last executing test programs:

3.927547752s ago: executing program 0 (id=1851):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8102, &(0x7f0000000080), 0x7, 0x517, &(0x7f0000000700)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

3.638866187s ago: executing program 0 (id=1853):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

2.870589138s ago: executing program 3 (id=1859):
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[{@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@check_strict}, {@fat=@debug}, {@fat=@nocase}, {@nodots}, {@fat=@discard}, {@fat=@uid}]}, 0x1, 0x208, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)

2.772747429s ago: executing program 0 (id=1860):
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51ac, &(0x7f0000005280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})

2.576965472s ago: executing program 3 (id=1861):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0xb, "a43daeb4"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x0, 0x2, 0xb}]}}, 0x0}, 0x0)

1.544600017s ago: executing program 0 (id=1868):
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=f'])

1.062108445s ago: executing program 1 (id=1874):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00')
lseek(r0, 0x4, 0x0)

908.559077ms ago: executing program 4 (id=1875):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000240)={[{@nobarrier}, {@gid}, {}, {@creator={'creator', 0x3d, "056540f8"}}, {@force}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-4'}}]}, 0x46, 0x6f7, &(0x7f00000010c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x149)
getdents64(r0, &(0x7f0000000ac0)=""/4096, 0x1000)

908.282757ms ago: executing program 1 (id=1876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000013240001800a000100726564697200000014000280080001400000001708000340000000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0)

908.075177ms ago: executing program 0 (id=1877):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x43, &(0x7f0000001e40)=ANY=[], 0xff, 0x5ef1, &(0x7f0000000c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x24)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000480)={@desc={0x1, 0x0, @desc1}})

905.130927ms ago: executing program 2 (id=1878):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0xf00, 0x8, 0x0, 0x0, 0x0})

827.289828ms ago: executing program 1 (id=1879):
set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3)
r0 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<qK\x80\x8fQ|\xf5d\x10\x10\xb1\xe6\xa4`\xd3\xf9\xa5\xd1I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'Q%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd30\xa2\x17\xca\xed\xdf\x91\xf9\x8c\xa1T\xfa\xc30\xfb&\xb7\x0f\xf9\xc9[R\xa8\xa3\xf4@dd9\xdd\vt\xa9\xa32\xc1\x1cA\xd2q\x9b\x9bV\x8c(\xb2\'\xf5~\xf6\xcf\xb0\x86\xdd\xab>\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x2)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x2012, r0, 0x0)

762.098529ms ago: executing program 4 (id=1880):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x93)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc)

712.6137ms ago: executing program 2 (id=1881):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

696.77413ms ago: executing program 1 (id=1882):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c0004003a2e000000005f3a0c0003"], 0x30}}, 0x20088004)

649.17003ms ago: executing program 2 (id=1883):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

588.530721ms ago: executing program 4 (id=1884):
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1)
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0x20080000005})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0)

581.999321ms ago: executing program 3 (id=1885):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004814}, 0x4000)

527.881652ms ago: executing program 1 (id=1886):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

444.281574ms ago: executing program 4 (id=1887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xea, &(0x7f0000000340)=""/229, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)

413.562984ms ago: executing program 3 (id=1888):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2d, 0x10, {0x2, 0x0, @broadcast}}, 0x24)

399.303624ms ago: executing program 2 (id=1889):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x33}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{&(0x7f0000000a40)={0xa, 0x4e20, 0x3, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x40000)

316.384045ms ago: executing program 4 (id=1890):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x230, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x198, 0x230, 0x230, 0x198, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x6e, 0x0, 0x24}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @rand_addr, 0x0, 0xffffffff, 'vxcan1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x589b, 0x6, 0x0, 'syz1\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290)

232.206297ms ago: executing program 2 (id=1891):
io_setup(0x7, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0)
io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1, 0x4}])

231.067117ms ago: executing program 1 (id=1892):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x3, 0x445a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f)

189.039387ms ago: executing program 3 (id=1893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

54.784039ms ago: executing program 4 (id=1894):
r0 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id, 0x80, 0xffffffffffffffff}, 0x0)

612.19µs ago: executing program 0 (id=1895):
r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0xd2a5, 0x800, 0x1}, &(0x7f0000000080), &(0x7f00000005c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, 0x0, 0x0)

229.35µs ago: executing program 2 (id=1896):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, &(0x7f0000000140), 0x2, &(0x7f00000003c0))
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000a40)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@usefree}, {@fat=@flush}]}, 0x0, 0x274, &(0x7f0000000780)="$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")

0s ago: executing program 3 (id=1897):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")

kernel console output (not intermixed with test programs):

evice number 7
[  151.969408][ T4262] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  152.099217][ T6976] loop2: detected capacity change from 0 to 256
[  152.130911][ T6976] FAT-fs (loop2): Directory bread(block 64) failed
[  152.138485][ T6976] FAT-fs (loop2): Directory bread(block 65) failed
[  152.149657][ T6976] FAT-fs (loop2): Directory bread(block 66) failed
[  152.170213][ T6976] FAT-fs (loop2): Directory bread(block 67) failed
[  152.185668][ T6976] FAT-fs (loop2): Directory bread(block 68) failed
[  152.212276][ T6976] FAT-fs (loop2): Directory bread(block 69) failed
[  152.225649][ T6976] FAT-fs (loop2): Directory bread(block 70) failed
[  152.232242][ T6976] FAT-fs (loop2): Directory bread(block 71) failed
[  152.256929][ T6976] FAT-fs (loop2): Directory bread(block 72) failed
[  152.263528][ T6976] FAT-fs (loop2): Directory bread(block 73) failed
[  152.462834][   T26] audit: type=1326 audit(1749861130.330:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff708d8e929 code=0x7ffc0000
[  152.548044][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  152.548059][   T26] audit: type=1326 audit(1749861130.420:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff708d8d290 code=0x7ffc0000
[  152.550607][ T6974] loop4: detected capacity change from 0 to 32768
[  152.555279][ T6992] loop2: detected capacity change from 0 to 2048
[  152.589711][ T4482] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  152.597429][ T6994] loop3: detected capacity change from 0 to 16
[  152.603952][   T26] audit: type=1326 audit(1749861130.430:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff708d8e52b code=0x7ffc0000
[  152.629600][ T6994] erofs: (device loop3): mounted with root inode @ nid 36.
[  152.650902][ T6994] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  152.664658][   T26] audit: type=1326 audit(1749861130.540:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff708d8d58a code=0x7ffc0000
[  152.709552][ T6994] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -14 in[55, 4041] out[1851]
[  152.713592][   T26] audit: type=1326 audit(1749861130.560:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff708d8d58a code=0x7ffc0000
[  152.769287][   T26] audit: type=1326 audit(1749861130.560:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff708d8d197 code=0x7ffc0000
[  152.773208][ T6994] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  152.793587][ T6996] loop0: detected capacity change from 0 to 8192
[  152.807668][   T26] audit: type=1326 audit(1749861130.560:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff708d900ca code=0x7ffc0000
[  152.817095][ T6992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  152.830082][ T4482] usb 2-1: Using ep0 maxpacket: 32
[  152.851593][ T6996] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  152.865036][ T4482] usb 2-1: config 0 has an invalid interface number: 149 but max is 0
[  152.873245][ T4482] usb 2-1: config 0 has no interface number 0
[  152.890274][ T4482] usb 2-1: config 0 interface 149 has no altsetting 0
[  152.898449][ T6996] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  152.905138][   T26] audit: type=1326 audit(1749861130.770:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff708d8d290 code=0x7ffc0000
[  152.928779][ T6996] REISERFS (device loop0): using ordered data mode
[  152.941827][ T4482] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=8f.76
[  152.958238][ T6996] reiserfs: using flush barriers
[  152.961318][ T4482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.978525][ T6996] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  152.981568][ T4482] usb 2-1: Product: syz
[  153.009149][ T4482] usb 2-1: Manufacturer: syz
[  153.013983][ T4482] usb 2-1: SerialNumber: syz
[  153.021296][   T26] audit: type=1326 audit(1749861130.770:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff708d8d677 code=0x7ffc0000
[  153.039139][ T6992] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  153.054443][ T6996] REISERFS (device loop0): checking transaction log (loop0)
[  153.069143][ T4482] usb 2-1: config 0 descriptor??
[  153.081871][   T26] audit: type=1326 audit(1749861130.770:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff708d8d290 code=0x7ffc0000
[  153.104097][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.114474][ T4482] radio-usb-si4713 2-1:0.149: Si4713 development board discovered: (10C4:8244)
[  153.149456][ T7004] loop3: detected capacity change from 0 to 256
[  153.177438][   T26] audit: type=1326 audit(1749861130.770:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff708d8e52b code=0x7ffc0000
[  153.197278][ T7004] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  153.225788][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  153.309884][ T6996] REISERFS (device loop0): Using tea hash to sort names
[  153.330783][ T6996] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  153.572058][ T7018] loop3: detected capacity change from 0 to 64
[  153.729030][ T4482] radio-usb-si4713: probe of 2-1:0.149 failed with error -71
[  153.748264][ T7026] netlink: 'syz.2.1024': attribute type 3 has an invalid length.
[  153.763478][ T4482] usbhid 2-1:0.149: couldn't find an input interrupt endpoint
[  153.773996][ T4482] usb 2-1: USB disconnect, device number 8
[  153.832242][ T7025] ptrace attach of "./syz-executor exec"[7027] was attempted by "./syz-executor exec"[7025]
[  153.874111][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  154.141604][ T7041] loop4: detected capacity change from 0 to 512
[  154.195962][ T7041] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  154.233007][ T7041] EXT4-fs (loop4): 1 truncate cleaned up
[  154.238867][ T7041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  154.269919][ T7041] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full
[  154.316582][ T4256] EXT4-fs (loop4): unmounting filesystem.
[  154.442670][ T7052] loop0: detected capacity change from 0 to 1024
[  154.572500][ T7052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  154.623652][ T7052] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.669598][ T7057] loop4: detected capacity change from 0 to 4096
[  154.719682][ T7033] loop2: detected capacity change from 0 to 40427
[  154.734063][ T7033] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  154.741087][ T7057] ntfs: volume version 3.1.
[  154.749775][ T7052] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.1034: lblock 3 mapped to illegal pblock 3 (length 12)
[  154.752121][ T7033] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  154.840742][ T7033] F2FS-fs (loop2): Found nat_bits in checkpoint
[  154.844048][ T7052] EXT4-fs (loop0): Remounting filesystem read-only
[  154.999305][ T7033] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  155.031682][ T7033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  155.078611][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  155.109989][ T7033] syz.2.1027: attempt to access beyond end of device
[  155.109989][ T7033] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.458155][ T7087] loop1: detected capacity change from 0 to 4096
[  155.481165][ T7087] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  155.588581][ T7087] ntfs3: loop1: failed to convert "076c" to ascii
[  155.620290][ T7087] ntfs3: loop1: ino=5, "/" directory corrupted
[  155.887619][ T7104] loop1: detected capacity change from 0 to 2048
[  155.925493][ T7104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  156.026621][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  156.243471][ T7116] loop3: detected capacity change from 0 to 4096
[  156.260959][ T7116] ntfs: volume version 3.1.
[  156.411391][ T7127] loop1: detected capacity change from 0 to 8
[  156.449683][ T7127] SQUASHFS error: zstd decompression failed, data probably corrupt
[  156.472738][ T7127] SQUASHFS error: Failed to read block 0x60: -5
[  156.494134][ T7127] SQUASHFS error: zstd decompression failed, data probably corrupt
[  156.519614][ T7127] SQUASHFS error: Failed to read block 0x60: -5
[  156.666358][ T7136] loop2: detected capacity change from 0 to 1024
[  156.720906][ T7136] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #3: block 2: comm syz.2.1073: lblock 2 mapped to illegal pblock 2 (length 1)
[  156.774941][ T7136] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.1073: Failed to acquire dquot type 0
[  156.814372][ T7136] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1073: lblock 2 mapped to illegal pblock 2 (length 1)
[  156.847543][ T7146] loop1: detected capacity change from 0 to 256
[  156.889523][ T7136] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.1073: Failed to acquire dquot type 0
[  156.933315][ T7136] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.1073: Freeing blocks not in datazone - block = 0, count = 4096
[  156.964417][ T7136] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1073: lblock 2 mapped to illegal pblock 2 (length 1)
[  156.999528][ T7136] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.1073: Failed to acquire dquot type 0
[  157.029111][ T7136] EXT4-fs (loop2): 1 orphan inode deleted
[  157.054059][ T7136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  157.224558][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  157.298684][ T7159] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1084'.
[  157.324652][ T7159] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  157.982964][ T7131] loop0: detected capacity change from 0 to 32768
[  158.138430][ T7131] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  158.138430][ T7131] 
[  158.146053][ T7194] loop3: detected capacity change from 0 to 256
[  158.156412][ T7131] ERROR: (device loop0): remounting filesystem as read-only
[  158.332205][ T7195] loop2: detected capacity change from 0 to 32768
[  158.444001][ T7195] XFS (loop2): Mounting V5 Filesystem
[  158.541330][ T4389] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 
[  158.562937][ T4389] XFS (loop2): Unmount and run xfs_repair
[  158.570265][ T4389] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  158.578025][ T4389] 00000000: 49 41 42 33 00 00 00 02 ff ff ff ff ff ff ff ff  IAB3............
[  158.588891][ T4389] 00000010: 00 00 00 00 00 00 00 18 00 00 00 01 00 00 00 10  ................
[  158.598183][ T4389] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab  ..*.w.B.....G.K.
[  158.607388][ T4389] 00000030: 00 00 00 00 80 e5 f6 6c 00 00 04 20 00 00 00 37  .......l... ...7
[  158.617323][ T4389] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  158.627557][ T4389] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  158.636832][ T4389] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  158.646040][ T4389] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  158.655783][ T7195] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x18 len 8 error 74
[  158.667467][ T7195] XFS (loop2): Failed to read root inode 0x420, error 117
[  158.906128][ T7217] loop1: detected capacity change from 0 to 64
[  159.372371][ T7213] loop4: detected capacity change from 0 to 32768
[  159.540213][ T7213] XFS (loop4): Mounting V5 Filesystem
[  159.564585][ T7237] netlink: 'syz.2.1114': attribute type 24 has an invalid length.
[  159.678881][ T7213] XFS (loop4): Ending clean mount
[  159.775534][ T7247] loop3: detected capacity change from 0 to 4096
[  159.808534][ T7252] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1119'.
[  159.844161][ T4256] XFS (loop4): Unmounting Filesystem
[  159.849530][ T7252] netlink: 'syz.2.1119': attribute type 9 has an invalid length.
[  159.863273][ T7252] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1119'.
[  159.873036][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'.
[  159.890807][ T7247] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  160.060231][ T7260] loop3: detected capacity change from 0 to 64
[  160.431378][  T951] kernel write not supported for file /478/oom_adj (pid: 951 comm: kworker/0:2)
[  160.498782][ T7276] loop2: detected capacity change from 0 to 512
[  160.529251][ T7268] random: crng reseeded on system resumption
[  160.538238][ T7276] EXT4-fs: Ignoring removed nobh option
[  160.629103][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.1133: corrupted inode contents
[  160.649129][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  160.655969][ T7276] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #3: comm syz.2.1133: mark_inode_dirty error
[  160.673926][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  160.684687][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.1133: corrupted inode contents
[  160.714380][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  160.725257][ T7276] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1133: mark_inode_dirty error
[  160.773890][ T7286] loop0: detected capacity change from 0 to 764
[  160.790617][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  160.814404][ T7276] __quota_error: 24 callbacks suppressed
[  160.814421][ T7276] Quota error (device loop2): write_blk: dquota write failed
[  160.843171][ T7288] loop4: detected capacity change from 0 to 1024
[  160.849875][ T7276] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  160.874617][ T7276] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.1133: Failed to acquire dquot type 0
[  160.915948][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  160.930335][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  160.967321][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  160.989252][ T7276] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #16: comm syz.2.1133: mark_inode_dirty error
[  161.021491][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.031214][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  161.073476][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.086554][ T7276] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1133: mark_inode_dirty error
[  161.104223][ T7294] netlink: 'syz.0.1139': attribute type 30 has an invalid length.
[  161.122722][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.142636][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  161.168057][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.185031][ T7276] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  161.216168][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.222749][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  161.273891][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.290740][ T7276] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.1133: mark_inode_dirty error
[  161.316240][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.342588][ T7276] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  161.362915][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.410609][ T7276] EXT4-fs (loop2): 1 truncate cleaned up
[  161.418012][ T7276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  161.454134][ T7276] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.554733][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  161.594292][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.600968][ T7276] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #16: comm syz.2.1133: mark_inode_dirty error
[  161.652002][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.659125][ T7291] loop3: detected capacity change from 0 to 32768
[  161.669059][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  161.721791][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.733743][ T7276] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1133: mark_inode_dirty error
[  161.762318][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.762405][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'.
[  161.772536][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  161.791465][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.822922][ T7276] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1133: mark_inode_dirty error
[  161.856330][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.863004][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1133: corrupted inode contents
[  161.875433][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.882024][ T7276] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.1133: mark_inode_dirty error
[  161.897495][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  161.911541][ T7276] EXT4-fs error (device loop2) in ext4_setattr:5657: Corrupt filesystem
[  161.920565][ T7319] CIFS mount error: No usable UNC path provided in device string!
[  161.920565][ T7319] 
[  161.931545][ T7319] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  161.940576][ T7276] EXT4-fs (loop2): Remounting filesystem read-only
[  162.070676][ T7325] loop0: detected capacity change from 0 to 1024
[  162.209334][   T11] hfsplus: b-tree write err: -5, ino 8
[  162.309437][ T7313] loop1: detected capacity change from 0 to 40427
[  162.349196][ T7313] F2FS-fs (loop1): invalid crc value
[  162.375400][ T7313] F2FS-fs (loop1): Found nat_bits in checkpoint
[  162.442889][ T7313] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  162.474916][ T7313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  162.564978][ T4302] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  162.585878][ T4302] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 1
[  162.870279][ T7355] loop4: detected capacity change from 0 to 512
[  162.888437][ T7355] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  162.914059][ T7355] EXT4-fs (loop4): invalid journal inode
[  162.928424][ T7355] EXT4-fs (loop4): can't get journal size
[  162.957524][ T7355] EXT4-fs (loop4): 1 truncate cleaned up
[  162.983628][ T7355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  163.063056][ T4256] EXT4-fs (loop4): unmounting filesystem.
[  163.223193][ T7340] loop3: detected capacity change from 0 to 40427
[  163.253994][ T7340] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  163.280118][ T7362] loop1: detected capacity change from 0 to 4096
[  163.286654][ T7340] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  163.308669][ T7362] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  163.341215][ T7340] F2FS-fs (loop3): Found nat_bits in checkpoint
[  163.388965][ T7351] loop0: detected capacity change from 0 to 32768
[  163.398611][ T7351] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.1164 (7351)
[  163.418236][ T7362] ntfs: volume version 3.1.
[  163.423416][ T7351] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  163.440793][ T7351] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  163.444527][ T7353] loop2: detected capacity change from 0 to 32768
[  163.451687][ T7351] BTRFS info (device loop0): using free space tree
[  163.467399][ T7340] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  163.478189][ T7340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  163.495215][ T7353] XFS (loop2): Mounting V5 Filesystem
[  163.553257][ T7351] BTRFS info (device loop0): enabling ssd optimizations
[  163.561452][ T4312] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  163.583270][ T7353] XFS (loop2): Ending clean mount
[  163.601076][ T7353] XFS (loop2): Quotacheck needed: Please wait.
[  163.626810][ T4258] syz-executor: attempt to access beyond end of device
[  163.626810][ T4258] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.680724][ T4250] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  163.726990][ T7353] XFS (loop2): Quotacheck: Done.
[  163.899572][ T7395] loop1: detected capacity change from 0 to 2048
[  164.035578][ T7395] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002]
[  164.071351][ T7395] System zones: 0-4
[  164.089144][ T4253] XFS (loop2): Unmounting Filesystem
[  164.114791][ T7395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  164.123328][ T7395] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.336157][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  164.524045][ T7393] loop4: detected capacity change from 0 to 131072
[  164.533104][ T7393] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9)
[  164.542088][ T7393] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  164.569049][ T7393] F2FS-fs (loop4): invalid crc value
[  164.576830][ T7393] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  164.656507][ T7393] F2FS-fs (loop4): recover fsync data on readonly fs
[  164.663273][ T7393] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  164.695518][ T7393] F2FS-fs (loop4): Bad quota inode 2:50331648
[  164.701637][ T7393] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  164.712558][ T7393] F2FS-fs (loop4): Cannot turn on quota_ino: -22
[  164.728498][ T7393] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30
[  164.735816][ T7393] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b
[  164.837257][ T7401] loop3: detected capacity change from 0 to 32768
[  164.898956][ T7401] o2cb: This node has not been configured.
[  164.904893][ T7401] o2cb: Cluster check failed. Fix errors before retrying.
[  164.912056][ T7401] (syz.3.1173,7401,0):ocfs2_dlm_init:3356 ERROR: status = -22
[  164.919991][ T7401] (syz.3.1173,7401,0):ocfs2_mount_volume:1792 ERROR: status = -22
[  164.929664][ T7401] (syz.3.1173,7401,0):ocfs2_fill_super:1176 ERROR: status = -22
[  165.053357][   T26] audit: type=1326 audit(1749861142.916:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  165.141000][   T26] audit: type=1326 audit(1749861142.916:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  165.203933][   T26] audit: type=1326 audit(1749861142.916:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  165.289625][   T26] audit: type=1326 audit(1749861142.916:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  165.324792][   T26] audit: type=1326 audit(1749861142.916:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  165.394725][ T7417] loop2: detected capacity change from 0 to 4096
[  165.437915][ T7417] ntfs: volume version 3.1.
[  165.566920][ T7426] loop0: detected capacity change from 0 to 1024
[  165.612158][ T7426] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #3: block 2: comm syz.0.1184: lblock 2 mapped to illegal pblock 2 (length 1)
[  165.633694][ T7426] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1184: Failed to acquire dquot type 0
[  165.654078][ T7426] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.1184: lblock 2 mapped to illegal pblock 2 (length 1)
[  165.678419][ T7426] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1184: Failed to acquire dquot type 0
[  165.704386][ T7426] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.1184: Freeing blocks not in datazone - block = 0, count = 4096
[  165.752699][ T7426] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.1184: lblock 2 mapped to illegal pblock 2 (length 1)
[  165.794425][ T7437] devtmpfs: Unknown parameter 'posixacl'
[  165.844134][ T7426] __quota_error: 12 callbacks suppressed
[  165.844151][ T7426] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  165.890360][ T7426] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1184: Failed to acquire dquot type 0
[  165.935876][ T7426] EXT4-fs (loop0): 1 orphan inode deleted
[  165.941664][ T7426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  166.069689][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  166.241777][ T7455] loop4: detected capacity change from 0 to 1024
[  166.260978][ T7455] hfsplus: bad catalog entry type
[  166.282859][   T46] hfsplus: b-tree write err: -5, ino 4
[  166.402517][ T7467] loop0: detected capacity change from 0 to 1024
[  166.455999][   T41] hfsplus: b-tree write err: -5, ino 4
[  166.505339][   T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  166.512979][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  166.524560][   T26] audit: type=1326 audit(1749861144.396:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.552943][   T26] audit: type=1326 audit(1749861144.396:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.578675][   T26] audit: type=1326 audit(1749861144.396:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.601421][   T26] audit: type=1326 audit(1749861144.426:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.624157][   T26] audit: type=1326 audit(1749861144.446:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4451fc11e5 code=0x7ffc0000
[  166.647589][   T26] audit: type=1326 audit(1749861144.466:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.670935][   T26] audit: type=1326 audit(1749861144.516:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.726639][   T26] audit: type=1326 audit(1749861144.596:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.753591][   T26] audit: type=1326 audit(1749861144.616:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4451f8e929 code=0x7ffc0000
[  166.777021][    T7] usb 3-1: Using ep0 maxpacket: 16
[  166.788451][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.801213][   T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.815304][    T7] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.826346][   T14] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  166.835784][    T7] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.845746][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.853839][    T7] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.867166][    T7] usb 3-1: config 0 interface 0 has no altsetting 0
[  166.874540][   T14] usb 2-1: config 0 descriptor??
[  166.879629][    T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0011, bcdDevice= 0.00
[  166.889130][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.900767][    T7] usb 3-1: config 0 descriptor??
[  166.973913][ T4389] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  167.165429][ T4389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.181121][ T4389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.192129][ T4389] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  167.205915][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.217498][ T4389] usb 5-1: config 0 descriptor??
[  167.259698][ T7486] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  167.305909][   T14] ortek 0003:1223:3F07.0014: Fixing up logical maximum in report descriptor (Ortek)
[  167.320188][    T7] wacom 0003:056A:0011.0015: Unknown device_type for 'HID 056a:0011'. Assuming pen.
[  167.330267][   T14] ortek 0003:1223:3F07.0014: unknown main item tag 0x6
[  167.338850][   T14] ortek 0003:1223:3F07.0014: report_id 29495 is invalid
[  167.346140][    T7] wacom 0003:056A:0011.0015: hidraw0: USB HID v0.00 Device [HID 056a:0011] on usb-dummy_hcd.2-1/input0
[  167.358637][    T7] input: Wacom Graphire2 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0011.0015/input/input12
[  167.371178][   T14] ortek 0003:1223:3F07.0014: item 0 2 1 8 parsing failed
[  167.379023][   T14] ortek: probe of 0003:1223:3F07.0014 failed with error -22
[  167.393935][ T5538] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  167.441001][ T7490] loop3: detected capacity change from 0 to 512
[  167.448234][ T7490] EXT4-fs: Ignoring removed orlov option
[  167.454831][ T7490] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  167.471769][ T7490] EXT4-fs (loop3): 1 truncate cleaned up
[  167.478411][ T7490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  167.522571][   T27] usb 2-1: USB disconnect, device number 9
[  167.539705][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  167.548209][    T7] usb 3-1: USB disconnect, device number 8
[  167.575231][ T5538] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  167.586767][ T5538] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.601028][ T5538] usb 1-1: config 0 interface 0 has no altsetting 0
[  167.608624][ T5538] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  167.618066][ T5538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.632204][ T5538] usb 1-1: config 0 descriptor??
[  167.639972][ T4389] samsung 0003:0419:0600.0016: unknown main item tag 0x0
[  167.647421][ T4389] samsung 0003:0419:0600.0016: unknown main item tag 0x0
[  167.655653][ T7482] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  167.667662][ T4389] samsung 0003:0419:0600.0016: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0
[  167.858626][   T27] usb 5-1: USB disconnect, device number 6
[  168.075558][ T5538] lenovo 0003:17EF:6067.0017: hidraw0: USB HID v1.03 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0
[  168.252192][ T7507] loop3: detected capacity change from 0 to 40427
[  168.270596][ T7507] F2FS-fs (loop3): Invalid log sectors per block(0) log sectorsize(9)
[  168.292940][ T4483] usb 1-1: USB disconnect, device number 6
[  168.293934][ T7507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  168.322084][ T7507] F2FS-fs (loop3): invalid crc value
[  168.329543][ T7507] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  168.426465][ T7507] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  168.440912][ T7507] F2FS-fs (loop3): Start checkpoint disabled!
[  168.485566][ T7507] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  168.492744][ T7507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  168.514526][ T7527] program syz.1.1230 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.690405][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  169.160235][ T7555] netlink: 'syz.1.1255': attribute type 4 has an invalid length.
[  169.209806][ T7555] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1255'.
[  169.255086][ T7563] netlink: 'syz.0.1249': attribute type 4 has an invalid length.
[  169.262967][ T7563] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1249'.
[  169.310857][ T7563] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  169.574957][ T7575] netlink: 'syz.3.1253': attribute type 1 has an invalid length.
[  169.680813][ T7580] x_tables: ip_tables: udp match: only valid for protocol 17
[  169.978140][    T7] kernel write not supported for file /sysvipc/msg (pid: 7 comm: kworker/0:0)
[  170.081047][ T7559] loop4: detected capacity change from 0 to 40427
[  170.099273][ T7559] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  170.120635][ T7559] F2FS-fs (loop4): invalid crc value
[  170.160593][ T7559] F2FS-fs (loop4): Found nat_bits in checkpoint
[  170.168632][ T7596] loop2: detected capacity change from 0 to 8192
[  170.252975][ T7559] F2FS-fs (loop4): Start checkpoint disabled!
[  170.261345][ T7559] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  170.296375][ T7608] loop1: detected capacity change from 0 to 16
[  170.314761][ T7559] syz.4.1248: attempt to access beyond end of device
[  170.314761][ T7559] loop4: rw=524288, sector=45072, nr_sectors = 24 limit=40427
[  170.329137][ T7608] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  170.338232][ T7559] syz.4.1248: attempt to access beyond end of device
[  170.338232][ T7559] loop4: rw=0, sector=45072, nr_sectors = 8 limit=40427
[  170.405202][ T7612] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1272'.
[  170.464758][ T7612] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1272'.
[  170.592470][ T7620] loop3: detected capacity change from 0 to 256
[  170.638334][ T7620] FAT-fs (loop3): Directory bread(block 64) failed
[  170.653887][ T7620] FAT-fs (loop3): Directory bread(block 65) failed
[  170.660548][ T7620] FAT-fs (loop3): Directory bread(block 66) failed
[  170.683920][ T7620] FAT-fs (loop3): Directory bread(block 67) failed
[  170.690567][ T7620] FAT-fs (loop3): Directory bread(block 68) failed
[  170.732113][ T7620] FAT-fs (loop3): Directory bread(block 69) failed
[  170.758781][ T7620] FAT-fs (loop3): Directory bread(block 70) failed
[  170.770905][ T7620] FAT-fs (loop3): Directory bread(block 71) failed
[  170.819873][ T7620] FAT-fs (loop3): Directory bread(block 72) failed
[  170.826885][ T7620] FAT-fs (loop3): Directory bread(block 73) failed
[  171.059036][ T7632] loop1: detected capacity change from 0 to 4096
[  171.086821][ T7639] MTD: Couldn't look up 'memory.events': -15
[  171.107016][ T7640] netlink: 'syz.3.1282': attribute type 10 has an invalid length.
[  171.170685][ T7632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  171.191115][ T7648] netlink: 'syz.2.1287': attribute type 1 has an invalid length.
[  171.204272][ T7646] netlink: 'syz.3.1288': attribute type 1 has an invalid length.
[  171.248106][ T7632] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  171.254111][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'.
[  171.349893][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  171.484017][ T7659] xt_hashlimit: max too large, truncated to 1048576
[  171.496147][ T7662] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1293'.
[  171.517589][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'.
[  171.522181][ T7666] loop4: detected capacity change from 0 to 256
[  171.580588][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  171.580603][   T26] audit: type=1800 audit(1749861149.446:85): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1297" name="file1" dev="loop4" ino=1048724 res=0 errno=0
[  171.614669][ T7666] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  171.633714][ T7666] FAT-fs (loop4): Filesystem has been set read-only
[  171.749194][ T7668] loop1: detected capacity change from 0 to 8192
[  171.777567][ T7668] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  171.790912][ T7668] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  171.806316][ T7668] REISERFS (device loop1): using ordered data mode
[  171.812958][ T7668] reiserfs: using flush barriers
[  171.833918][ T7668] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  171.870922][ T7668] REISERFS (device loop1): checking transaction log (loop1)
[  171.887038][ T7668] REISERFS (device loop1): Using r5 hash to sort names
[  171.900757][ T7668] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  171.914996][ T7668] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  172.056507][ T7681] nbd: must specify a device to reconfigure
[  172.371332][ T7691] loop0: detected capacity change from 0 to 128
[  172.413360][ T7672] loop2: detected capacity change from 0 to 32768
[  172.422178][ T7674] loop3: detected capacity change from 0 to 32768
[  172.469778][ T7672] XFS (loop2): Mounting V5 Filesystem
[  172.474077][ T7674] XFS (loop3): Mounting V5 Filesystem
[  172.513566][ T7704] loop0: detected capacity change from 0 to 2048
[  172.529806][ T7674] XFS (loop3): Ending clean mount
[  172.537640][ T7674] XFS (loop3): Quotacheck needed: Please wait.
[  172.551777][ T7704] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  172.556588][   T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  172.577613][ T7704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.617064][ T7685] loop1: detected capacity change from 0 to 32768
[  172.627986][ T7674] XFS (loop3): Quotacheck: Done.
[  172.644117][ T7685] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1305 (7685)
[  172.663967][ T7672] XFS (loop2): Ending clean mount
[  172.672563][ T7685] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  172.690465][ T7685] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  172.700408][ T7685] BTRFS info (device loop1): force zlib compression, level 3
[  172.719269][ T7685] BTRFS info (device loop1): force clearing of disk cache
[  172.731438][ T4258] XFS (loop3): Unmounting Filesystem
[  172.760420][ T4253] XFS (loop2): Unmounting Filesystem
[  172.774186][   T27] usb 5-1: Using ep0 maxpacket: 16
[  172.779043][ T7685] BTRFS info (device loop1): setting nodatasum
[  172.784457][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.796785][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.806940][ T7685] BTRFS info (device loop1): allowing degraded mounts
[  172.818645][ T7685] BTRFS info (device loop1): enabling disk space caching
[  172.825889][   T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  172.838936][ T7685] BTRFS info (device loop1): disk space caching is enabled
[  172.846358][   T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  172.856455][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.892800][   T27] usb 5-1: config 0 descriptor??
[  173.047171][ T7685] BTRFS info (device loop1): rebuilding free space tree
[  173.079597][ T7685] BTRFS info (device loop1): disabling free space tree
[  173.109183][ T7685] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  173.128539][ T7685] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  173.231477][ T7685] BTRFS info (device loop1): balance: start -d -m
[  173.265460][ T7685] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  173.315889][   T27] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  173.325629][ T7685] BTRFS info (device loop1): balance: canceled
[  173.333547][   T27] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  173.349128][   T27] microsoft 0003:045E:07DA.0018: No inputs registered, leaving
[  173.367301][   T27] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  173.403869][   T27] microsoft 0003:045E:07DA.0018: no inputs found
[  173.417879][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'.
[  173.428149][   T27] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway
[  173.455010][ T4255] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  173.580839][ T7750] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  173.696499][   T22] usb 5-1: USB disconnect, device number 7
[  174.199634][ T7782] loop1: detected capacity change from 0 to 64
[  174.558601][ T7774] loop0: detected capacity change from 0 to 32768
[  174.601636][ T7796] loop1: detected capacity change from 0 to 1764
[  174.642798][ T7774] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  174.813346][ T7794] loop4: detected capacity change from 0 to 32768
[  174.831646][ T4250] ocfs2: Unmounting device (7,0) on (node local)
[  174.930193][ T7802] hugetlbfs: Bad value 't' for mount option 'size'
[  174.930193][ T7802] 
[  175.221347][ T7785] loop2: detected capacity change from 0 to 40427
[  175.255976][ T7785] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[  175.300906][ T7798] loop3: detected capacity change from 0 to 32768
[  175.301089][ T7785] F2FS-fs (loop2): invalid crc value
[  175.347386][ T7785] F2FS-fs (loop2): Found nat_bits in checkpoint
[  175.367024][ T7798] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  175.416967][ T7785] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  175.531760][ T4258] ocfs2: Unmounting device (7,3) on (node local)
[  175.631353][ T7804] loop1: detected capacity change from 0 to 32768
[  175.649152][ T4253] syz-executor: attempt to access beyond end of device
[  175.649152][ T4253] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.670495][ T7804] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1347 (7804)
[  175.697303][ T7804] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  175.719108][ T7804] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  175.756946][ T7804] BTRFS info (device loop1): using free space tree
[  175.862931][ T7808] loop4: detected capacity change from 0 to 32768
[  175.931358][ T7808] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  176.002137][ T7804] BTRFS info (device loop1): enabling ssd optimizations
[  176.012218][ T7848] loop3: detected capacity change from 0 to 16
[  176.028658][ T7848] erofs: (device loop3): mounted with root inode @ nid 36.
[  176.074631][ T7848] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36
[  176.109591][ T7848] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36
[  176.151123][ T4256] ocfs2: Unmounting device (7,4) on (node local)
[  176.158779][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1358'.
[  176.162639][ T7848] syz.3.1355: attempt to access beyond end of device
[  176.162639][ T7848] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16
[  176.180499][ T7854] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1357'.
[  176.201472][ T4255] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  176.204279][ T7848] syz.3.1355: attempt to access beyond end of device
[  176.204279][ T7848] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  176.230575][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'.
[  176.255263][ T7854] tipc: MTU too low for tipc bearer
[  176.356194][ T7856] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1361'.
[  176.396154][ T7848] syz.3.1355: attempt to access beyond end of device
[  176.396154][ T7848] loop3: rw=524288, sector=67108880, nr_sectors = 16 limit=16
[  176.644339][ T7861] loop2: detected capacity change from 0 to 2048
[  176.684807][ T7861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.852847][ T7877] loop2: detected capacity change from 0 to 1024
[  176.859463][ T4387] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  176.886576][ T7877] hfsplus: found bad thread record in catalog
[  176.892853][ T7877] hfsplus: catalog searching failed
[  176.936652][ T4312] hfsplus: b-tree write err: -5, ino 4
[  176.993313][ T7868] loop1: detected capacity change from 0 to 32768
[  177.001596][ T7879] loop3: detected capacity change from 0 to 16
[  177.015888][ T7879] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  177.031133][ T7879] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[  177.041813][ T7879] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[  177.046919][ T4387] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  177.063728][ T7879] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 58320
[  177.078403][ T4387] usb 5-1: config 0 interface 0 has no altsetting 0
[  177.085293][ T4387] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  177.094552][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.104161][ T4387] usb 5-1: config 0 descriptor??
[  177.109886][ T7864] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.224763][ T7883] loop3: detected capacity change from 0 to 2048
[  177.235577][ T7883] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  177.252270][ T7886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.483922][ T4385] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  177.536115][ T4387] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0
[  177.543583][ T4387] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0
[  177.561098][ T4387] konepure 0003:1E7D:2DBE.0019: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0
[  177.681147][ T4385] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[  177.693583][ T4385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  177.710734][ T4385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.732626][ T4385] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  177.758981][ T4385] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  177.768589][ T4385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.783401][ T4385] usb 2-1: config 0 descriptor??
[  177.793224][ T4387] usb 5-1: USB disconnect, device number 8
[  177.899766][ T7894] loop3: detected capacity change from 0 to 40427
[  177.917423][ T7894] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  177.933919][ T7894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  177.956270][ T7894] F2FS-fs (loop3): invalid crc value
[  177.979941][ T7907] program syz.0.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  177.996388][ T7894] F2FS-fs (loop3): Found nat_bits in checkpoint
[  178.076213][ T7894] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  178.083308][ T7894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  178.207340][ T7913] loop0: detected capacity change from 0 to 64
[  178.216336][ T4385] waltop 0003:172F:0502.001A: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.1-1/input0
[  178.368557][ T7903] loop2: detected capacity change from 0 to 32768
[  178.420148][ T4385] usb 2-1: USB disconnect, device number 10
[  178.776995][ T7929] loop3: detected capacity change from 0 to 64
[  179.045812][ T7944] loop4: detected capacity change from 0 to 2048
[  179.057662][ T7945] loop1: detected capacity change from 0 to 1024
[  179.094303][ T7944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  179.153856][ T4385] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  179.190785][ T4302] hfsplus: b-tree write err: -5, ino 4
[  179.292924][ T4256] EXT4-fs (loop4): unmounting filesystem.
[  179.300155][ T7953] dlm: non-version read from control device 2
[  179.343963][ T4385] usb 3-1: Using ep0 maxpacket: 32
[  179.350672][ T4385] usb 3-1: config 0 interface 0 has no altsetting 0
[  179.367623][ T4385] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  179.381387][ T7937] loop0: detected capacity change from 0 to 32768
[  179.386170][ T4385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.401876][ T7937] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  179.432832][ T7937] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  179.433941][ T4385] usb 3-1: Product: syz
[  179.453940][ T4385] usb 3-1: Manufacturer: syz
[  179.460098][ T7937] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  179.460098][ T7937]   inode = 1 19
[  179.460098][ T7937]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  179.473937][ T4385] usb 3-1: SerialNumber: syz
[  179.493966][ T4385] usb 3-1: config 0 descriptor??
[  179.509307][ T7937] gfs2: fsid=syz:syz.0: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  179.537618][ T7937] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  179.567398][ T7937] gfs2: fsid=syz:syz.0:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  179.596402][ T7959] loop4: detected capacity change from 0 to 1024
[  179.596868][ T7937] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  179.605327][ T7959] hfsplus: gid requires an argument
[  179.622467][ T7937] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  179.624046][ T7959] hfsplus: unable to parse mount options
[  179.636857][ T7937] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  179.643571][ T7937] gfs2: fsid=syz:syz.0: File system withdrawn
[  179.651632][ T7937] CPU: 0 PID: 7937 Comm: syz.0.1394 Not tainted 6.1.141-syzkaller #0
[  179.659726][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  179.669893][ T7937] Call Trace:
[  179.673187][ T7937]  <TASK>
[  179.676134][ T7937]  dump_stack_lvl+0x168/0x22e
[  179.680848][ T7937]  ? kobject_uevent_env+0x35f/0x8a0
[  179.686084][ T7937]  ? show_regs_print_info+0x12/0x12
[  179.691314][ T7937]  ? load_image+0x3b0/0x3b0
[  179.695839][ T7937]  ? kobject_uevent_env+0x35f/0x8a0
[  179.701062][ T7937]  gfs2_withdraw+0x143f/0x1780
[  179.705864][ T7937]  ? gfs2_lm+0x220/0x220
[  179.710138][ T7937]  ? make_kgid+0x1aa/0x640
[  179.714588][ T7937]  ? from_kuid_munged+0x690/0x690
[  179.719634][ T7937]  ? gfs2_consist_inode_i+0xf1/0x110
[  179.724940][ T7937]  gfs2_inode_refresh+0xb5e/0xfc0
[  179.730007][ T7937]  ? gfs2_inode_metasync+0xf0/0xf0
[  179.735140][ T7937]  ? gfs2_glock_nq+0xcf0/0x14e0
[  179.740016][ T7937]  gfs2_instantiate+0x15e/0x210
[  179.744885][ T7937]  gfs2_glock_wait+0x1d0/0x2a0
[  179.749675][ T7937]  init_journal+0xc77/0x2300
[  179.754305][ T7937]  ? format_decode+0xb3b/0x1330
[  179.759195][ T7937]  ? init_inodes+0xdb/0x320
[  179.763746][ T7937]  ? _compound_head+0x120/0x120
[  179.768632][ T7937]  ? vsnprintf+0x1905/0x1a00
[  179.773257][ T7937]  ? snprintf+0xd7/0x120
[  179.777528][ T7937]  ? init_inodes+0xdb/0x320
[  179.782064][ T7937]  ? vscnprintf+0x80/0x80
[  179.786429][ T7937]  ? gfs2_glock_nq_num+0x17f/0x1c0
[  179.791603][ T7937]  init_inodes+0xdb/0x320
[  179.795976][ T7937]  gfs2_fill_super+0x1718/0x1f80
[  179.800954][ T7937]  ? gfs2_reconfigure+0xcd0/0xcd0
[  179.806018][ T7937]  ? init_locking+0xb8/0x200
[  179.810643][ T7937]  ? sb_set_blocksize+0xa5/0xe0
[  179.815530][ T7937]  get_tree_bdev+0x3f1/0x610
[  179.820153][ T7937]  ? gfs2_reconfigure+0xcd0/0xcd0
[  179.825203][ T7937]  gfs2_get_tree+0x4d/0x1e0
[  179.829754][ T7937]  vfs_get_tree+0x88/0x270
[  179.834217][ T7937]  do_new_mount+0x24a/0xa40
[  179.838749][ T7937]  __se_sys_mount+0x2d6/0x3c0
[  179.843439][ T7937]  ? __x64_sys_mount+0xc0/0xc0
[  179.848231][ T7937]  ? lockdep_hardirqs_on+0x94/0x140
[  179.853450][ T7937]  ? __x64_sys_mount+0x1c/0xc0
[  179.858238][ T7937]  do_syscall_64+0x4c/0xa0
[  179.862705][ T7937]  ? clear_bhb_loop+0x60/0xb0
[  179.867396][ T7937]  ? clear_bhb_loop+0x60/0xb0
[  179.872090][ T7937]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  179.878012][ T7937] RIP: 0033:0x7f4451f900ca
[  179.882433][ T7937] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.902053][ T7937] RSP: 002b:00007f4452e59e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  179.910500][ T7937] RAX: ffffffffffffffda RBX: 00007f4452e59ef0 RCX: 00007f4451f900ca
[  179.912652][ T4385] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  179.918482][ T7937] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 00007f4452e59eb0
[  179.918502][ T7937] RBP: 0000200000000000 R08: 00007f4452e59ef0 R09: 0000000000008859
[  179.918518][ T7937] R10: 0000000000008859 R11: 0000000000000246 R12: 0000200000000140
[  179.918532][ T7937] R13: 00007f4452e59eb0 R14: 0000000000012789 R15: 0000200000000440
[  179.918583][ T7937]  </TASK>
[  179.932746][ T7937] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  180.113591][ T4385] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  180.122230][ T7971] sp0: Synchronizing with TNC
[  180.127070][ T4385] gs_usb: probe of 3-1:0.0 failed with error -71
[  180.155457][ T4385] usb 3-1: USB disconnect, device number 9
[  180.492771][ T7987] netlink: 'syz.4.1417': attribute type 3 has an invalid length.
[  180.545612][ T7969] loop1: detected capacity change from 0 to 32768
[  180.565512][ T7969] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1420 (7969)
[  180.600228][ T7969] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  180.602559][ T7989] loop4: detected capacity change from 0 to 4096
[  180.610523][ T7969] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  180.610574][ T7969] BTRFS info (device loop1): using free space tree
[  180.667145][ T7989] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  180.723940][ T4385] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  180.738242][ T7969] BTRFS info (device loop1): enabling ssd optimizations
[  180.810861][ T4255] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  180.834663][ T7991] loop3: detected capacity change from 0 to 32768
[  180.848883][ T7991] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1419 (7991)
[  180.876852][ T7991] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.887132][ T7991] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  180.895916][ T7991] BTRFS info (device loop3): enabling auto defrag
[  180.902370][ T7991] BTRFS info (device loop3): doing ref verification
[  180.909029][ T7991] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  180.919701][ T7991] BTRFS info (device loop3): trying to use backup root at mount time
[  180.927876][ T7991] BTRFS info (device loop3): max_inline at 4096
[  180.929661][ T4385] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 199, using maximum allowed: 30
[  180.934271][ T7991] BTRFS info (device loop3): enabling ssd optimizations
[  180.952354][ T7991] BTRFS info (device loop3): using spread ssd allocation scheme
[  180.960076][ T7991] BTRFS info (device loop3): using free space tree
[  180.987776][ T4385] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.014856][ T4385] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 199
[  181.041187][ T4385] usb 1-1: config 0 interface 0 has no altsetting 0
[  181.052892][ T4385] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  181.062268][ T4385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.072028][ T4385] usb 1-1: config 0 descriptor??
[  181.072997][   T46] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0x600fa3b1bb0a61280b917c5e63cfb6d5f3303add0c7f49b39e428b009781bffd found 0xb0ae585742fb9a2192b73126353536d44c8d8b30f3bbebc2f2fc1c9093110d91 level 0
[  181.100715][ T7991] BTRFS error (device loop3): failed to load root extent
[  181.107922][ T7991] BTRFS warning (device loop3): try to load backup roots slot 1
[  181.125370][   T46] BTRFS warning (device loop3): checksum verify failed on logical 5320704 mirror 1 wanted 0x3a96b260394a7399f18798ce453684459093f28a490b1793d7ea697f0b0df10a found 0x7f01c4af1fb2152f3830c55a52923d68d0275fe73b6fa7c7a1e3d865522068d9 level 0
[  181.205026][ T7991] BTRFS error (device loop3): failed to load root free space
[  181.212515][ T7991] BTRFS warning (device loop3): try to load backup roots slot 2
[  181.220881][ T7991] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  181.232814][ T7991] BTRFS warning (device loop3): couldn't read tree root
[  181.239922][ T7991] BTRFS warning (device loop3): try to load backup roots slot 3
[  181.248284][ T4312] BTRFS warning (device loop3): checksum verify failed on logical 5242880 mirror 1 wanted 0x8d90b910ec13d95ec17ddbe87d1d5dca5d3dff1259e90cf51f7cd4ff39170caa found 0xa210a3171865c86c83c6902dcf663f66ee92d8210dba1b42a2170ab2de4331e8 level 0
[  181.283926][ T7991] BTRFS warning (device loop3): couldn't read tree root
[  181.356681][ T7991] BTRFS error (device loop3): open_ctree failed: -22
[  181.498684][ T8033] loop4: detected capacity change from 0 to 256
[  181.519367][ T8033] exfat: Deprecated parameter 'utf8'
[  181.530373][ T8033] exfat: Deprecated parameter 'namecase'
[  181.542148][ T8033] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22c3df5e, utbl_chksum : 0xe619d30d)
[  181.608106][ T4385] kye 0003:0458:5010.001B: hidraw0: USB HID v10.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  181.653894][ T4385] kye 0003:0458:5010.001B: tablet-enabling feature report not found
[  181.685599][ T4385] kye 0003:0458:5010.001B: tablet enabling failed
[  181.706523][ T8039] loop1: detected capacity change from 0 to 256
[  181.759660][ T8039] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  181.830302][ T4385] usb 1-1: USB disconnect, device number 7
[  182.201933][ T8062] loop2: detected capacity change from 0 to 4096
[  182.219392][ T8067] loop4: detected capacity change from 0 to 1024
[  182.222648][ T8062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  182.266443][ T8062] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.1438: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  182.287319][ T8062] EXT4-fs (loop2): Remounting filesystem read-only
[  182.298508][ T8062] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.1438: directory missing '..'
[  182.316946][ T4312] hfsplus: b-tree write err: -5, ino 4
[  182.344148][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  182.442951][ T8075] loop4: detected capacity change from 0 to 256
[  182.454039][ T4480] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  182.458439][ T8075] exfat: Deprecated parameter 'namecase'
[  182.480026][ T8075] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  182.523569][ T8081] loop1: detected capacity change from 0 to 128
[  182.531375][ T8080] loop2: detected capacity change from 0 to 512
[  182.548943][ T8081] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  182.576186][ T8080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  182.585855][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'.
[  182.604219][ T8080] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.615298][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'.
[  182.661140][ T4480] usb 4-1: too many endpoints for config 0 interface 0 altsetting 14: 69, using maximum allowed: 30
[  182.672675][ T8080] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.1444: invalid size
[  182.703574][ T4480] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.746143][ T4480] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x2 has invalid maxpacket 3487, setting to 64
[  182.784020][ T4480] usb 4-1: config 0 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 69
[  182.818255][ T4480] usb 4-1: config 0 interface 0 has no altsetting 0
[  182.826051][ T4480] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  182.835841][ T4480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.853146][ T4480] usb 4-1: config 0 descriptor??
[  182.854524][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  182.861226][ T8064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  183.076781][ T8091] loop2: detected capacity change from 0 to 4096
[  183.122472][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  183.138098][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  183.158001][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  183.171225][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[  183.193978][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00
[  183.194016][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00
[  183.194047][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00
[  183.194075][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00
[  183.194126][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00
[  183.194155][ T8091] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00
[  183.255084][ T8101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1456'.
[  183.309863][ T4480] macally 0003:060B:0001.001C: hidraw0: USB HID v0.c4 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0
[  183.510968][ T8109] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1459'.
[  183.541447][ T4480] usb 4-1: USB disconnect, device number 11
[  183.554303][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'.
[  183.786841][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1471'.
[  183.815692][ T8125] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1471'.
[  183.962129][ T8139] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  184.106960][ T4480] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  184.214051][ T4481] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  184.298253][ T4480] usb 3-1: Using ep0 maxpacket: 16
[  184.307456][ T4480] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  184.321190][ T4480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.337706][ T4480] usb 3-1: config 0 descriptor??
[  184.413976][ T4481] usb 2-1: Using ep0 maxpacket: 16
[  184.427446][ T4481] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  184.447040][ T4481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.481680][ T4481] usb 2-1: config 0 descriptor??
[  184.550397][ T8152] loop4: detected capacity change from 0 to 32768
[  184.561022][ T8152] XFS: ikeep mount option is deprecated.
[  184.566924][ T8152] XFS: attr2 mount option is deprecated.
[  184.582899][ T8152] XFS (loop4): Mounting V5 Filesystem
[  184.630512][ T8152] XFS (loop4): Ending clean mount
[  184.668270][ T4256] XFS (loop4): Unmounting Filesystem
[  184.760359][ T4480] elecom 0003:056E:011C.001D: item fetching failed at offset 2/5
[  184.783408][ T4480] elecom: probe of 0003:056E:011C.001D failed with error -22
[  184.809287][ T8168] loop3: detected capacity change from 0 to 512
[  184.851209][ T8168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  184.895337][ T4481] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0
[  184.902836][ T4481] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0
[  184.910653][ T4481] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0
[  184.918437][ T4481] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0
[  184.926656][ T4481] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0
[  184.937203][ T4481] prodikeys 0003:041E:2801.001E: hidraw0: USB HID v1.01 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0
[  184.969653][ T4481] usb 3-1: USB disconnect, device number 10
[  184.981781][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  185.106055][ T4385] usb 2-1: USB disconnect, device number 11
[  185.438491][ T4300] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  185.488420][ T8202] loop4: detected capacity change from 0 to 4096
[  185.495809][ T8202] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  185.534274][ T8202] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  185.563903][ T8202] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  185.580534][ T8202] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  185.592907][ T8202] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  185.605053][ T8202] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  185.631433][ T8202] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  185.653615][ T8202] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  185.665792][ T4300] usb 1-1: Using ep0 maxpacket: 8
[  185.672636][ T4300] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  185.694282][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.703454][ T8202] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  185.724731][ T4300] usb 1-1: config 0 descriptor??
[  185.730352][ T8202] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr.
[  185.742682][ T8202] ntfs: volume version 3.1.
[  185.859532][ T8212] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1509'.
[  185.905578][ T8214] loop2: detected capacity change from 0 to 2048
[  185.977358][ T8214] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.1508: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  185.996955][ T8219] loop4: detected capacity change from 0 to 256
[  186.004516][ T8219] exfat: Deprecated parameter 'namecase'
[  186.010509][ T8219] exfat: Deprecated parameter 'utf8'
[  186.017144][ T8219] exfat: Deprecated parameter 'utf8'
[  186.029543][ T8214] EXT4-fs (loop2): get root inode failed
[  186.039593][ T8214] EXT4-fs (loop2): mount failed
[  186.072698][ T8219] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[  186.349067][ T4300] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  186.368466][ T4300] asix: probe of 1-1:0.0 failed with error -71
[  186.369041][ T8240] loop2: detected capacity change from 0 to 256
[  186.396265][ T4300] usb 1-1: USB disconnect, device number 8
[  186.412461][ T8240] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  186.461075][ T8236] loop1: detected capacity change from 0 to 4096
[  186.473480][ T8244] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  186.510245][ T8236] ntfs: volume version 3.1.
[  186.572813][ T8248] ubi31: attaching mtd0
[  186.616969][ T8250] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1536'.
[  187.025373][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1538'.
[  187.205841][ T8282] device netdevsim0 entered promiscuous mode
[  187.246959][ T8282] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  187.476891][ T8292] loop3: detected capacity change from 0 to 256
[  187.480676][ T8265] loop2: detected capacity change from 0 to 32768
[  187.510805][ T8294] loop0: detected capacity change from 0 to 256
[  187.520553][ T8294] exfat: Deprecated parameter 'utf8'
[  187.531564][ T8292] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  187.535840][ T8294] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  187.556566][ T8265] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  187.712868][ T4253] ocfs2: Unmounting device (7,2) on (node local)
[  187.811028][ T8304] loop3: detected capacity change from 0 to 1024
[  187.839666][ T8304] EXT4-fs: Ignoring removed nobh option
[  187.859072][ T8304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  187.924743][ T8304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  187.930514][ T8300] loop1: detected capacity change from 0 to 32768
[  188.005468][ T8300] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  188.024235][ T8300] XFS (loop1): Mounting V5 Filesystem
[  188.082076][ T8325] device veth0_to_batadv entered promiscuous mode
[  188.103678][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  188.120049][ T8300] XFS (loop1): Ending clean mount
[  188.127548][ T8325] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  188.147764][ T8327] loop2: detected capacity change from 0 to 1024
[  188.163599][ T8300] XFS (loop1): Quotacheck needed: Please wait.
[  188.209760][ T8300] XFS (loop1): Quotacheck: Done.
[  188.252224][ T8327] hfsplus: can't free extent
[  188.275847][ T8332] hfsplus: can't free extent
[  188.280476][ T8332] hfsplus: can't free extent
[  188.334132][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1560'.
[  188.346268][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1560'.
[  188.358639][ T4255] XFS (loop1): Unmounting Filesystem
[  188.389258][ T8336] netlink: 'syz.4.1562': attribute type 1 has an invalid length.
[  188.531999][ T8340] netlink: 'syz.4.1566': attribute type 10 has an invalid length.
[  188.546381][ T8341] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1563'.
[  188.573869][ T8341] nbd: must specify at least one socket
[  188.638916][ T8340] team0: Port device dummy0 added
[  188.744827][ T8346] loop0: detected capacity change from 0 to 1024
[  188.798411][ T8346] hfsplus: bad catalog entry type
[  188.889516][ T4312] hfsplus: b-tree write err: -5, ino 4
[  188.936881][ T8329] loop3: detected capacity change from 0 to 32768
[  188.964566][ T8329] 
[  188.964566][ T8329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  188.964566][ T8329] 
[  189.001016][ T8329] 
[  189.001016][ T8329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.001016][ T8329] 
[  189.022131][ T8329] 
[  189.022131][ T8329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.022131][ T8329] 
[  189.042677][ T8353] loop2: detected capacity change from 0 to 4096
[  189.043284][ T8329] 
[  189.043284][ T8329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.043284][ T8329] 
[  189.079498][ T8329] 
[  189.079498][ T8329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.079498][ T8329] 
[  189.094505][ T8362] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  189.123452][ T8329] 
[  189.123452][ T8329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.123452][ T8329] 
[  189.164097][ T8363] 
[  189.164097][ T8363]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.164097][ T8363] 
[  189.201402][  T106] 
[  189.201402][  T106]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.201402][  T106] 
[  189.244807][ T8363] 
[  189.244807][ T8363]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.244807][ T8363] 
[  189.368927][ T4258] 
[  189.368927][ T4258]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.368927][ T4258] 
[  189.389793][ T4258] 
[  189.389793][ T4258]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.389793][ T4258] 
[  189.623848][ T4481] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  189.817019][ T4481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  189.840307][ T4481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.860914][ T4481] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  189.877365][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.891255][ T4481] usb 1-1: config 0 descriptor??
[  189.953503][ T8401] loop4: detected capacity change from 0 to 4096
[  189.989746][ T8401] ntfs: volume version 3.1.
[  190.043962][ T4494] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  190.194819][ T8411] loop4: detected capacity change from 0 to 512
[  190.202674][ T8411] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  190.214919][ T8411] EXT4-fs (loop4): orphan cleanup on readonly fs
[  190.222120][ T8411] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  190.236906][ T4300] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  190.245282][ T8411] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  190.253070][ T8411] EXT4-fs (loop4): 1 truncate cleaned up
[  190.255816][ T4494] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.258847][ T8411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  190.278090][ T4494] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  190.288233][ T4494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.298695][ T4494] usb 3-1: config 0 descriptor??
[  190.307442][ T8411] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[  190.307684][ T4481] steelseries_srws1 0003:1038:1410.001F: unbalanced collection at end of report description
[  190.337250][ T4481] steelseries_srws1 0003:1038:1410.001F: parse failed
[  190.344675][ T4481] steelseries_srws1: probe of 0003:1038:1410.001F failed with error -22
[  190.363584][ T4256] EXT4-fs (loop4): unmounting filesystem.
[  190.434004][ T4300] usb 2-1: Using ep0 maxpacket: 8
[  190.440604][ T4300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.460928][ T4300] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  190.474010][ T8414] loop4: detected capacity change from 0 to 4096
[  190.482648][ T4300] usb 2-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83
[  190.492633][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.501206][ T4300] usb 2-1: Product: syz
[  190.505709][ T4300] usb 2-1: Manufacturer: syz
[  190.510330][ T4300] usb 2-1: SerialNumber: syz
[  190.516892][ T4300] usb 2-1: config 0 descriptor??
[  190.522209][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  190.530501][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  190.542635][ T4337] usb 1-1: USB disconnect, device number 9
[  190.551100][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  190.560048][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00
[  190.567998][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00
[  190.576051][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00
[  190.583993][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00
[  190.591889][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00
[  190.599956][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00
[  190.608053][ T8414] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00
[  190.746665][ T4481] usb 3-1: USB disconnect, device number 11
[  190.766840][ T4337] usb 2-1: USB disconnect, device number 12
[  190.979689][ T8416] loop4: detected capacity change from 0 to 32768
[  190.987702][ T8416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1609 (8416)
[  191.002845][ T8416] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.013206][ T8416] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  191.022104][ T8416] BTRFS info (device loop4): setting nodatacow, compression disabled
[  191.030799][ T8416] BTRFS info (device loop4): max_inline at 0
[  191.037164][ T8416] BTRFS info (device loop4): enabling disk space caching
[  191.044517][ T8416] BTRFS info (device loop4): turning off barriers
[  191.051081][ T8416] BTRFS info (device loop4): turning on flush-on-commit
[  191.058263][ T8416] BTRFS info (device loop4): doing ref verification
[  191.065739][ T8416] BTRFS info (device loop4): force clearing of disk cache
[  191.074719][ T8416] BTRFS info (device loop4): enabling ssd optimizations
[  191.081850][ T8416] BTRFS info (device loop4): max_inline at 4096
[  191.088758][ T8416] BTRFS info (device loop4): disk space caching is enabled
[  191.114568][ T8416] BTRFS info (device loop4): rebuilding free space tree
[  191.133740][ T8416] BTRFS info (device loop4): disabling free space tree
[  191.140933][ T8416] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  191.155490][ T8416] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  191.194657][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  191.194670][   T26] audit: type=1800 audit(1749861169.066:86): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1609" name="file1" dev="loop4" ino=260 res=0 errno=0
[  191.221192][    C1] vkms_vblank_simulate: vblank timer overrun
[  191.242747][ T8444] loop0: detected capacity change from 0 to 1024
[  191.255757][ T4256] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.306334][ T8444] hfsplus: bad catalog entry type
[  191.424890][   T41] hfsplus: b-tree write err: -5, ino 4
[  191.527258][ T8452] loop0: detected capacity change from 0 to 256
[  191.559393][ T8452] FAT-fs (loop0): Directory bread(block 64) failed
[  191.571357][ T8452] FAT-fs (loop0): Directory bread(block 65) failed
[  191.578487][ T8452] FAT-fs (loop0): Directory bread(block 66) failed
[  191.589765][ T8452] FAT-fs (loop0): Directory bread(block 67) failed
[  191.596523][ T8452] FAT-fs (loop0): Directory bread(block 68) failed
[  191.603256][ T8452] FAT-fs (loop0): Directory bread(block 69) failed
[  191.615163][ T8452] FAT-fs (loop0): Directory bread(block 70) failed
[  191.621724][ T8452] FAT-fs (loop0): Directory bread(block 71) failed
[  191.635703][ T8452] FAT-fs (loop0): Directory bread(block 72) failed
[  191.642280][ T8452] FAT-fs (loop0): Directory bread(block 73) failed
[  191.877382][ T8455] loop4: detected capacity change from 0 to 32768
[  191.884818][ T8455] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1605 (8455)
[  191.898910][ T8455] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  191.909237][ T8455] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  191.918016][ T8455] BTRFS info (device loop4): using free space tree
[  191.938202][ T8455] BTRFS info (device loop4): enabling ssd optimizations
[  191.958829][   T26] audit: type=1800 audit(1749861169.826:87): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1605" name="bus" dev="loop4" ino=263 res=0 errno=0
[  192.029391][ T4256] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  192.060193][ T8477] loop0: detected capacity change from 0 to 512
[  192.073229][ T8477] EXT4-fs: Ignoring removed nobh option
[  192.112426][ T8480] loop3: detected capacity change from 0 to 4096
[  192.168200][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #3: comm syz.0.1620: corrupted inode contents
[  192.184943][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.191547][ T8477] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #3: comm syz.0.1620: mark_inode_dirty error
[  192.204664][ T8484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.217342][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.234179][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #3: comm syz.0.1620: corrupted inode contents
[  192.267763][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.275620][ T8477] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1620: mark_inode_dirty error
[  192.289408][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.310128][ T8477] Quota error (device loop0): write_blk: dquota write failed
[  192.321483][ T8477] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  192.346566][ T8477] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1620: Failed to acquire dquot type 0
[  192.361383][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.392546][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  192.405321][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.412145][ T8477] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #16: comm syz.0.1620: mark_inode_dirty error
[  192.433869][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.440505][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  192.473338][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.483096][ T8477] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1620: mark_inode_dirty error
[  192.503061][ T8490] loop2: detected capacity change from 0 to 4096
[  192.515785][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.522372][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  192.567940][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.579642][ T8477] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  192.588694][ T8490] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  192.589153][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.607401][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  192.642669][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.656256][ T8477] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.1620: mark_inode_dirty error
[  192.686054][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.701346][   T26] audit: type=1326 audit(1749861170.566:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a898e929 code=0x7ffc0000
[  192.728015][ T8477] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  192.753570][ T8498] loop3: detected capacity change from 0 to 2048
[  192.754293][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  192.784515][   T26] audit: type=1326 audit(1749861170.586:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc1a898e929 code=0x7ffc0000
[  192.805399][ T8496] loop4: detected capacity change from 0 to 4096
[  192.813403][ T8477] EXT4-fs (loop0): 1 truncate cleaned up
[  192.819420][ T8477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  192.831076][ T8477] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.842236][   T26] audit: type=1326 audit(1749861170.586:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1a898e963 code=0x7ffc0000
[  192.868024][ T8498] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  192.882877][ T8496] ntfs: volume version 3.1.
[  192.889339][   T26] audit: type=1326 audit(1749861170.586:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc1a898d3df code=0x7ffc0000
[  192.920682][ T8498] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  192.936089][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  192.964077][   T26] audit: type=1326 audit(1749861170.616:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc1a898e9b7 code=0x7ffc0000
[  192.977556][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  192.986811][   T26] audit: type=1326 audit(1749861170.616:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1a898d290 code=0x7ffc0000
[  193.015444][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.022094][ T8477] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #16: comm syz.0.1620: mark_inode_dirty error
[  193.038515][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.045371][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  193.057892][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.066813][ T8477] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1620: mark_inode_dirty error
[  193.086664][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.093301][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  193.112321][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.134185][ T8477] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1620: mark_inode_dirty error
[  193.149789][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.156522][ T8477] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.1620: corrupted inode contents
[  193.168866][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.176858][ T8477] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.1620: mark_inode_dirty error
[  193.189220][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.196015][ T8477] EXT4-fs error (device loop0) in ext4_setattr:5657: Corrupt filesystem
[  193.205303][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  193.310828][ T8495] loop1: detected capacity change from 0 to 32768
[  193.318384][ T8495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1617 (8495)
[  193.332882][ T8495] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.343263][ T8495] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  193.352157][ T8495] BTRFS info (device loop1): setting nodatacow, compression disabled
[  193.360533][ T8495] BTRFS info (device loop1): max_inline at 0
[  193.366626][ T8495] BTRFS info (device loop1): enabling disk space caching
[  193.373856][ T8495] BTRFS info (device loop1): turning off barriers
[  193.380291][ T8495] BTRFS info (device loop1): turning on flush-on-commit
[  193.387357][ T8495] BTRFS info (device loop1): doing ref verification
[  193.394005][ T8495] BTRFS info (device loop1): force clearing of disk cache
[  193.401201][ T8495] BTRFS info (device loop1): enabling ssd optimizations
[  193.408285][ T8495] BTRFS info (device loop1): max_inline at 4096
[  193.414663][ T8495] BTRFS info (device loop1): disk space caching is enabled
[  193.441605][ T8495] BTRFS info (device loop1): rebuilding free space tree
[  193.453022][ T8495] BTRFS info (device loop1): disabling free space tree
[  193.460130][ T8495] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  193.469953][ T8495] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  193.528726][ T4255] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.559707][ T8524] loop2: detected capacity change from 0 to 64
[  193.607915][ T8526] loop3: detected capacity change from 0 to 4096
[  193.643259][ T8526] ntfs: volume version 3.1.
[  193.858841][   T11] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 1
[  193.907398][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  193.913802][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  193.969736][ T8531] loop4: detected capacity change from 0 to 4096
[  194.023411][ T8538] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.061574][ T8535] random: crng reseeded on system resumption
[  194.473261][ T8556] loop0: detected capacity change from 0 to 128
[  194.477586][ T8553] loop1: detected capacity change from 0 to 1024
[  194.491113][ T8551] loop4: detected capacity change from 0 to 2048
[  194.518108][ T8551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  194.553298][ T8551] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  194.619775][ T4256] EXT4-fs (loop4): unmounting filesystem.
[  194.726083][ T8565] loop4: detected capacity change from 0 to 64
[  194.924257][ T8575] loop1: detected capacity change from 0 to 128
[  194.952920][ T8575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  194.971965][ T8575] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  195.003933][    C1] vkms_vblank_simulate: vblank timer overrun
[  195.055308][ T8575] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 27 (only 1 groups)
[  195.112917][ T8557] loop2: detected capacity change from 0 to 32768
[  195.128387][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  195.190578][ T8557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1636 (8557)
[  195.238642][ T8557] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  195.262220][ T8590] loop4: detected capacity change from 0 to 128
[  195.268792][ T8557] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  195.294757][ T8557] BTRFS info (device loop2): setting nodatacow, compression disabled
[  195.313091][ T8557] BTRFS info (device loop2): max_inline at 0
[  195.319245][ T8557] BTRFS info (device loop2): enabling disk space caching
[  195.330999][ T8557] BTRFS info (device loop2): turning off barriers
[  195.346224][ T8557] BTRFS info (device loop2): turning on flush-on-commit
[  195.363572][ T8557] BTRFS info (device loop2): doing ref verification
[  195.370374][ T8557] BTRFS info (device loop2): force clearing of disk cache
[  195.372728][ T8592] loop0: detected capacity change from 0 to 1024
[  195.384999][ T8557] BTRFS info (device loop2): enabling ssd optimizations
[  195.412779][ T8557] BTRFS info (device loop2): max_inline at 4096
[  195.422979][ T8557] BTRFS info (device loop2): disk space caching is enabled
[  195.599470][ T8557] BTRFS info (device loop2): rebuilding free space tree
[  195.626456][ T8557] BTRFS info (device loop2): disabling free space tree
[  195.633479][ T8557] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  195.678950][ T8557] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  195.747892][ T4253] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.026573][ T8635] loop3: detected capacity change from 0 to 2048
[  196.071296][ T8635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.451369][ T8632] loop1: detected capacity change from 0 to 32768
[  196.479372][ T8632] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1675 (8632)
[  196.518493][ T8632] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.538955][ T8632] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  196.553867][ T8632] BTRFS info (device loop1): setting nodatacow, compression disabled
[  196.583587][ T8632] BTRFS info (device loop1): max_inline at 0
[  196.600000][ T8632] BTRFS info (device loop1): enabling disk space caching
[  196.628986][ T8632] BTRFS info (device loop1): turning off barriers
[  196.638592][ T8638] loop0: detected capacity change from 0 to 32768
[  196.644021][ T8632] BTRFS info (device loop1): turning on flush-on-commit
[  196.665686][ T8632] BTRFS info (device loop1): doing ref verification
[  196.692752][ T8632] BTRFS info (device loop1): force clearing of disk cache
[  196.700261][ T8632] BTRFS info (device loop1): enabling ssd optimizations
[  196.713989][ T8632] BTRFS info (device loop1): max_inline at 4096
[  196.730584][ T8632] BTRFS info (device loop1): disk space caching is enabled
[  196.931673][ T8632] BTRFS info (device loop1): rebuilding free space tree
[  196.961455][ T8632] BTRFS info (device loop1): disabling free space tree
[  196.978678][ T8632] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  196.998920][ T8632] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.039547][ T8647] loop3: detected capacity change from 0 to 32768
[  197.055440][   T26] kauditd_printk_skb: 38 callbacks suppressed
[  197.055455][   T26] audit: type=1800 audit(1749861174.926:129): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1675" name="file1" dev="loop1" ino=260 res=0 errno=0
[  197.144101][ T4255] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.240767][ T8656] loop4: detected capacity change from 0 to 40427
[  197.357646][ T8656] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  197.381310][ T8656] F2FS-fs (loop4): invalid crc value
[  197.403054][ T8656] F2FS-fs (loop4): Found nat_bits in checkpoint
[  197.484105][ T8656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  197.677121][ T8696] program syz.2.1682 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  197.924464][ T8706] program syz.3.1699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  197.937989][ T8683] loop0: detected capacity change from 0 to 32768
[  197.950592][ T8683] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1691 (8683)
[  197.972838][ T8683] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.983542][ T8683] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  198.014026][ T8683] BTRFS info (device loop0): setting nodatacow, compression disabled
[  198.022172][ T8683] BTRFS info (device loop0): max_inline at 0
[  198.069356][ T8683] BTRFS info (device loop0): enabling disk space caching
[  198.089035][ T8683] BTRFS info (device loop0): turning off barriers
[  198.110994][ T8683] BTRFS info (device loop0): turning on flush-on-commit
[  198.131297][ T8683] BTRFS info (device loop0): doing ref verification
[  198.150842][ T8683] BTRFS info (device loop0): force clearing of disk cache
[  198.168451][ T8683] BTRFS info (device loop0): enabling ssd optimizations
[  198.190733][ T8683] BTRFS info (device loop0): max_inline at 4096
[  198.212223][ T8683] BTRFS info (device loop0): disk space caching is enabled
[  198.296701][ T8726] loop3: detected capacity change from 0 to 4096
[  198.312212][ T8726] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  198.358589][ T8683] BTRFS info (device loop0): rebuilding free space tree
[  198.370182][ T8726] ntfs: volume version 3.1.
[  198.391710][ T8683] BTRFS info (device loop0): disabling free space tree
[  198.413610][ T8683] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  198.441710][ T8683] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  198.451932][ T8710] loop1: detected capacity change from 0 to 32768
[  198.540173][   T26] audit: type=1800 audit(1749861176.406:130): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1691" name="file1" dev="loop0" ino=260 res=0 errno=0
[  198.615443][ T4250] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.301201][ T8743] loop3: detected capacity change from 0 to 40427
[  199.311375][ T8761] program syz.0.1707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  199.332005][ T8743] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  199.368719][ T8743] F2FS-fs (loop3): invalid crc value
[  199.415451][ T8743] F2FS-fs (loop3): Found nat_bits in checkpoint
[  199.501053][ T8743] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  199.672620][ T8751] loop1: detected capacity change from 0 to 32768
[  199.700174][ T8771] loop0: detected capacity change from 0 to 4096
[  199.723116][ T8771] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  199.751209][ T8772] loop2: detected capacity change from 0 to 4096
[  199.765393][ T8771] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  199.783538][ T8771] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  199.801182][ T8772] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  199.820362][ T8771] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  199.834007][ T8772] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  199.847850][ T8771] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  199.864429][ T8772] ntfs: volume version 3.1.
[  199.882153][ T8771] ntfs: volume version 3.1.
[  199.902268][ T8753] loop4: detected capacity change from 0 to 40427
[  199.911634][ T8753] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  199.936515][ T8753] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  199.977875][ T8753] F2FS-fs (loop4): Found nat_bits in checkpoint
[  200.028450][ T8753] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  200.038701][ T8753] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  200.108812][ T8753] syz.4.1705: attempt to access beyond end of device
[  200.108812][ T8753] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  200.291282][ T8784] loop0: detected capacity change from 0 to 2048
[  200.379617][ T8784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  200.422974][ T8782] loop3: detected capacity change from 0 to 4096
[  200.464162][ T8780] loop2: detected capacity change from 0 to 32768
[  200.471760][ T8782] ntfs: volume version 3.1.
[  200.484431][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  200.491164][ T8780] XFS (loop2): Mounting V5 Filesystem
[  200.591789][ T8780] XFS (loop2): Ending clean mount
[  200.626199][ T8780] XFS (loop2): Quotacheck needed: Please wait.
[  200.684169][ T8780] XFS (loop2): Quotacheck: Done.
[  200.828595][ T4253] XFS (loop2): Unmounting Filesystem
[  201.192539][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'.
[  201.403989][ T8831] loop4: detected capacity change from 0 to 4096
[  201.434492][ T8831] ntfs: volume version 3.1.
[  201.547851][ T8815] loop0: detected capacity change from 0 to 32768
[  201.836675][ T8843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1741'.
[  201.849013][ T8830] loop3: detected capacity change from 0 to 32768
[  201.850495][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'.
[  201.901161][ T8830] XFS (loop3): Mounting V5 Filesystem
[  201.965491][ T8855] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1753'.
[  202.003386][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'.
[  202.065102][ T8830] XFS (loop3): Ending clean mount
[  202.075956][ T8830] XFS (loop3): Quotacheck needed: Please wait.
[  202.116783][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'.
[  202.198863][ T8830] XFS (loop3): Quotacheck: Done.
[  202.322820][ T4258] XFS (loop3): Unmounting Filesystem
[  202.447097][ T8871] loop1: detected capacity change from 0 to 4096
[  202.471252][ T8871] __ntfs_error: 53 callbacks suppressed
[  202.471267][ T8871] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  202.516796][ T8871] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  202.550190][ T8871] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  202.562682][ T8871] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  202.580830][ T8871] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  202.619532][ T8871] ntfs: volume version 3.1.
[  202.625964][ T8871] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  202.654105][ T8871] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  202.688957][ T8871] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  202.710344][ T8871] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  202.752508][ T8871] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  202.869387][ T8887] rdma_op ffff88805827f1f0 conn xmit_rdma 0000000000000000
[  203.040153][ T8875] loop2: detected capacity change from 0 to 32768
[  203.295230][ T8897] loop0: detected capacity change from 0 to 8
[  203.307095][ T8882] loop4: detected capacity change from 0 to 32768
[  203.328537][ T8882] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1756 (8882)
[  203.344517][ T8882] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  203.355227][ T8897] SQUASHFS error: zstd decompression error: 10
[  203.361415][ T8897] SQUASHFS error: zstd decompression failed, data probably corrupt
[  203.369866][ T8882] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  203.380195][ T8897] SQUASHFS error: Failed to read block 0x60: -5
[  203.386893][ T8882] BTRFS info (device loop4): using free space tree
[  203.395859][ T8897] SQUASHFS error: zstd decompression error: 10
[  203.402352][ T8897] SQUASHFS error: zstd decompression failed, data probably corrupt
[  203.408042][ T8883] loop3: detected capacity change from 0 to 32768
[  203.411088][ T8897] SQUASHFS error: Failed to read block 0x60: -5
[  203.529018][ T8912] loop1: detected capacity change from 0 to 1024
[  203.609953][ T8882] BTRFS info (device loop4): enabling ssd optimizations
[  203.703587][   T11] hfsplus: b-tree write err: -5, ino 4
[  203.800570][ T4256] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  203.809371][ T8929] loop3: detected capacity change from 0 to 512
[  203.818065][ T8929] EXT4-fs: Ignoring removed bh option
[  203.829959][ T8929] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1771: corrupted in-inode xattr
[  203.852423][ T8929] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1771: couldn't read orphan inode 15 (err -117)
[  203.876709][ T8929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  204.091900][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  204.149874][ T8942] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1789'.
[  204.183853][ T8942] netlink: 'syz.0.1789': attribute type 9 has an invalid length.
[  204.199935][ T8942] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1789'.
[  204.245432][ T8947] rdma_op ffff88805676b9f0 conn xmit_rdma 0000000000000000
[  204.252804][ T8942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1789'.
[  204.446470][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'.
[  204.493939][ T8957] loop1: detected capacity change from 0 to 256
[  205.033886][ T8951] loop2: detected capacity change from 0 to 32768
[  205.110610][  T126] kernel write not supported for file /771/oom_adj (pid: 126 comm: kworker/1:2)
[  205.120868][ T8951] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  205.120868][ T8951] 
[  205.151257][ T8951] ERROR: (device loop2): remounting filesystem as read-only
[  205.346541][ T8963] loop1: detected capacity change from 0 to 32768
[  205.381837][ T8963] XFS (loop1): Mounting V5 Filesystem
[  205.435977][ T8963] XFS (loop1): Ending clean mount
[  205.443254][ T8971] loop4: detected capacity change from 0 to 32768
[  205.499531][ T4255] XFS (loop1): Unmounting Filesystem
[  205.906408][ T8993] loop1: detected capacity change from 0 to 512
[  205.923714][ T8993] EXT4-fs: Ignoring removed bh option
[  205.959055][ T8993] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1805: corrupted in-inode xattr
[  205.981725][ T8993] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1805: couldn't read orphan inode 15 (err -117)
[  206.013858][ T8993] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  206.064595][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  206.099224][ T8998] loop4: detected capacity change from 0 to 8
[  206.140385][ T8998] SQUASHFS error: zstd decompression error: 10
[  206.154651][ T8998] SQUASHFS error: zstd decompression failed, data probably corrupt
[  206.183745][ T8998] SQUASHFS error: Failed to read block 0x60: -5
[  206.191545][ T8998] SQUASHFS error: zstd decompression error: 10
[  206.203892][ T8998] SQUASHFS error: zstd decompression failed, data probably corrupt
[  206.217882][ T8987] loop3: detected capacity change from 0 to 32768
[  206.230107][ T8986] loop0: detected capacity change from 0 to 32768
[  206.232301][ T8998] SQUASHFS error: Failed to read block 0x60: -5
[  206.253964][ T8986] find_entry called with index >= next_index
[  206.259994][ T8986] find_entry called with index >= next_index
[  206.270768][ T8986] find_entry called with index >= next_index
[  206.277209][ T8986] find_entry called with index >= next_index
[  206.283466][ T8986] find_entry called with index >= next_index
[  206.294198][ T8986] add_index: next_index = 0.  Resetting!
[  206.299871][ T8986] find_entry called with index >= next_index
[  206.317768][ T8986] find_entry called with index >= next_index
[  206.323854][ T8986] find_entry called with index >= next_index
[  206.364800][ T8986] find_entry called with index >= next_index
[  206.378561][ T8986] find_entry called with index >= next_index
[  206.389319][ T9003] __nla_validate_parse: 1 callbacks suppressed
[  206.389345][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'.
[  206.408395][ T8986] find_entry called with index >= next_index
[  206.543226][ T9007] loop4: detected capacity change from 0 to 1024
[  206.631208][ T4312] hfsplus: b-tree write err: -5, ino 4
[  206.689798][ T9001] loop1: detected capacity change from 0 to 32768
[  206.719494][ T9001] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1792 (9001)
[  206.737062][ T9012] usb usb8: usbfs: process 9012 (syz.4.1801) did not claim interface 0 before use
[  206.750118][ T9001] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  206.770652][ T9001] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  206.800368][ T9001] BTRFS info (device loop1): using free space tree
[  207.061082][ T9001] BTRFS info (device loop1): enabling ssd optimizations
[  207.093140][ T9049] loop3: detected capacity change from 0 to 1024
[  207.132326][   T11] hfsplus: b-tree write err: -5, ino 4
[  207.199727][ T4255] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  207.275277][ T9060] loop2: detected capacity change from 0 to 64
[  207.612543][ T9074] loop1: detected capacity change from 0 to 2048
[  207.638022][ T9074] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  207.658169][ T9074] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  207.690022][ T9074] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  207.712690][ T9074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.936267][ T9092] loop2: detected capacity change from 0 to 2048
[  207.954297][ T9092] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  207.973846][ T9092] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  207.995380][ T9092] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  208.031279][ T9092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.199869][ T9099] loop4: detected capacity change from 0 to 64
[  208.247280][ T9101] loop2: detected capacity change from 0 to 512
[  208.280597][ T9101] EXT4-fs (loop2): filesystem is read-only
[  208.297042][ T9101] EXT4-fs (loop2): filesystem is read-only
[  208.308295][ T9101] EXT4-fs (loop2): orphan cleanup on readonly fs
[  208.328695][ T9101] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1833: bad orphan inode 16
[  208.348920][ T9101] ext4_test_bit(bit=15, block=3) = 0
[  208.369758][ T9101] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  208.382849][ T9096] loop3: detected capacity change from 0 to 32768
[  208.390704][ T9096] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1830 (9096)
[  208.406815][ T9096] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  208.417356][ T9096] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  208.426876][ T9096] BTRFS info (device loop3): using free space tree
[  208.508319][ T9096] BTRFS info (device loop3): enabling ssd optimizations
[  208.517404][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  208.636085][ T4258] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  208.907781][ T9133] loop0: detected capacity change from 0 to 256
[  209.159167][ T9137] loop0: detected capacity change from 0 to 2048
[  209.253744][ T9137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  209.521123][ T9147] loop0: detected capacity change from 0 to 512
[  209.545575][ T9147] EXT4-fs (loop0): filesystem is read-only
[  209.570396][ T9147] EXT4-fs (loop0): filesystem is read-only
[  209.579041][ T9147] EXT4-fs (loop0): orphan cleanup on readonly fs
[  209.585863][ T9147] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1851: bad orphan inode 16
[  209.597867][ T9147] ext4_test_bit(bit=15, block=3) = 0
[  209.603199][ T9147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  209.670294][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  209.712783][ T9153] loop3: detected capacity change from 0 to 512
[  209.735222][ T9153] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  209.754542][ T9153] EXT4-fs (loop3): orphan cleanup on readonly fs
[  209.766393][ T9153] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1854: invalid indirect mapped block 256 (level 2)
[  209.784575][ T9153] EXT4-fs (loop3): 2 truncates cleaned up
[  209.803674][ T9153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  209.979545][ T4258] EXT4-fs (loop3): unmounting filesystem.
[  210.084314][ T9157] loop0: detected capacity change from 0 to 32768
[  210.112219][ T9157] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1853 (9157)
[  210.141834][ T9157] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  210.161872][ T9157] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  210.172835][ T9157] BTRFS info (device loop0): using free space tree
[  210.363936][ T9157] BTRFS info (device loop0): enabling ssd optimizations
[  210.505533][ T9186] loop3: detected capacity change from 0 to 256
[  210.513494][ T9159] loop2: detected capacity change from 0 to 32768
[  210.539562][ T9159] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1855 (9159)
[  210.565059][ T4250] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  210.604437][ T9159] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  210.613841][ T4297] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  210.654028][ T9159] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  210.683731][ T9159] BTRFS info (device loop2): force zlib compression, level 3
[  210.691975][ T9159] BTRFS info (device loop2): force clearing of disk cache
[  210.724355][ T9159] BTRFS info (device loop2): setting nodatasum
[  210.741064][ T9159] BTRFS info (device loop2): doing ref verification
[  210.758782][ T9159] BTRFS info (device loop2): allowing degraded mounts
[  210.776031][ T9159] BTRFS info (device loop2): enabling disk space caching
[  210.796142][ T9159] BTRFS info (device loop2): disk space caching is enabled
[  210.819286][ T4297] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  210.844010][ T4297] usb 5-1: config 0 has no interface number 0
[  210.868236][ T4297] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  210.903408][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.925778][ T4297] usb 5-1: Product: syz
[  210.929978][ T4297] usb 5-1: Manufacturer: syz
[  210.951556][ T4297] usb 5-1: SerialNumber: syz
[  210.970266][ T4297] usb 5-1: config 0 descriptor??
[  211.080262][ T9159] BTRFS info (device loop2): enabling ssd optimizations
[  211.097308][ T9159] BTRFS info (device loop2): rebuilding free space tree
[  211.126379][ T9159] BTRFS info (device loop2): disabling free space tree
[  211.128089][ T9065] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  211.133287][ T9159] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  211.133314][ T9159] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  211.168255][ T4483] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  211.194296][ T4297] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  211.202821][ T4297] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  211.224363][ T9065] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  211.243103][ T4297] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  211.248398][ T9196] loop0: detected capacity change from 0 to 32768
[  211.262118][ T4297] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  211.273212][ T9159] BTRFS info (device loop2): balance: start -d -m
[  211.277586][ T4337] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  211.289783][ T4297] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  211.299192][ T9196] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.1860 (9196)
[  211.320422][ T9159] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  211.348649][ T9196] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  211.371594][ T9159] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  211.373964][ T9196] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  211.394727][ T9213] loop1: detected capacity change from 0 to 8192
[  211.402008][ T9196] BTRFS info (device loop0): using free space tree
[  211.402417][ T4483] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.425951][ T4483] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.446620][ T9213]  loop1: p1 < > p3 < p5 > p4
[  211.449270][ T4483] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.452198][ T9213] loop1: partition table partially beyond EOD, truncated
[  211.469512][ T9213] loop1: p1 start 4294967040 is beyond EOD, truncated
[  211.475970][ T9159] BTRFS info (device loop2): balance: canceled
[  211.483314][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0
[  211.496277][ T4483] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  211.505562][ T4483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.515515][ T4483] usb 4-1: config 0 descriptor??
[  211.551478][ T9196] BTRFS info (device loop0): enabling ssd optimizations
[  211.608322][ T4253] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  211.638414][ T4297] usb 5-1: USB disconnect, device number 9
[  211.686061][ T4297] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  211.706300][ T4297] keyspan 5-1:0.133: device disconnected
[  211.892185][   T27] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  211.903003][ T4250] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  211.932328][ T4483] kye 0003:0458:5015.0020: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0
[  211.957358][ T4483] kye 0003:0458:5015.0020: tablet-enabling feature report not found
[  211.978964][ T4483] kye 0003:0458:5015.0020: tablet enabling failed
[  212.138105][ T4483] usb 4-1: USB disconnect, device number 12
[  212.144149][ T4385] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  212.231797][ T9241] loop2: detected capacity change from 0 to 4096
[  212.246582][ T9241] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  212.269378][ T9241] ntfs3: loop2: Failed to load $Extend.
[  212.294352][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  212.294366][   T26] audit: type=1800 audit(1749861190.156:131): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1872" name="file0" dev="loop2" ino=0 res=0 errno=0
[  212.428869][ T9250] loop4: detected capacity change from 0 to 1024
[  212.461282][ T9250] hfsplus: bad catalog entry type
[  212.544760][   T11] hfsplus: b-tree write err: -5, ino 4
[  212.666446][ T9264] tipc: Started in network mode
[  212.680571][ T9264] tipc: Node identity , cluster identity 4711
[  212.740899][ T9268] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1883'.
[  212.775165][ T9268] netlink: zone id is out of range
[  212.780743][ T9268] netlink: zone id is out of range
[  212.804856][ T9268] netlink: zone id is out of range
[  212.826731][ T9268] netlink: del zone limit has 4 unknown bytes
[  213.042037][ T9254] loop0: detected capacity change from 0 to 32768
[  213.092185][ T9254] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[  213.092185][ T9254] 
[  213.150598][ T9280] xt_CT: No such helper "syz1"
[  213.260927][ T4250] BUG: Bad page state in process syz-executor  pfn:78e15
[  213.270889][ T4250] page:ffffea0001e38540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x78e15
[  213.323532][ T4250] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  213.345388][ T4250] raw: 00fff18000002046 ffffea0000a18f08 ffffc90003ac7960 0000000000000000
[  213.361039][ T4250] raw: 0000000000000004 ffff888076e2ee88 00000000ffffffff 0000000000000000
[  213.380630][ T4250] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  213.389409][ T4250] page_owner tracks the page as allocated
[  213.406477][ T4250] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9254, tgid 9253 (syz.0.1877), ts 213091497465, free_ts 213090574149
[  213.453849][ T4250]  post_alloc_hook+0x173/0x1a0
[  213.458738][ T4250]  get_page_from_freelist+0x1a26/0x1ac0
[  213.476742][ T4250]  __alloc_pages+0x1df/0x4e0
[  213.479379][ T9296] loop2: detected capacity change from 0 to 128
[  213.491552][ T4250]  folio_alloc+0x1c/0x60
[  213.502896][ T4250]  filemap_alloc_folio+0xdb/0x460
[  213.512403][ T4250]  do_read_cache_folio+0x1bb/0x760
[  213.528603][ T4250]  do_read_cache_page+0x32/0x220
[  213.533628][ T4250]  __get_metapage+0x316/0xfa0
[  213.544657][ T4250]  dbAllocCtl+0xd4/0x9a0
[  213.555255][ T4250]  dbAllocAG+0xb9c/0xf10
[  213.568349][ T4250]  dbDiscardAG+0x2ca/0x8e0
[  213.579732][ T4250]  jfs_ioc_trim+0x42b/0x660
[  213.593924][ T4250]  jfs_ioctl+0x2b6/0x3d0
[  213.598340][ T4250]  __se_sys_ioctl+0xfa/0x170
[  213.607511][ T4250]  do_syscall_64+0x4c/0xa0
[  213.616520][ T4250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  213.629901][ T4250] page last free stack trace:
[  213.636677][ T4250]  free_unref_page_prepare+0x8b4/0x9a0
[  213.642257][ T4250]  free_unref_page+0x2e/0x3f0
[  213.648873][ T4250]  tlb_finish_mmu+0x10c/0x1c0
[  213.653668][ T4250]  exit_mmap+0x343/0x8e0
[  213.658816][ T4250]  __mmput+0x118/0x3c0
[  213.662980][ T4250]  exit_mm+0x1e6/0x2c0
[  213.675038][ T4250]  do_exit+0x8b9/0x2400
[  213.679328][ T4250]  do_group_exit+0x217/0x2d0
[  213.686980][ T4250]  get_signal+0x1272/0x1350
[  213.687656][ T9285] loop1: detected capacity change from 0 to 32768
[  213.691591][ T4250]  arch_do_signal_or_restart+0xb0/0x1230
[  213.703918][ T4250]  exit_to_user_mode_loop+0x70/0x110
[  213.709501][ T4250]  exit_to_user_mode_prepare+0xb1/0x140
[  213.717206][ T4250]  syscall_exit_to_user_mode+0x16/0x40
[  213.722782][ T4250]  do_syscall_64+0x58/0xa0
[  213.727306][ T4250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  213.733328][ T4250] Modules linked in:
[  213.741928][ T4250] CPU: 0 PID: 4250 Comm: syz-executor Not tainted 6.1.141-syzkaller #0
[  213.745678][ T9285] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  213.750187][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  213.769225][ T4250] Call Trace:
[  213.772524][ T4250]  <TASK>
[  213.774961][ T9285] (syz.1.1892,9285,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  213.775460][ T4250]  dump_stack_lvl+0x168/0x22e
[  213.775496][ T4250]  ? show_regs_print_info+0x12/0x12
[  213.783830][ T9285] (syz.1.1892,9285,1):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 47244640256 failed -12
[  213.788465][ T4250]  ? swiotlb_print_info+0x60/0x60
[  213.788503][ T4250]  bad_page+0x14b/0x170
[  213.793717][ T9285] (syz.1.1892,9285,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12
[  213.804076][ T4250]  free_unref_page_prepare+0x42a/0x9a0
[  213.804112][ T4250]  ? percpu_ref_put+0x19/0x180
[  213.804145][ T4250]  free_unref_page_list+0xbb/0x8e0
[  213.804183][ T4250]  release_pages+0x1f92/0x2200
[  213.804224][ T4250]  ? lru_cache_disable+0x30/0x30
[  213.809728][ T9285] (syz.1.1892,9285,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12
[  213.813378][ T4250]  ? mlock_page_drain_local+0x75/0x490
[  213.822045][ T9285] (syz.1.1892,9285,1):ocfs2_test_inode_bit:2864 ERROR: status = -12
[  213.827402][ T4250]  ? mlock_page_drain_local+0x75/0x490
[  213.827430][ T4250]  ? mlock_page_drain_local+0x289/0x490
[  213.827456][ T4250]  __pagevec_release+0x6d/0xe0
[  213.827486][ T4250]  truncate_inode_pages_range+0x2f6/0xff0
[  213.827525][ T4250]  ? mapping_evict_folio+0x520/0x520
[  213.832411][ T9285] (syz.1.1892,9285,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  213.837393][ T4250]  ? jfs_alloc_inode+0x60/0x60
[  213.837426][ T4250]  ? evict+0x7da/0x870
[  213.837463][ T4250]  ? do_raw_spin_unlock+0x11d/0x230
[  213.919867][ T4250]  ? _raw_spin_unlock+0x24/0x40
[  213.924747][ T4250]  ? iput+0x768/0x980
[  213.928781][ T4250]  dbUnmount+0x105/0x170
[  213.933055][ T4250]  jfs_umount+0x1fa/0x360
[  213.937396][ T4250]  jfs_put_super+0x88/0x190
[  213.941905][ T4250]  ? jfs_free_inode+0x20/0x20
[  213.946599][ T4250]  generic_shutdown_super+0x130/0x340
[  213.951990][ T4250]  kill_block_super+0x7c/0xe0
[  213.956672][ T4250]  deactivate_locked_super+0x93/0xf0
[  213.961951][ T4250]  cleanup_mnt+0x463/0x4f0
[  213.966379][ T4250]  ? lockdep_hardirqs_on+0x94/0x140
[  213.971586][ T4250]  task_work_run+0x1ca/0x250
[  213.976179][ T4250]  ? task_work_cancel+0x230/0x230
[  213.981202][ T4250]  ? exit_to_user_mode_loop+0x3b/0x110
[  213.986677][ T4250]  exit_to_user_mode_loop+0xe6/0x110
[  213.991987][ T4250]  exit_to_user_mode_prepare+0xb1/0x140
[  213.997537][ T4250]  syscall_exit_to_user_mode+0x16/0x40
[  214.002986][ T4250]  do_syscall_64+0x58/0xa0
[  214.007409][ T4250]  ? clear_bhb_loop+0x60/0xb0
[  214.012094][ T4250]  ? clear_bhb_loop+0x60/0xb0
[  214.016767][ T4250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.022659][ T4250] RIP: 0033:0x7f4451f8fc57
[  214.027076][ T4250] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  214.046713][ T4250] RSP: 002b:00007ffde17fc098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  214.055136][ T4250] RAX: 0000000000000000 RBX: 00007f4452010925 RCX: 00007f4451f8fc57
[  214.063102][ T4250] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde17fc150
[  214.071075][ T4250] RBP: 00007ffde17fc150 R08: 0000000000000000 R09: 0000000000000000
[  214.079063][ T4250] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde17fd1e0
[  214.087036][ T4250] R13: 00007f4452010925 R14: 00000000000340d3 R15: 00007ffde17fd220
[  214.095025][ T4250]  </TASK>
[  214.105800][ T4250] Disabling lock debugging due to kernel taint
[  214.112063][ T4250] BUG: Bad page state in process syz-executor  pfn:2863c
[  214.115665][ T4255] ocfs2: Unmounting device (7,1) on (node local)
[  214.119676][ T4250] page:ffffea0000a18f00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x2863c
[  214.136197][ T4250] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  214.146902][ T4250] raw: 00fff18000002046 ffffea0001e46608 ffffc90003ac7960 0000000000000000
[  214.155578][ T4250] raw: 0000000000000003 ffff88802a8d01f0 00000000ffffffff 0000000000000000
[  214.164213][ T4250] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  214.171513][ T4250] page_owner tracks the page as allocated
[  214.177345][ T4250] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9254, tgid 9253 (syz.0.1877), ts 213091233320, free_ts 213090915337
[  214.195571][ T4250]  post_alloc_hook+0x173/0x1a0
[  214.200373][ T4250]  get_page_from_freelist+0x1a26/0x1ac0
[  214.206158][ T4250]  __alloc_pages+0x1df/0x4e0
[  214.210786][ T4250]  folio_alloc+0x1c/0x60
[  214.215846][ T4250]  filemap_alloc_folio+0xdb/0x460
[  214.220918][ T4250]  do_read_cache_folio+0x1bb/0x760
[  214.228390][ T4250]  do_read_cache_page+0x32/0x220
[  214.233365][ T4250]  __get_metapage+0x316/0xfa0
[  214.238066][ T4250]  dbAllocAG+0x3dd/0xf10
[  214.242324][ T4250]  dbDiscardAG+0x2ca/0x8e0
[  214.247974][ T4250]  jfs_ioc_trim+0x42b/0x660
[  214.252482][ T4250]  jfs_ioctl+0x2b6/0x3d0
[  214.256777][ T4250]  __se_sys_ioctl+0xfa/0x170
[  214.261383][ T4250]  do_syscall_64+0x4c/0xa0
[  214.267011][ T4250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.272917][ T4250] page last free stack trace:
[  214.277604][ T4250]  free_unref_page_prepare+0x8b4/0x9a0
[  214.283079][ T4250]  free_unref_page+0x2e/0x3f0
[  214.289162][ T4250]  __mmdrop+0xb0/0x480
[  214.293265][ T4250]  exit_mm+0x1e6/0x2c0
[  214.297369][ T4250]  do_exit+0x8b9/0x2400
[  214.301536][ T4250]  do_group_exit+0x217/0x2d0
[  214.306583][ T4250]  get_signal+0x1272/0x1350
[  214.311115][ T4250]  arch_do_signal_or_restart+0xb0/0x1230
[  214.316857][ T4250]  exit_to_user_mode_loop+0x70/0x110
[  214.322166][ T4250]  exit_to_user_mode_prepare+0xb1/0x140
[  214.327767][ T4250]  syscall_exit_to_user_mode+0x16/0x40
[  214.333242][ T4250]  do_syscall_64+0x58/0xa0
[  214.337708][ T4250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.343663][ T4250] Modules linked in:
[  214.347613][ T4250] CPU: 0 PID: 4250 Comm: syz-executor Tainted: G    B              6.1.141-syzkaller #0
[  214.357355][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  214.367405][ T4250] Call Trace:
[  214.370675][ T4250]  <TASK>
[  214.373598][ T4250]  dump_stack_lvl+0x168/0x22e
[  214.378291][ T4250]  ? show_regs_print_info+0x12/0x12
[  214.383495][ T4250]  ? swiotlb_print_info+0x60/0x60
[  214.388524][ T4250]  bad_page+0x14b/0x170
[  214.392682][ T4250]  free_unref_page_prepare+0x42a/0x9a0
[  214.398144][ T4250]  ? percpu_ref_put+0x19/0x180
[  214.402908][ T4250]  free_unref_page_list+0xbb/0x8e0
[  214.408030][ T4250]  release_pages+0x1f92/0x2200
[  214.412797][ T4250]  ? lru_cache_disable+0x30/0x30
[  214.417745][ T4250]  ? mlock_page_drain_local+0x75/0x490
[  214.423201][ T4250]  ? mlock_page_drain_local+0x75/0x490
[  214.428666][ T4250]  ? mlock_page_drain_local+0x289/0x490
[  214.434231][ T4250]  __pagevec_release+0x6d/0xe0
[  214.439020][ T4250]  truncate_inode_pages_range+0x2f6/0xff0
[  214.444752][ T4250]  ? mapping_evict_folio+0x520/0x520
[  214.450047][ T4250]  ? jfs_alloc_inode+0x60/0x60
[  214.454813][ T4250]  ? evict+0x7da/0x870
[  214.458892][ T4250]  ? do_raw_spin_unlock+0x11d/0x230
[  214.464099][ T4250]  ? _raw_spin_unlock+0x24/0x40
[  214.468960][ T4250]  ? iput+0x768/0x980
[  214.472951][ T4250]  dbUnmount+0x105/0x170
[  214.477190][ T4250]  jfs_umount+0x1fa/0x360
[  214.481526][ T4250]  jfs_put_super+0x88/0x190
[  214.486034][ T4250]  ? jfs_free_inode+0x20/0x20
[  214.490711][ T4250]  generic_shutdown_super+0x130/0x340
[  214.496084][ T4250]  kill_block_super+0x7c/0xe0
[  214.500761][ T4250]  deactivate_locked_super+0x93/0xf0
[  214.506047][ T4250]  cleanup_mnt+0x463/0x4f0
[  214.510469][ T4250]  ? lockdep_hardirqs_on+0x94/0x140
[  214.515665][ T4250]  task_work_run+0x1ca/0x250
[  214.520259][ T4250]  ? task_work_cancel+0x230/0x230
[  214.525288][ T4250]  ? exit_to_user_mode_loop+0x3b/0x110
[  214.530754][ T4250]  exit_to_user_mode_loop+0xe6/0x110
[  214.536046][ T4250]  exit_to_user_mode_prepare+0xb1/0x140
[  214.541592][ T4250]  syscall_exit_to_user_mode+0x16/0x40
[  214.547053][ T4250]  do_syscall_64+0x58/0xa0
[  214.551472][ T4250]  ? clear_bhb_loop+0x60/0xb0
[  214.556148][ T4250]  ? clear_bhb_loop+0x60/0xb0
[  214.560821][ T4250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.566721][ T4250] RIP: 0033:0x7f4451f8fc57
[  214.571133][ T4250] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  214.590753][ T4250] RSP: 002b:00007ffde17fc098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  214.599169][ T4250] RAX: 0000000000000000 RBX: 00007f4452010925 RCX: 00007f4451f8fc57
[  214.607144][ T4250] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde17fc150
[  214.615199][ T4250] RBP: 00007ffde17fc150 R08: 0000000000000000 R09: 0000000000000000
[  214.623168][ T4250] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde17fd1e0
[  214.631141][ T4250] R13: 00007f4452010925 R14: 00000000000340d3 R15: 00007ffde17fd220
[  214.639118][ T4250]  </TASK>
[  215.583909][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!