last executing test programs:

2m19.872978646s ago: executing program 3 (id=306):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)={0x0, 0x11, 0x61, {0x61, 0x21, "dfc63af909352445a17be4ebe06b91018d4bdf20a142ebdea3f77a190db2fa41838f9b8a6cbb5962162f4a56a0fd17b2fc7e58d083c6b29e9f2eb201c22b48752f0500c9db68d468ab7531961686a42b0886954adcbb1f385ec8a4ba1e7c80"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

2m18.058653937s ago: executing program 3 (id=315):
unshare(0x20000400)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x5)
read$eventfd(r0, 0x0, 0x0)

2m17.894126188s ago: executing program 3 (id=317):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m17.650869611s ago: executing program 3 (id=320):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1018056, &(0x7f0000000080)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@noquota}, {}, {@nodiscard}, {@usrquota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x24, 0x6260, &(0x7f0000000340)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

2m16.745488992s ago: executing program 3 (id=327):
add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="ce", 0x1, 0xfffffffffffffffd)
r0 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0)
request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r0)

2m15.404437877s ago: executing program 3 (id=342):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000802, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX=0x0, @ANYRES8], 0x1, 0x305, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2m14.693937174s ago: executing program 32 (id=342):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000802, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX=0x0, @ANYRES8], 0x1, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1m4.488172754s ago: executing program 2 (id=923):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000280000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

1m4.188527358s ago: executing program 2 (id=926):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x400000})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001240)={0xfc, "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"})

1m4.060599169s ago: executing program 2 (id=927):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m3.548616655s ago: executing program 2 (id=932):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'user.syz\x00'}, 0x0, 0x0)

1m3.259515648s ago: executing program 2 (id=937):
r0 = socket$packet(0x11, 0x3, 0x300)
unshare(0x28040680)
setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0)

56.756534571s ago: executing program 2 (id=979):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

56.220675457s ago: executing program 33 (id=979):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

3.032630215s ago: executing program 0 (id=1355):
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x800)
close_range(r0, 0xffffffffffffffff, 0x2)
fgetxattr(r0, 0x0, 0x0, 0x0)

3.032365945s ago: executing program 5 (id=1356):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="c9", 0x1)
setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0)

2.822208068s ago: executing program 5 (id=1359):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
setuid(0xee01)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x6, 0x47, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0xfffffffd, 0x12, 0x0, 0x0})

2.63612977s ago: executing program 5 (id=1360):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x120, 0x0, @loopback={0xff00000000000000}, 0x40000}}, 0x24)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0)

2.63588348s ago: executing program 0 (id=1361):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100)

2.62857806s ago: executing program 1 (id=1363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38)

2.459719552s ago: executing program 1 (id=1364):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a00040, &(0x7f0000000d80)=ANY=[@ANYBLOB="757466383d312c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303536612c696f636861727365743d69736f383835392d332c696f636861727365743d6b6f69382d752c73686f72746e616d653d77696e6e742c726f6469722c756e695f786c6174653d302c636f6465706167653d3935302c696f636861727365743d6e6f6e652c696f636861727365743d63703836312c757466383d302c00b07baa5c3f0a3a472e7ba87e7b832ff3a22b83260c69454d95bdf7986b078881410891d3f9067275bd1a074d3557c2d046442b0fc917944b18c3a8d1e910101af38b"], 0x3, 0x350, &(0x7f00000009c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x2000208e)

2.412555023s ago: executing program 5 (id=1365):
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0xa18008, &(0x7f0000006e00)=ANY=[], 0x1, 0x5516, &(0x7f0000008f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fadvise64(r0, 0x4, 0x7, 0x0)

2.412276383s ago: executing program 0 (id=1366):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.409382123s ago: executing program 4 (id=1367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

2.090745706s ago: executing program 4 (id=1368):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}, {@grpquota}, {@nolazytime}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0x9, 0xd5})

1.899797938s ago: executing program 1 (id=1369):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

1.648589721s ago: executing program 1 (id=1370):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0)
sendfile(r0, r1, 0x0, 0x7fff)

1.557718852s ago: executing program 4 (id=1371):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.365558454s ago: executing program 1 (id=1372):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

1.200524136s ago: executing program 4 (id=1373):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90)

1.077393737s ago: executing program 5 (id=1374):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

905.542649ms ago: executing program 4 (id=1375):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x609c, &(0x7f0000011b00)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0)
fsync(r0)

452.655465ms ago: executing program 0 (id=1376):
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x112012)
keyctl$invalidate(0x15, r0)

299.313707ms ago: executing program 0 (id=1377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f67001400028008000640000088010800054000000008"], 0x78}}, 0x0)

65.875129ms ago: executing program 4 (id=1378):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000380)=0x4, 0x8)

553.69µs ago: executing program 0 (id=1379):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_proto_private(r0, 0x891f, &(0x7f00000000c0))

180.29µs ago: executing program 5 (id=1380):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xd, '\x00', @p_u16=&(0x7f0000000740)=0x19a1}})

0s ago: executing program 1 (id=1381):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)

kernel console output (not intermixed with test programs):

type 0: error -13
[  170.450880][ T7698] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.657: attempt to clear invalid blocks 2 len 1
[  170.477726][ T7698] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  170.504818][ T7698] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.657: invalid indirect mapped block 1819239214 (level 0)
[  170.524731][ T7698] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.657: invalid indirect mapped block 1819239214 (level 1)
[  170.549272][ T7698] EXT4-fs (loop2): 1 truncate cleaned up
[  170.560294][ T7698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  170.588699][ T7698] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work
[  170.674035][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.727692][ T7710] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  171.232675][ T7727] loop0: detected capacity change from 0 to 1024
[  171.278938][ T7727] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.324985][ T7729] loop2: detected capacity change from 0 to 64
[  171.366422][ T7727] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.430282][ T7727] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal
[  171.577765][ T5772] hfs: node 4:3 still has 2 user(s)!
[  171.811765][ T7737] loop1: detected capacity change from 0 to 2048
[  171.899099][ T7737] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec028, mo2=0002]
[  171.943634][ T7737] System zones: 0-4
[  171.978712][ T7746] loop2: detected capacity change from 0 to 128
[  171.991070][ T7720] loop4: detected capacity change from 0 to 32768
[  172.000356][ T7737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.024231][ T1187] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  172.052926][ T7737] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.165959][ T7737] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.668: bg 0: block 345: padding at end of block bitmap is not set
[  172.194977][ T7737] EXT4-fs (loop1): Remounting filesystem read-only
[  172.204976][ T7737] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.1.668: cleanup dec ref error -117
[  172.254915][ T1187] usb 1-1: Using ep0 maxpacket: 32
[  172.257593][ T7720] JBD2: Ignoring recovery information on journal
[  172.289673][ T1187] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  172.310935][ T7720] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  172.324912][ T1187] usb 1-1: config 0 has no interface number 0
[  172.325911][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.380680][ T1187] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  172.427337][ T1187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.458539][ T1187] usb 1-1: Product: syz
[  172.462922][ T1187] usb 1-1: Manufacturer: syz
[  172.488724][ T1187] usb 1-1: SerialNumber: syz
[  172.497265][ T1187] usb 1-1: config 0 descriptor??
[  172.547607][ T1187] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  172.776761][ T1187] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  172.788585][ T6690] ocfs2: Unmounting device (7,4) on (node local)
[  172.849132][ T1187] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  173.069415][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  173.270973][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  173.283629][ T5821] usb 1-1: USB disconnect, device number 5
[  173.296250][ T5821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  173.350531][ T5821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  173.376831][ T5821] quatech2 1-1:0.51: device disconnected
[  173.523751][ T7768] loop1: detected capacity change from 0 to 256
[  173.702198][ T7756] loop2: detected capacity change from 0 to 40427
[  173.767515][ T7756] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1)
[  173.784425][ T7756] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  173.810353][ T7756] F2FS-fs (loop2): inline encryption not supported
[  173.845581][ T7756] F2FS-fs (loop2): invalid crc value
[  173.851507][ T7756] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root
[  173.889624][ T7756] F2FS-fs (loop2): Found nat_bits in checkpoint
[  174.075668][ T7778] loop0: detected capacity change from 0 to 2048
[  174.092455][ T7756] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30
[  174.107977][ T7781] netlink: 6 bytes leftover after parsing attributes in process `syz.4.686'.
[  174.117566][ T7756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  174.137238][ T7782] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.618991][ T7792] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  174.661276][ T7792] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  174.872908][ T7798] devpts: called with bogus options
[  174.929930][ T7800] loop1: detected capacity change from 0 to 512
[  175.000269][ T7800] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  175.122447][ T7800] EXT4-fs (loop1): 1 truncate cleaned up
[  175.141706][ T7800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.225882][ T7810] syz_tun: entered promiscuous mode
[  175.235909][ T7800] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #2: block 4: comm syz.1.695: lblock 0 mapped to illegal pblock 4 (length 1)
[  175.253587][ T7810] vlan2: entered promiscuous mode
[  175.411715][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.728799][ T7819] loop1: detected capacity change from 0 to 8192
[  175.779682][ T7819] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  175.807322][ T7830] loop2: detected capacity change from 0 to 256
[  175.831693][ T7819] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  175.865358][ T7819] REISERFS (device loop1): using ordered data mode
[  175.871946][ T7819] reiserfs: using flush barriers
[  175.922193][ T7819] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.953819][ T7830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25f3d2c1, utbl_chksum : 0xe619d30d)
[  176.007967][ T7819] REISERFS (device loop1): checking transaction log (loop1)
[  176.080443][ T7819] REISERFS (device loop1): Using rupasov hash to sort names
[  176.121657][ T7819] REISERFS (device loop1): using 3.5.x disk format
[  176.144464][ T7819] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.176070][ T7819] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.230634][ T7819] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.295432][ T7819] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  176.334264][ T7819] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  176.348188][ T7839] loop4: detected capacity change from 0 to 16
[  176.361219][ T7839] erofs: (device loop4): mounted with root inode @ nid 36.
[  176.415962][ T7819] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.458346][ T7819] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.504912][ T7819] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.543275][ T7839] erofs: (device loop4): z_erofs_readahead: readahead error at folio 461 @ nid 36
[  176.554699][ T7844] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.568557][ T7839] erofs: (device loop4): z_erofs_readahead: readahead error at folio 460 @ nid 36
[  176.583287][ T7839] erofs: (device loop4): z_erofs_readahead: readahead error at folio 340 @ nid 36
[  176.610418][ T7839] syz.4.713: attempt to access beyond end of device
[  176.610418][ T7839] loop4: rw=524288, sector=22873858832, nr_sectors = 16 limit=16
[  176.638169][ T7843] loop2: detected capacity change from 0 to 4096
[  176.657749][ T7843] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  176.669963][ T7839] syz.4.713: attempt to access beyond end of device
[  176.669963][ T7839] loop4: rw=524288, sector=22873858840, nr_sectors = 16 limit=16
[  176.700999][ T7839] syz.4.713: attempt to access beyond end of device
[  176.700999][ T7839] loop4: rw=524288, sector=14519143264, nr_sectors = 16 limit=16
[  176.752967][ T7839] syz.4.713: attempt to access beyond end of device
[  176.752967][ T7839] loop4: rw=524288, sector=14519143272, nr_sectors = 16 limit=16
[  176.768533][ T7839] syz.4.713: attempt to access beyond end of device
[  176.768533][ T7839] loop4: rw=524288, sector=63675288, nr_sectors = 16 limit=16
[  176.795682][ T7839] syz.4.713: attempt to access beyond end of device
[  176.795682][ T7839] loop4: rw=524288, sector=63675296, nr_sectors = 16 limit=16
[  176.956638][ T7839] syz.4.713: attempt to access beyond end of device
[  176.956638][ T7839] loop4: rw=524288, sector=16240345096, nr_sectors = 16 limit=16
[  177.034748][ T7839] syz.4.713: attempt to access beyond end of device
[  177.034748][ T7839] loop4: rw=524288, sector=16240345104, nr_sectors = 16 limit=16
[  177.081697][ T7839] syz.4.713: attempt to access beyond end of device
[  177.081697][ T7839] loop4: rw=524288, sector=16438238104, nr_sectors = 16 limit=16
[  177.125874][ T7839] syz.4.713: attempt to access beyond end of device
[  177.125874][ T7839] loop4: rw=524288, sector=16438238112, nr_sectors = 16 limit=16
[  177.157851][ T7855] loop1: detected capacity change from 0 to 512
[  177.306595][ T7855] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.720: corrupted inode contents
[  177.361266][ T7855] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #16: comm syz.1.720: mark_inode_dirty error
[  177.404317][ T7855] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.720: corrupted inode contents
[  177.434724][ T7855] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.720: mark_inode_dirty error
[  177.491332][ T7855] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.720: corrupted inode contents
[  177.506833][ T7862] loop0: detected capacity change from 0 to 4096
[  177.538541][ T7855] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  177.556483][ T7855] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.720: corrupted inode contents
[  177.576497][ T7855] EXT4-fs error (device loop1): ext4_truncate:4301: inode #16: comm syz.1.720: mark_inode_dirty error
[  177.593917][ T7869] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.613316][ T7855] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  177.648743][ T7855] EXT4-fs (loop1): 1 truncate cleaned up
[  177.661820][ T7855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.678337][ T1130] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  177.688839][ T7855] ext4 filesystem being mounted at /174/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.701220][ T7871] smc: net device bond0 applied user defined pnetid SYZ0
[  177.718921][ T1130] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1
[  177.764159][   T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  177.966221][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.998168][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.019552][   T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  178.057289][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.076116][ T7877] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.105581][   T27] usb 5-1: config 0 descriptor??
[  178.135019][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.150835][ T7877] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  178.205698][   T28] audit: type=1800 audit(1778251613.450:46): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.727" name="file1" dev="loop2" ino=12 res=0 errno=0
[  178.301499][ T7880] FAT-fs (loop0): Directory bread(block 64) failed
[  178.312531][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  178.342744][ T7880] FAT-fs (loop0): Directory bread(block 65) failed
[  178.395937][ T7880] FAT-fs (loop0): Directory bread(block 66) failed
[  178.446365][ T7880] FAT-fs (loop0): Directory bread(block 67) failed
[  178.453234][ T7880] FAT-fs (loop0): Directory bread(block 68) failed
[  178.490854][ T7880] FAT-fs (loop0): Directory bread(block 69) failed
[  178.518034][ T7880] FAT-fs (loop0): Directory bread(block 70) failed
[  178.544251][ T7880] FAT-fs (loop0): Directory bread(block 71) failed
[  178.551555][ T7880] FAT-fs (loop0): Directory bread(block 72) failed
[  178.562751][   T27] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  178.601154][ T7880] FAT-fs (loop0): Directory bread(block 73) failed
[  178.614255][   T27] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  178.646116][   T27] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  178.677945][   T27] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  178.688505][ T7880] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  178.704153][   T27] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  178.711561][   T27] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  178.741033][   T27] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  178.785196][   T27] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  178.815875][   T27] arvo 0003:1E7D:30D4.0008: couldn't init struct arvo_device
[  178.823480][   T27] arvo 0003:1E7D:30D4.0008: couldn't install keyboard
[  178.885599][ T5822] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  178.890544][   T27] arvo: probe of 0003:1E7D:30D4.0008 failed with error -71
[  178.951293][   T27] usb 5-1: USB disconnect, device number 4
[  179.009867][ T7889] fido_id[7889]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  179.084321][ T5822] usb 2-1: Using ep0 maxpacket: 8
[  179.089639][ T7893] set_capacity_and_notify: 2 callbacks suppressed
[  179.089653][ T7893] loop0: detected capacity change from 0 to 512
[  179.111515][ T5822] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  179.130792][ T5822] usb 2-1: config 179 has no interface number 0
[  179.149571][ T5822] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  179.178019][ T5822] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  179.189825][ T5822] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  179.192914][ T7893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.201265][ T5822] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  179.225453][ T5822] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  179.239096][ T5822] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  179.248366][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.266345][ T7886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  179.337336][ T7893] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.540610][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.566978][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.595944][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.741266][ T7906] loop4: detected capacity change from 0 to 64
[  179.829403][ T5787] usb 2-1: USB disconnect, device number 6
[  179.829503][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  179.844594][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  179.852976][    C0] vkms_vblank_simulate: vblank timer overrun
[  180.026800][ T7913] netlink: 44 bytes leftover after parsing attributes in process `syz.4.742'.
[  180.138267][ T7915] loop2: detected capacity change from 0 to 2048
[  180.151087][ T7915] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  180.182178][ T7918] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.404485][ T5822] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  180.557742][ T7926] loop2: detected capacity change from 0 to 2048
[  180.578702][ T7928] loop1: detected capacity change from 0 to 256
[  180.618722][ T5822] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  180.638102][ T7929] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.649367][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.668455][ T5822] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  180.680608][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  180.689134][ T5822] usb 5-1: Product: syz
[  180.693339][ T5822] usb 5-1: Manufacturer: syz
[  180.718134][ T5822] usb 5-1: SerialNumber: syz
[  180.753706][ T5822] usb 5-1: config 0 descriptor??
[  180.780583][ T5822] usb 5-1: selecting invalid altsetting 0
[  180.886167][   T28] audit: type=1326 audit(1778251616.120:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a79cdd9 code=0x7ffc0000
[  181.031624][   T28] audit: type=1326 audit(1778251616.120:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a79cdd9 code=0x7ffc0000
[  181.135063][   T28] audit: type=1326 audit(1778251616.160:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a79cdd9 code=0x7ffc0000
[  181.191313][   T28] audit: type=1326 audit(1778251616.160:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a79cdd9 code=0x7ffc0000
[  181.215316][    C0] vkms_vblank_simulate: vblank timer overrun
[  181.255088][ T5820] usb 5-1: USB disconnect, device number 5
[  181.259194][   T28] audit: type=1326 audit(1778251616.170:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcb1a79cdd9 code=0x7ffc0000
[  181.284670][    C0] vkms_vblank_simulate: vblank timer overrun
[  181.336684][   T28] audit: type=1326 audit(1778251616.230:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1a79cdd9 code=0x7ffc0000
[  181.424143][   T28] audit: type=1326 audit(1778251616.230:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb1a79cb42 code=0x7ffc0000
[  181.447845][    C0] vkms_vblank_simulate: vblank timer overrun
[  181.519331][   T28] audit: type=1326 audit(1778251616.230:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.751" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcb1a79cbd7 code=0x7ffc0000
[  181.671717][ T7952] netlink: 'syz.1.757': attribute type 21 has an invalid length.
[  181.680939][ T7952] IPv6: NLM_F_CREATE should be specified when creating new route
[  181.693131][ T7952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.701079][ T7952] IPv6: NLM_F_CREATE should be set when creating new route
[  181.708567][ T7952] IPv6: NLM_F_CREATE should be set when creating new route
[  181.715903][ T7952] IPv6: NLM_F_CREATE should be set when creating new route
[  181.732383][ T7953] netlink: 'syz.1.757': attribute type 21 has an invalid length.
[  181.744780][ T7953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  182.854305][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  183.045923][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.079992][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.110125][   T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  183.135311][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.150635][   T27] usb 1-1: config 0 descriptor??
[  183.389958][   T27] usbhid 1-1:0.0: can't add hid device: -71
[  183.400651][   T27] usbhid: probe of 1-1:0.0 failed with error -71
[  183.419805][   T27] usb 1-1: USB disconnect, device number 6
[  183.456426][ T5787] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  183.579788][ T7995] loop4: detected capacity change from 0 to 32768
[  183.647362][ T5787] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  183.669977][ T5787] usb 2-1: config 0 interface 0 has no altsetting 0
[  183.687626][ T8009] loop2: detected capacity change from 0 to 128
[  183.709342][ T5787] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  183.720198][ T8009] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.742420][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  183.753801][ T5787] usb 2-1: Product: syz
[  183.759050][ T5787] usb 2-1: Manufacturer: syz
[  183.763921][ T5787] usb 2-1: SerialNumber: syz
[  183.778852][ T8009] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  183.795576][ T5787] usb 2-1: config 0 descriptor??
[  183.837037][ T5787] usb 2-1: selecting invalid altsetting 0
[  183.974394][   T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  184.023442][ T1002] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.188440][   T27] usb 1-1: Using ep0 maxpacket: 16
[  184.197698][ T5821] usb 2-1: USB disconnect, device number 7
[  184.215637][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.252683][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.275201][   T27] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40
[  184.304483][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.327175][   T27] usb 1-1: config 0 descriptor??
[  184.348999][   T27] pegasus_notetaker 1-1:0.0: packet size is too small (0)
[  184.396897][   T27] pegasus_notetaker: probe of 1-1:0.0 failed with error -22
[  184.552867][   T27] usbhid 1-1:0.0: can't add hid device: -71
[  184.569231][   T27] usbhid: probe of 1-1:0.0 failed with error -71
[  184.598324][   T27] usb 1-1: USB disconnect, device number 7
[  184.884766][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'.
[  185.126568][ T8023] loop4: detected capacity change from 0 to 40427
[  185.139199][ T8023] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  185.164153][ T8023] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  185.203617][ T8023] F2FS-fs (loop4): invalid crc value
[  185.242729][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'.
[  185.268975][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'.
[  185.289908][ T8038] netlink: 'syz.1.795': attribute type 15 has an invalid length.
[  185.322839][ T8043] loop0: detected capacity change from 0 to 16
[  185.351990][ T8043] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  185.402966][ T8023] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  185.422047][ T8023] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  185.605362][ T8047] IPVS: set_ctl: invalid protocol: 43 172.20.20.10:20003
[  185.949623][ T8058] netlink: 'syz.2.803': attribute type 3 has an invalid length.
[  185.957532][ T8058] netlink: 'syz.2.803': attribute type 1 has an invalid length.
[  185.965573][ T8058] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.803'.
[  186.482918][ T8073] loop4: detected capacity change from 0 to 512
[  186.538853][ T8073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.608794][ T8073] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.704860][ T8073] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.808: corrupted xattr block 32: overlapping e_value 
[  186.819363][ T6690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.865905][ T8084] loop1: detected capacity change from 0 to 164
[  186.963834][ T8086] loop2: detected capacity change from 0 to 128
[  186.990720][ T8084] iso9660: Corrupted directory entry in block 2 of inode 1920
[  187.023907][ T8086] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.152445][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  187.152461][   T28] audit: type=1800 audit(1778251622.370:73): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.814" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048657 res=0 errno=0
[  187.566571][ T8076] loop0: detected capacity change from 0 to 32768
[  187.998144][ T5822] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  188.078045][ T8092] loop2: detected capacity change from 0 to 40427
[  188.117226][ T8092] F2FS-fs (loop2): invalid crc value
[  188.156885][ T8092] F2FS-fs (loop2): Found nat_bits in checkpoint
[  188.214281][ T5822] usb 2-1: Using ep0 maxpacket: 32
[  188.244655][ T5822] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  188.252842][ T5822] usb 2-1: config 0 has no interface number 0
[  188.280488][ T5822] usb 2-1: config 0 interface 12 has no altsetting 0
[  188.287388][ T8092] F2FS-fs (loop2): Start checkpoint disabled!
[  188.307124][ T5822] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  188.333616][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.342058][ T8092] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  188.378615][ T5822] usb 2-1: Product: syz
[  188.382881][ T5822] usb 2-1: Manufacturer: syz
[  188.409245][ T5822] usb 2-1: SerialNumber: syz
[  188.419517][ T8104] loop4: detected capacity change from 0 to 2048
[  188.431957][ T5822] usb 2-1: config 0 descriptor??
[  188.816312][ T8108] loop2: detected capacity change from 0 to 1024
[  188.989031][   T11] hfsplus: b-tree write err: -5, ino 25
[  189.004762][   T11] hfsplus: b-tree write err: -5, ino 4
[  189.021146][   T11] hfsplus: b-tree write err: -5, ino 2
[  189.101712][ T5822] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71
[  189.124196][ T5822] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  189.131688][ T5822] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  189.164484][ T5822] f81534: probe of 2-1:0.12 failed with error -71
[  189.231591][ T5822] usb 2-1: USB disconnect, device number 8
[  189.534847][ T8128] support for the xor transformation has been removed.
[  189.610879][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.835'.
[  190.268001][ T8146] loop1: detected capacity change from 0 to 8192
[  190.295254][ T8146] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  190.318079][ T8146] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  190.361209][ T8146] REISERFS (device loop1): using ordered data mode
[  190.373930][ T8153] netlink: 'syz.2.845': attribute type 2 has an invalid length.
[  190.392697][ T8151] loop0: detected capacity change from 0 to 64
[  190.434321][ T8146] reiserfs: using flush barriers
[  190.453928][ T8146] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.517719][ T8151] minix_free_block (loop0:21): bit already cleared
[  190.530466][ T8146] REISERFS (device loop1): checking transaction log (loop1)
[  190.540746][ T8146] REISERFS (device loop1): Using r5 hash to sort names
[  190.550097][ T8146] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  190.564220][ T8151] Trying to free block not in datazone
[  191.266814][ T8172] loop0: detected capacity change from 0 to 64
[  191.318812][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[  191.709145][ T8187] loop0: detected capacity change from 0 to 64
[  192.219419][ T8182] loop4: detected capacity change from 0 to 32768
[  192.239964][ T8182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.858 (8182)
[  192.269404][ T8182] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.314667][ T8182] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  192.323399][ T8182] BTRFS info (device loop4): using free space tree
[  192.402303][ T8202] loop2: detected capacity change from 0 to 1024
[  192.516755][ T8182] BTRFS info (device loop4): enabling ssd optimizations
[  192.523805][ T8182] BTRFS info (device loop4): auto enabling async discard
[  193.000900][ T6690] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.106618][ T8231] loop2: detected capacity change from 0 to 1024
[  193.210777][ T8235] loop0: detected capacity change from 0 to 128
[  193.258705][ T8235] hpfs: bad mount options.
[  193.479645][ T8240] vivid-007: =================  START STATUS  =================
[  193.524193][ T8240] vivid-007: Enable Output Cropping: true grabbed
[  193.566009][ T8240] vivid-007: Enable Output Composing: true grabbed
[  193.578956][ T8240] vivid-007: Enable Output Scaler: true grabbed
[  193.595741][ T8240] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  193.623736][ T8240] vivid-007: Transmit Mode: HDMI grabbed
[  193.641257][ T8240] vivid-007: Display Present: true inactive
[  193.667287][ T8245] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0
[  193.694451][ T8240] vivid-007: Hotplug Present: 0x00000001
[  193.734218][ T8240] vivid-007: RxSense Present: 0x00000001
[  193.771484][ T8240] vivid-007: EDID Present: 0x00000001
[  193.813162][ T8240] vivid-007: ==================  END STATUS  ==================
[  194.643668][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.653017][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  195.244061][    C0] sched: RT throttling activated
[  195.369412][ T8257] loop1: detected capacity change from 0 to 32768
[  195.383708][ T8251] loop0: detected capacity change from 0 to 32768
[  195.444538][ T8257] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.887 (8257)
[  195.471798][ T8261] loop4: detected capacity change from 0 to 131072
[  195.563493][ T8251] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  195.593538][ T8257] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  195.653443][ T8257] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  195.704255][ T8257] BTRFS info (device loop1): using free space tree
[  195.747870][ T8261] F2FS-fs (loop4): Test dummy encryption mode enabled
[  195.763560][ T8251] XFS (loop0): Ending clean mount
[  195.773452][ T8261] F2FS-fs (loop4): invalid crc value
[  195.823669][ T8251] XFS (loop0): Quotacheck needed: Please wait.
[  195.823688][ T8261] F2FS-fs (loop4): Found nat_bits in checkpoint
[  195.925352][ T8257] BTRFS info (device loop1): enabling ssd optimizations
[  195.932427][ T8261] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  195.942005][ T8261] F2FS-fs (loop4): Failed to read root inode
[  195.981847][ T8257] BTRFS info (device loop1): auto enabling async discard
[  196.011953][ T8251] XFS (loop0): Quotacheck: Done.
[  196.020714][ T8304] loop2: detected capacity change from 0 to 512
[  196.039666][ T8304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  196.154224][ T8304] EXT4-fs (loop2): 1 truncate cleaned up
[  196.206949][ T8304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.269709][ T5773] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  196.306445][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.508376][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.012016][ T5787] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  197.247290][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.279850][ T5787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  197.298397][ T5787] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  197.327343][ T8326] netlink: 72 bytes leftover after parsing attributes in process `syz.0.906'.
[  197.334274][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  197.371788][ T5787] usb 2-1: SerialNumber: syz
[  197.613343][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  197.636803][ T5787] usb 2-1: 0:2 : does not exist
[  197.720508][ T5787] usb 2-1: USB disconnect, device number 9
[  197.823772][ T6293] udevd[6293]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.102143][ T8341] loop0: detected capacity change from 0 to 1764
[  198.284258][   T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  198.494937][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.524280][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.546170][   T27] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  198.577611][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.606310][   T27] usb 5-1: config 0 descriptor??
[  198.762049][ T8358] loop0: detected capacity change from 0 to 512
[  198.806562][ T8358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  198.846502][ T8358] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  198.885107][ T8358] EXT4-fs (loop0): 1 truncate cleaned up
[  198.892639][ T8358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.919549][   T28] audit: type=1800 audit(1778251634.160:74): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.922" name="file2" dev="loop0" ino=16 res=0 errno=0
[  199.042747][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.079879][   T27] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0
[  199.122873][   T27] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0
[  199.138575][   T27] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0
[  199.177286][   T27] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0
[  199.205220][   T27] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0
[  199.241297][   T27] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0
[  199.265158][   T27] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0
[  199.318340][   T27] usb 5-1: USB disconnect, device number 6
[  199.557903][ T8380] loop1: detected capacity change from 0 to 128
[  199.595237][ T8380] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  199.731106][ T8383] loop2: detected capacity change from 0 to 16
[  199.784988][ T8383] erofs: (device loop2): mounted with root inode @ nid 36.
[  199.950426][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  199.995241][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.028728][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.049915][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.090879][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.114996][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.123933][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.161361][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.176751][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'.
[  200.191314][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.200274][ T8394] nbd: illegal input index 10237952
[  200.206788][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.225323][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.252854][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.276343][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.311843][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.343944][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.353494][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.375072][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.383916][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.423530][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.445712][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.471662][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.506448][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.535727][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.553519][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.574401][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.586808][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.599070][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.610272][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.667680][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.677255][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.692148][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.702713][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.722164][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.735082][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.743982][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.786445][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.815077][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.834767][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.862992][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.872879][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.896301][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.915095][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.935673][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.965657][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.985574][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  200.998975][ T8408] netlink: 240 bytes leftover after parsing attributes in process `syz.1.946'.
[  201.010585][ T8408] netlink: 56 bytes leftover after parsing attributes in process `syz.1.946'.
[  201.035337][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.054767][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.063814][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.104791][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.113771][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.142525][ T8390] loop0: detected capacity change from 0 to 40427
[  201.150156][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.180574][ T8390] F2FS-fs (loop0): invalid crc value
[  201.191404][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.217461][ T8390] F2FS-fs (loop0): Found nat_bits in checkpoint
[  201.236019][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.272419][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.306833][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.342024][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.364636][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.382022][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.398144][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.408817][ T8390] F2FS-fs (loop0): Start checkpoint disabled!
[  201.416612][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.438345][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.446646][ T8390] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  201.472175][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.495784][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.517191][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.586074][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.616484][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.635048][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.646426][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.666492][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.675952][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.695316][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.720637][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.741275][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.771146][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.815202][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.852355][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.872111][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.888600][ T3490] bio_check_eod: 20 callbacks suppressed
[  201.888618][ T3490] kworker/u4:11: attempt to access beyond end of device
[  201.888618][ T3490] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  201.905682][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.927507][ T3490] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  201.936363][ T3490] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  201.945020][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  201.976223][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.005407][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.020481][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.035057][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.054465][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.094411][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.115562][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.131139][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.155158][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.185375][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.216489][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.235479][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.245201][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.254818][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.263707][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.274652][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.283693][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.292739][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.303077][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.315948][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.336464][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.355173][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.382417][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.410574][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.430445][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.451985][ T8414] loop1: detected capacity change from 0 to 32768
[  202.459609][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.499318][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.517546][ T8414] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  202.523518][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.564987][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.606062][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.623026][ T8414] XFS (loop1): Ending clean mount
[  202.641372][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.667856][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.689574][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.715363][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.728725][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.737943][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.755438][ T5773] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  202.769470][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.779877][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.815479][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.835016][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.848614][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.860163][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.883379][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.936442][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.975660][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  202.988799][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.957'.
[  202.991799][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.049110][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.095213][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.120538][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.154740][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.173754][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.205902][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.232738][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.261036][   T28] audit: type=1326 audit(1778251638.500:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.4.959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273f9cdd9 code=0x7ffc0000
[  203.272594][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.311292][   T28] audit: type=1326 audit(1778251638.500:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.4.959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273f9cdd9 code=0x7ffc0000
[  203.346794][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.372462][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.381736][   T28] audit: type=1326 audit(1778251638.540:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.4.959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f1273f9cdd9 code=0x7ffc0000
[  203.411774][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.421060][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.431333][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.439800][   T28] audit: type=1326 audit(1778251638.540:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.4.959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273f9cdd9 code=0x7ffc0000
[  203.471831][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.495095][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.514966][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.526051][   T28] audit: type=1326 audit(1778251638.550:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.4.959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f1273f9cdd9 code=0x7ffc0000
[  203.567024][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.591136][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.608606][   T28] audit: type=1326 audit(1778251638.550:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.4.959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1273f9cdd9 code=0x7ffc0000
[  203.634675][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.661550][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.680854][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.682143][ T8450] loop4: detected capacity change from 0 to 512
[  203.705268][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.723332][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.749539][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.765103][ T8450] EXT4-fs: Ignoring removed oldalloc option
[  203.779583][ T8450] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.795206][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.808510][ T8450] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  203.817375][ T8450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  203.827983][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.835419][ T8450] EXT4-fs (loop4): orphan cleanup on readonly fs
[  203.843871][ T8450] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  203.854220][ T8450] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  203.859714][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.869526][ T8450] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  203.889336][ T8450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.961: bg 0: block 40: padding at end of block bitmap is not set
[  203.904565][ T8450] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  203.925316][ T8450] EXT4-fs (loop4): 1 truncate cleaned up
[  203.932662][ T8450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.946382][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  203.968589][ T8450] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.961: bad symlink.
[  203.977497][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.012635][ T8450] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.961: bad symlink.
[  204.030543][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.041131][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.083260][ T8452] loop0: detected capacity change from 0 to 8192
[  204.098497][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.107837][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.114599][ T8452] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  204.118588][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.142528][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.153140][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.162333][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.172943][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.182154][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.189633][ T6690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.194787][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.208348][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.217627][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.226630][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.236359][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.245484][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.256646][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.265766][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.274790][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.277370][ T8452] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  204.305226][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.336226][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.355406][ T8452] REISERFS (device loop0): using ordered data mode
[  204.362551][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.384227][ T8452] reiserfs: using flush barriers
[  204.390224][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.412515][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.423179][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.433487][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.442835][ T8452] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  204.442838][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.445278][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.497929][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.502621][ T8452] REISERFS (device loop0): checking transaction log (loop0)
[  204.521562][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.531964][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.546894][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.558581][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.565093][ T8452] REISERFS (device loop0): Using r5 hash to sort names
[  204.569861][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.582118][ T8452] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  204.629839][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.663932][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.716805][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.752507][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.770140][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.806341][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.817439][ T8461] loop4: detected capacity change from 0 to 128
[  204.827144][ T8463] loop1: detected capacity change from 0 to 256
[  204.845359][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.858604][ T8463] exfat: Deprecated parameter 'namecase'
[  204.879862][ T8461] EXT4-fs (loop4): Test dummy encryption mode enabled
[  204.895781][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.905363][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.914993][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.923959][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.933440][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.943328][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.952737][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.961952][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.972432][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  204.984797][ T8461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  204.992846][ T8461] System zones: 1-3, 19-19, 35-36
[  204.998138][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.000167][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.023458][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.032561][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.042500][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.051848][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.061087][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.071107][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.080426][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.089564][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.099178][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.108476][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.117544][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.140672][ T8461] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  205.154671][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.172584][ T8463] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x31c160c0, utbl_chksum : 0xe619d30d)
[  205.185199][ T8461] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.202787][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.242124][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.274969][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.292442][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.344991][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.365947][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.381398][ T8461] EXT4-fs: Cannot specify journal on remount
[  205.397097][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.444982][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.453928][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.508255][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.527749][ T6690] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.541742][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.571863][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.592738][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.616204][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.645986][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.679573][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.705838][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.743206][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.795411][ T5772] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  205.922016][ T8477] loop1: detected capacity change from 0 to 1764
[  205.968285][ T8481] loop0: detected capacity change from 0 to 512
[  206.003217][ T8477] iso9660: Corrupted directory entry in block 2 of inode 1920
[  206.045937][ T8481] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.974: ea_inode file size=16777216 entry size=6
[  206.077735][ T8481] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.974: iget: bad extra_isize 90 (inode size 256)
[  206.104440][ T8481] EXT4-fs (loop0): Remounting filesystem read-only
[  206.111312][ T8481] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -5)
[  206.129061][ T8481] EXT4-fs (loop0): 1 orphan inode deleted
[  206.136960][ T8481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.178067][ T8484] loop4: detected capacity change from 0 to 512
[  206.199548][ T8484] EXT4-fs (loop4): orphan cleanup on readonly fs
[  206.215560][ T8484] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  206.238453][ T8484] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  206.257950][ T8484] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.976: attempt to clear invalid blocks 2 len 1
[  206.279660][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.350392][ T8484] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.976: invalid indirect mapped block 1819239214 (level 0)
[  206.519186][ T8484] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.976: invalid indirect mapped block 1819239214 (level 1)
[  206.545656][ T8484] EXT4-fs (loop4): 1 truncate cleaned up
[  206.553892][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.568073][ T8491] xt_l2tp: v2 tid > 0xffff: 37482740
[  206.597821][ T8484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  206.777563][ T6690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.828467][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.856290][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[  206.965190][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.117769][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.637391][ T1187] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  207.792853][ T8495] loop0: detected capacity change from 0 to 32768
[  207.830557][ T8495] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.982 (8495)
[  207.864915][ T1187] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  207.878167][ T1187] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  207.901730][ T1187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.934983][ T8495] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  207.949481][ T1187] usb 2-1: Product: syz
[  207.953835][ T1187] usb 2-1: Manufacturer: syz
[  207.972518][ T1187] usb 2-1: SerialNumber: syz
[  207.994221][ T8495] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  208.015201][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.027270][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.037782][ T8495] BTRFS info (device loop0): using free space tree
[  208.039828][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.055459][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.065856][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  208.073272][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.086023][ T1187] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  208.321996][ T8499] loop4: detected capacity change from 0 to 32768
[  208.339059][ T8495] BTRFS info (device loop0): enabling ssd optimizations
[  208.374327][ T8495] BTRFS info (device loop0): auto enabling async discard
[  208.411058][ T8499] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  208.591040][ T8499] XFS (loop4): Ending clean mount
[  208.708381][ T1187] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  208.732047][ T5774] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  208.813510][ T1187] usb 2-1: USB disconnect, device number 10
[  208.896906][ T7450] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop0 scanned by udevd (7450)
[  208.923138][   T28] audit: type=1800 audit(1778251644.170:81): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.984" name="file2" dev="loop4" ino=6151 res=0 errno=0
[  209.096551][ T6690] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  209.726205][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'.
[  210.071592][ T8507] chnl_net:caif_netlink_parms(): no params data found
[  210.136340][ T5780] Bluetooth: hci0: command tx timeout
[  210.841061][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.873302][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.889454][ T8507] bridge_slave_0: entered allmulticast mode
[  210.899036][ T8507] bridge_slave_0: entered promiscuous mode
[  210.989317][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.025306][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.033035][ T8507] bridge_slave_1: entered allmulticast mode
[  211.047807][ T8507] bridge_slave_1: entered promiscuous mode
[  211.288977][ T8594] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1001'.
[  211.395703][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.477329][   T12] hsr_slave_0: left promiscuous mode
[  211.513386][   T12] hsr_slave_1: left promiscuous mode
[  211.558707][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.594372][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.640787][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.670069][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.700592][   T12] bridge_slave_1: left allmulticast mode
[  211.732656][   T12] bridge_slave_1: left promiscuous mode
[  211.744622][ T8607] vim2m vim2m.0: vidioc_s_fmt queue busy
[  211.752293][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.777066][   T12] bridge_slave_0: left allmulticast mode
[  211.793138][   T12] bridge_slave_0: left promiscuous mode
[  211.810604][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.020667][   T12] veth1_macvtap: left promiscuous mode
[  212.055623][   T12] veth0_macvtap: left promiscuous mode
[  212.076558][   T12] veth1_vlan: left promiscuous mode
[  212.082005][   T12] veth0_vlan: left promiscuous mode
[  212.216307][ T5780] Bluetooth: hci0: command tx timeout
[  212.355962][ T8598] loop1: detected capacity change from 0 to 40427
[  212.372751][ T8598] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff
[  212.406516][ T8598] F2FS-fs (loop1): invalid crc value
[  212.463138][ T8598] F2FS-fs (loop1): Found nat_bits in checkpoint
[  212.602206][ T8598] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  212.726275][ T5773] syz-executor: attempt to access beyond end of device
[  212.726275][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.741209][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  213.383427][   T12] team0 (unregistering): Port device team_slave_1 removed
[  213.441000][   T12] team0 (unregistering): Port device team_slave_0 removed
[  213.506308][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.561962][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.993357][   T12] bond0 (unregistering): Released all slaves
[  214.116044][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.277159][ T8507] team0: Port device team_slave_0 added
[  214.298898][ T5780] Bluetooth: hci0: command tx timeout
[  214.368553][ T8507] team0: Port device team_slave_1 added
[  214.430746][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.452003][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.482005][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.512759][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.524121][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.635349][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.836777][ T8507] hsr_slave_0: entered promiscuous mode
[  214.893586][ T8638] loop1: detected capacity change from 0 to 4096
[  214.960291][ T8638] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  214.984678][ T8507] hsr_slave_1: entered promiscuous mode
[  215.019196][ T8507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.051364][ T8507] Cannot create hsr debugfs directory
[  215.086629][ T8638] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  215.122810][ T8638] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  215.970519][ T8507] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  216.013019][ T8507] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  216.038494][ T8507] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  216.063976][ T8669] loop4: detected capacity change from 0 to 256
[  216.085702][ T8507] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  216.106081][ T8669] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  216.149552][   T28] audit: type=1800 audit(1778251651.390:82): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1028" name="file1" dev="loop4" ino=1048660 res=0 errno=0
[  216.186756][ T8669] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[  216.196527][ T5822] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  216.234590][ T8669] exFAT-fs (loop4): Filesystem has been set read-only
[  216.241462][ T8669] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805e1221e0 iblock : 8, err : -5)
[  216.292340][ T8669] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[  216.314461][ T8669] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[  216.374279][ T5780] Bluetooth: hci0: command tx timeout
[  216.382000][ T8651] loop0: detected capacity change from 0 to 32768
[  216.395990][ T5822] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  216.412861][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.427272][ T5822] usb 2-1: config 0 descriptor??
[  216.439377][ T5822] gspca_main: cpia1-2.14.0 probing 0813:0001
[  216.469795][ T8651] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  216.646292][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.673695][ T8651] XFS (loop0): Ending clean mount
[  216.730940][ T8507] 8021q: adding VLAN 0 to HW filter on device team0
[  216.740977][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1029'.
[  216.765400][   T28] audit: type=1800 audit(1778251652.010:83): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1022" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  216.829355][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.836734][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.846418][ T5822] gspca_cpia1: usb_control_msg 03, error -71
[  216.866415][ T5822] gspca_cpia1: usb_control_msg 01, error -71
[  216.872501][ T5822] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  216.882630][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.890619][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.917096][ T5774] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  216.930716][ T5822] usb 2-1: USB disconnect, device number 11
[  217.100730][ T8507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.355110][ T5787] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  217.573282][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.587133][ T5787] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  217.616704][ T5787] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.654581][ T5787] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.707098][ T5787] usb 5-1: config 0 interface 0 has no altsetting 0
[  217.713829][ T5787] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  217.782159][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.806249][ T5787] usb 5-1: config 0 descriptor??
[  217.925005][ T8707] loop1: detected capacity change from 0 to 2048
[  218.002995][ T8707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.026778][   T28] audit: type=1800 audit(1778251653.270:84): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1034" name="bus" dev="loop1" ino=18 res=0 errno=0
[  218.219648][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.292530][ T5787] holtek 0003:1241:5015.000A: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0
[  218.330183][ T5787] holtek 0003:1241:5015.000A: no inputs found
[  218.485814][ T5822] usb 5-1: USB disconnect, device number 7
[  218.593673][ T8721] fido_id[8721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  218.820804][ T8507] veth0_vlan: entered promiscuous mode
[  218.876773][ T8507] veth1_vlan: entered promiscuous mode
[  218.996959][ T8507] veth0_macvtap: entered promiscuous mode
[  219.017808][ T8507] veth1_macvtap: entered promiscuous mode
[  219.097898][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.135760][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.164512][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.204354][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.229079][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.262379][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.295276][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.313842][ T8741] loop0: detected capacity change from 0 to 8192
[  219.338000][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.374703][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.393567][ T8741] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  219.414497][ T8741] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  219.423804][ T8741] REISERFS (device loop0): using ordered data mode
[  219.444191][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.502292][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.513077][ T8741] reiserfs: using flush barriers
[  219.559425][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.570191][ T8741] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  219.609587][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.634731][ T8741] REISERFS (device loop0): checking transaction log (loop0)
[  219.655535][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.697619][ T8507] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.764130][ T8507] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.772924][ T8507] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.862869][ T8507] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.929029][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'.
[  220.017771][ T8741] REISERFS (device loop0): Using tea hash to sort names
[  220.050292][ T8741] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  220.348942][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.363587][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.405010][ T8769] loop1: detected capacity change from 0 to 1024
[  220.504255][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  220.526358][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.554307][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.615377][ T8769] hfsplus: request for non-existent node 33423360 in B*Tree
[  220.631706][ T8769] hfsplus: request for non-existent node 33423360 in B*Tree
[  220.666516][ T8771] loop0: detected capacity change from 0 to 512
[  220.693482][ T8771] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  220.724236][ T5821] usb 5-1: Using ep0 maxpacket: 16
[  220.756182][ T5821] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  220.794667][ T5821] usb 5-1: config 0 has no interface number 0
[  220.800872][ T5821] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11
[  220.877834][ T5821] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[  220.912320][ T5821] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  220.950322][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  220.972091][ T5821] usb 5-1: Product: syz
[  221.003535][ T5821] usb 5-1: SerialNumber: syz
[  221.030278][ T5821] usb 5-1: config 0 descriptor??
[  221.076750][ T5821] cm109 5-1:0.8: invalid payload size 1024, expected 4
[  221.102096][ T5821] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7
[  221.217577][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'.
[  221.343117][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.355384][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.362926][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.370428][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.375530][ T2132] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  221.378835][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.392310][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.399638][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.407131][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.414983][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.422192][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.435530][ T1187] usb 5-1: USB disconnect, device number 8
[  221.441440][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  221.548111][ T1187] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  221.588469][ T8788] loop1: detected capacity change from 0 to 512
[  221.645182][ T2132] usb 1-1: Using ep0 maxpacket: 16
[  221.652436][ T8788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.666980][ T2132] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  221.680184][ T8788] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.714159][ T2132] usb 1-1: config 0 has no interface number 0
[  221.720458][ T2132] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.773983][ T2132] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.793323][ T2132] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  221.810520][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.861358][ T2132] usb 1-1: config 0 descriptor??
[  221.961813][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.214204][ T5777] Bluetooth: hci2: command 0x0406 tx timeout
[  222.488913][ T8817] sp0: Synchronizing with TNC
[  222.549739][ T2132] uclogic 0003:28BD:0071.000B: failed retrieving string descriptor #100: -71
[  222.588301][ T2132] uclogic 0003:28BD:0071.000B: failed retrieving pen parameters: -71
[  222.614449][ T2132] uclogic 0003:28BD:0071.000B: pen probing failed: -71
[  222.621422][ T2132] uclogic 0003:28BD:0071.000B: failed probing parameters: -71
[  222.675141][ T2132] uclogic: probe of 0003:28BD:0071.000B failed with error -71
[  222.714365][ T2132] usb 1-1: USB disconnect, device number 8
[  222.858036][ T8826] loop5: detected capacity change from 0 to 128
[  222.927693][ T8826] VFS: Found a Xenix FS (block size = 512) on device loop5
[  223.063787][ T8507] sysv_free_block: trying to free block not in datazone
[  223.083775][ T8507] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  223.204152][ T5845] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  223.275486][ T8839] QAT: Invalid ioctl 21531
[  223.394178][ T5845] usb 5-1: Using ep0 maxpacket: 16
[  223.406437][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.428023][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  223.474464][ T5845] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  223.502361][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.531947][ T5845] usb 5-1: config 0 descriptor??
[  223.672235][ T8851] loop0: detected capacity change from 0 to 512
[  223.764585][ T8851] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  223.786454][ T8854] tipc: Started in network mode
[  223.805383][ T8854] tipc: Node identity , cluster identity 4711
[  223.978315][ T5845] microsoft 0003:045E:07DA.000C: item 0 4 0 8 parsing failed
[  224.006873][ T5845] microsoft 0003:045E:07DA.000C: parse failed
[  224.013761][ T5845] microsoft: probe of 0003:045E:07DA.000C failed with error -22
[  224.199069][ T5845] usb 5-1: USB disconnect, device number 9
[  224.545470][ T8845] loop1: detected capacity change from 0 to 32768
[  224.962663][ T8877] overlayfs: conflicting options: verity=require,redirect_dir=nofollow
[  225.443790][ T8898] loop4: detected capacity change from 0 to 512
[  225.531522][ T8898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  225.570073][ T8903] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  225.577782][ T8903] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  225.592322][ T8903] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  225.599320][ T8903] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  225.606894][ T8903] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  225.613410][ T8903] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  225.620546][ T8903] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  225.627215][ T8903] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  225.633927][ T8903] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  225.641603][ T8903] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  225.648567][ T8903] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  225.657725][ T8903] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  225.679215][ T8898] EXT4-fs (loop4): 1 truncate cleaned up
[  225.700834][ T8898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.970936][ T6690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.465983][ T5840] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  226.694200][ T5840] usb 6-1: Using ep0 maxpacket: 8
[  226.734663][ T5840] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  226.748003][ T5840] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  226.764745][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.793203][ T5840] usb 6-1: Product: syz
[  226.803328][ T5840] usb 6-1: Manufacturer: syz
[  226.808997][ T5840] usb 6-1: SerialNumber: syz
[  226.834894][ T5840] usb 6-1: config 0 descriptor??
[  226.872755][ T5840] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  226.905405][ T5840] usb 6-1: setting power ON
[  226.940372][ T5840] dvb-usb: bulk message failed: -22 (2/0)
[  226.965835][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  226.976076][ T8910] loop1: detected capacity change from 0 to 32768
[  227.009390][ T5840] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  227.021765][ T5840] usb 6-1: media controller created
[  227.049183][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  227.080007][ T8921] dvb-usb: bulk message failed: -22 (3/0)
[  227.104425][ T8910] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  227.129502][ T8921] cxusb: i2c wr: len=79 is too big!
[  227.129502][ T8921] 
[  227.199244][ T5840] usb 6-1: selecting invalid altsetting 6
[  227.219257][ T5840] usb 6-1: digital interface selection failed (-22)
[  227.226185][ T5840] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  227.236784][ T5840] usb 6-1: setting power OFF
[  227.242142][ T5840] dvb-usb: bulk message failed: -22 (2/0)
[  227.251535][ T5840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  227.261677][ T5840] (NULL device *): no alternate interface
[  227.298422][ T5840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  227.348323][ T5840] usb 6-1: USB disconnect, device number 2
[  227.373971][ T8910] XFS (loop1): Ending clean mount
[  227.430495][ T8910] XFS (loop1): Quotacheck needed: Please wait.
[  227.490373][ T5820] IPVS: starting estimator thread 0...
[  227.624916][ T8910] XFS (loop1): Quotacheck: Done.
[  227.626565][ T8962] IPVS: using max 17 ests per chain, 40800 per kthread
[  227.719886][ T8968] loop0: detected capacity change from 0 to 64
[  228.636345][ T8984] loop0: detected capacity change from 0 to 32768
[  228.657895][ T8984] 
[  228.657895][ T8984]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  228.657895][ T8984] 
[  228.698753][ T8984] ERROR: (device loop0): diWrite: ixpxd invalid
[  228.698753][ T8984] 
[  228.714564][ T8984] ERROR: (device loop0): txCommit: 
[  228.714564][ T8984] 
[  228.801410][ T5774] 
[  228.801410][ T5774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  228.801410][ T5774] 
[  228.832376][ T5774] 
[  228.832376][ T5774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  228.832376][ T5774] 
[  228.882069][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.912702][ T8997] netlink: 'syz.5.1125': attribute type 39 has an invalid length.
[  229.686357][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'.
[  229.750671][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'.
[  229.760347][ T9022] netlink: 'syz.4.1133': attribute type 15 has an invalid length.
[  229.769699][ T9022] netlink: 'syz.4.1133': attribute type 18 has an invalid length.
[  229.841399][ T9026] loop0: detected capacity change from 0 to 1024
[  230.102524][ T9034] tipc: Started in network mode
[  230.139449][ T9034] tipc: Node identity , cluster identity 4711
[  230.161861][ T9034] tipc: Failed to set node id, please configure manually
[  230.170909][ T9034] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  230.492589][ T9048] loop1: detected capacity change from 0 to 1024
[  230.511129][ T9049] loop4: detected capacity change from 0 to 512
[  230.536986][ T9045] loop0: detected capacity change from 0 to 2048
[  230.556680][ T9049] EXT4-fs: Ignoring removed nobh option
[  230.590982][ T9049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  230.612171][ T9045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.665449][ T9049] EXT4-fs (loop4): 1 truncate cleaned up
[  230.672457][ T9049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.825334][   T28] audit: type=1800 audit(1778251666.070:85): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1144" name="file1" dev="loop4" ino=15 res=0 errno=0
[  230.957194][ T6690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.132135][ T9057] loop1: detected capacity change from 0 to 512
[  231.196061][ T9057] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  231.220743][ T9037] loop5: detected capacity change from 0 to 32768
[  231.229559][ T9057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  231.238653][ T9057] System zones: 0-1, 15-15, 18-18, 34-34
[  231.245261][ T9057] EXT4-fs (loop1): orphan cleanup on readonly fs
[  231.252396][ T9057] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  231.262883][ T9057] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  231.318183][ T9057] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  231.365206][ T9057] EXT4-fs (loop1): 1 truncate cleaned up
[  231.384641][ T9057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  231.617125][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.216847][ T9086] loop0: detected capacity change from 0 to 4096
[  232.267781][ T9090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.353861][ T9086] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 64 already freed
[  232.415774][ T9086] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  233.024440][ T9092] loop4: detected capacity change from 0 to 32768
[  233.330727][ T9089] loop1: detected capacity change from 0 to 40427
[  233.369064][ T9096] loop5: detected capacity change from 0 to 32768
[  233.393792][ T9089] F2FS-fs (loop1): invalid crc value
[  233.421959][ T9089] F2FS-fs (loop1): Found nat_bits in checkpoint
[  233.627914][ T9089] F2FS-fs (loop1): Start checkpoint disabled!
[  233.683062][ T9089] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  234.006980][ T9119] tipc: Started in network mode
[  234.024240][ T9119] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  234.053881][ T3490] kworker/u4:11: attempt to access beyond end of device
[  234.053881][ T3490] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  234.076486][ T9119] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  234.095717][ T3490] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  234.112054][ T3490] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  234.544904][ T9129] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.626964][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'.
[  234.647170][ T9131] tipc: New replicast peer: 172.30.1.0
[  234.653091][ T9131] tipc: Enabled bearer <udp:syz2>, priority 10
[  235.293859][ T9146] set_capacity_and_notify: 1 callbacks suppressed
[  235.293876][ T9146] loop1: detected capacity change from 0 to 128
[  235.353626][ T9125] loop5: detected capacity change from 0 to 32768
[  235.361195][ T1187] kernel write not supported for file /input/mouse0 (pid: 1187 comm: kworker/0:2)
[  235.405289][ T9146] FAT-fs (loop1): FAT read failed (blocknr 128)
[  235.456295][ T9125] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.514167][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  235.576741][ T9125] XFS (loop5): Ending clean mount
[  235.704198][ T5840] usb 1-1: Using ep0 maxpacket: 32
[  235.710062][   T28] audit: type=1800 audit(1778251670.950:86): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1175" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  235.754744][ T5840] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  235.765570][ T5840] usb 1-1: config 0 has no interface number 0
[  235.772941][ T1187] tipc: Node number set to 738197504
[  235.795319][ T5840] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  235.815747][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.823829][ T5840] usb 1-1: Product: syz
[  235.832013][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1187'.
[  235.852340][ T5840] usb 1-1: Manufacturer: syz
[  235.867779][ T5840] usb 1-1: SerialNumber: syz
[  235.890932][ T8507] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.922302][ T5840] usb 1-1: config 0 descriptor??
[  235.928999][ T9165] loop4: detected capacity change from 0 to 1764
[  235.944928][ T5840] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  236.164465][ T5840] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  236.236725][ T5840] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  236.365391][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[  236.549856][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'.
[  236.566159][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  236.576396][ T5840] usb 1-1: USB disconnect, device number 9
[  236.605469][ T5840] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  236.652685][ T5840] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  236.672027][ T5840] quatech2 1-1:0.51: device disconnected
[  236.721288][ T9178] loop4: detected capacity change from 0 to 1024
[  236.773933][ T9180] loop1: detected capacity change from 0 to 1024
[  236.791453][ T9178] hfsplus: invalid length 32517 has been corrected to 255
[  237.057232][ T3475] hfsplus: b-tree write err: -5, ino 20
[  237.570031][ T9204] loop0: detected capacity change from 0 to 256
[  237.625653][ T9204] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x4de368d8, utbl_chksum : 0xe619d30d)
[  238.376153][ T9226] loop4: detected capacity change from 0 to 1024
[  238.499929][ T9198] loop1: detected capacity change from 0 to 32768
[  238.587123][ T9198] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  238.587123][ T9198] 
[  238.634528][ T9198] ERROR: (device loop1): remounting filesystem as read-only
[  238.672560][ T9198] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  238.672560][ T9198] 
[  238.672585][ T9231] loop5: detected capacity change from 0 to 512
[  238.704368][ T9198] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  238.704368][ T9198] 
[  238.765789][ T9231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  238.832292][ T9231] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  238.989290][ T8507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  239.215896][ T9243] loop5: detected capacity change from 0 to 256
[  239.240073][ T9243] exfat: Deprecated parameter 'utf8'
[  239.305467][ T9243] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  239.487282][ T9224] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  239.547612][ T9224] JBD2: Ignoring recovery information on journal
[  239.678867][ T9224] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  240.237473][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[  241.016327][ T9281] set_capacity_and_notify: 1 callbacks suppressed
[  241.016345][ T9281] loop0: detected capacity change from 0 to 512
[  241.075295][ T9281] EXT4-fs: Ignoring removed orlov option
[  241.112406][ T9281] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  241.167328][ T9281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  241.259285][ T9266] loop4: detected capacity change from 0 to 32768
[  241.265945][ T9281] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.1226: corrupted in-inode xattr: e_value size too large
[  241.296224][ T9281] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1226: couldn't read orphan inode 15 (err -117)
[  241.342027][ T9266] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1222 (9266)
[  241.383162][ T9281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.400009][ T9264] loop5: detected capacity change from 0 to 32768
[  241.427796][ T9266] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  241.443357][ T9264] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1223 (9264)
[  241.456084][ T9266] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  241.472947][ T9266] BTRFS info (device loop4): enabling auto defrag
[  241.491685][ T9264] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  241.501986][ T9266] BTRFS info (device loop4): use no compression
[  241.543878][ T9266] BTRFS info (device loop4): max_inline at 4096
[  241.554139][ T9264] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  241.563536][ T9264] BTRFS info (device loop5): force zlib compression, level 3
[  241.584187][ T9266] BTRFS info (device loop4): using free space tree
[  241.634218][ T9264] BTRFS info (device loop5): force clearing of disk cache
[  241.680402][ T9264] BTRFS info (device loop5): use zlib compression, level 3
[  241.746647][ T9264] BTRFS info (device loop5): allowing degraded mounts
[  241.753952][ T9264] BTRFS info (device loop5): turning on sync discard
[  241.770717][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.810135][ T9266] BTRFS info (device loop4): enabling ssd optimizations
[  241.824305][ T9264] BTRFS info (device loop5): using free space tree
[  241.850395][ T9266] BTRFS info (device loop4): auto enabling async discard
[  242.089262][ T9264] BTRFS info (device loop5): enabling ssd optimizations
[  242.154703][ T9264] BTRFS info (device loop5): rebuilding free space tree
[  242.419347][ T6690] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.714399][ T9334] loop0: detected capacity change from 0 to 4096
[  242.721932][ T9334] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.787966][ T9334] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  242.855749][ T9334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.108830][ T8507] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  243.132858][ T9295] loop1: detected capacity change from 0 to 40427
[  243.203457][ T9295] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  243.264136][ T9295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  243.364572][ T9295] F2FS-fs (loop1): Found nat_bits in checkpoint
[  243.442131][ T9343] overlayfs: failed index dir cleanup (-512)
[  243.496130][ T9343] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  243.596130][ T9295] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  243.603269][ T9295] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  243.715106][ T5821] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  243.747571][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.849851][ T5773] syz-executor: attempt to access beyond end of device
[  243.849851][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  243.913247][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  243.954204][ T5821] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  243.985933][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.004339][ T5821] usb 5-1: Product: syz
[  244.008586][ T5821] usb 5-1: Manufacturer: syz
[  244.013230][ T5821] usb 5-1: SerialNumber: syz
[  244.038163][ T5821] usb 5-1: config 0 descriptor??
[  244.047211][ T5821] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  244.668744][ T5821] gspca_stk1135: reg_w 0x3 err -71
[  244.677242][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.683735][ T5821] gspca_stk1135: Sensor write failed
[  244.720432][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.738443][ T5821] gspca_stk1135: Sensor write failed
[  244.743861][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.774193][ T5821] gspca_stk1135: Sensor read failed
[  244.779510][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.803452][ T5821] gspca_stk1135: Sensor read failed
[  244.823725][ T5821] gspca_stk1135: Detected sensor type unknown (0x0)
[  244.848606][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.864247][ T5821] gspca_stk1135: Sensor read failed
[  244.880026][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.904216][ T5821] gspca_stk1135: Sensor read failed
[  244.909570][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.939511][ T5821] gspca_stk1135: Sensor write failed
[  244.953741][ T5821] gspca_stk1135: serial bus timeout: status=0x00
[  244.978044][ T5821] gspca_stk1135: Sensor write failed
[  244.983506][ T5821] stk1135: probe of 5-1:0.0 failed with error -71
[  244.992322][ T9381] loop5: detected capacity change from 0 to 8
[  245.012945][ T5821] usb 5-1: USB disconnect, device number 10
[  245.122616][ T9383] loop1: detected capacity change from 0 to 512
[  245.221511][ T9383] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1238: invalid indirect mapped block 10 (level 1)
[  245.266056][ T9383] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1238: invalid indirect mapped block 8 (level 1)
[  245.312750][ T9383] EXT4-fs (loop1): 1 truncate cleaned up
[  245.337013][ T9383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.539619][ T9395] loop0: detected capacity change from 0 to 512
[  245.550011][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.657520][ T9395] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  245.725282][ T9395] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  245.804892][ T9395] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1246: Failed to acquire dquot type 1
[  245.816212][ T9403] syz.4.1249[9403] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  245.816350][ T9403] syz.4.1249[9403] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  245.895496][ T9395] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  245.960761][ T9406] loop5: detected capacity change from 0 to 4096
[  245.981706][ T9395] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  246.024462][ T9395] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1246: Failed to acquire dquot type 1
[  246.043961][ T9406] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  246.086863][ T9395] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1246: bg 0: block 248: padding at end of block bitmap is not set
[  246.122144][ T9395] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  246.143130][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'.
[  246.168783][ T9395] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  246.210117][ T9395] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  246.264253][ T9395] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1246: Failed to acquire dquot type 1
[  246.305694][ T9395] EXT4-fs (loop0): 1 orphan inode deleted
[  246.312871][ T9395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.327259][ T9406] ntfs3: loop5: ino=1e, "file1" ntfs3_write_inode failed, -22.
[  246.359818][ T9395] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.376349][ T9406] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  246.660989][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.184396][ T9439] tipc: Invalid UDP bearer configuration
[  247.184453][ T9439] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  247.874493][ T9426] loop5: detected capacity change from 0 to 40427
[  247.928641][ T9426] F2FS-fs (loop5): invalid crc value
[  247.965578][ T9426] F2FS-fs (loop5): Found nat_bits in checkpoint
[  248.023905][ T9434] loop1: detected capacity change from 0 to 32768
[  248.201629][ T9426] F2FS-fs (loop5): Start checkpoint disabled!
[  248.265603][ T9426] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  248.351087][ T9459] loop0: detected capacity change from 0 to 512
[  248.457681][ T9459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.590876][ T9459] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1266: bg 0: block 306: padding at end of block bitmap is not set
[  248.840120][ T9447] loop4: detected capacity change from 0 to 32768
[  248.857562][ T1130] kworker/u4:6: attempt to access beyond end of device
[  248.857562][ T1130] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  248.899781][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.912810][ T1130] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  248.974647][ T9447] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.984791][ T1130] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  249.190533][ T9447] XFS (loop4): Ending clean mount
[  249.458721][ T6690] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.107780][ T9474] loop1: detected capacity change from 0 to 32768
[  250.206341][ T9474] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.324154][ T5820] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  250.371823][ T9474] XFS (loop1): Ending clean mount
[  250.399700][ T9514] loop5: detected capacity change from 0 to 4096
[  250.415371][ T9474] XFS (loop1): Quotacheck needed: Please wait.
[  250.524298][ T5820] usb 5-1: Using ep0 maxpacket: 16
[  250.550417][ T5820] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.578998][ T5820] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.608238][ T9474] XFS (loop1): Quotacheck: Done.
[  250.613732][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0
[  250.621686][ T5820] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  250.643964][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.664598][ T9514] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  250.666222][ T5820] usb 5-1: config 0 descriptor??
[  250.699916][ T9514] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  250.935688][ T1130] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  250.956132][ T8507] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  250.963387][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.979719][ T8507] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  250.994333][ T8507] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  251.015954][ T3490] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  251.135961][ T5820] hid (null): invalid report_size -1058485808
[  251.184364][ T5820] nzxt-smart2 0003:1E71:2009.000D: invalid report_size -1058485808
[  251.192375][ T5820] nzxt-smart2 0003:1E71:2009.000D: item 0 4 1 7 parsing failed
[  251.265050][ T5820] nzxt-smart2: probe of 0003:1E71:2009.000D failed with error -22
[  251.377061][ T5845] usb 5-1: USB disconnect, device number 11
[  252.604470][ T9546] loop1: detected capacity change from 0 to 32768
[  252.934452][ T5777] Bluetooth: hci3: command 0x0406 tx timeout
[  253.290378][ T9577] loop4: detected capacity change from 0 to 32768
[  253.417284][ T9591] loop1: detected capacity change from 0 to 64
[  253.540197][   T28] audit: type=1800 audit(1778251688.780:87): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file1" dev="loop1" ino=21 res=0 errno=0
[  253.821562][ T9598] loop5: detected capacity change from 0 to 128
[  253.848113][ T9598] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  253.881176][ T9598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.284610][ T9589] loop0: detected capacity change from 0 to 32768
[  254.403256][ T9589] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  254.587031][ T9589] XFS (loop0): Ending clean mount
[  254.753943][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  254.876254][ T9603] loop1: detected capacity change from 0 to 32768
[  254.937495][ T9603] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1309 (9603)
[  255.045004][ T9603] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  255.094264][ T9603] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  255.121472][ T9603] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  255.144460][ T5845] IPVS: starting estimator thread 0...
[  255.164198][ T9603] BTRFS info (device loop1): use zstd compression, level 3
[  255.184255][ T9603] BTRFS info (device loop1): using free space tree
[  255.244853][ T9629] IPVS: using max 17 ests per chain, 40800 per kthread
[  255.367316][ T9645] netlink: 'syz.4.1319': attribute type 2 has an invalid length.
[  255.408637][ T9603] BTRFS info (device loop1): enabling ssd optimizations
[  255.436555][ T9603] BTRFS info (device loop1): auto enabling async discard
[  255.874482][ T5773] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  255.991181][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  256.000559][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  256.159327][ T9626] loop5: detected capacity change from 0 to 32768
[  256.194948][ T9626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1317 (9626)
[  256.317661][ T9626] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  256.340682][ T9626] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  256.365834][ T9626] BTRFS info (device loop5): using free space tree
[  256.598805][ T9626] BTRFS info (device loop5): enabling ssd optimizations
[  256.607078][ T9626] BTRFS info (device loop5): auto enabling async discard
[  256.751942][   T28] audit: type=1800 audit(1778251691.990:88): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1317" name="file2" dev="loop5" ino=261 res=0 errno=0
[  256.929345][ T8507] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  257.185887][ T9663] loop0: detected capacity change from 0 to 32768
[  257.267930][ T9663] JBD2: Ignoring recovery information on journal
[  257.377067][ T9699] loop4: detected capacity change from 0 to 1024
[  257.508691][ T9663] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  257.604933][ T9663] (syz.0.1326,9663,0):ocfs2_remount:630 ERROR: Cannot change data mode on remount
[  257.625015][ T3490] hfsplus: b-tree write err: -5, ino 25
[  257.630895][ T3490] hfsplus: b-tree write err: -5, ino 4
[  257.689080][ T3490] hfsplus: b-tree write err: -5, ino 2
[  257.929860][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[  258.014505][ T5845] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  258.226775][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.256327][ T5845] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  258.276653][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1341'.
[  258.286808][ T5845] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  258.311585][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.348136][ T5845] usb 2-1: config 0 descriptor??
[  258.367224][ T5845] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  258.379692][ T5845] dvb-usb: bulk message failed: -22 (3/0)
[  258.409214][ T5845] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  258.448057][ T5845] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  258.462642][ T5845] usb 2-1: media controller created
[  258.477309][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  258.531238][ T5845] dvb-usb: bulk message failed: -22 (6/0)
[  258.559706][ T5845] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  258.576980][ T9705] dvb-usb: bulk message failed: -22 (2/0)
[  258.587095][ T5845] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  258.629139][ T5845] dvb-usb: schedule remote query interval to 150 msecs.
[  258.650450][ T5845] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  258.689205][ T5845] usb 2-1: USB disconnect, device number 12
[  258.741044][ T5845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  258.912794][ T9707] loop4: detected capacity change from 0 to 40427
[  258.921600][ T9707] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  258.944329][ T9707] F2FS-fs (loop4): Image doesn't support compression
[  258.951153][ T9707] F2FS-fs (loop4): Image doesn't support compression
[  258.969470][ T9707] F2FS-fs (loop4): invalid crc value
[  258.986210][ T9707] F2FS-fs (loop4): Found nat_bits in checkpoint
[  259.092891][ T9707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  259.164217][   T28] audit: type=1800 audit(1778251694.400:89): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1337" name="file2" dev="loop4" ino=10 res=0 errno=0
[  259.260214][ T6690] syz-executor: attempt to access beyond end of device
[  259.260214][ T6690] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  259.304400][ T6690] F2FS-fs (loop4): Remounting filesystem read-only
[  259.841917][ T9736] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  259.939403][ T9726] loop0: detected capacity change from 0 to 32768
[  260.027535][ T9726] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  260.301761][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[  260.890265][ T9768] loop1: detected capacity change from 0 to 256
[  260.976451][ T9768] FAT-fs (loop1): Directory bread(block 64) failed
[  260.999455][ T9768] FAT-fs (loop1): Directory bread(block 65) failed
[  261.014369][ T9768] FAT-fs (loop1): Directory bread(block 66) failed
[  261.034125][ T9768] FAT-fs (loop1): Directory bread(block 67) failed
[  261.040936][ T9768] FAT-fs (loop1): Directory bread(block 68) failed
[  261.080068][ T9768] FAT-fs (loop1): Directory bread(block 69) failed
[  261.105010][ T9768] FAT-fs (loop1): Directory bread(block 70) failed
[  261.132074][ T9768] FAT-fs (loop1): Directory bread(block 71) failed
[  261.150062][ T9768] FAT-fs (loop1): Directory bread(block 72) failed
[  261.160079][ T9768] FAT-fs (loop1): Directory bread(block 73) failed
[  261.204823][ T5845] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  261.238782][ T9775] loop4: detected capacity change from 0 to 512
[  261.317693][ T9775] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  261.347258][ T9775] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  261.374794][ T9775] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.1368: iget: bad i_size value: 12154757448730
[  261.398855][ T5845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.430511][ T9775] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1368: couldn't read orphan inode 13 (err -117)
[  261.442864][ T5845] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  261.468042][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.479954][ T9775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.525630][ T5845] usb 1-1: config 0 descriptor??
[  261.655893][ T6690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.822345][ T9769] loop5: detected capacity change from 0 to 40427
[  261.861232][ T9769] F2FS-fs (loop5): invalid crc value
[  261.915337][ T9769] F2FS-fs (loop5): Found nat_bits in checkpoint
[  262.041000][ T9769] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  262.131032][ T8507] syz-executor: attempt to access beyond end of device
[  262.131032][ T8507] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  262.145872][ T5845] ath6kl: Failed to read usb control message: -71
[  262.168649][ T5845] ath6kl: Unable to read the bmi data from the device: -71
[  262.179216][ T5845] ath6kl: unable to read target info byte count: -71
[  262.186910][ T8507] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  262.212765][ T5845] ath6kl: Failed to init ath6kl core: -71
[  262.229765][ T5845] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[  262.259198][ T5845] usb 1-1: USB disconnect, device number 10
[  262.890588][ T9789] loop1: detected capacity change from 0 to 32768
[  263.014692][ T9794] loop4: detected capacity change from 0 to 32768
[  263.022015][ T9789] read_mapping_page failed!
[  263.032151][ T9789] ERROR: (device loop1): txCommit: 
[  263.032151][ T9789] 
[  263.073895][ T9789] ERROR: (device loop1): remounting filesystem as read-only
[  263.175796][  T113] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  263.183360][  T113] ------------[ cut here ]------------
[  263.188977][  T113] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  263.249837][  T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  263.256008][  T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0
[  263.263233][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  263.273327][  T113] RIP: 0010:txUnlock+0xc87/0xcb0
[  263.278320][  T113] Code: 9f 4f 73 07 0f 0b e8 f8 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 79 4f 73 07 <0f> 0b e8 d2 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba
[  263.298320][  T113] RSP: 0018:ffffc90002d27d08 EFLAGS: 00010246
[  263.304436][  T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 18e7f15e73ab5300
[  263.312448][  T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  263.320452][  T113] RBP: ffffc90002899090 R08: ffffc90002d27a07 R09: 1ffff920005a4f40
[  263.328462][  T113] R10: dffffc0000000000 R11: fffff520005a4f41 R12: ffff88807c1a18b8
[  263.336476][  T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802ff7d094
[  263.344576][  T113] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  263.353552][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.360195][  T113] CR2: 00007fcb1b54da08 CR3: 000000002cd60000 CR4: 00000000003506e0
[  263.368231][  T113] Call Trace:
[  263.371682][  T113]  <TASK>
[  263.374748][  T113]  ? lockdep_hardirqs_on+0x98/0x150
[  263.380018][  T113]  jfs_lazycommit+0x56e/0xa70
[  263.384758][  T113]  ? txFreelock+0x5a0/0x5a0
[  263.389319][  T113]  ? do_task_dead+0xd0/0xd0
[  263.393876][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  263.398881][  T113]  kthread+0x2fa/0x390
[  263.402997][  T113]  ? txFreelock+0x5a0/0x5a0
[  263.407639][  T113]  ? kthread_blkcg+0xd0/0xd0
[  263.412283][  T113]  ret_from_fork+0x48/0x80
[  263.416757][  T113]  ? kthread_blkcg+0xd0/0xd0
[  263.421409][  T113]  ret_from_fork_asm+0x11/0x20
[  263.426284][  T113]  </TASK>
[  263.429342][  T113] Modules linked in:
[  263.439830][ T9805] loop5: detected capacity change from 0 to 512
[  263.454965][  T113] ---[ end trace 0000000000000000 ]---
[  263.460704][  T113] RIP: 0010:txUnlock+0xc87/0xcb0
[  263.475107][  T113] Code: 9f 4f 73 07 0f 0b e8 f8 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 79 4f 73 07 <0f> 0b e8 d2 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba
[  263.495889][  T113] RSP: 0018:ffffc90002d27d08 EFLAGS: 00010246
[  263.503716][  T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 18e7f15e73ab5300
[  263.515994][ T9805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.528853][ T9805] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.569433][  T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  263.603511][  T113] RBP: ffffc90002899090 R08: ffffc90002d27a07 R09: 1ffff920005a4f40
[  263.625811][  T113] R10: dffffc0000000000 R11: fffff520005a4f41 R12: ffff88807c1a18b8
[  263.649746][ T8507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.678304][  T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802ff7d094
[  263.711877][  T113] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  263.721173][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.729683][  T113] CR2: 00007f016ede8158 CR3: 000000002cd60000 CR4: 00000000003506f0
[  263.739774][  T113] Kernel panic - not syncing: Fatal exception
[  263.746471][  T113] Kernel Offset: disabled
[  263.750807][  T113] Rebooting in 86400 seconds..