [syz.1.1613] inode_permission+0x1d0/0x3c0
[   65.649790][ T8053] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000200 s:0 p:0
[   65.656028][ T8053] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   65.658464][ T8053] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   65.662288][ T8053] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[   65.665198][ T8053] gfs2: fsid=syz:syz.0: File system withdrawn
[   65.667352][ T8053] CPU: 1 PID: 8053 Comm: syz.1.1613 Not tainted 6.1.148-syzkaller #0
[   65.668615][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   65.670254][ T8053] Call trace:
[   65.670785][ T8053]  dump_backtrace+0x1c8/0x1f4
[   65.671561][ T8053]  show_stack+0x2c/0x3c
[   65.672215][ T8053]  __dump_stack+0x30/0x40
[   65.672872][ T8053]  dump_stack_lvl+0xf8/0x160
[   65.673527][ T8053]  dump_stack+0x1c/0x5c
[   65.674123][ T8053]  gfs2_withdraw+0xf9c/0x13a8
[   65.674942][ T8053]  gfs2_consist_inode_i+0xf0/0x10c
[   65.675714][ T8053]  gfs2_inode_refresh+0x920/0xd54
[   65.676467][ T8053]  inode_go_instantiate+0x4c/0x68
[   65.677168][ T8053]  gfs2_instantiate+0x17c/0x2c4
[   65.677909][ T8053]  gfs2_glock_wait+0x1b4/0x298
[   65.678728][ T8053]  gfs2_glock_nq+0x8bc/0x11d4
[   65.679565][ T8053]  gfs2_permission+0x26c/0x438
[   65.680346][ T8053]  inode_permission+0x1d0/0x3c0
[   65.681091][ T8053]  may_open+0x274/0x3b8
[   65.681784][ T8053]  path_openat+0x1e1c/0x2680
[   65.682531][ T8053]  do_filp_open+0x174/0x344
[   65.683257][ T8053]  do_sys_openat2+0x128/0x3d8
[   65.684012][ T8053]  __arm64_sys_openat+0x120/0x154
[   65.684824][ T8053]  invoke_syscall+0x98/0x2bc
[   65.685527][ T8053]  el0_svc_common+0x138/0x258
[   65.686175][ T8053]  do_el0_svc+0x58/0x13c
[   65.686823][ T8053]  el0_svc+0x58/0x138
[   65.687448][ T8053]  el0t_64_sync_handler+0x84/0xf0
[   65.688218][ T8053]  el0t_64_sync+0x18c/0x190
[   65.836426][ T8076] loop0: detected capacity change from 0 to 32768
[   65.847619][ T8076] 
[   65.847619][ T8076]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   65.847619][ T8076] 
[   65.859291][ T8076] JFS: metapage_get_blocks failed
[   65.860163][ T8076] ERROR: (device loop0): release_metapage: write_one_page() failed
[   65.860163][ T8076] 
[   65.861974][ T8076] ERROR: (device loop0): diWrite: ixpxd invalid
[   65.861974][ T8076] 
[   65.864231][ T8076] ERROR: (device loop0): txAbort: 
[   65.864231][ T8076] 
[   65.895111][ T8091] netlink: 'syz.2.1619': attribute type 11 has an invalid length.
[   65.904431][ T4323] 
[   65.904431][ T4323]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   65.904431][ T4323] 
[   65.906340][ T4323] 
[   65.906340][ T4323]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   65.906340][ T4323] 
[   65.984768][ T8100] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1621'.
[   66.051163][ T8084] loop4: detected capacity change from 0 to 32768
[   66.084070][ T8084] XFS (loop4): Mounting V5 Filesystem
[   66.114658][ T8120] loop2: detected capacity change from 0 to 512
[   66.127848][ T8120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   66.155802][ T8084] XFS (loop4): Ending clean mount
[   66.166860][ T8120] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   66.233382][ T4328] XFS (loop4): Unmounting Filesystem
[   66.248798][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   66.358210][ T8142] loop1: detected capacity change from 0 to 256
[   66.393644][ T8140] team0: Port device team_slave_0 removed
[   66.394935][ T8140] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   66.455660][ T8145] loop3: detected capacity change from 0 to 4096
[   66.467313][ T8145] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   66.558555][ T8161] ip6t_rpfilter: unknown options
[   66.603789][ T8168] loop4: detected capacity change from 0 to 256
[   66.624897][ T8171] loop1: detected capacity change from 0 to 512
[   66.628627][ T8168] FAT-fs (loop4): Directory bread(block 64) failed
[   66.629720][ T8168] FAT-fs (loop4): Directory bread(block 65) failed
[   66.630897][ T8168] FAT-fs (loop4): Directory bread(block 66) failed
[   66.631902][ T8168] FAT-fs (loop4): Directory bread(block 67) failed
[   66.634956][ T8171] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2
[   66.636389][ T8168] FAT-fs (loop4): Directory bread(block 68) failed
[   66.637485][ T8168] FAT-fs (loop4): Directory bread(block 69) failed
[   66.638610][ T8168] FAT-fs (loop4): Directory bread(block 70) failed
[   66.639652][ T8168] FAT-fs (loop4): Directory bread(block 71) failed
[   66.640749][ T8168] FAT-fs (loop4): Directory bread(block 72) failed
[   66.641696][ T8168] FAT-fs (loop4): Directory bread(block 73) failed
[   66.652711][ T8174] binder: 8173:8174 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER
[   66.826563][ T8192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.827727][ T8192] IPv6: NLM_F_CREATE should be set when creating new route
[   66.866914][ T8203] loop4: detected capacity change from 0 to 128
[   66.884108][ T8203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   66.947708][ T8204] loop1: detected capacity change from 0 to 4096
[   66.987390][ T8212] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   67.002235][ T4328] EXT4-fs (loop4): unmounting filesystem.
[   67.011725][ T8211] loop0: detected capacity change from 0 to 8192
[   67.036619][ T8211] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   67.038602][ T8211] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   67.040076][ T8211] REISERFS (device loop0): using ordered data mode
[   67.041249][ T8211] reiserfs: using flush barriers
[   67.046432][ T8211] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   67.049042][ T8211] REISERFS (device loop0): checking transaction log (loop0)
[   67.144492][ T8211] REISERFS (device loop0): Using tea hash to sort names
[   67.148672][ T8211] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   67.150990][ T8211] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   67.215876][ T8238] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[   67.217214][ T8238] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[   67.297699][ T8242] loop2: detected capacity change from 0 to 8
[   67.397292][ T8237] loop3: detected capacity change from 0 to 32768
[   67.407475][ T8237] 
[   67.407475][ T8237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   67.407475][ T8237] 
[   67.417122][ T8237] JFS: metapage_get_blocks failed
[   67.417953][ T8237] ERROR: (device loop3): release_metapage: write_one_page() failed
[   67.417953][ T8237] 
[   67.423109][ T8237] ERROR: (device loop3): diWrite: ixpxd invalid
[   67.423109][ T8237] 
[   67.424571][ T8237] ERROR: (device loop3): txAbort: 
[   67.424571][ T8237] 
[   67.438614][ T4329] 
[   67.438614][ T4329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   67.438614][ T4329] 
[   67.450795][ T4329] 
[   67.450795][ T4329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   67.450795][ T4329] 
[   67.465492][ T8235] loop1: detected capacity change from 0 to 40427
[   67.482202][ T8235] F2FS-fs (loop1): invalid crc value
[   67.487706][ T8235] F2FS-fs (loop1): Found nat_bits in checkpoint
[   67.516211][ T8235] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   67.688462][ T8278] sctp: [Deprecated]: syz.3.1704 (pid 8278) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.688462][ T8278] Use struct sctp_sack_info instead
[   67.696879][ T8280] device vlan0 entered promiscuous mode
[   67.771861][ T8284] loop0: detected capacity change from 0 to 4096
[   67.777029][ T8284] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   67.781611][ T8284] ntfs3: loop0: mft corrupted
[   67.782296][ T8284] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   67.787852][ T8284] ntfs3: loop0: Failed to load $LogFile.
[   67.806875][ T8292] loop2: detected capacity change from 0 to 64
[   67.832543][ T6358] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   67.894283][ T8294] loop3: detected capacity change from 0 to 4096
[   67.920399][ T8299] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   67.999555][ T8282] loop1: detected capacity change from 0 to 32768
[   68.023496][ T8282] jfs_strtoUCS: char2uni returned -22.
[   68.024418][ T8282] charset = cp949, char = 0xd4
[   68.027605][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'.
[   68.029115][ T8307] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1717'.
[   68.030660][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'.
[   68.044927][ T8307] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1717'.
[   68.046508][ T8307] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1717'.
[   68.256151][ T8337] loop3: detected capacity change from 0 to 2048
[   68.272526][ T8337] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   68.438291][ T8357] loop4: detected capacity change from 0 to 4096
[   68.450740][ T8367] loop0: detected capacity change from 0 to 256
[   68.450918][ T8357] ntfs3: loop4: ino=3, Correct links count -> 2.
[   68.456830][ T8366] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.498932][ T8367] FAT-fs (loop0): Directory bread(block 64) failed
[   68.510250][ T8367] FAT-fs (loop0): Directory bread(block 65) failed
[   68.511429][ T8367] FAT-fs (loop0): Directory bread(block 66) failed
[   68.527171][ T8367] FAT-fs (loop0): Directory bread(block 67) failed
[   68.528302][ T8367] FAT-fs (loop0): Directory bread(block 68) failed
[   68.529347][ T8367] FAT-fs (loop0): Directory bread(block 69) failed
[   68.539481][ T8367] FAT-fs (loop0): Directory bread(block 70) failed
[   68.544489][ T8367] FAT-fs (loop0): Directory bread(block 71) failed
[   68.545571][ T8367] FAT-fs (loop0): Directory bread(block 72) failed
[   68.548596][ T8367] FAT-fs (loop0): Directory bread(block 73) failed
[   68.580786][ T8379] loop2: detected capacity change from 0 to 1024
[   68.586031][ T8367] cifs: Unknown parameter 'shortname'
[   68.675131][ T8392] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   68.790271][ T8413] ieee802154 phy0 wpan0: encryption failed: -22
[   68.902001][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'.
[   68.905386][ T8428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   68.951100][ T8426] loop3: detected capacity change from 0 to 4096
[   68.962432][ T8426] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   68.981447][ T8432] loop2: detected capacity change from 0 to 4096
[   69.019059][ T8426] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   69.022192][ T8426] ntfs3: loop3: ino=1e, "file1" attr_set_size
[   69.049901][ T8407] loop0: detected capacity change from 0 to 40427
[   69.058386][ T8407] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x3ffff
[   69.059729][ T8407] F2FS-fs (loop0): build fault injection attr: rate: 5, type: 0x3ffff
[   69.061023][ T8407] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x77
[   69.075834][ T8407] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x130/0x4ec
[   69.077871][ T8407] F2FS-fs (loop0): invalid crc value
[   69.079591][ T8407] F2FS-fs (loop0) : inject kmalloc in f2fs_kmalloc of f2fs_create_flush_cmd_control+0xf0/0x310
[   69.081192][ T8407] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[   69.085330][ T8443] sctp: [Deprecated]: syz.3.1779 (pid 8443) Use of int in max_burst socket option deprecated.
[   69.085330][ T8443] Use struct sctp_assoc_value instead
[   69.246067][ T8468] tc_dump_action: action bad kind
[   69.428919][ T8483] ieee802154 phy0 wpan0: encryption failed: -22
[   69.488929][ T8487] loop1: detected capacity change from 0 to 512
[   69.495523][ T8487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.528837][ T8487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   69.561411][ T4319] EXT4-fs (loop1): unmounting filesystem.
[   69.571406][ T8478] loop0: detected capacity change from 0 to 32768
[   69.610468][ T8478] XFS (loop0): Mounting V5 Filesystem
[   69.662722][ T8478] XFS (loop0): Ending clean mount
[   69.674453][ T8478] XFS (loop0): Quotacheck needed: Please wait.
[   69.692204][ T8478] XFS (loop0): Quotacheck: Done.
[   69.762180][ T4323] XFS (loop0): Unmounting Filesystem
[   69.859518][ T8510] loop1: detected capacity change from 0 to 2048
[   69.882228][ T8511] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.893342][ T8510] CPU: 0 PID: 8510 Comm: syz.1.1809 Not tainted 6.1.148-syzkaller #0
[   69.894691][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   69.896330][ T8510] Call trace:
[   69.896864][ T8510]  dump_backtrace+0x1c8/0x1f4
[   69.897635][ T8510]  show_stack+0x2c/0x3c
[   69.898348][ T8510]  __dump_stack+0x30/0x40
[   69.899039][ T8510]  dump_stack_lvl+0xf8/0x160
[   69.899741][ T8510]  dump_stack+0x1c/0x5c
[   69.900411][ T8510]  nilfs_btree_do_lookup+0x850/0x994
[   69.901285][ T8510]  nilfs_btree_lookup_contig+0xc8/0x968
[   69.902249][ T8510]  nilfs_bmap_lookup_contig+0x88/0x13c
[   69.903173][ T8510]  nilfs_get_block+0x1a0/0x7a8
[   69.903909][ T8510]  block_truncate_page+0x2e0/0x784
[   69.904723][ T8510]  nilfs_truncate+0x1ec/0x400
[   69.905473][ T8510]  nilfs_setattr+0x1d0/0x274
[   69.906195][ T8510]  notify_change+0xb0c/0xdcc
[   69.906958][ T8510]  do_truncate+0x178/0x1f0
[   69.907660][ T8510]  vfs_truncate+0x23c/0x2b0
[   69.908355][ T8510]  do_sys_truncate+0xe8/0x1b0
[   69.909090][ T8510]  __arm64_sys_truncate+0x5c/0x70
[   69.909870][ T8510]  invoke_syscall+0x98/0x2bc
[   69.910607][ T8510]  el0_svc_common+0x138/0x258
[   69.911345][ T8510]  do_el0_svc+0x58/0x13c
[   69.912008][ T8510]  el0_svc+0x58/0x138
[   69.912625][ T8510]  el0t_64_sync_handler+0x84/0xf0
[   69.913387][ T8510]  el0t_64_sync+0x18c/0x190
[   69.918876][ T8510] NILFS (loop1): btree level mismatch (ino=16): 1 != 5
[   69.920005][ T8510] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   69.921872][ T8510] Remounting filesystem read-only
[   69.925778][ T8510] CPU: 0 PID: 8510 Comm: syz.1.1809 Not tainted 6.1.148-syzkaller #0
[   69.927049][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   69.928688][ T8510] Call trace:
[   69.929240][ T8510]  dump_backtrace+0x1c8/0x1f4
[   69.930023][ T8510]  show_stack+0x2c/0x3c
[   69.930684][ T8510]  __dump_stack+0x30/0x40
[   69.931384][ T8510]  dump_stack_lvl+0xf8/0x160
[   69.932125][ T8510]  dump_stack+0x1c/0x5c
[   69.932806][ T8510]  nilfs_btree_last_key+0x394/0x4d0
[   69.933667][ T8510]  nilfs_bmap_last_key+0x74/0x124
[   69.934540][ T8510]  nilfs_truncate_bmap+0xdc/0x2c0
[   69.935393][ T8510]  nilfs_truncate+0x1f8/0x400
[   69.936139][ T8510]  nilfs_setattr+0x1d0/0x274
[   69.936889][ T8510]  notify_change+0xb0c/0xdcc
[   69.937592][ T8510]  do_truncate+0x178/0x1f0
[   69.938242][ T8510]  vfs_truncate+0x23c/0x2b0
[   69.938903][ T8510]  do_sys_truncate+0xe8/0x1b0
[   69.939607][ T8510]  __arm64_sys_truncate+0x5c/0x70
[   69.940431][ T8510]  invoke_syscall+0x98/0x2bc
[   69.941193][ T8510]  el0_svc_common+0x138/0x258
[   69.941969][ T8510]  do_el0_svc+0x58/0x13c
[   69.942661][ T8510]  el0_svc+0x58/0x138
[   69.943282][ T8510]  el0t_64_sync_handler+0x84/0xf0
[   69.944072][ T8510]  el0t_64_sync+0x18c/0x190
[   69.979656][ T8510] NILFS (loop1): btree level mismatch (ino=16): 1 != 5
[   69.981948][ T8510] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16)
[   69.984984][ T8510] NILFS (loop1): error -5 truncating bmap (ino=16)
[   69.997511][ T8501] loop3: detected capacity change from 0 to 40427
[   70.003849][ T8501] F2FS-fs (loop3): invalid crc value
[   70.007797][ T8501] F2FS-fs (loop3): Found nat_bits in checkpoint
[   70.013499][ T4319] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   70.029751][ T8501] F2FS-fs (loop3): Start checkpoint disabled!
[   70.038687][ T8501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   70.078277][ T8518] netlink: 'syz.1.1810': attribute type 1 has an invalid length.
[   70.355652][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1837'.
[   70.395103][ T8561] overlayfs: bad mount option "redirect_dir=nofollow::"
[   70.452265][ T8570] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1833'.
[   70.640194][ T8598] loop4: detected capacity change from 0 to 4096
[   70.687150][ T8598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   70.789740][ T4328] EXT4-fs (loop4): unmounting filesystem.
[   71.053994][ T8642] netlink: 'syz.4.1869': attribute type 3 has an invalid length.
[   71.055332][ T8642] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1869'.
[   71.152560][ T8629] loop2: detected capacity change from 0 to 32768
[   71.169485][ T8629] JBD2: Ignoring recovery information on journal
[   71.201836][ T8629] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   71.212527][ T8655] vhci_hcd: invalid port number 255
[   71.213402][ T8655] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[   71.218612][ T8629] (syz.2.1863,8629,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[   71.221345][ T8629] (syz.2.1863,8629,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[   71.223627][ T8629] (syz.2.1863,8629,0):ocfs2_mknod:298 ERROR: status = -2
[   71.224862][ T8629] (syz.2.1863,8629,0):ocfs2_mknod:502 ERROR: status = -2
[   71.226057][ T8629] (syz.2.1863,8629,0):ocfs2_create:676 ERROR: status = -2
[   71.237263][ T4324] ocfs2: Unmounting device (7,2) on (node local)
[   71.237926][ T8659] loop4: detected capacity change from 0 to 2048
[   71.292078][ T8666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.323323][ T8659] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[   71.325998][ T8659] Remounting filesystem read-only
[   71.410501][ T8592] loop1: detected capacity change from 0 to 131072
[   71.423692][ T8592] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[   71.424735][ T8592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   71.434184][ T8592] F2FS-fs (loop1): invalid crc value
[   71.468545][ T8592] F2FS-fs (loop1): Found nat_bits in checkpoint
[   71.491037][ T8592] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   71.492198][ T8592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   71.530382][ T8662] loop0: detected capacity change from 0 to 32768
[   71.559397][ T8662] jfs_strtoUCS: char2uni returned -22.
[   71.560345][ T8662] charset = cp950, char = 0xd4
[   71.561158][ T8662] jfs_strtoUCS: char2uni returned -22.
[   71.562011][ T8662] charset = cp950, char = 0xd4
[   71.604661][ T8698] loop4: detected capacity change from 0 to 4096
[   71.620634][ T8701] loop3: detected capacity change from 0 to 64
[   71.631831][ T8701] syz.3.1896: attempt to access beyond end of device
[   71.631831][ T8701] loop3: rw=0, sector=130062, nr_sectors = 2 limit=64
[   71.634760][ T8703] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.643597][ T8702] loop2: detected capacity change from 0 to 1764
[   71.661154][ T8701] Buffer I/O error on dev loop3, logical block 65031, async page read
[   71.666185][ T8701] syz.3.1896: attempt to access beyond end of device
[   71.666185][ T8701] loop3: rw=0, sector=130062, nr_sectors = 2 limit=64
[   71.668242][ T8701] Buffer I/O error on dev loop3, logical block 65031, async page read
[   71.669690][ T8698] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[   71.749988][ T8714] overlayfs: bad mount option "redirect_dir=nofollow::"
[   71.917420][ T8739] loop4: detected capacity change from 0 to 64
[   71.934182][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'.
[   72.035172][ T8756] overlayfs: bad mount option "redirect_dir=nofollow::"
[   72.133478][ T8766] netlink: 'syz.2.1925': attribute type 15 has an invalid length.
[   72.196696][ T8783] device vti0 entered promiscuous mode
[   72.214549][ T8786] device macsec0 entered promiscuous mode
[   72.325386][ T8809] xt_connbytes: Forcing CT accounting to be enabled
[   72.326533][ T8809] xt_bpf: check failed: parse error
[   72.453968][ T8815] loop1: detected capacity change from 0 to 4096
[   72.477728][ T8815] ntfs: volume version 3.1.
[   72.521761][ T8815] __ntfs_error: 1 callbacks suppressed
[   72.521772][ T8815] ntfs: (device loop1): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80.  Aborting truncate.
[   72.639000][ T8813] loop0: detected capacity change from 0 to 32768
[   72.656074][ T8813] tmpfs: Bad value for 'mpol'
[   72.805844][ T8835] loop2: detected capacity change from 0 to 40427
[   72.816471][ T8835] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   72.817761][ T8835] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   72.832657][ T8835] F2FS-fs (loop2): invalid crc value
[   72.855300][ T8835] F2FS-fs (loop2): Found nat_bits in checkpoint
[   72.880715][ T8835] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   72.881947][ T8835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   72.957550][ T4386] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   72.959741][ T4386] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   73.008521][ T8851] loop4: detected capacity change from 0 to 32768
[   73.023009][ T8851] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1967 (8851)
[   73.031816][ T8851] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   73.033796][ T8851] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   73.035306][ T8851] BTRFS info (device loop4): force zlib compression, level 3
[   73.036554][ T8851] BTRFS info (device loop4): force clearing of disk cache
[   73.037707][ T8851] BTRFS info (device loop4): setting nodatasum
[   73.038710][ T8851] BTRFS info (device loop4): doing ref verification
[   73.039763][ T8851] BTRFS info (device loop4): allowing degraded mounts
[   73.044618][ T8851] BTRFS info (device loop4): using free space tree
[   73.149911][ T8851] BTRFS info (device loop4): enabling ssd optimizations
[   73.151584][ T8851] BTRFS info (device loop4): rebuilding free space tree
[   73.225579][ T4328] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   73.236053][ T8879] loop0: detected capacity change from 0 to 32768
[   73.263054][ T8877] loop1: detected capacity change from 0 to 32768
[   73.280521][ T8905] loop3: detected capacity change from 0 to 1024
[   73.282186][ T8905] hfsplus: Filesystem is marked locked, mounting read-only.
[   73.315541][ T8905] hfsplus: invalid catalog entry type in lookup
[   73.346160][ T8879] XFS (loop0): Mounting V5 Filesystem
[   73.378256][ T8879] XFS (loop0): Ending clean mount
[   73.390338][ T8901] loop2: detected capacity change from 0 to 32768
[   73.406457][ T8901] jfs_strtoUCS: char2uni returned -22.
[   73.407401][ T8901] charset = cp949, char = 0xd4
[   73.417133][ T4559] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop4 scanned by udevd (4559)
[   73.503921][ T4323] XFS (loop0): Unmounting Filesystem
[   73.648138][ T8933] loop4: detected capacity change from 0 to 8192
[   73.672702][ T8933] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   73.677923][ T8933] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   73.679513][ T8933] REISERFS (device loop4): using ordered data mode
[   73.691460][ T8933] reiserfs: using flush barriers
[   73.707420][ T8933] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   73.710026][ T8933] REISERFS (device loop4): checking transaction log (loop4)
[   73.873002][ T8933] REISERFS (device loop4): Using tea hash to sort names
[   73.878629][ T8933] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   73.880826][ T8933] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   73.901573][ T8957] loop2: detected capacity change from 0 to 512
[   73.922428][ T8957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   73.924335][ T8957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   73.928981][ T8957] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.2016: Invalid block bitmap block 0 in block_group 0
[   73.936704][ T8957] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   73.938173][ T8957] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.2016: attempt to clear invalid blocks 983261 len 1
[   73.940456][ T8957] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.2016: Invalid inode table block 0 in block_group 0
[   73.961426][ T8957] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem
[   73.985290][ T8957] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   73.994612][ T8948] loop1: detected capacity change from 0 to 32768
[   73.997186][ T8957] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.2016: Invalid inode table block 0 in block_group 0
[   74.002920][ T8957] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem
[   74.024763][ T8957] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.2016: mark_inode_dirty error
[   74.042151][ T8957] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   74.062018][ T8957] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.2016: Invalid inode table block 0 in block_group 0
[   74.072861][ T8957] EXT4-fs (loop2): 1 truncate cleaned up
[   74.073803][ T8957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   74.086453][ T8957] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.2016: Invalid inode table block 0 in block_group 0
[   74.095813][ T8948] XFS (loop1): Mounting V5 Filesystem
[   74.138946][ T8948] XFS (loop1): Ending clean mount
[   74.164431][ T8979] ip6t_rpfilter: unknown options
[   74.170431][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   74.227998][ T4319] XFS (loop1): Unmounting Filesystem
[   74.255087][ T8991] loop0: detected capacity change from 0 to 128
[   74.272249][ T8991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   74.307212][ T8996] loop3: detected capacity change from 0 to 4096
[   74.311344][ T4323] EXT4-fs (loop0): unmounting filesystem.
[   74.350330][ T8999] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.376256][ T9003] loop4: detected capacity change from 0 to 512
[   74.390451][ T9003] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   74.392302][ T9003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   74.406387][ T9003] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.2024: Invalid block bitmap block 0 in block_group 0
[   74.413107][ T9003] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   74.415325][ T9003] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.2024: attempt to clear invalid blocks 983261 len 1
[   74.429507][ T9003] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.2024: Invalid inode table block 0 in block_group 0
[   74.431903][ T9003] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem
[   74.437776][ T9003] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   74.439996][ T9003] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.2024: Invalid inode table block 0 in block_group 0
[   74.442275][ T9003] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem
[   74.451565][ T9003] EXT4-fs error (device loop4): ext4_truncate:4312: inode #11: comm syz.4.2024: mark_inode_dirty error
[   74.453770][ T9003] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   74.456336][ T9011] loop0: detected capacity change from 0 to 128
[   74.458282][ T9003] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.2024: Invalid inode table block 0 in block_group 0
[   74.459542][ T9013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.461513][ T9013] IPv6: NLM_F_CREATE should be set when creating new route
[   74.466277][ T9003] EXT4-fs (loop4): 1 truncate cleaned up
[   74.467286][ T9003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   74.478125][ T9003] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.2024: Invalid inode table block 0 in block_group 0
[   74.491971][ T9011] VFS: unable to find oldfs superblock on device loop0
[   74.514939][ T4328] EXT4-fs (loop4): unmounting filesystem.
[   74.621103][ T9023] loop4: detected capacity change from 0 to 512
[   74.623782][ T9023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.657186][ T9025] loop1: detected capacity change from 0 to 4096
[   74.671065][ T9025] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[   74.679616][ T9023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   74.709813][ T9015] loop3: detected capacity change from 0 to 32768
[   74.740001][ T4328] EXT4-fs (loop4): unmounting filesystem.
[   74.757418][ T9015] XFS (loop3): Mounting V5 Filesystem
[   74.771674][ T9037] loop0: detected capacity change from 0 to 4096
[   74.773292][ T9037] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[   74.820101][ T9015] XFS (loop3): Ending clean mount
[   74.896369][ T9050] binder: 9049:9050 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER
[   74.914868][ T9053] loop2: detected capacity change from 0 to 512
[   74.925812][ T9053] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2
[   74.943947][ T4329] XFS (loop3): Unmounting Filesystem
[   74.958043][ T9059] loop4: detected capacity change from 0 to 128
[   74.980270][ T9059] VFS: unable to find oldfs superblock on device loop4
[   75.027319][ T9057] team0: Port device team_slave_0 removed
[   75.031917][ T9057] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   75.192269][ T9070] binder: 9069:9070 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER
[   75.211949][ T9074] loop2: detected capacity change from 0 to 128
[   75.219865][ T9073] loop4: detected capacity change from 0 to 512
[   75.221931][ T9074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   75.226012][ T9073] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2
[   75.293012][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   75.330229][ T9080] loop4: detected capacity change from 0 to 4096
[   75.332011][ T9080] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[   75.396527][ T9101] loop3: detected capacity change from 0 to 256
[   75.458441][ T9101] FAT-fs (loop3): Directory bread(block 64) failed
[   75.459513][ T9101] FAT-fs (loop3): Directory bread(block 65) failed
[   75.460461][ T9101] FAT-fs (loop3): Directory bread(block 66) failed
[   75.463113][ T9101] FAT-fs (loop3): Directory bread(block 67) failed
[   75.464239][ T9101] FAT-fs (loop3): Directory bread(block 68) failed
[   75.465189][ T9101] FAT-fs (loop3): Directory bread(block 69) failed
[   75.466204][ T9101] FAT-fs (loop3): Directory bread(block 70) failed
[   75.467346][ T9101] FAT-fs (loop3): Directory bread(block 71) failed
[   75.468512][ T9101] FAT-fs (loop3): Directory bread(block 72) failed
[   75.469549][ T9101] FAT-fs (loop3): Directory bread(block 73) failed
[   75.483904][ T9104] team0: Port device team_slave_0 removed
[   75.486712][ T9104] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   75.595447][ T9121] device vlan0 entered promiscuous mode
[   75.622058][ T9125] loop2: detected capacity change from 0 to 256
[   75.653895][ T9125] FAT-fs (loop2): Directory bread(block 64) failed
[   75.654976][ T9125] FAT-fs (loop2): Directory bread(block 65) failed
[   75.656020][ T9125] FAT-fs (loop2): Directory bread(block 66) failed
[   75.657070][ T9125] FAT-fs (loop2): Directory bread(block 67) failed
[   75.673676][ T9125] FAT-fs (loop2): Directory bread(block 68) failed
[   75.674716][ T9125] FAT-fs (loop2): Directory bread(block 69) failed
[   75.675789][ T9125] FAT-fs (loop2): Directory bread(block 70) failed
[   75.676887][ T9125] FAT-fs (loop2): Directory bread(block 71) failed
[   75.678056][ T9125] FAT-fs (loop2): Directory bread(block 72) failed
[   75.679159][ T9125] FAT-fs (loop2): Directory bread(block 73) failed
[   75.822207][ T9151] loop0: detected capacity change from 0 to 4096
[   75.827751][ T9145] team0: Port device team_slave_0 removed
[   75.829037][ T9145] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   75.862946][ T9152] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.874993][ T9158] loop1: detected capacity change from 0 to 64
[   75.984616][ T9172] __nla_validate_parse: 5 callbacks suppressed
[   75.984629][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2100'.
[   75.985067][ T9164] loop2: detected capacity change from 0 to 4096
[   75.985702][ T9172] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2100'.
[   76.001274][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2100'.
[   76.007130][ T9172] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2100'.
[   76.008593][ T9172] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2100'.
[   76.009112][ T9175] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.086844][ T9187] loop3: detected capacity change from 0 to 64
[   76.208934][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2114'.
[   76.210331][ T9204] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2114'.
[   76.211783][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2114'.
[   76.215879][   T27] audit: type=1800 audit(76.200:4): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2109" name="/" dev="sockfs" ino=43501 res=0 errno=0
[   76.216767][ T9204] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2114'.
[   76.220417][ T9204] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2114'.
[   76.413811][ T9226] loop2: detected capacity change from 0 to 2048
[   76.426273][ T9226] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   76.523165][   T27] audit: type=1800 audit(76.500:5): pid=9233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2125" name="/" dev="sockfs" ino=44037 res=0 errno=0
[   76.539087][ T9244] loop1: detected capacity change from 0 to 2048
[   76.549134][ T9244] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   76.844701][ T9287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   76.847501][ T9289] loop4: detected capacity change from 0 to 256
[   76.850194][ T9281] loop2: detected capacity change from 0 to 4096
[   76.857234][ T9281] ntfs3: loop2: ino=3, Correct links count -> 2.
[   76.873976][ T9289] FAT-fs (loop4): Directory bread(block 64) failed
[   76.875030][ T9289] FAT-fs (loop4): Directory bread(block 65) failed
[   76.876280][ T9289] FAT-fs (loop4): Directory bread(block 66) failed
[   76.877865][ T9289] FAT-fs (loop4): Directory bread(block 67) failed
[   76.881388][ T9289] FAT-fs (loop4): Directory bread(block 68) failed
[   76.889624][ T9289] FAT-fs (loop4): Directory bread(block 69) failed
[   76.890763][ T9289] FAT-fs (loop4): Directory bread(block 70) failed
[   76.891712][ T9289] FAT-fs (loop4): Directory bread(block 71) failed
[   76.896743][ T9289] FAT-fs (loop4): Directory bread(block 72) failed
[   76.897764][ T9289] FAT-fs (loop4): Directory bread(block 73) failed
[   76.943144][ T9289] cifs: Unknown parameter 'shortname'
[   76.994021][ T9305] loop3: detected capacity change from 0 to 256
[   77.003962][ T9303] loop1: detected capacity change from 0 to 4096
[   77.005906][ T9303] ntfs3: loop1: ino=3, Correct links count -> 2.
[   77.030435][ T9305] FAT-fs (loop3): Directory bread(block 64) failed
[   77.031631][ T9305] FAT-fs (loop3): Directory bread(block 65) failed
[   77.033674][ T9305] FAT-fs (loop3): Directory bread(block 66) failed
[   77.034758][ T9305] FAT-fs (loop3): Directory bread(block 67) failed
[   77.045187][ T9305] FAT-fs (loop3): Directory bread(block 68) failed
[   77.046290][ T9305] FAT-fs (loop3): Directory bread(block 69) failed
[   77.047312][ T9305] FAT-fs (loop3): Directory bread(block 70) failed
[   77.059965][ T9305] FAT-fs (loop3): Directory bread(block 71) failed
[   77.061069][ T9305] FAT-fs (loop3): Directory bread(block 72) failed
[   77.062104][ T9305] FAT-fs (loop3): Directory bread(block 73) failed
[   77.100887][ T9313] loop4: detected capacity change from 0 to 1024
[   77.109869][ T9305] cifs: Unknown parameter 'shortname'
[   77.201275][ T9323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   77.310844][ T9341] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   77.388100][ T9348] loop0: detected capacity change from 0 to 1024
[   77.400851][ T9349] loop2: detected capacity change from 0 to 256
[   77.428490][ T9349] FAT-fs (loop2): Directory bread(block 64) failed
[   77.429597][ T9349] FAT-fs (loop2): Directory bread(block 65) failed
[   77.430666][ T9349] FAT-fs (loop2): Directory bread(block 66) failed
[   77.431639][ T9349] FAT-fs (loop2): Directory bread(block 67) failed
[   77.438084][ T9349] FAT-fs (loop2): Directory bread(block 68) failed
[   77.447167][ T9349] FAT-fs (loop2): Directory bread(block 69) failed
[   77.448415][ T9349] FAT-fs (loop2): Directory bread(block 70) failed
[   77.449481][ T9349] FAT-fs (loop2): Directory bread(block 71) failed
[   77.450570][ T9349] FAT-fs (loop2): Directory bread(block 72) failed
[   77.451590][ T9349] FAT-fs (loop2): Directory bread(block 73) failed
[   77.496455][ T9326] loop1: detected capacity change from 0 to 40427
[   77.504996][ T9326] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x3ffff
[   77.506245][ T9326] F2FS-fs (loop1): build fault injection attr: rate: 5, type: 0x3ffff
[   77.507564][ T9326] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x77
[   77.509086][ T9326] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x130/0x4ec
[   77.510331][ T9349] cifs: Unknown parameter 'shortname'
[   77.520170][ T9326] F2FS-fs (loop1): invalid crc value
[   77.530301][ T9326] F2FS-fs (loop1) : inject kmalloc in f2fs_kmalloc of f2fs_create_flush_cmd_control+0xf0/0x310
[   77.531882][ T9326] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[   77.559887][ T9366] ieee802154 phy0 wpan0: encryption failed: -22
[   77.602752][ T9374] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   77.760903][ T9400] ieee802154 phy0 wpan0: encryption failed: -22
[   77.792091][ T9398] loop4: detected capacity change from 0 to 4096
[   77.794007][ T9398] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   77.831707][ T9398] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   77.835271][ T9398] ntfs3: loop4: ino=1e, "file1" attr_set_size
[   77.869785][ T9402] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   77.909862][ T9404] loop1: detected capacity change from 0 to 4096
[   77.941506][ T9410] loop3: detected capacity change from 0 to 4096
[   77.955605][ T9412] sctp: [Deprecated]: syz.0.2212 (pid 9412) Use of int in max_burst socket option deprecated.
[   77.955605][ T9412] Use struct sctp_assoc_value instead
[   77.960361][ T9394] loop2: detected capacity change from 0 to 40427
[   77.965113][ T9404] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   77.975655][ T9394] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x3ffff
[   77.977020][ T9394] F2FS-fs (loop2): build fault injection attr: rate: 5, type: 0x3ffff
[   77.978268][ T9394] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77
[   77.979605][ T9394] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x130/0x4ec
[   77.983340][ T9394] F2FS-fs (loop2): invalid crc value
[   78.001798][ T9394] F2FS-fs (loop2) : inject kmalloc in f2fs_kmalloc of f2fs_create_flush_cmd_control+0xf0/0x310
[   78.003648][ T9415] sctp: [Deprecated]: syz.4.2227 (pid 9415) Use of int in max_burst socket option deprecated.
[   78.003648][ T9415] Use struct sctp_assoc_value instead
[   78.020808][ T9394] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[   78.030003][ T9404] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   78.031981][ T9404] ntfs3: loop1: ino=1e, "file1" attr_set_size
[   78.209795][ T9441] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   78.286438][ T9447] loop1: detected capacity change from 0 to 4096
[   78.311196][ T9454] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   78.504034][ T9473] tc_dump_action: action bad kind
[   78.534161][ T9472] loop1: detected capacity change from 0 to 4096
[   78.583282][ T9479] loop2: detected capacity change from 0 to 4096
[   79.073955][ T9501] tc_dump_action: action bad kind
[   79.137153][ T9510] loop3: detected capacity change from 0 to 512
[   79.146870][ T9510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.150724][ T9512] ieee802154 phy0 wpan0: encryption failed: -22
[   79.161212][ T9510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   79.195259][ T4329] EXT4-fs (loop3): unmounting filesystem.
[   79.195359][ T9508] loop4: detected capacity change from 0 to 4096
[   79.255634][ T9517] loop0: detected capacity change from 0 to 4096
[   79.341664][ T9504] loop2: detected capacity change from 0 to 40427
[   79.348150][ T9504] F2FS-fs (loop2): invalid crc value
[   79.351954][ T9504] F2FS-fs (loop2): Found nat_bits in checkpoint
[   79.365450][ T9504] F2FS-fs (loop2): Start checkpoint disabled!
[   79.373361][ T9504] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   79.510006][ T9540] ieee802154 phy0 wpan0: encryption failed: -22
[   79.544851][ T9543] loop2: detected capacity change from 0 to 512
[   79.555136][ T9543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.579403][ T9543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   79.609852][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   79.629277][ T9536] loop3: detected capacity change from 0 to 32768
[   79.646152][ T9536] XFS (loop3): Mounting V5 Filesystem
[   79.676083][ T9536] XFS (loop3): Ending clean mount
[   79.678052][ T9536] XFS (loop3): Quotacheck needed: Please wait.
[   79.690068][ T9536] XFS (loop3): Quotacheck: Done.
[   79.716557][ T4329] XFS (loop3): Unmounting Filesystem
[   80.358052][ T9560] netlink: 'syz.3.2289': attribute type 1 has an invalid length.
[   80.374272][ T9562] loop4: detected capacity change from 0 to 4096
[   80.407883][ T9563] loop0: detected capacity change from 0 to 4096
[   80.501356][ T9567] loop3: detected capacity change from 0 to 2048
[   80.532905][ T9570] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.554663][ T9567] CPU: 0 PID: 9567 Comm: syz.3.2282 Not tainted 6.1.148-syzkaller #0
[   80.555969][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   80.557409][ T9567] Call trace:
[   80.557858][ T9567]  dump_backtrace+0x1c8/0x1f4
[   80.558604][ T9567]  show_stack+0x2c/0x3c
[   80.559194][ T9567]  __dump_stack+0x30/0x40
[   80.559891][ T9567]  dump_stack_lvl+0xf8/0x160
[   80.560696][ T9567]  dump_stack+0x1c/0x5c
[   80.561349][ T9567]  nilfs_btree_do_lookup+0x850/0x994
[   80.562173][ T9567]  nilfs_btree_lookup_contig+0xc8/0x968
[   80.563022][ T9567]  nilfs_bmap_lookup_contig+0x88/0x13c
[   80.563850][ T9567]  nilfs_get_block+0x1a0/0x7a8
[   80.564597][ T9567]  block_truncate_page+0x2e0/0x784
[   80.565430][ T9567]  nilfs_truncate+0x1ec/0x400
[   80.566131][ T9567]  nilfs_setattr+0x1d0/0x274
[   80.566825][ T9567]  notify_change+0xb0c/0xdcc
[   80.567440][ T9567]  do_truncate+0x178/0x1f0
[   80.568170][ T9567]  vfs_truncate+0x23c/0x2b0
[   80.568879][ T9567]  do_sys_truncate+0xe8/0x1b0
[   80.569643][ T9567]  __arm64_sys_truncate+0x5c/0x70
[   80.570454][ T9567]  invoke_syscall+0x98/0x2bc
[   80.571099][ T9567]  el0_svc_common+0x138/0x258
[   80.571826][ T9567]  do_el0_svc+0x58/0x13c
[   80.572567][ T9567]  el0_svc+0x58/0x138
[   80.573254][ T9567]  el0t_64_sync_handler+0x84/0xf0
[   80.574091][ T9567]  el0t_64_sync+0x18c/0x190
[   80.592458][ T9567] NILFS (loop3): btree level mismatch (ino=16): 1 != 5
[   80.593603][ T9567] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   80.595388][ T9567] Remounting filesystem read-only
[   80.596196][ T9567] CPU: 1 PID: 9567 Comm: syz.3.2282 Not tainted 6.1.148-syzkaller #0
[   80.597356][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   80.598827][ T9567] Call trace:
[   80.599349][ T9567]  dump_backtrace+0x1c8/0x1f4
[   80.600056][ T9567]  show_stack+0x2c/0x3c
[   80.600698][ T9567]  __dump_stack+0x30/0x40
[   80.601434][ T9567]  dump_stack_lvl+0xf8/0x160
[   80.602259][ T9567]  dump_stack+0x1c/0x5c
[   80.602935][ T9567]  nilfs_btree_last_key+0x394/0x4d0
[   80.603747][ T9567]  nilfs_bmap_last_key+0x74/0x124
[   80.604470][ T9567]  nilfs_truncate_bmap+0xdc/0x2c0
[   80.605342][ T9567]  nilfs_truncate+0x1f8/0x400
[   80.606098][ T9567]  nilfs_setattr+0x1d0/0x274
[   80.606872][ T9567]  notify_change+0xb0c/0xdcc
[   80.607641][ T9567]  do_truncate+0x178/0x1f0
[   80.608353][ T9567]  vfs_truncate+0x23c/0x2b0
[   80.609101][ T9567]  do_sys_truncate+0xe8/0x1b0
[   80.609831][ T9567]  __arm64_sys_truncate+0x5c/0x70
[   80.610571][ T9567]  invoke_syscall+0x98/0x2bc
[   80.611334][ T9567]  el0_svc_common+0x138/0x258
[   80.612089][ T9567]  do_el0_svc+0x58/0x13c
[   80.612769][ T9567]  el0_svc+0x58/0x138
[   80.613404][ T9567]  el0t_64_sync_handler+0x84/0xf0
[   80.614135][ T9567]  el0t_64_sync+0x18c/0x190
[   80.627137][ T9557] loop2: detected capacity change from 0 to 32768
[   80.639545][ T9567] NILFS (loop3): btree level mismatch (ino=16): 1 != 5
[   80.640988][ T9567] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16)
[   80.642308][ T9567] NILFS (loop3): error -5 truncating bmap (ino=16)
[   80.650079][ T9557] XFS (loop2): Mounting V5 Filesystem
[   80.694538][ T9557] XFS (loop2): Ending clean mount
[   80.699965][ T9557] XFS (loop2): Quotacheck needed: Please wait.
[   80.712652][ T9557] XFS (loop2): Quotacheck: Done.
[   80.720672][ T9566] loop1: detected capacity change from 0 to 40427
[   80.724283][ T9566] F2FS-fs (loop1): invalid crc value
[   80.727738][ T9566] F2FS-fs (loop1): Found nat_bits in checkpoint
[   80.729081][ T4329] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[   80.749724][ T9566] F2FS-fs (loop1): Start checkpoint disabled!
[   80.757384][ T9566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   80.803844][ T4324] XFS (loop2): Unmounting Filesystem
[   80.846363][ T9587] loop4: detected capacity change from 0 to 4096
[   80.861947][ T9587] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   81.000715][ T9601] netlink: 'syz.0.2293': attribute type 1 has an invalid length.
[   81.018558][ T9599] loop1: detected capacity change from 0 to 4096
[   81.025847][ T9599] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   81.079155][ T9603] loop3: detected capacity change from 0 to 4096
[   81.149432][ T9609] loop4: detected capacity change from 0 to 4096
[   81.241096][ T9623] loop2: detected capacity change from 0 to 2048
[   81.266268][ T9627] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.318814][ T9623] CPU: 0 PID: 9623 Comm: syz.2.2299 Not tainted 6.1.148-syzkaller #0
[   81.320056][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   81.321487][ T9623] Call trace:
[   81.321918][ T9623]  dump_backtrace+0x1c8/0x1f4
[   81.322577][ T9623]  show_stack+0x2c/0x3c
[   81.323222][ T9623]  __dump_stack+0x30/0x40
[   81.323936][ T9623]  dump_stack_lvl+0xf8/0x160
[   81.324663][ T9623]  dump_stack+0x1c/0x5c
[   81.325339][ T9623]  nilfs_btree_do_lookup+0x850/0x994
[   81.326199][ T9623]  nilfs_btree_lookup_contig+0xc8/0x968
[   81.327069][ T9623]  nilfs_bmap_lookup_contig+0x88/0x13c
[   81.327939][ T9623]  nilfs_get_block+0x1a0/0x7a8
[   81.328667][ T9623]  block_truncate_page+0x2e0/0x784
[   81.329433][ T9623]  nilfs_truncate+0x1ec/0x400
[   81.330180][ T9623]  nilfs_setattr+0x1d0/0x274
[   81.330878][ T9623]  notify_change+0xb0c/0xdcc
[   81.331614][ T9623]  do_truncate+0x178/0x1f0
[   81.332293][ T9623]  vfs_truncate+0x23c/0x2b0
[   81.333057][ T9623]  do_sys_truncate+0xe8/0x1b0
[   81.333820][ T9623]  __arm64_sys_truncate+0x5c/0x70
[   81.334576][ T9623]  invoke_syscall+0x98/0x2bc
[   81.335277][ T9623]  el0_svc_common+0x138/0x258
[   81.335981][ T9623]  do_el0_svc+0x58/0x13c
[   81.336701][ T9623]  el0_svc+0x58/0x138
[   81.337395][ T9623]  el0t_64_sync_handler+0x84/0xf0
[   81.338208][ T9623]  el0t_64_sync+0x18c/0x190
[   81.341297][ T9623] NILFS (loop2): btree level mismatch (ino=16): 1 != 5
[   81.342286][ T9623] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   81.344360][ T9623] Remounting filesystem read-only
[   81.345148][ T9623] CPU: 0 PID: 9623 Comm: syz.2.2299 Not tainted 6.1.148-syzkaller #0
[   81.346260][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   81.347699][ T9623] Call trace:
[   81.348195][ T9623]  dump_backtrace+0x1c8/0x1f4
[   81.348935][ T9623]  show_stack+0x2c/0x3c
[   81.349520][ T9623]  __dump_stack+0x30/0x40
[   81.350169][ T9623]  dump_stack_lvl+0xf8/0x160
[   81.350838][ T9623]  dump_stack+0x1c/0x5c
[   81.351500][ T9623]  nilfs_btree_last_key+0x394/0x4d0
[   81.352345][ T9623]  nilfs_bmap_last_key+0x74/0x124
[   81.353093][ T9623]  nilfs_truncate_bmap+0xdc/0x2c0
[   81.353901][ T9623]  nilfs_truncate+0x1f8/0x400
[   81.354601][ T9623]  nilfs_setattr+0x1d0/0x274
[   81.355292][ T9623]  notify_change+0xb0c/0xdcc
[   81.356107][ T9623]  do_truncate+0x178/0x1f0
[   81.356841][ T9623]  vfs_truncate+0x23c/0x2b0
[   81.357497][ T9623]  do_sys_truncate+0xe8/0x1b0
[   81.358214][ T9623]  __arm64_sys_truncate+0x5c/0x70
[   81.359020][ T9623]  invoke_syscall+0x98/0x2bc
[   81.359771][ T9623]  el0_svc_common+0x138/0x258
[   81.360549][ T9623]  do_el0_svc+0x58/0x13c
[   81.361270][ T9623]  el0_svc+0x58/0x138
[   81.361888][ T9623]  el0t_64_sync_handler+0x84/0xf0
[   81.362633][ T9623]  el0t_64_sync+0x18c/0x190
[   81.364766][ T9623] NILFS (loop2): btree level mismatch (ino=16): 1 != 5
[   81.365877][ T9623] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16)
[   81.367395][ T9623] NILFS (loop2): error -5 truncating bmap (ino=16)
[   81.381059][ T4324] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[   81.547949][ T9647] loop0: detected capacity change from 0 to 4096
[   81.554885][ T9647] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   81.678017][ T9672] __nla_validate_parse: 3 callbacks suppressed
[   81.678027][ T9672] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2327'.
[   81.919039][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2342'.
[   81.997694][ T9713] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2343'.
[   82.144587][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2357'.
[   82.295624][ T9739] loop0: detected capacity change from 0 to 4096
[   82.304052][ T9728] loop2: detected capacity change from 0 to 32768
[   82.310672][ T9728] jfs_strtoUCS: char2uni returned -22.
[   82.311645][ T9728] charset = cp950, char = 0xd4
[   82.312691][ T9728] jfs_strtoUCS: char2uni returned -22.
[   82.313518][ T9728] charset = cp950, char = 0xd4
[   82.320073][ T9739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   82.437094][ T4323] EXT4-fs (loop0): unmounting filesystem.
[   82.680064][ T9699] loop3: detected capacity change from 0 to 131072
[   82.682531][ T9699] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[   82.683748][ T9699] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   82.685621][ T9699] F2FS-fs (loop3): invalid crc value
[   82.726058][ T9699] F2FS-fs (loop3): Found nat_bits in checkpoint
[   82.737223][ T9773] loop1: detected capacity change from 0 to 32768
[   82.750641][ T9773] jfs_strtoUCS: char2uni returned -22.
[   82.751553][ T9773] charset = cp950, char = 0xd4
[   82.759271][ T9699] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   82.760409][ T9699] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   82.775894][ T9773] jfs_strtoUCS: char2uni returned -22.
[   82.777750][ T9773] charset = cp950, char = 0xd4
[   82.865422][ T9791] loop2: detected capacity change from 0 to 4096
[   82.895780][ T9791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.903111][ T9780] loop4: detected capacity change from 0 to 32768
[   82.939384][ T9780] JBD2: Ignoring recovery information on journal
[   82.965088][ T9780] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   83.022308][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   83.076049][ T9780] (syz.4.2391,9780,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[   83.078832][ T9780] (syz.4.2391,9780,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[   83.080217][ T9780] (syz.4.2391,9780,1):ocfs2_mknod:298 ERROR: status = -2
[   83.081345][ T9780] (syz.4.2391,9780,1):ocfs2_mknod:502 ERROR: status = -2
[   83.114586][ T9780] (syz.4.2391,9780,1):ocfs2_create:676 ERROR: status = -2
[   83.168216][ T4328] ocfs2: Unmounting device (7,4) on (node local)
[   83.322090][ T9834] netlink: 'syz.1.2400': attribute type 3 has an invalid length.
[   83.323813][ T9834] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2400'.
[   83.626431][ T9868] netlink: 'syz.2.2419': attribute type 3 has an invalid length.
[   83.627772][ T9868] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2419'.
[   83.715005][ T9850] loop3: detected capacity change from 0 to 32768
[   83.730105][ T9850] JBD2: Ignoring recovery information on journal
[   83.738248][ T9799] loop0: detected capacity change from 0 to 131072
[   83.743660][ T9799] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[   83.744749][ T9799] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   83.747547][ T9879] vhci_hcd: invalid port number 255
[   83.751291][ T9879] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[   83.764631][ T9799] F2FS-fs (loop0): invalid crc value
[   83.794866][ T9881] loop1: detected capacity change from 0 to 2048
[   83.806100][ T9850] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   83.814458][ T9799] F2FS-fs (loop0): Found nat_bits in checkpoint
[   83.836824][ T9799] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   83.837928][ T9799] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   83.849434][ T9889] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   83.864294][ T9850] (syz.3.2407,9850,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[   83.867120][ T9850] (syz.3.2407,9850,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[   83.868710][ T9850] (syz.3.2407,9850,1):ocfs2_mknod:298 ERROR: status = -2
[   83.869727][ T9850] (syz.3.2407,9850,1):ocfs2_mknod:502 ERROR: status = -2
[   83.870018][ T9881] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[   83.870834][ T9850] (syz.3.2407,9850,1):ocfs2_create:676 ERROR: status = -2
[   83.882734][ T9881] Remounting filesystem read-only
[   83.903671][ T4329] ocfs2: Unmounting device (7,3) on (node local)
[   84.043234][ T9913] vhci_hcd: invalid port number 255
[   84.044163][ T9913] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[   84.117897][ T9919] loop2: detected capacity change from 0 to 2048
[   84.147685][ T9928] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.166392][ T9919] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[   84.177151][ T9919] Remounting filesystem read-only
[   84.186498][ T9934] loop4: detected capacity change from 0 to 16
[   84.198610][ T9934] erofs: (device loop4): mounted with root inode @ nid 36.
[   84.244102][ T9944] loop2: detected capacity change from 0 to 16
[   84.263274][ T9944] erofs: (device loop2): mounted with root inode @ nid 36.
[   84.284447][ T9946] loop1: detected capacity change from 0 to 4096
[   84.311753][ T9950] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.350936][ T9946] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[   84.389478][ T9962] loop4: detected capacity change from 0 to 64
[   84.398307][ T9962] syz.4.2460: attempt to access beyond end of device
[   84.398307][ T9962] loop4: rw=0, sector=130062, nr_sectors = 2 limit=64
[   84.401465][ T9962] Buffer I/O error on dev loop4, logical block 65031, async page read
[   84.412958][ T9962] syz.4.2460: attempt to access beyond end of device
[   84.412958][ T9962] loop4: rw=0, sector=130062, nr_sectors = 2 limit=64
[   84.415125][ T9962] Buffer I/O error on dev loop4, logical block 65031, async page read
[   84.479735][ T9971] loop1: detected capacity change from 0 to 1764
[   84.580028][ T9985] loop2: detected capacity change from 0 to 4096
[   84.610638][ T9992] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.637100][ T9985] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[   84.684181][T10004] loop1: detected capacity change from 0 to 64
[   84.702920][T10004] syz.1.2480: attempt to access beyond end of device
[   84.702920][T10004] loop1: rw=0, sector=130062, nr_sectors = 2 limit=64
[   84.704972][T10004] Buffer I/O error on dev loop1, logical block 65031, async page read
[   84.706432][T10004] syz.1.2480: attempt to access beyond end of device
[   84.706432][T10004] loop1: rw=0, sector=130062, nr_sectors = 2 limit=64
[   84.708522][T10004] Buffer I/O error on dev loop1, logical block 65031, async page read
[   84.717850][T10008] loop4: detected capacity change from 0 to 1764
[   84.792958][T10018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2499'.
[   84.798925][T10018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2499'.
[   84.852082][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'.
[   84.903692][T10036] netlink: 'syz.2.2498': attribute type 21 has an invalid length.
[   84.905174][T10036] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2498'.
[   84.906612][T10036] netlink: 'syz.2.2498': attribute type 4 has an invalid length.
[   85.059010][T10064] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[   85.088844][T10068] CIFS mount error: No usable UNC path provided in device string!
[   85.088844][T10068] 
[   85.090432][T10068] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   85.096571][T10067] loop0: detected capacity change from 0 to 2048
[   85.127936][T10067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.175279][T10078] netlink: 'syz.3.2519': attribute type 21 has an invalid length.
[   85.196358][T10082] overlayfs: './file0' not a directory
[   85.284286][T10098] netlink: 'syz.0.2525': attribute type 11 has an invalid length.
[   85.320279][T10102] xt_hashlimit: size too large, truncated to 1048576
[   85.550903][T10100] loop1: detected capacity change from 0 to 32768
[   85.560361][T10136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.572252][T10100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2528 (10100)
[   85.578081][T10100] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.579857][T10100] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   85.581121][T10100] BTRFS info (device loop1): using free space tree
[   85.609496][T10142] loop2: detected capacity change from 0 to 1024
[   85.640501][T10142] hfsplus: cannot replace xattr
[   85.657419][T10147] device xfrm1 entered promiscuous mode
[   85.692798][   T39] hfsplus: b-tree write err: -5, ino 4
[   85.741764][T10161] loop3: detected capacity change from 0 to 256
[   85.752072][T10161] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d)
[   85.783150][T10167] loop4: detected capacity change from 0 to 256
[   85.787109][T10100] BTRFS info (device loop1): enabling ssd optimizations
[   85.789846][T10167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   85.857848][T10175] loop0: detected capacity change from 0 to 1024
[   85.860640][ T4319] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.865172][T10175] EXT4-fs: inline encryption not supported
[   85.865843][T10177] Injecting memory failure for pfn 0x139ffe at process virtual address 0x20ffe000
[   85.866138][T10175] EXT4-fs: Ignoring removed bh option
[   85.867591][T10177] Memory failure: 0x139ffe: already hardware poisoned
[   85.887918][T10175] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   85.917344][T10175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   85.917826][T10184] xt_TCPMSS: Only works on TCP SYN packets
[   85.955712][ T4559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4559)
[   85.984117][ T4323] EXT4-fs (loop0): unmounting filesystem.
[   86.158316][T10209] loop3: detected capacity change from 0 to 128
[   86.258695][   T47] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[   86.261506][T10199] loop2: detected capacity change from 0 to 32768
[   86.266319][T10195] loop1: detected capacity change from 0 to 32768
[   86.275787][T10199] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2571 (10199)
[   86.278123][T10195] (syz.1.2566,10195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   86.280505][T10195] (syz.1.2566,10195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   86.285603][T10199] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.287212][T10199] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   86.288449][T10199] BTRFS info (device loop2): using free space tree
[   86.296523][T10195] JBD2: Ignoring recovery information on journal
[   86.325534][T10195] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   86.387686][T10231] loop3: detected capacity change from 0 to 1024
[   86.427407][ T4457] hfsplus: b-tree write err: -5, ino 4
[   86.439449][ T4319] ocfs2: Unmounting device (7,1) on (node local)
[   86.512770][T10199] BTRFS info (device loop2): enabling ssd optimizations
[   86.672794][ T4324] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.703571][T10242] loop0: detected capacity change from 0 to 32768
[   86.723755][T10242] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   86.725390][T10242] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[   86.726623][T10242] BTRFS info (device loop0): using free space tree
[   86.788011][T10255] loop3: detected capacity change from 0 to 32768
[   86.813338][T10255] ERROR: (device loop3): diWrite: ixpxd invalid
[   86.813338][T10255] 
[   86.818875][T10281] loop1: detected capacity change from 0 to 1024
[   86.820654][T10255] ERROR: (device loop3): remounting filesystem as read-only
[   86.822721][T10255] ERROR: (device loop3): txAbort: 
[   86.822721][T10255] 
[   86.826592][ T4558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4558)
[   86.827844][T10255] imap: 00000000174baa47: 07ffffff 00000000 00000000 00000000
[   86.831913][T10255] imap: 00000000ac751416: 00000004 00000002 00000000 00000000
[   86.837964][T10255] ERROR: (device loop3): diFree: inum = 7, iagno = 0, nextiag = 0
[   86.837964][T10255] 
[   86.856711][    T9] hfsplus: b-tree write err: -5, ino 4
[   86.889730][T10242] BTRFS info (device loop0): enabling ssd optimizations
[   86.968521][T10301] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   86.999148][T10307] loop2: detected capacity change from 0 to 512
[   87.000605][ T4323] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.007608][T10307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   87.080449][T10319] netlink: 'syz.1.2606': attribute type 7 has an invalid length.
[   87.081792][T10319] netlink: 'syz.1.2606': attribute type 5 has an invalid length.
[   87.085517][T10307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   87.111226][T10307] EXT4-fs: Cannot change quota options when quota turned on
[   87.118857][T10319] __nla_validate_parse: 6 callbacks suppressed
[   87.118872][T10319] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2606'.
[   87.177074][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   87.209648][T10330] loop0: detected capacity change from 0 to 64
[   87.360927][T10341] loop3: detected capacity change from 0 to 4096
[   87.503527][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'.
[   87.509353][T10368] netlink: 'syz.2.2640': attribute type 3 has an invalid length.
[   87.622245][T10350] loop4: detected capacity change from 0 to 32768
[   87.624328][T10350] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   87.625648][T10350] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   87.632291][T10350] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   87.649899][ T4576] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   87.650963][ T4576] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   87.664582][ T4576] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 13ms
[   87.665848][ T4576] gfs2: fsid=syz:syz.0: jid=0: Done
[   87.666776][T10350] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   87.744465][T10390] loop2: detected capacity change from 0 to 64
[   87.808870][T10379] loop1: detected capacity change from 0 to 40427
[   87.819915][T10379] F2FS-fs (loop1): invalid crc value
[   87.820798][T10379] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[   87.830945][T10379] F2FS-fs (loop1): Found nat_bits in checkpoint
[   87.845255][T10379] F2FS-fs (loop1): recover fsync data on readonly fs
[   87.846428][T10379] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[   87.847711][T10379] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[   87.853477][T10379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   87.896706][T10401] loop2: detected capacity change from 0 to 4096
[   87.904968][T10401] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   87.956040][T10401] ntfs3: loop2: failed to convert "c46c" to euc-jp
[   87.978868][T10412] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   87.980755][T10412] overlayfs: missing 'lowerdir'
[   88.189603][T10438] loop4: detected capacity change from 0 to 4096
[   88.264039][T10446] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[   88.319002][T10448] loop1: detected capacity change from 0 to 128
[   88.361099][T10433] loop2: detected capacity change from 0 to 32768
[   88.428899][T10458] loop0: detected capacity change from 0 to 256
[   88.565969][T10478] ieee802154 phy0 wpan0: encryption failed: -22
[   88.578259][T10480] loop0: detected capacity change from 0 to 64
[   88.626084][T10484] loop3: detected capacity change from 0 to 1024
[   88.800517][T10462] loop1: detected capacity change from 0 to 32768
[   88.827944][T10462] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   88.829293][T10462] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   88.858795][T10462] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   88.862877][T10320] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   88.864062][T10320] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   88.885612][T10320] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms
[   88.886885][T10320] gfs2: fsid=syz:syz.0: jid=0: Done
[   88.887753][T10462] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   88.915330][T10522] snd_dummy snd_dummy.0: control 0:4:0:syz0:0 is already present
[   88.966363][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'.
[   88.977809][T10526] loop0: detected capacity change from 0 to 256
[   89.129604][T10544] loop4: detected capacity change from 0 to 8
[   89.154231][T10544] SQUASHFS error: Failed to read block 0x738: -5
[   89.155238][T10544] SQUASHFS error: Unable to read metadata cache entry [736]
[   89.436277][T10574] ERROR: device name not specified.
[   89.587637][T10584] loop3: detected capacity change from 0 to 4096
[   89.596082][T10584] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   89.598032][T10584] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   89.615664][T10584] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   89.617387][T10584] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   89.619233][T10584] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   89.649610][T10584] ntfs: volume version 3.1.
[   89.656211][T10584] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   89.658158][T10584] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   89.662817][T10584] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   89.664851][T10584] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   89.686140][T10584] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[   89.775621][T10560] loop1: detected capacity change from 0 to 65536
[   89.845609][T10560] XFS (loop1): Mounting V5 Filesystem
[   89.907721][T10560] XFS (loop1): Ending clean mount
[   89.969392][T10560] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[   89.971092][T10560] XFS (loop1): Unmount and run xfs_repair
[   89.972031][T10560] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   89.989761][T10560] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[   89.991202][T10560] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[   89.994995][T10560] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[   89.996260][T10560] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[   89.997651][T10560] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   89.999074][T10560] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[   90.016013][T10550] loop2: detected capacity change from 0 to 131072
[   90.022622][T10550] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[   90.023915][T10560] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   90.024024][T10550] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   90.027028][T10550] F2FS-fs (loop2): invalid crc value
[   90.029773][T10560] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   90.031168][T10560] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74
[   90.048360][T10560] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   90.050757][T10560] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   90.053298][T10550] F2FS-fs (loop2): Found nat_bits in checkpoint
[   90.064819][T10550] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   90.065940][T10550] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   90.118069][ T4319] XFS (loop1): Unmounting Filesystem
[   90.166297][T10628] loop4: detected capacity change from 0 to 32768
[   90.173989][T10628] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   90.175609][T10628] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   90.176985][T10628] BTRFS info (device loop4): force zlib compression, level 3
[   90.178047][T10628] BTRFS info (device loop4): force clearing of disk cache
[   90.178999][T10628] BTRFS info (device loop4): setting nodatasum
[   90.180050][T10628] BTRFS info (device loop4): use zlib compression, level 3
[   90.181277][T10628] BTRFS info (device loop4): allowing degraded mounts
[   90.190472][T10628] BTRFS info (device loop4): enabling disk space caching
[   90.191708][T10628] BTRFS info (device loop4): disk space caching is enabled
[   90.368627][T10669] loop2: detected capacity change from 0 to 1024
[   90.444110][    T9] hfsplus: b-tree write err: -5, ino 4
[   90.519241][T10628] BTRFS info (device loop4): enabling ssd optimizations
[   90.520724][T10628] BTRFS info (device loop4): rebuilding free space tree
[   90.527273][T10628] BTRFS info (device loop4): disabling free space tree
[   90.528366][T10628] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   90.529689][T10628] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   90.553796][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2775'.
[   90.555199][T10697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2775'.
[   90.587237][T10628] BTRFS info (device loop4): balance: start -f -susage=0..2940,devid=0,vrange=5..4398046511294,limit=46533..0
[   90.589090][T10628] BTRFS info (device loop4): balance: ended with status: 0
[   90.647379][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'.
[   90.658741][ T4328] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   90.834212][T10732] netlink: 'syz.2.2794': attribute type 1 has an invalid length.
[   90.865363][T10720] loop0: detected capacity change from 0 to 1024
[   90.899855][T10740] tmpfs: Bad value for 'size'
[   90.919357][T10744] bridge3: the hash_elasticity option has been deprecated and is always 16
[   90.960026][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2804'.
[   90.960320][T10748] netlink: 'syz.2.2802': attribute type 3 has an invalid length.
[   90.962768][T10748] netlink: 'syz.2.2802': attribute type 1 has an invalid length.
[   91.030963][T10762] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   91.137624][T10782] netlink: 'syz.3.2816': attribute type 17 has an invalid length.
[   91.143419][T10782] netlink: 'syz.3.2816': attribute type 16 has an invalid length.
[   91.145592][T10782] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2816'.
[   91.275098][T10799] loop4: detected capacity change from 0 to 1024
[   91.301899][T10799] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   91.308905][T10799] hfsplus: filesystem is marked journaled, leaving read-only.
[   91.378522][T10785] loop2: detected capacity change from 0 to 32768
[   91.389183][T10794] loop1: detected capacity change from 0 to 32768
[   91.395654][T10785] ERROR: (device loop2): dbFindCtl: Corrupt dmapctl page
[   91.395654][T10785] 
[   91.397276][T10785] ERROR: (device loop2): remounting filesystem as read-only
[   91.398479][T10785] ialloc: diAlloc returned -5!
[   91.409083][T10794] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   91.434118][T10794] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   91.499531][ T4319] ocfs2: Unmounting device (7,1) on (node local)
[   91.506820][T10816] loop2: detected capacity change from 0 to 256
[   91.516737][T10816] FAT-fs (loop2): Directory bread(block 64) failed
[   91.517780][T10816] FAT-fs (loop2): Directory bread(block 65) failed
[   91.533099][T10816] FAT-fs (loop2): Directory bread(block 66) failed
[   91.534119][T10816] FAT-fs (loop2): Directory bread(block 67) failed
[   91.535254][T10816] FAT-fs (loop2): Directory bread(block 68) failed
[   91.538866][T10816] FAT-fs (loop2): Directory bread(block 69) failed
[   91.539916][T10816] FAT-fs (loop2): Directory bread(block 70) failed
[   91.540872][T10816] FAT-fs (loop2): Directory bread(block 71) failed
[   91.541864][T10816] FAT-fs (loop2): Directory bread(block 72) failed
[   91.548649][T10816] FAT-fs (loop2): Directory bread(block 73) failed
[   91.648442][T10832] netlink: 'syz.3.2841': attribute type 21 has an invalid length.
[   91.649992][T10832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2841'.
[   91.695420][   T47] Bluetooth: hci1: command 0x0406 tx timeout
[   91.715047][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'.
[   91.811535][T10848] netlink: 'syz.2.2849': attribute type 30 has an invalid length.
[   91.834610][T10842] loop4: detected capacity change from 0 to 32768
[   91.883613][T10842] XFS (loop4): Mounting V5 Filesystem
[   91.908335][T10842] XFS (loop4): Ending clean mount
[   91.963858][ T4328] XFS (loop4): Unmounting Filesystem
[   92.029995][T10846] loop1: detected capacity change from 0 to 32768
[   92.049958][T10846] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   92.060079][T10846] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   92.079795][T10846] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[   92.082218][T10846] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   92.085091][T10846] OCFS2: File system is now read-only.
[   92.085946][T10846] (syz.1.2850,10846,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[   92.088493][T10846] (syz.1.2850,10846,1):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -30
[   92.089683][T10870] loop2: detected capacity change from 0 to 4096
[   92.092225][T10846] (syz.1.2850,10846,1):ocfs2_local_alloc_reserve_for_window:1123 ERROR: status = -30
[   92.100314][T10846] (syz.1.2850,10846,1):ocfs2_local_alloc_reserve_for_window:1139 ERROR: status = -30
[   92.105133][T10846] (syz.1.2850,10846,0):ocfs2_local_alloc_slide_window:1254 ERROR: status = -30
[   92.106495][T10846] (syz.1.2850,10846,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[   92.107884][T10846] (syz.1.2850,10846,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[   92.109440][T10846] (syz.1.2850,10846,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[   92.110773][T10846] (syz.1.2850,10846,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[   92.112308][T10846] (syz.1.2850,10846,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[   92.115669][T10846] (syz.1.2850,10846,0):ocfs2_mknod:357 ERROR: status = -30
[   92.116910][T10846] (syz.1.2850,10846,0):ocfs2_mknod:502 ERROR: status = -30
[   92.118033][T10846] (syz.1.2850,10846,0):ocfs2_mkdir:659 ERROR: status = -30
[   92.136908][T10870] ntfs: volume version 3.1.
[   92.178196][ T4319] ocfs2: Unmounting device (7,1) on (node local)
[   92.340285][T10894] netlink: 'syz.2.2866': attribute type 11 has an invalid length.
[   92.341410][T10894] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2866'.
[   92.400478][T10903] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2869'.
[   92.510924][T10921] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.641900][T10938] device bridge2 entered promiscuous mode
[   92.647436][T10943] trusted_key: encrypted_key: keylen parameter is missing
[   92.759036][T10958] loop2: detected capacity change from 0 to 764
[   92.769565][T10958] rock: directory entry would overflow storage
[   92.770173][T10960] ieee802154 phy0 wpan0: encryption failed: -22
[   92.770507][T10958] rock: sig=0x4f50, size=4, remaining=3
[   92.776379][T10958] iso9660: Corrupted directory entry in block 6 of inode 1792
[   92.944873][T10988] netlink: zone id is out of range
[   92.959506][T10992] binder: 10991:10992 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   92.960776][T10992] binder: 10991:10992 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   92.962896][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.968571][T10992] binder: 10991:10992 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   92.970523][T10992] binder: 10992 RLIMIT_NICE not set
[   93.119364][T11008] loop3: detected capacity change from 0 to 2048
[   93.123542][T11008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.124401][T11014] loop1: detected capacity change from 0 to 256
[   93.145020][T11014] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   93.226792][ T4330] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[   93.240153][T11024] loop1: detected capacity change from 0 to 256
[   93.264851][T11024] FAT-fs (loop1): Directory bread(block 64) failed
[   93.265940][T11024] FAT-fs (loop1): Directory bread(block 65) failed
[   93.266945][T11024] FAT-fs (loop1): Directory bread(block 66) failed
[   93.267975][T11024] FAT-fs (loop1): Directory bread(block 67) failed
[   93.314761][T11024] FAT-fs (loop1): Directory bread(block 68) failed
[   93.315885][T11024] FAT-fs (loop1): Directory bread(block 69) failed
[   93.322542][T11024] FAT-fs (loop1): Directory bread(block 70) failed
[   93.323629][T11024] FAT-fs (loop1): Directory bread(block 71) failed
[   93.324735][T11024] FAT-fs (loop1): Directory bread(block 72) failed
[   93.325724][T11024] FAT-fs (loop1): Directory bread(block 73) failed
[   93.388390][T11028] loop2: detected capacity change from 0 to 512
[   93.392855][T11028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   93.416422][T11030] validate_nla: 2 callbacks suppressed
[   93.416434][T11030] netlink: 'syz.0.2931': attribute type 17 has an invalid length.
[   93.418456][T11030] netlink: 'syz.0.2931': attribute type 16 has an invalid length.
[   93.419580][T11030] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2931'.
[   93.427060][T11020] loop3: detected capacity change from 0 to 32768
[   93.436120][T11028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[   93.437465][T11028] System zones: 0-2, 18-18, 34-34
[   93.448307][T11028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   93.492662][T11020] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page
[   93.492662][T11020] 
[   93.494856][T11020] ERROR: (device loop3): remounting filesystem as read-only
[   93.496131][T11020] ialloc: diAlloc returned -5!
[   93.503456][ T4324] EXT4-fs (loop2): unmounting filesystem.
[   93.586145][T11043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2938'.
[   93.587633][T11043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2938'.
[   93.726048][T11067] loop0: detected capacity change from 0 to 256
[   93.739489][T11067] FAT-fs (loop0): Directory bread(block 64) failed
[   93.740557][T11067] FAT-fs (loop0): Directory bread(block 65) failed
[   93.741609][T11067] FAT-fs (loop0): Directory bread(block 66) failed
[   93.743093][T11067] FAT-fs (loop0): Directory bread(block 67) failed
[   93.744224][T11067] FAT-fs (loop0): Directory bread(block 68) failed
[   93.745220][T11067] FAT-fs (loop0): Directory bread(block 69) failed
[   93.746197][T11067] FAT-fs (loop0): Directory bread(block 70) failed
[   93.747326][T11067] FAT-fs (loop0): Directory bread(block 71) failed
[   93.748466][T11067] FAT-fs (loop0): Directory bread(block 72) failed
[   93.749479][T11067] FAT-fs (loop0): Directory bread(block 73) failed
[   93.827460][T11071] loop3: detected capacity change from 0 to 1024
[   93.850577][T11075] loop0: detected capacity change from 0 to 512
[   93.860426][T11075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   93.871877][ T4457] hfsplus: b-tree write err: -5, ino 4
[   93.877974][T11075] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[   93.879198][T11075] System zones: 0-2, 18-18, 34-34
[   93.880744][T11075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   93.898100][ T4330] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[   93.922876][ T4323] EXT4-fs (loop0): unmounting filesystem.
[   94.053465][T11073] loop4: detected capacity change from 0 to 32768
[   94.071892][T11073] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page
[   94.071892][T11073] 
[   94.073669][T11073] ERROR: (device loop4): remounting filesystem as read-only
[   94.074727][T11073] ialloc: diAlloc returned -5!
[   94.410193][T11138] loop0: detected capacity change from 0 to 4096
[   94.442264][T11138] ntfs: volume version 3.1.
[   94.521647][T11161] ERROR: device name not specified.
[   94.765223][T11155] loop3: detected capacity change from 0 to 32768
[   94.780827][T11155] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   94.782150][T11155] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   94.786772][T11155] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   94.788508][ T4831] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   94.789596][ T4831] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   94.833979][ T4831] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms
[   94.837755][ T4831] gfs2: fsid=syz:syz.0: jid=0: Done
[   94.838622][T11155] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   94.922040][T11204] loop0: detected capacity change from 0 to 8
[   94.950200][T11204] SQUASHFS error: Failed to read block 0x738: -5
[   94.951289][T11204] SQUASHFS error: Unable to read metadata cache entry [736]
[   95.013823][T11208] snd_dummy snd_dummy.0: control 0:4:0:syz0:0 is already present
[   95.226806][T11194] loop2: detected capacity change from 0 to 65536
[   95.259843][T11194] XFS (loop2): Mounting V5 Filesystem
[   95.270215][T11194] XFS (loop2): Ending clean mount
[   95.312636][ T7020] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[   95.314586][ T7020] XFS (loop2): Unmount and run xfs_repair
[   95.315553][ T7020] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   95.316687][ T7020] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[   95.318095][ T7020] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[   95.319487][ T7020] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[   95.320819][ T7020] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[   95.322275][ T7020] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   95.326801][ T7020] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[   95.328221][ T7020] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.329554][ T7020] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.330949][T11194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74
[   95.333130][T11194] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   95.335449][T11194] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   95.348653][ T4324] XFS (loop2): Unmounting Filesystem
[   95.445413][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'.
[   95.475273][T11198] loop4: detected capacity change from 0 to 131072
[   95.480750][T11198] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[   95.481931][T11198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   95.486643][T11198] F2FS-fs (loop4): invalid crc value
[   95.492651][T11198] F2FS-fs (loop4): Found nat_bits in checkpoint
[   95.535275][T11198] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   95.536558][T11198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   95.644420][T11260] loop1: detected capacity change from 0 to 1024
[   95.750465][T11264] loop2: detected capacity change from 0 to 256
[   95.808639][T11271] ieee802154 phy0 wpan0: encryption failed: -22
[   95.942642][T11290] loop3: detected capacity change from 0 to 256
[   95.969068][T11294] loop4: detected capacity change from 0 to 64
[   96.073656][T11298] loop1: detected capacity change from 0 to 4096
[   96.109970][T11309] loop4: detected capacity change from 0 to 764
[   96.142123][T11309] rock: directory entry would overflow storage
[   96.144192][T11309] rock: sig=0x4f50, size=4, remaining=3
[   96.147048][T11309] iso9660: Corrupted directory entry in block 6 of inode 1792
[   96.210706][T11312] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[   96.260034][T11287] loop0: detected capacity change from 0 to 32768
[   96.267093][T11287] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   96.268357][T11287] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   96.279885][T11287] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   96.281703][ T7020] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   96.283315][ T7020] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   96.308487][ T7020] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 25ms
[   96.309782][ T7020] gfs2: fsid=syz:syz.0: jid=0: Done
[   96.311606][T11287] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   96.333300][   T47] Bluetooth: hci0: command 0x0406 tx timeout
[   96.470048][T11322] loop4: detected capacity change from 0 to 128
[   96.539833][T11327] loop1: detected capacity change from 0 to 4096
[   96.541451][T11327] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   96.600767][T11327] ntfs3: loop1: failed to convert "c46c" to euc-jp
[   96.672358][T11345] ieee802154 phy0 wpan0: encryption failed: -22
[   96.872957][T11352] loop3: detected capacity change from 0 to 32768
[   96.919298][T11359] loop0: detected capacity change from 0 to 40427
[   96.942312][T11369] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   96.944399][T11369] overlayfs: missing 'lowerdir'
[   96.945561][T11359] F2FS-fs (loop0): invalid crc value
[   96.946373][T11359] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[   96.950035][T11370] netlink: 'syz.1.3104': attribute type 3 has an invalid length.
[   96.955225][T11359] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.011511][T11359] F2FS-fs (loop0): recover fsync data on readonly fs
[   97.017864][T11359] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[   97.018892][T11359] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[   97.020668][T11359] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   97.051008][T11383] ieee802154 phy0 wpan0: encryption failed: -22
[   97.102146][T11388] loop1: detected capacity change from 0 to 4096
[   97.182778][T11399] loop4: detected capacity change from 0 to 64
[   97.217853][T11401] loop0: detected capacity change from 0 to 16
[   97.219681][T11401] erofs: (device loop0): mounted with root inode @ nid 36.
[   97.224501][T11401] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   97.364403][T11418] loop4: detected capacity change from 0 to 128
[   97.380098][T11420] loop1: detected capacity change from 0 to 1024
[   97.426756][   T11] hfsplus: b-tree write err: -5, ino 4
[   97.509935][T11434] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   97.527659][T11436] loop3: detected capacity change from 0 to 64
[   97.668482][T11430] loop0: detected capacity change from 0 to 32768
[   97.685614][T11430] ERROR: (device loop0): diWrite: ixpxd invalid
[   97.685614][T11430] 
[   97.687744][T11430] ERROR: (device loop0): remounting filesystem as read-only
[   97.688967][T11430] ERROR: (device loop0): txAbort: 
[   97.688967][T11430] 
[   97.692835][T11430] imap: 0000000004ce705d: 07ffffff 00000000 00000000 00000000
[   97.695363][T11430] imap: 00000000339310be: 00000004 00000002 00000000 00000000
[   97.696533][T11430] ERROR: (device loop0): diFree: inum = 7, iagno = 0, nextiag = 0
[   97.696533][T11430] 
[   97.788949][T11458] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.791352][T11460] loop3: detected capacity change from 0 to 2048
[   97.816600][T11460] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   97.817794][T11446] loop4: detected capacity change from 0 to 32768
[   97.822764][T11446] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3128 (11446)
[   97.832556][T11446] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   97.834342][T11461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.843027][T11446] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   97.844439][T11446] BTRFS info (device loop4): using free space tree
[   97.932673][ T4330] ------------[ cut here ]------------
[   97.933639][ T4330] WARNING: CPU: 0 PID: 4330 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x1fc/0x424
[   97.935026][ T4330] Modules linked in:
[   97.935590][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:4 Not tainted 6.1.148-syzkaller #0
[   97.936908][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   97.938307][ T4330] Workqueue: hci0 hci_conn_timeout
[   97.939053][ T4330] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[   97.940374][ T4330] pc : hci_conn_timeout+0x1fc/0x424
[   97.941220][ T4330] lr : hci_conn_timeout+0x1fc/0x424
[   97.942044][ T4330] sp : ffff800020d77b30
[   97.942728][ T4330] x29: ffff800020d77b30 x28: ffff0000c9527c00 x27: ffff0000deb64330
[   97.943996][ T4330] x26: ffff0000c086a218 x25: 1fffe0001810d443 x24: dfff800000000000
[   97.945154][ T4330] x23: ffff0000c4b16000 x22: dfff800000000000 x21: 00000000ffffffff
[   97.946345][ T4330] x20: ffff0000deb64000 x19: ffff0000deb64330 x18: ffff800011aabce0
[   97.947546][ T4330] x17: ffff8000181e7000 x16: ffff800008042c60 x15: ffff800017cc7fc0
[   97.948702][ T4330] x14: ffff0000cfb42658 x13: 0000000000000000 x12: 0000000000ff0100
[   97.949849][ T4330] x11: ff00800010b527e0 x10: 0000000000000000 x9 : ffff800010b527e0
[   97.951109][ T4330] x8 : ffff0000cfb41bc0 x7 : 0000000000000000 x6 : 0000000000000000
[   97.951619][T11489] device bridge4 entered promiscuous mode
[   97.952305][ T4330] x5 : ffff800018207b80 x4 : 0000000000000008 x3 : ffff800010b5261c
[   97.954438][ T4330] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000
[   97.955748][ T4330] Call trace:
[   97.956222][ T4330]  hci_conn_timeout+0x1fc/0x424
[   97.956974][ T4330]  process_one_work+0x7f4/0x13a8
[   97.957774][ T4330]  worker_thread+0x8c8/0xfbc
[   97.958517][ T4330]  kthread+0x250/0x2d8
[   97.959141][ T4330]  ret_from_fork+0x10/0x20
[   97.959811][ T4330] irq event stamp: 2642
[   97.960444][ T4330] hardirqs last  enabled at (2641): [<ffff800011a346c4>] _raw_spin_unlock_irq+0x3c/0x90
[   97.961800][ T4330] hardirqs last disabled at (2642): [<ffff800011948d00>] el1_dbg+0x24/0x80
[   97.963025][ T4330] softirqs last  enabled at (0): [<ffff800008187fd4>] copy_process+0x1244/0x3670
[   97.964401][ T4330] softirqs last disabled at (0): [<0000000000000000>] 0x0
[   97.965440][ T4330] ---[ end trace 0000000000000000 ]---
[   97.966328][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.983807][T11446] BTRFS info (device loop4): enabling ssd optimizations
[   98.039694][ T4328] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.110498][ T4558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4558)