last executing test programs:

1m18.584635124s ago: executing program 2 (id=3):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32], 0xfe, 0x27f, &(0x7f00000005c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)

1m17.918718967s ago: executing program 2 (id=15):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f00000013c0)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,nointegrity,iocharset=cp1251,integrity,nodiscard,noquota,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c00c38b4986bd7086e58f5d7fd70ab0f8e8bb0e5f5b35be555a19034ea00aa5cc6053411b1c187a24d1f68a37ecec3d26f9ba8207f6ce22b0a47e28485c69c14dc952b0c5e5f1ffe29eb2ce10e7e2a59e32a5a7ea7d8a6fa0b5e90476f3fa2cb4fcba14a881906678b3f96174c0ea0e4edc3068e37fec09729df129bb3e5b9490df2879472cb2e2"], 0x24, 0x621a, &(0x7f0000001500)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)

1m16.784546983s ago: executing program 2 (id=20):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
execve(&(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000001400)={[&(0x7f0000001300)='-O$}^}{,).+\x00', &(0x7f0000001340)='GPL\x00', &(0x7f0000001380)='9p\x00']})

1m15.43069932s ago: executing program 2 (id=34):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb02, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)

1m14.973269323s ago: executing program 32 (id=34):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb02, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)

4.054979819s ago: executing program 3 (id=721):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0102, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x18)

3.981126973s ago: executing program 0 (id=723):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x7f, 0x9, 0xc, 0x4, 0x6, 0x4}}]}}]}, 0x154}}, 0x0)

3.84498453s ago: executing program 0 (id=725):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4)
ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000040)={'vxcan1\x00'})
ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'wlan1\x00'})

3.794914342s ago: executing program 4 (id=727):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

3.794698802s ago: executing program 3 (id=728):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000b80)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)

3.713969396s ago: executing program 0 (id=729):
stat(0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x1000008, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000680)="$eJzs282O0lAYxvGn5aOC36AbN5K40I1UceVOL4VAJcSiBFgIMTEmuvQKXM39zSQz+wmdtLQllEmGKR8d4P9bvW/fnvYc0lPOWVQAjlZNNRkyVJD0UtKvqiGpnHW3AOyAJ2nqAThOufMwyCvjngDYrbPPUl/S6cXPlnKFpfWBX/8U1c3icv239CJqZli6l1xfnEivo/ZG6dr2ZXnerL687/Drb15F97+vB3qoR3qsJ3qqSlhvx9d/vsZKCDg+hurJfOGAqS9d13kX54Ugfx/nxSBvJPIPcW4Feb313W1vawgAUjJvmP+5xPzPJ+Y/gP01HE++Nl3XGawWFHWLkxcCmbMbpmyeDPzLbeI6mwj+VJT6Z3Gdwd/L2VbsrgxnJ4EVPn/BEX//6Fkbezb2Nph6ykuZdyOcsNKPf/MXxSiT1xOALbJHvb49HE/ednvNjtNxvjX+h5WPdrDytxfX/wAOx/xPP+ueAAAAAAAAAAAAAACAtKp6tsppyc/6AAAAAOyhtT4VKkla4eSsxwgAAAAAAAAAAAAAAAAAAAAciqsAAAD//yUhF6I=")
chdir(&(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

3.365333663s ago: executing program 0 (id=733):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x1, "389473f5"}, @main=@item_4={0x3, 0x0, 0x9, "ff02eb00"}]}}, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

3.307324206s ago: executing program 3 (id=734):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0)

3.119595365s ago: executing program 3 (id=737):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0)}, 0x20)

3.01919224s ago: executing program 3 (id=739):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x3, 0xa, 0x0, 0xfff7}, 0x38, [0xffff, 0x8, 0x3, 0xe9, 0x4, 0x6, 0x5, 0x10, 0x2, 0x950c, 0x1298, 0x8, 0x2, 0x5506bd78, 0x8000, 0x7fff, 0x9, 0x1, 0x8, 0x401, 0x8, 0x3, 0x3, 0x5, 0x1, 0xde, 0x10000, 0x4, 0x5, 0xbf7, 0xfffffffe, 0x200, 0x6, 0x4, 0xa, 0x7, 0x100, 0x9, 0x101, 0x1, 0x8, 0x2, 0x9, 0x4, 0x7, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0xfffffffe, 0xd, 0x3, 0x7, 0x5, 0x0, 0x0, 0xae, 0x4, 0xfffffff7, 0x5, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x6, 0x5, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0xf, 0x3, 0x4, 0x200, 0xa62, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0xffffffff, 0x0, 0x2, 0x3, 0x7, 0x3, 0x6, 0x2b86, 0x139d3, 0x9, 0x385a, 0x3ff8, 0x5, 0x1, 0x4, 0xffffffff, 0x8, 0x4, 0x1, 0x8, 0x4, 0xfffff305, 0x6a2e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0x2, 0x92, 0x0, 0x7, 0xfff, 0xfffffff9, 0x7, 0x1cd4, 0x2, 0x14, 0x80000001, 0x9], [0x204, 0x8000, 0x40002e, 0x23, 0x14b, 0x2, 0x200, 0x0, 0x2, 0x80000000, 0x1, 0x6, 0x51d, 0x9, 0x5, 0x1, 0x6, 0x0, 0x4, 0x1, 0x7, 0x7, 0x2, 0xe000001, 0xacd, 0x3, 0x27, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x5, 0x7, 0xb8, 0x401, 0x9, 0x3, 0x4, 0x4, 0x81, 0x5, 0x7, 0xfff, 0xdb91, 0xfffffffd, 0xd, 0x58cf, 0x240, 0x519eb04a, 0xfffffffb, 0xdd7, 0x10001, 0x2010002, 0x6, 0x4661, 0x4, 0x0, 0x7eedff86, 0x0, 0x1, 0x1, 0xc7be], [0x7, 0x1, 0xc, 0x1, 0x200, 0x101, 0x101, 0x4, 0x99, 0x7287, 0x8003, 0x5, 0xe02c, 0x816b, 0xe, 0x9, 0x101, 0x5, 0x8, 0x4000200, 0x1, 0x5365, 0x6, 0x8, 0x7, 0x2, 0x5, 0xbfff8004, 0x10, 0x3, 0x1, 0xd6, 0x4, 0x6fa, 0xfcf, 0x8, 0x80008, 0x2, 0x6, 0x10001, 0x5, 0x2, 0x1000, 0x1, 0x0, 0x80000000, 0xb, 0xc33, 0x7, 0x7, 0x3, 0xc2e, 0x8, 0x2, 0x0, 0x1, 0x7fff, 0xffffffff, 0x31, 0x7fffffff, 0xff, 0x1ff, 0x3, 0x2d]}, 0x45c)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

2.663307928s ago: executing program 5 (id=742):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00')
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1, 0xa3, 0x40007)

2.455898038s ago: executing program 5 (id=744):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000001900), 0x0, 0x4fa, &(0x7f0000000140)="$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")

2.047364058s ago: executing program 5 (id=746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x31, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x7}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)

1.921115975s ago: executing program 5 (id=748):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2000002, &(0x7f0000000080)={[{@barrier_none}, {@usrjquota_file, 0x4}, {@grpquota}, {@expose_privroot}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f00000033c0)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendfile(r1, r0, 0x0, 0x7ffffffd)

1.472468737s ago: executing program 4 (id=752):
r0 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

1.335309063s ago: executing program 1 (id=753):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7130100e60080b8785d960001000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000003]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

1.332821094s ago: executing program 5 (id=754):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0)
r1 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r0}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.292044866s ago: executing program 1 (id=755):
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)

1.262206167s ago: executing program 4 (id=756):
r0 = fanotify_init(0x300, 0x2)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x140)
setuid(0xee00)
fanotify_mark(r0, 0x1, 0x40001013, r1, 0x0)

1.059738727s ago: executing program 4 (id=757):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x308, 0x3d8, 0x3d8, 0x308, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x4000000, 0x2, 0x2, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x2, 0x5}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x916, {0x7c7a1f71}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xa, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)

1.030346469s ago: executing program 0 (id=758):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xac3, &(0x7f0000000e00)="$eJzs3U2MW0cBAOCxd73ZTVPilIQuaWgTCm356abZLOEngqRKhETUVIhLpYpLlKYlIgSJIgFVJZKcuNGqChInfsSpl6ogJHpBUU9cKtFIFVJPhQMHoiAqcSiBxCj2jNee2Hn2/j07/j7p7XjejD0z3ufn5/fezARgYlWbf5eW5ishXHzjlaP/eOjvczfXHGrnqDf/TnfEaiGESoxPZ6/33lQrvP7+iyd7hZWw2Pyb4uHJq+3n3hVCOBd2h0uhHnZevPzyW4tPHD9/7MKet189eGV9Wg8AAJPl65cOLu3465/v23bttfsPh03t9en4vB7jW+Jx/+F44J+O/6uhO17pWDrNZPmm41Kd68431SNfZzm1LN90n/JnsvJrffJtCrcvf6pjXa92wzhL23E9VKoLXfFqdWGh9Zs8NH/Xz1QWzp4+8+zzJVUUWHP/fiCEsLtjOXKhOz5qy6ERqMMKl8YI1GEsl8MbV9a1Rkvpbd6gpbG17D0QQEt+vfAW5/IzC6vTfrXpwcq/+ni19/NhDWz09j9U+TMllx+U/5vz9jisnTt1a0rtSp+jLTGeX0fI71/q//nLr3R0r82vR9QGrGe/6wjjcn2hXz2nNrgeK9Wv/vl2caf6cgzT+/CVrtQHuj4/+f90XP7HQG8f5Of/LRbLaC+hK15bzWs1Wq82V+Y+CBhN+X1zjXR9NMrv68vTNxWkzxakzxWkby5Iv6sgHSbZ777/0/BSZfl8V/6bftjz4ek8290x/NCQ9cnPRw5bfn7f77BWW35+PzGMsj+ceOrUF555+nLr/v9Ke/u/Ebf39HOjHj9bl2KGdL4wP6/evve/3l1OtU++e7L63N0jf/Px9u58le3LrxM69jO31GO++3lb++Xb1Z2vnuWbi8tsVt/8+GRz9rx0/JH2q+n9ms7aW8vaMZPVI+1XtsUwrwesRNoe+93/n7bP+VCrPHv6zKnHYjxtp3+aqm26uX7fBtcbWL1B+//Mh+7+P1va62vVzv3C1uX1ldZ+4fX4et3rF9vldKzv+FJL33Pfmppr5l84+d0zz6xx22HSPf+jF7594syZU9/zYMUPvjoa1RjmQfrZMir18WDYB7vXu4iSd0zAutv749ZBwKOnv3PiuVPPnTq7/8CB/YuLB764f2lv87h+b+fRfadzJdQWWEvLX/pl1wQAAAAAAAAAAAAY1A+OHb38zpuff7fV/3+5/1/q/5/u/E39/3+S9f/P+8mnfvCpH+C2HunNPNkAqzNZvlpcPpzVd3tWzo7seR+JYXsev9j/PxWXj+ua6nNvtr7WJ5oNJ3DLeCkz2Rgk+XyBH4/hhRj+OkCJKr2H/su32x7jW1c+6NjW0/gUs8vPahgfeHykrtfNraFjSKPU/7vnuE49+mszXjaix2LZbQR6++dEjf/9r+WGl14XS/9lemPL+/nkbhONvkfpg85gA7A2yp7/M533TOHZP35t9uaSsl19vHt/mY9fCsP4yzvd8VGff3K9y8/n7dvo8stu/0bP/9me/27g/V82Y159ZeX+5xdX3u0oNuwctPy8/Wkc6O3DlX8tlp9a83AYrPzGr7Ly8wtCA/pvVv7mAcu/pf27Vlb+/2L56W175MFBy2/VuFLtrsdc1o50/S8/b5xcz9qfxva8TfnfeKFX+1c4UeONWD5MsnGZZ3ZY2XFE+6B95fP/RufWdv7fdmWz3Vp+H8bnYjztiNN9Dvl8J8PWP91fkb4HdmSvXyn4fjP/73j7UgyLPg9p/t+0PdbjV35HvPlepnitx3t7p+5rYFy9N0rX/5Ky67Hq5crmVbRjtvz6r90yNQJ1WKtltvf/tLGSNm4akW290Wis7wmtAqUWTunvf9m/E8ouv+z3v0g+/29+DJ/P/5un5/P/5un5/L95+lz8D/VLz+f/zd/PfP7fPP3e7HXz+YHnC9I/WpC+s3d6+2f7fQXP31WQ/rGC9D3t9ENdOVL6/bd9/nK+fq9/T0H6gwXpnyhI/2RB+kMF6Y90pHfOAZ3SP1Xw/Dtd6o8yqe2HSZb3z/P5h8mRrv/0+/xvL0gHxtfPXtt35OnffrPe6v8/0z4fkq7jHY7xWvz99MMYz697h474zbQ3Y/xvWfqon++ASZKPn5F/vz9ckA6Mr3Sfl883TKDKbO/VMSwat6rfcT7j5dMx/EwMPxvDR2O4EMO9MdwXw8UNqh/r48jrvz/4UmX59/7WLH3Q+8nz/kBd40SFEPYPWJ/8/MCw97Pn4/gNa7Xlr7A7GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGmqzb9LS/OVEC6+8crRp46f3ntzzaF2jnrz73RHrNZ+XgiPxXAqhr+MD66//+LJzvBGDCthMVRCpb0+PHm1XdJdIYRzYXe4FOph58XLL7+1+MTx88cu7Hn71YNX1u8dAAAAgDvf/wMAAP//Nj4Q1g==")
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file1\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f0000000640))
truncate(&(0x7f0000000080)='./file2\x00', 0x0)

1.0044285s ago: executing program 1 (id=759):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000000149200"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x40000)

879.289676ms ago: executing program 4 (id=760):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x1)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140))

878.983396ms ago: executing program 1 (id=761):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
setreuid(0x0, 0xee01)
ioctl$sock_bt_hci(r0, 0x400448e6, 0x0)

846.338108ms ago: executing program 3 (id=762):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x7cfa, 0x3, 0xf7}})
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}})

763.385692ms ago: executing program 1 (id=763):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000280)={[{@gid}, {@uid}, {}, {@nobarrier}, {@barrier}, {@uid}, {@nls={'nls', 0x3d, 'cp874'}}]}, 0x44, 0x704, &(0x7f0000000940)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

435.276319ms ago: executing program 4 (id=764):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000097, 0x0, 0x20000003}]})

434.873998ms ago: executing program 5 (id=765):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000c6, &(0x7f00000008c0), 0x1, 0x569, &(0x7f00000002c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

354.287542ms ago: executing program 1 (id=766):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@private1, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x2, 0x5, 0x400, 0xbc, 0xc20022, r2})

0s ago: executing program 0 (id=767):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x3}}}}, @TCA_RATE={0x4, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

kernel console output (not intermixed with test programs):

slave_1: link becomes ready
[   83.309864][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.322186][ T4266] Bluetooth: hci2: command 0x0419 tx timeout
[   83.328982][ T4266] Bluetooth: hci0: command 0x0419 tx timeout
[   83.345799][ T4283] loop1: detected capacity change from 0 to 32768
[   83.350346][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.373340][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.395795][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.397268][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.415637][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.425672][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.453048][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.464335][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.486274][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.508424][ T4283] JBD2: Ignoring recovery information on journal
[   83.560217][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.607921][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.651220][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.663294][ T4283] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   83.687388][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.794057][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.802894][ T4283] (syz.1.10,4283,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=0, inode=65, rec_len=16, name_len=1
[   83.823524][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.869526][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.933848][ T4292] loop2: detected capacity change from 0 to 128
[   83.937810][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.969394][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.995931][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.022239][ T4292] =======================================================
[   84.022239][ T4292] WARNING: The mand mount option has been deprecated and
[   84.022239][ T4292]          and is ignored by this kernel. Remove the mand
[   84.022239][ T4292]          option from the mount to silence this warning.
[   84.022239][ T4292] =======================================================
[   84.024621][ T4186] ocfs2: Unmounting device (7,1) on (node local)
[   84.110706][ T4293] loop4: detected capacity change from 0 to 4096
[   84.249312][ T4292] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   84.258621][ T1324] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.278584][ T4295] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.320417][ T4292] FAT-fs (loop2): Filesystem has been set read-only
[   84.353470][ T4297] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   84.579428][ T4299] loop1: detected capacity change from 0 to 128
[   84.600811][ T4299] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   84.671410][ T1324] usb 1-1: config index 0 descriptor too short (expected 65392, got 72)
[   84.762523][ T4299] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   84.814179][ T4302] loop3: detected capacity change from 0 to 4096
[   84.897216][ T1324] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   84.930599][ T4302] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[   84.947059][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.967659][ T1324] usb 1-1: Product: syz
[   84.991371][ T4302] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   85.005157][ T1324] usb 1-1: Manufacturer: syz
[   85.005204][ T1324] usb 1-1: SerialNumber: syz
[   85.016807][   T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   85.047955][ T4302] ntfs: (device loop3): map_mft_record_page(): Mft record 0xa is corrupt.  Run chkdsk.
[   85.069293][ T4302] ntfs: (device loop3): map_mft_record(): Failed with error code 5.
[   85.098113][ T1324] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   85.100334][ T4302] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   85.141343][ T4302] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   85.184892][ T4302] ntfs: volume version 3.1.
[   85.190201][ T4302] ntfs: (device loop3): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB.
[   85.229542][ T3088] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   85.273428][ T4302] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[   85.306870][ T4302] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   85.374123][ T4305] loop2: detected capacity change from 0 to 32768
[   85.411466][   T23] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   85.437412][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.501465][   T23] usb 5-1: config 0 descriptor??
[   85.559680][   T23] cp210x 5-1:0.0: cp210x converter detected
[   85.696936][ T4202] read_mapping_page failed!
[   85.725525][ T4202] ERROR: (device loop2): txCommit: 
[   85.725525][ T4202] 
[   85.790412][ T4202] ERROR: (device loop2): remounting filesystem as read-only
[   85.892090][ T2285] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   86.009085][   T23] usb 5-1: cp210x converter now attached to ttyUSB0
[   86.235773][   T23] usb 5-1: USB disconnect, device number 2
[   86.258374][ T3088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.299204][   T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   86.350255][   T23] cp210x 5-1:0.0: device disconnected
[   86.396737][ T1324] usb 1-1: USB disconnect, device number 2
[   86.449302][ T3088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.518440][ T4331] loop3: detected capacity change from 0 to 8192
[   86.568792][ T3088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.620113][ T4331] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   86.671776][ T4331] REISERFS (device loop3): using ordered data mode
[   86.678085][ T4336] loop1: detected capacity change from 0 to 1024
[   86.694367][ T4331] reiserfs: using flush barriers
[   86.715620][ T4331] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[   86.734271][ T4331] REISERFS (device loop3): checking transaction log (loop3)
[   86.743380][ T3088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.801544][ T4331] REISERFS (device loop3): Using r5 hash to sort names
[   86.836438][ T4331] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   86.906406][ T4336] hfsplus: bad catalog entry type
[   86.978083][ T4331] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   87.006515][ T2285] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   87.027448][ T2285] ath9k_htc: Failed to initialize the device
[   87.062380][    T9] hfsplus: b-tree write err: -5, ino 25
[   87.069295][    T9] hfsplus: b-tree write err: -5, ino 4
[   87.075964][ T1324] usb 1-1: ath9k_htc: USB layer deinitialized
[   87.123525][    T9] hfsplus: b-tree write err: -5, ino 2
[   87.213658][ T4331] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd
[   87.534247][ T4350] loop0: detected capacity change from 0 to 512
[   87.566467][ T4350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   87.636656][ T4350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[   87.648541][ T4350] System zones: 0-2, 18-18, 34-34
[   87.692782][ T4350] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[   87.711814][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.726749][ T4350] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.37: corrupted inode contents
[   87.743251][ T4354] netlink: 'syz.1.38': attribute type 2 has an invalid length.
[   87.755085][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.762503][ T4350] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.37: mark_inode_dirty error
[   87.776132][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.783342][ T4350] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.37: corrupted inode contents
[   87.796251][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.804028][ T4350] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.37: mark_inode_dirty error
[   87.871780][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.878761][ T4350] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.37: corrupted inode contents
[   87.909321][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.916526][ T4350] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.37: mark_inode_dirty error
[   87.931221][ T4361] netlink: 'syz.1.42': attribute type 3 has an invalid length.
[   87.935586][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.946982][ T4350] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.37: corrupted inode contents
[   87.980500][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   87.987570][ T4350] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   87.996884][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   88.003749][ T4350] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.37: corrupted inode contents
[   88.019815][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   88.026681][ T4350] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.37: mark_inode_dirty error
[   88.041699][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   88.050639][ T4350] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   88.060915][ T4350] EXT4-fs (loop0): Remounting filesystem read-only
[   88.069131][ T4350] EXT4-fs (loop0): 1 truncate cleaned up
[   88.075001][ T4350] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,debug,. Quota mode: writeback.
[   88.088441][ T4350] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.356174][ T4376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'.
[   88.725329][   T26] audit: type=1326 audit(1773782287.622:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.3.51" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19f2d06799 code=0x0
[   88.846155][ T4400] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.929637][ T4362] chnl_net:caif_netlink_parms(): no params data found
[   89.082215][ T4404] loop4: detected capacity change from 0 to 1764
[   89.144920][ T4411] loop0: detected capacity change from 0 to 1024
[   89.215082][ T4411] hfsplus: bad catalog entry type
[   89.325721][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.345048][ T4417] loop4: detected capacity change from 0 to 512
[   89.353424][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.363686][ T4362] device bridge_slave_0 entered promiscuous mode
[   89.374226][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.382198][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.401422][ T4362] device bridge_slave_1 entered promiscuous mode
[   89.481500][ T4417] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   89.493574][ T4417] EXT4-fs (loop4): invalid journal inode
[   89.511376][ T4417] EXT4-fs (loop4): can't get journal size
[   89.530211][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.562655][ T4419] loop0: detected capacity change from 0 to 4096
[   89.619972][ T4417] EXT4-fs (loop4): 1 truncate cleaned up
[   89.626881][ T4417] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none.
[   89.653436][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.705693][ T4427] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.776369][ T3088] device hsr_slave_0 left promiscuous mode
[   89.845380][ T3088] device hsr_slave_1 left promiscuous mode
[   89.868830][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.890464][ T4435] loop4: detected capacity change from 0 to 256
[   89.905843][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.938157][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.946578][ T4437] loop0: detected capacity change from 0 to 1024
[   89.951825][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   89.972269][ T4435] exfat: Deprecated parameter 'namecase'
[   89.989126][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.027333][ T4435] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   90.047689][ T3088] device bridge_slave_1 left promiscuous mode
[   90.069147][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.119652][ T4243] hfsplus: b-tree write err: -5, ino 25
[   90.131286][ T2285] Bluetooth: hci4: command 0x0409 tx timeout
[   90.155068][ T4243] hfsplus: b-tree write err: -5, ino 4
[   90.178533][ T3088] device bridge_slave_0 left promiscuous mode
[   90.190468][ T4243] hfsplus: b-tree write err: -5, ino 2
[   90.221239][ T4236] usb 4-1: Using ep0 maxpacket: 16
[   90.228263][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.341435][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.379547][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.424411][ T4236] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[   90.463550][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.518086][ T4236] usb 4-1: config 0 descriptor??
[   90.543507][ T3088] device veth1_macvtap left promiscuous mode
[   90.556723][ T3088] device veth0_macvtap left promiscuous mode
[   90.586733][ T3088] device veth1_vlan left promiscuous mode
[   90.613817][ T3088] device veth0_vlan left promiscuous mode
[   90.914565][ T3088] team0 (unregistering): Port device team_slave_1 removed
[   90.933187][ T3088] team0 (unregistering): Port device team_slave_0 removed
[   90.950179][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.967672][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.017913][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.025485][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.036854][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.048204][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.056188][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.064062][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.071695][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.079500][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.087655][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.095936][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.105617][ T4236] wacom 0003:056A:0084.0001: unknown main item tag 0x0
[   91.139129][ T4236] wacom 0003:056A:0084.0001: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0
[   91.165640][ T3088] bond0 (unregistering): Released all slaves
[   91.238903][ T4236] usb 4-1: USB disconnect, device number 2
[   91.291789][ T4445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.346613][ T4362] team0: Port device team_slave_0 added
[   91.374337][ T4362] team0: Port device team_slave_1 added
[   91.474868][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.548999][ T4449] fido_id[4449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   91.578758][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.644058][ T4460] loop1: detected capacity change from 0 to 512
[   91.678021][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.744783][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.760234][ T4460] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[   91.760268][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.768686][ T4460] System zones: 0-2, 18-18, 34-34
[   91.823550][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.845701][ T4460] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[   91.861362][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   91.870086][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.69: corrupted inode contents
[   91.883767][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   91.890664][ T4460] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #16: comm syz.1.69: mark_inode_dirty error
[   91.902606][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   91.909895][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.69: corrupted inode contents
[   91.924351][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   91.930927][ T4460] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.69: mark_inode_dirty error
[   91.944828][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   91.954183][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.69: corrupted inode contents
[   91.967598][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   91.974684][ T4460] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.69: mark_inode_dirty error
[   91.986426][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   91.993852][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.69: corrupted inode contents
[   92.006705][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   92.013436][ T4460] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   92.023378][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   92.030924][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.69: corrupted inode contents
[   92.044796][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   92.051918][ T4460] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.69: mark_inode_dirty error
[   92.065987][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   92.072981][ T4460] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   92.092527][ T4460] EXT4-fs (loop1): Remounting filesystem read-only
[   92.100206][ T4460] EXT4-fs (loop1): 1 truncate cleaned up
[   92.106350][ T4460] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,. Quota mode: writeback.
[   92.119083][ T4460] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.134931][ T1108] cfg80211: failed to load regulatory.db
[   92.201648][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[   92.295332][ T4362] device hsr_slave_0 entered promiscuous mode
[   92.381088][ T4237] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   92.391831][ T4362] device hsr_slave_1 entered promiscuous mode
[   92.451937][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.459645][ T4362] Cannot create hsr debugfs directory
[   92.488257][ T4480] loop3: detected capacity change from 0 to 1024
[   92.693930][ T4480] hfsplus: bad catalog entry type
[   92.721683][ T4489] loop1: detected capacity change from 0 to 1024
[   92.779271][ T4237] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   92.811113][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.842212][ T4237] usb 1-1: config 0 descriptor??
[   92.895588][ T4359] hfsplus: b-tree write err: -5, ino 25
[   92.909983][ T4237] cp210x 1-1:0.0: cp210x converter detected
[   92.931276][ T4359] hfsplus: b-tree write err: -5, ino 4
[   92.937403][ T4359] hfsplus: b-tree write err: -5, ino 2
[   93.026306][  T144] hfsplus: b-tree write err: -5, ino 25
[   93.069839][  T144] hfsplus: b-tree write err: -5, ino 4
[   93.097129][  T144] hfsplus: b-tree write err: -5, ino 2
[   93.125193][ T4362] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   93.161457][  T144] hfsplus: b-tree write err: -5, ino 20
[   93.184504][ T4362] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   93.265717][ T4362] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   93.319852][ T4505] loop3: detected capacity change from 0 to 512
[   93.349340][ T4237] usb 1-1: cp210x converter now attached to ttyUSB0
[   93.359400][ T4362] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   93.423441][ T4505] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[   93.432027][ T4505] System zones: 0-2, 18-18, 34-34
[   93.444506][ T4505] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[   93.462813][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.472009][ T4505] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.85: corrupted inode contents
[   93.491470][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.498367][ T4505] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #16: comm syz.3.85: mark_inode_dirty error
[   93.510713][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.517894][ T4505] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.85: corrupted inode contents
[   93.530354][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.537874][ T4505] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.85: mark_inode_dirty error
[   93.549891][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.557260][ T4505] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.85: corrupted inode contents
[   93.570775][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.578058][ T4505] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.85: mark_inode_dirty error
[   93.590199][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.597804][ T4505] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.85: corrupted inode contents
[   93.611805][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.619350][ T4505] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   93.631854][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.638944][ T4505] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.85: corrupted inode contents
[   93.650903][ T4500] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   93.654104][ T4500] REISERFS (device loop4): using ordered data mode
[   93.667874][   T23] usb 1-1: USB disconnect, device number 3
[   93.674482][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.681767][ T4505] EXT4-fs error (device loop3): ext4_truncate:4279: inode #16: comm syz.3.85: mark_inode_dirty error
[   93.694093][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.701361][ T4505] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   93.711718][ T4505] EXT4-fs (loop3): Remounting filesystem read-only
[   93.719558][ T4505] EXT4-fs (loop3): 1 truncate cleaned up
[   93.725605][ T4505] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug,. Quota mode: writeback.
[   93.737911][ T4505] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.765031][   T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   93.783309][ T4500] reiserfs: using flush barriers
[   93.795926][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   93.812878][   T23] cp210x 1-1:0.0: device disconnected
[   93.840221][ T4500] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   93.896707][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   93.938406][ T4500] REISERFS (device loop4): checking transaction log (loop4)
[   94.004121][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   94.032713][ T4500] REISERFS (device loop4): Using r5 hash to sort names
[   94.109049][ T4500] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   94.187848][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.219770][ T4500] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   94.281485][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   94.306500][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   94.348036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.356749][ T4236] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.410785][ T4362] 8021q: adding VLAN 0 to HW filter on device team0
[   94.487161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.541675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.609063][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.616541][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.671511][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.706499][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.741443][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.787486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.796218][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.851464][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.858866][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.867062][ T4236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.919228][ T4236] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[   94.967448][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.996827][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.005959][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.049871][ T4236] usb 4-1: config 0 descriptor??
[   95.056070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.113725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.171766][ T1324] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   95.195249][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.230071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.250882][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.280597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.305988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.346337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.381647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.432139][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   95.571236][ T1324] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   95.580433][ T4236] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0
[   95.600256][ T1324] usb 1-1: config 0 has no interface number 0
[   95.630862][ T1324] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[   95.641177][ T4236] acrux 0003:1A34:0802.0002: no inputs found
[   95.653522][ T4551] set_capacity_and_notify: 1 callbacks suppressed
[   95.653538][ T4551] loop4: detected capacity change from 0 to 4096
[   95.658225][ T4236] acrux 0003:1A34:0802.0002: Failed to enable force feedback support, error: -19
[   95.673981][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.707362][ T1324] usb 1-1: config 0 descriptor??
[   95.744187][ T4551] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   95.808459][ T4551] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[   95.829283][ T4236] usb 4-1: USB disconnect, device number 3
[   95.839041][ T1324] usb 1-1: selecting invalid altsetting 1
[   95.867357][ T1324] dvb_ttusb_budget: ttusb_init_controller: error
[   95.883531][ T1324] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   95.991853][ T4551] ntfs: volume version 3.1.
[   96.105885][ T4562] fido_id[4562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   96.180320][ T1324] DVB: Unable to find symbol cx22700_attach()
[   96.194025][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.232515][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.250134][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.360671][ T1324] DVB: Unable to find symbol tda10046_attach()
[   96.363543][ T1108] Bluetooth: hci4: command 0x0419 tx timeout
[   96.373431][ T1324] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[   96.461400][ T1324] usb 1-1: USB disconnect, device number 4
[   96.489039][ T4572] loop4: detected capacity change from 0 to 128
[   96.495972][ T4574] openvswitch: netlink: Actions may not be safe on all matching packets
[   96.631693][ T4572] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   96.673704][ T4572] hpfs: filesystem error: improperly stopped
[   96.699839][ T4572] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   96.763834][ T4572] hpfs: You really don't want any checks? You are crazy...
[   96.842581][ T4572] hpfs: hpfs_map_sector(): read error
[   96.891206][ T4572] hpfs: code page support is disabled
[   96.897453][ T4572] hpfs: hpfs_map_4sectors(): unaligned read
[   96.978295][ T4572] hpfs: hpfs_map_4sectors(): unaligned read
[   97.021185][ T4572] hpfs: filesystem error: unable to find root dir
[   97.247583][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.322352][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.435398][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.460632][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.509922][ T4566] loop1: detected capacity change from 0 to 32768
[   97.521132][   T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   97.541955][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.572541][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.603056][ T4362] device veth0_vlan entered promiscuous mode
[   97.644646][ T4362] device veth1_vlan entered promiscuous mode
[   97.780760][ T4566] XFS (loop1): Mounting V5 Filesystem
[   97.789734][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   97.809791][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   97.835810][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.862439][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.874987][ T4362] device veth0_macvtap entered promiscuous mode
[   97.941560][   T13] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   97.960390][ T4362] device veth1_macvtap entered promiscuous mode
[   97.971375][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.983419][   T13] usb 4-1: config 0 descriptor??
[   98.010100][ T4566] XFS (loop1): Ending clean mount
[   98.022769][   T13] cp210x 4-1:0.0: cp210x converter detected
[   98.074312][ T4566] XFS (loop1): Quotacheck needed: Please wait.
[   98.173446][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.261204][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.283304][ T4566] XFS (loop1): Quotacheck: Done.
[   98.296447][ T4583] loop0: detected capacity change from 0 to 32768
[   98.319656][ T4620] loop4: detected capacity change from 0 to 2048
[   98.320654][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.349029][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.369717][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.392467][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.411100][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.432664][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.468186][   T13] usb 4-1: cp210x converter now attached to ttyUSB0
[   98.482806][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.505512][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.533909][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.545023][ T4620] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   98.555601][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.568073][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.580900][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.593652][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.605430][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.612318][ T4620] NILFS (loop4): mounting unchecked fs
[   98.627282][ T4583] XFS (loop0): Mounting V5 Filesystem
[   98.642605][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.655477][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.672484][ T4197] usb 4-1: USB disconnect, device number 4
[   98.682806][ T4186] XFS (loop1): Unmounting Filesystem
[   98.723111][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   98.732813][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   98.741904][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.751825][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.769698][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   98.780098][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   98.800797][ T4362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.812199][ T4362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.813855][ T4197] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   98.830343][ T4362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.840897][ T4362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.877491][ T4620] NILFS (loop4): recovery complete
[   98.913978][ T4197] cp210x 4-1:0.0: device disconnected
[   98.920437][ T4634] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.108600][ T4583] XFS (loop0): Ending clean mount
[   99.147144][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.206012][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.284766][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   99.318540][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.381187][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.421699][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   99.592010][ T4185] XFS (loop0): Unmounting Filesystem
[  100.065829][ T4661] ALSA: mixer_oss: invalid OSS volume '›Óò¶è`�·Ï‡SVÿBl4C'
[  100.627253][ T4645] loop3: detected capacity change from 0 to 32768
[  100.692719][ T1324] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  100.738691][ T4682] loop5: detected capacity change from 0 to 2048
[  100.812142][ T4645] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  100.852537][ T4682] NILFS (loop5): invalid segment: Magic number mismatch
[  100.869679][ T4690] loop4: detected capacity change from 0 to 16
[  100.904276][ T4682] NILFS (loop5): trying rollback from an earlier position
[  100.934963][ T4645] JBD2: Ignoring recovery information on journal
[  100.996371][ T4690] erofs: (device loop4): mounted with root inode @ nid 36.
[  101.041844][ T4682] NILFS (loop5): recovery complete
[  101.110469][ T4698] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.141981][ T4645] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  101.156360][ T1324] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  101.185687][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.197431][ T1324] usb 2-1: config 0 descriptor??
[  101.262233][ T1324] cp210x 2-1:0.0: cp210x converter detected
[  101.367397][ T4705] loop4: detected capacity change from 0 to 2048
[  101.416913][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  101.520995][ T4705] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  101.577278][ T4705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.704013][ T1324] usb 2-1: cp210x converter now attached to ttyUSB0
[  101.911820][ T1324] usb 2-1: USB disconnect, device number 2
[  101.963733][ T1324] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  102.037978][ T1324] cp210x 2-1:0.0: device disconnected
[  102.171175][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  102.192758][ T4727] netlink: 40 bytes leftover after parsing attributes in process `syz.4.146'.
[  102.431140][   T23] usb 6-1: Using ep0 maxpacket: 8
[  102.557386][   T23] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.577923][   T23] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.608223][   T23] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  102.625824][ T4743] loop1: detected capacity change from 0 to 1024
[  102.653483][   T23] usb 6-1: config 0 interface 0 has no altsetting 0
[  102.687776][   T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  102.729065][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.738074][ T4713] loop3: detected capacity change from 0 to 32768
[  102.767551][   T23] usb 6-1: config 0 descriptor??
[  102.785553][    T9] hfsplus: b-tree write err: -5, ino 25
[  102.821660][    T9] hfsplus: b-tree write err: -5, ino 4
[  102.877235][ T4713] XFS (loop3): Mounting V5 Filesystem
[  102.914929][    T9] hfsplus: b-tree write err: -5, ino 2
[  103.149782][ T4713] XFS (loop3): Starting recovery (logdev: internal)
[  103.202248][ T4768] loop0: detected capacity change from 0 to 512
[  103.251903][   T23] hid (null): invalid report_size 26545
[  103.286131][   T23] magicmouse 0003:05AC:0265.0003: unexpected long global item
[  103.304222][   T23] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed
[  103.364194][ T4768] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.156: invalid indirect mapped block 10 (level 1)
[  103.400496][   T23] magicmouse: probe of 0003:05AC:0265.0003 failed with error -22
[  103.454917][ T4780] loop4: detected capacity change from 0 to 8
[  103.471735][   T23] usb 6-1: USB disconnect, device number 2
[  103.484376][ T4768] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.156: invalid indirect mapped block 8 (level 1)
[  103.528794][ T4768] EXT4-fs (loop0): 1 truncate cleaned up
[  103.539993][ T4713] XFS (loop3): Ending recovery (logdev: internal)
[  103.549148][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  103.679201][ T4780] SQUASHFS error: lzo decompression failed, data probably corrupt
[  103.707034][ T4780] SQUASHFS error: Failed to read block 0x202: -5
[  103.719855][ T4187] XFS (loop3): Unmounting Filesystem
[  103.764721][ T4780] SQUASHFS error: Unable to read metadata cache entry [200]
[  104.307682][ T4800] loop0: detected capacity change from 0 to 1764
[  104.324717][ T4803] loop4: detected capacity change from 0 to 1024
[  104.412311][ T4803] hfsplus: bad catalog entry type
[  104.451241][ T4800] iso9660: Corrupted directory entry in block 2 of inode 1920
[  104.536580][  T154] hfsplus: b-tree write err: -5, ino 25
[  104.560859][  T154] hfsplus: b-tree write err: -5, ino 4
[  104.591335][  T154] hfsplus: b-tree write err: -5, ino 2
[  104.690059][ T4810] netlink: 'syz.5.173': attribute type 10 has an invalid length.
[  104.771307][ T4810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.173'.
[  104.877475][ T4810] batman_adv: batadv0: Adding interface: vlan1
[  104.890650][ T4820] loop4: detected capacity change from 0 to 256
[  104.908560][ T4810] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.985128][ T4820] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  104.995522][ T4810] batman_adv: batadv0: Interface activated: vlan1
[  105.027785][ T4786] ERROR: (device loop1): diRead: i_ino != di_number
[  105.027785][ T4786] 
[  105.088253][ T4818] device macsec1 entered promiscuous mode
[  105.185261][   T26] audit: type=1400 audit(1773782304.082:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A4BB284132960AB0EC7C873CFF3EB09BFFB78A08C1060ACEBD68C681F4EB06507909110374F83A9CA6CF1A22A152E4424641EA1201497E3A973866BE7F8659A0119BA2D92304E687C61DF4D960D941CFAB0AC10F5861C9B38D760E8B906A47E2CF457A255A8C061FE8E4C805DC7D3B0124BD25494ED2D54BE8AEF5615C6FD7C4FAC3CF7DA8F20AA026998926069FC3032289822655A10BB16E1E6C08002CC0435A6667F338D23DC07810124F374749CEB5F78713B7DAD2FE3044A243139A1B5170D5BCFDBCD8748AC706DDDCBBD0B1F20F52C143DA1E74B736AC64A66616EA3069133AC3A pid=4825 comm="syz.0.177"
[  105.417859][ T4833] device veth1_to_team entered promiscuous mode
[  105.692452][ T4845] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  105.909576][ T4859] device vlan2 entered promiscuous mode
[  105.931304][ T4859] device bridge0 entered promiscuous mode
[  105.956265][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  106.244035][ T4870] set_capacity_and_notify: 1 callbacks suppressed
[  106.244052][ T4870] loop0: detected capacity change from 0 to 64
[  106.380432][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  106.431346][   T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  106.499402][ T4847] loop5: detected capacity change from 0 to 32768
[  106.614436][ T4847] XFS (loop5): Mounting V5 Filesystem
[  106.674288][ T4853] loop4: detected capacity change from 0 to 40427
[  106.746811][ T4853] F2FS-fs (loop4): invalid crc value
[  106.775638][ T4853] F2FS-fs (loop4): Found nat_bits in checkpoint
[  106.834874][ T4847] XFS (loop5): Ending clean mount
[  106.842339][   T13] usb 4-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 131, changing to 11
[  106.881699][ T4853] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  106.901147][   T13] usb 4-1: config 1 interface 0 has no altsetting 0
[  107.050506][   T26] audit: type=1800 audit(1773782305.942:4): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.188" name="file1" dev="loop4" ino=10 res=0 errno=0
[  107.055777][ T4362] XFS (loop5): Unmounting Filesystem
[  107.091410][   T13] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  107.131520][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.171175][   T13] usb 4-1: Product: syz
[  107.193539][   T13] usb 4-1: Manufacturer: syz
[  107.209773][   T13] usb 4-1: SerialNumber: syz
[  107.264675][ T4189] attempt to access beyond end of device
[  107.264675][ T4189] loop4: rw=2049, want=45104, limit=40427
[  107.516363][ T4910] loop1: detected capacity change from 0 to 64
[  107.741351][   T13] usbhid 4-1:1.0: can't add hid device: -71
[  107.755672][   T13] usbhid: probe of 4-1:1.0 failed with error -71
[  107.787812][   T13] usb 4-1: USB disconnect, device number 5
[  107.925462][ T4918] loop5: detected capacity change from 0 to 512
[  107.998306][ T4918] EXT4-fs warning (device loop5): ext4_multi_mount_protect:326: fsck is running on the filesystem
[  108.009333][ T4918] EXT4-fs warning (device loop5): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  108.152328][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.238618][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.273293][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.319302][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.341221][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.371241][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.391524][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.409464][ T4928] CUSE: unknown device info ""
[  108.425116][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.436839][ T4928] CUSE: zero length info key specified
[  108.458482][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.481173][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.561968][ T4922] device macsec1 entered promiscuous mode
[  108.588633][ T4932] loop4: detected capacity change from 0 to 64
[  108.617660][ T4912] loop0: detected capacity change from 0 to 40427
[  108.708491][ T4940] loop1: detected capacity change from 0 to 1024
[  108.721395][ T4912] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  108.730600][ T4912] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  108.777300][ T4912] F2FS-fs (loop0): Found nat_bits in checkpoint
[  108.878965][ T4912] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  108.896333][ T4912] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  108.951211][   T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  109.017749][ T4950] comedi comedi3: rti802: a I/O base address must be specified
[  109.098285][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready
[  109.166607][ T4956] loop1: detected capacity change from 0 to 256
[  109.211346][   T13] usb 4-1: Using ep0 maxpacket: 16
[  109.370772][ T4962] sp0: Synchronizing with TNC
[  109.377959][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.407615][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.450345][   T13] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  109.469481][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.485179][   T13] usb 4-1: config 0 descriptor??
[  109.975459][   T13] hid-multitouch 0003:1FD2:6007.0004: item fetching failed at offset 1/5
[  110.009024][   T13] hid-multitouch: probe of 0003:1FD2:6007.0004 failed with error -22
[  110.065942][ T4984] tipc: Started in network mode
[  110.102192][ T4984] tipc: Node identity , cluster identity 4711
[  110.182038][   T13] usb 4-1: USB disconnect, device number 6
[  110.287715][ T4995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.245'.
[  110.717548][ T4966] loop5: detected capacity change from 0 to 40427
[  110.825194][ T4966] F2FS-fs (loop5): invalid crc value
[  110.879825][ T4966] F2FS-fs (loop5): Found nat_bits in checkpoint
[  111.191888][ T4966] F2FS-fs (loop5): Start checkpoint disabled!
[  111.241452][ T4966] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  111.669079][ T5051] loop1: detected capacity change from 0 to 64
[  112.036789][ T5054] loop3: detected capacity change from 0 to 4096
[  112.164794][ T5023] loop0: detected capacity change from 0 to 32768
[  112.175250][ T5063] loop5: detected capacity change from 0 to 512
[  112.265284][ T5023] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  112.316205][ T5054] ntfs3: loop3: failed to convert "0080" to maciceland
[  112.335191][ T5023] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  112.363275][ T5063] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[  112.391356][ T5063] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.399980][ T5023] (syz.0.258,5023,0):ocfs2_read_blocks:239 ERROR: status = -12
[  112.412908][ T5023] (syz.0.258,5023,0):ocfs2_xattr_block_find:2835 ERROR: status = -12
[  112.592700][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  112.644314][ T5079] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  112.658179][ T5063] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.273: invalid size
[  112.710759][ T5063] EXT4-fs (loop5): Remounting filesystem read-only
[  112.941219][ T4236] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  113.311319][ T4236] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  113.320241][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.408797][ T4236] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  113.425207][ T5104] loop0: detected capacity change from 0 to 64
[  113.431785][ T4236] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  113.431821][ T4236] usb 5-1: Manufacturer: syz
[  113.452493][ T4236] usb 5-1: config 0 descriptor??
[  113.475317][ T5077] loop3: detected capacity change from 0 to 32768
[  113.532096][ T4234] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  113.611134][ T4236] rc_core: IR keymap rc-hauppauge not found
[  113.624889][ T4236] Registered IR keymap rc-empty
[  113.641540][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  113.654836][ T4236] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  113.734527][ T4236] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11
[  113.947453][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'.
[  113.974315][ T4234] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  114.011409][ T4234] usb 6-1: config 0 has no interface number 0
[  114.018460][ T4234] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30
[  114.061188][    C1] igorplugusb 5-1:0.0: receive overflow, at least 4 lost
[  114.070885][ T5114] rc rc0: two consecutive events of type space
[  114.088842][ T4234] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.149921][ T4234] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.161278][ T1108] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  114.161319][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.161341][ T1108] usb 2-1: Product: syz
[  114.161358][ T1108] usb 2-1: Manufacturer: syz
[  114.161374][ T1108] usb 2-1: SerialNumber: syz
[  114.196227][ T1108] usb 2-1: config 0 descriptor??
[  114.260249][ T1108] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  114.275143][ T4234] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  114.313224][ T4236] usb 5-1: USB disconnect, device number 3
[  114.330582][ T4234] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  114.339477][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  114.361711][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.415765][ T4234] usb 6-1: config 0 descriptor??
[  114.422742][ T1108] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  114.447003][ T1108] usb 2-1: media controller created
[  114.473264][ T5100] dvb-usb: bulk message failed: -22 (7/0)
[  114.556517][ T5132] tipc: Started in network mode
[  114.561873][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  114.579163][ T5132] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711
[  114.629441][ T5132] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  114.759037][ T1108] DVB: Unable to find symbol mt352_attach()
[  114.826546][ T1108] DVB: Unable to find symbol nxt6000_attach()
[  114.833109][ T1108] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  114.920356][ T4234] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  114.932131][ T1108] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  114.950066][ T4234] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  114.974480][ T4234] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  114.987111][ T4234] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  114.995409][ T4234] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  115.012460][ T1108] dvb-usb: schedule remote query interval to 1000 msecs.
[  115.020187][ T1108] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  115.031233][ T4234] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  115.051262][ T4234] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  115.108145][ T4234] wacom 0003:056A:0084.0005: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.5-1/input2
[  115.112036][ T1108] dvb-usb: bulk message failed: -22 (7/0)
[  115.163607][ T5149] loop1: detected capacity change from 0 to 64
[  115.191226][ T1108] dvb-usb: bulk message failed: -22 (7/0)
[  115.211575][ T4234] usb 6-1: USB disconnect, device number 3
[  115.259931][ T5124] loop3: detected capacity change from 0 to 32768
[  115.289649][ T1108] usb 2-1: USB disconnect, device number 3
[  115.369100][ T5124] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  115.445534][ T5151] loop0: detected capacity change from 0 to 4096
[  115.482273][ T5151] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  115.488496][ T1108] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  115.532992][ T5164] loop4: detected capacity change from 0 to 128
[  115.543565][ T5124] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  115.574456][ T5164] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  115.610003][ T5151] ntfs: volume version 3.1.
[  115.698099][ T5164] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  115.733297][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  115.807877][ T5166] fido_id[5166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  115.843758][ T5167] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #3: block 1: comm syz.1.304: lblock 1 mapped to illegal pblock 1 (length 1)
[  115.944243][ T5172] netlink: 200 bytes leftover after parsing attributes in process `syz.5.307'.
[  115.953967][ T5167] Quota error (device loop1): write_blk: dquota write failed
[  116.022951][ T5167] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  116.060674][ T5167] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.304: Failed to acquire dquot type 0
[  116.081577][  T154] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  116.096896][ T5167] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.304: Freeing blocks not in datazone - block = 0, count = 4096
[  116.134448][ T5167] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.304: Invalid inode bitmap blk 0 in block_group 0
[  116.152429][ T3088] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.264044][ T3088] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  116.306217][ T3088] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0
[  116.341366][ T5167] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  116.389578][ T5167] EXT4-fs (loop1): 1 orphan inode deleted
[  116.427698][ T5167] EXT4-fs (loop1): mounted filesystem without journal. Opts: €�; ,errors=continue. Quota mode: writeback.
[  116.769711][ T5201] netem: change failed
[  116.799150][ T5206] set_capacity_and_notify: 1 callbacks suppressed
[  116.799167][ T5206] loop4: detected capacity change from 0 to 256
[  116.990348][ T5206] FAT-fs (loop4): Directory bread(block 64) failed
[  117.037394][ T5206] FAT-fs (loop4): Directory bread(block 65) failed
[  117.073280][ T5206] FAT-fs (loop4): Directory bread(block 66) failed
[  117.080438][ T5206] FAT-fs (loop4): Directory bread(block 67) failed
[  117.140577][ T5206] FAT-fs (loop4): Directory bread(block 68) failed
[  117.181262][ T5206] FAT-fs (loop4): Directory bread(block 69) failed
[  117.188284][ T5206] FAT-fs (loop4): Directory bread(block 70) failed
[  117.245253][ T5206] FAT-fs (loop4): Directory bread(block 71) failed
[  117.297012][ T5206] FAT-fs (loop4): Directory bread(block 72) failed
[  117.341457][ T5206] FAT-fs (loop4): Directory bread(block 73) failed
[  117.761150][ T1108] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  117.908929][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'.
[  118.179979][ T5226] loop0: detected capacity change from 0 to 32768
[  118.201667][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.222547][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  118.245618][ T5229] loop3: detected capacity change from 0 to 32768
[  118.258640][ T1108] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  118.289343][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.304228][ T5270] loop4: detected capacity change from 0 to 256
[  118.349341][ T1108] usb 2-1: config 0 descriptor??
[  118.413938][ T1108] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  118.457481][ T1108] dvb-usb: bulk message failed: -22 (3/0)
[  118.514061][ T1108] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  118.571590][ T1108] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  118.596038][ T1108] usb 2-1: media controller created
[  118.615681][ T5240] dvb-usb: bulk message failed: -22 (4/0)
[  118.625505][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.693539][ T1108] dvb-usb: bulk message failed: -22 (6/0)
[  118.699929][ T1108] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  118.771375][ T4234] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  118.833775][ T1108] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16
[  118.862438][ T1108] dvb-usb: schedule remote query interval to 150 msecs.
[  118.891622][ T1108] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  118.973072][ T1108] usb 2-1: USB disconnect, device number 4
[  119.093879][ T1324] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  119.111794][ T1108] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  119.181597][ T4234] usb 4-1: config 0 has an invalid interface number: 22 but max is 0
[  119.201521][ T4234] usb 4-1: config 0 has no interface number 0
[  119.224731][ T4234] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.262068][ T4234] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.301199][ T4234] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  119.334308][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.350'.
[  119.344041][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.371146][ T1324] usb 1-1: Using ep0 maxpacket: 16
[  119.393068][ T4234] usb 4-1: config 0 descriptor??
[  119.522236][ T1324] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  119.558773][ T1324] usb 1-1: config 0 has no interface number 0
[  119.566124][ T1324] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.598493][ T1324] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.628258][ T1324] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  119.656764][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.691749][ T1324] usb 1-1: config 0 descriptor??
[  119.769791][ T5319] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  119.917762][ T4234] elo 0003:04E7:0030.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input22
[  120.086966][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  120.115441][ T4234] usb 4-1: USB disconnect, device number 7
[  120.159209][ T5305] loop4: detected capacity change from 0 to 40427
[  120.217528][ T5305] F2FS-fs (loop4): invalid crc value
[  120.236327][ T5305] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  120.336902][ T1108] usb 6-1: Using ep0 maxpacket: 32
[  120.345611][ T5305] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  120.358958][ T5305] F2FS-fs (loop4): Start checkpoint disabled!
[  120.382643][ T5305] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  120.401375][ T1324] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71
[  120.418894][ T1324] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71
[  120.430375][ T1324] uclogic 0003:28BD:0071.0007: pen probing failed: -71
[  120.456924][ T1324] uclogic 0003:28BD:0071.0007: failed probing parameters: -71
[  120.475335][ T1324] uclogic: probe of 0003:28BD:0071.0007 failed with error -71
[  120.501615][ T1324] usb 1-1: USB disconnect, device number 5
[  120.505900][ T1108] usb 6-1: unable to get BOS descriptor or descriptor too short
[  120.627024][ T1108] usb 6-1: config 3 has an invalid interface number: 41 but max is 0
[  120.636041][ T1108] usb 6-1: config 3 has no interface number 0
[  120.647087][ T1108] usb 6-1: config 3 interface 41 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  120.678819][ T1108] usb 6-1: config 3 interface 41 has no altsetting 0
[  120.821368][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.876366][ T1108] usb 6-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b
[  120.896058][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.916308][ T1108] usb 6-1: Product: syz
[  120.954910][ T1108] usb 6-1: Manufacturer: syz
[  120.970414][ T1108] usb 6-1: SerialNumber: syz
[  121.111353][ T4234] usb 2-1: Using ep0 maxpacket: 16
[  121.257623][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.299501][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.322879][ T1108] qmi_wwan 6-1:3.41: More than one union descriptor, skipping ...
[  121.335815][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  121.362102][ T1108] qmi_wwan: probe of 6-1:3.41 failed with error -22
[  121.369785][ T4234] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  121.398993][ T1108] usb 6-1: USB disconnect, device number 4
[  121.399601][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.437728][ T1324] kernel write not supported for file /202/net/rt_cache (pid: 1324 comm: kworker/0:2)
[  121.467716][ T4234] usb 2-1: config 0 descriptor??
[  121.639140][ T5378] loop4: detected capacity change from 0 to 512
[  121.744632][ T5378] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.367: inode has both inline data and extents flags
[  121.771629][ T5378] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.367: couldn't read orphan inode 15 (err -117)
[  121.833838][ T5351] loop3: detected capacity change from 0 to 32768
[  121.842650][ T5378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  121.981943][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x2
[  122.013021][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.044348][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.061097][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.079605][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.099868][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.120167][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.145088][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.179740][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.203127][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.213976][ T4234] hid-multitouch 0003:045E:9994.0008: unknown main item tag 0x0
[  122.231514][ T4234] hid-multitouch 0003:045E:9994.0008: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.1-1/input0
[  122.272574][ T4234] usb 2-1: USB disconnect, device number 5
[  122.516175][ T5401] fido_id[5401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  122.750200][ T5416] loop0: detected capacity change from 0 to 64
[  123.057879][ T5418] loop1: detected capacity change from 0 to 8192
[  123.079920][ T4185] hfs: node 4:3 still has 1 user(s)!
[  123.185977][ T5418] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  123.229986][ T5418] REISERFS (device loop1): using ordered data mode
[  123.316741][ T5418] reiserfs: using flush barriers
[  123.331400][ T5418] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  123.359184][ T5418] REISERFS (device loop1): checking transaction log (loop1)
[  123.379493][ T5418] REISERFS (device loop1): Using r5 hash to sort names
[  123.421595][ T5418] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  123.576265][ T5399] loop5: detected capacity change from 0 to 32768
[  123.735549][ T5399] XFS (loop5): Mounting V5 Filesystem
[  124.014892][ T5399] XFS (loop5): Ending clean mount
[  124.102270][ T5399] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  124.236715][ T5434] loop0: detected capacity change from 0 to 40427
[  124.246589][ T5438] loop3: detected capacity change from 0 to 32768
[  124.253925][ T4362] XFS (loop5): Unmounting Filesystem
[  124.302841][ T5434] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  124.310654][ T5434] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  124.377988][ T5434] F2FS-fs (loop0): invalid crc value
[  124.443681][ T5434] F2FS-fs (loop0): Found nat_bits in checkpoint
[  124.493661][ T5436] loop4: detected capacity change from 0 to 40427
[  124.545646][ T5438] JBD2: Ignoring recovery information on journal
[  124.553480][ T5434] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  124.571112][ T5434] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  124.613672][ T5436] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  124.661321][ T5436] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  124.692064][ T5436] F2FS-fs (loop4): invalid crc value
[  124.730269][ T5438] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  124.789440][ T5436] F2FS-fs (loop4): Found nat_bits in checkpoint
[  124.892559][ T5467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'.
[  124.987682][   T26] audit: type=1800 audit(1773782323.882:5): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.386" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  125.064768][ T5436] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  125.131142][ T5436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  125.162169][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  125.594717][ T5456] loop1: detected capacity change from 0 to 40427
[  125.793209][ T5456] F2FS-fs (loop1): Found nat_bits in checkpoint
[  125.941162][   T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  125.957684][ T5456] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  125.988003][ T5456] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  125.998530][ T5490] loop5: detected capacity change from 0 to 8192
[  126.082114][ T5490] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.207628][   T13] usb 4-1: Using ep0 maxpacket: 32
[  126.335624][   T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.361285][   T13] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.398283][   T13] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.433517][   T13] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.515634][   T13] usb 4-1: config 0 interface 0 has no altsetting 0
[  126.547452][   T13] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  126.588024][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.659837][   T13] usb 4-1: config 0 descriptor??
[  126.883235][ T5511] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[  127.014256][ T4234] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  127.069792][ T5519] loop5: detected capacity change from 0 to 512
[  127.097652][ T5521] loop1: detected capacity change from 0 to 8
[  127.136796][ T5519] EXT4-fs (loop5): inline encryption not supported
[  127.174704][   T13] corsair-cpro 0003:1B1C:0C10.0009: item fetching failed at offset 4/5
[  127.207362][   T13] corsair-cpro: probe of 0003:1B1C:0C10.0009 failed with error -22
[  127.308051][ T4234] usb 1-1: Using ep0 maxpacket: 16
[  127.366902][ T5519] EXT4-fs (loop5): Test dummy encryption mode enabled
[  127.388522][ T4266] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  127.397053][ T1324] usb 4-1: USB disconnect, device number 8
[  127.412850][ T5519] EXT4-fs error (device loop5): __ext4_iget:4912: inode #11: block 1: comm syz.5.408: invalid block
[  127.438761][ T5519] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.408: couldn't read orphan inode 11 (err -117)
[  127.449303][ T5531] delete_channel: no stack
[  127.452934][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.469692][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.480295][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  127.480985][ T5519] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,journal_dev=0x0000000000000005,max_dir_size_kb=0x0000000000000004,noquota,nodiscard,sb=0x00000000000000ff,inlinecrypt,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none.
[  127.494539][ T4234] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  127.494572][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.499997][ T4234] usb 1-1: config 0 descriptor??
[  127.831733][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.845547][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.856582][ T4266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  127.872536][ T4266] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  127.896027][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.917684][ T4266] usb 5-1: config 0 descriptor??
[  128.016891][ T5550] capability: warning: `syz.3.424' uses deprecated v2 capabilities in a way that may be insecure
[  128.043381][ T4234] elecom 0003:056E:010C.000A: report_id 0 is invalid
[  128.062508][ T4234] elecom 0003:056E:010C.000A: item 0 0 1 8 parsing failed
[  128.070458][ T4234] elecom: probe of 0003:056E:010C.000A failed with error -22
[  128.246423][ T4234] usb 1-1: USB disconnect, device number 6
[  128.252948][ T5556] netlink: 1 bytes leftover after parsing attributes in process `syz.3.427'.
[  128.416951][ T4266] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0
[  128.440692][ T4266] steelseries_srws1 0003:1038:1410.000B: item fetching failed at offset 3/7
[  128.465651][ T4266] steelseries_srws1 0003:1038:1410.000B: parse failed
[  128.488677][ T4266] steelseries_srws1: probe of 0003:1038:1410.000B failed with error -22
[  128.622027][ T4266] usb 5-1: USB disconnect, device number 4
[  128.856723][ T5584] loop0: detected capacity change from 0 to 64
[  129.011263][ T5590] device macsec1 entered promiscuous mode
[  129.018359][ T5590] device virt_wifi0 entered promiscuous mode
[  129.279805][ T5600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.446'.
[  129.803581][   T26] audit: type=1326 audit(1773782328.702:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  129.893578][   T26] audit: type=1326 audit(1773782328.722:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  129.963282][ T5617] loop5: detected capacity change from 0 to 1764
[  129.970965][   T26] audit: type=1326 audit(1773782328.722:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.067753][   T26] audit: type=1326 audit(1773782328.722:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.087374][ T5598] loop3: detected capacity change from 0 to 32768
[  130.150195][   T26] audit: type=1326 audit(1773782328.722:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.231471][   T26] audit: type=1326 audit(1773782328.722:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.263942][ T5598] (syz.3.444,5598,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.286332][ T5603] loop0: detected capacity change from 0 to 32768
[  130.318578][   T26] audit: type=1326 audit(1773782328.722:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.353453][ T5598] (syz.3.444,5598,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.388121][ T5603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.447 (5603)
[  130.457910][   T26] audit: type=1326 audit(1773782328.722:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.537122][ T5629] loop5: detected capacity change from 0 to 512
[  130.551847][   T26] audit: type=1326 audit(1773782328.722:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.579573][   T26] audit: type=1326 audit(1773782328.722:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.607083][   T26] audit: type=1326 audit(1773782328.722:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.611837][ T5598] JBD2: Ignoring recovery information on journal
[  130.631890][   T26] audit: type=1326 audit(1773782328.722:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.663411][   T26] audit: type=1326 audit(1773782328.722:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af06a799 code=0x7fc00000
[  130.733286][ T5629] FAT-fs (loop5): error, clusters badly computed (1 != 0)
[  130.764489][ T5629] FAT-fs (loop5): error, clusters badly computed (2 != 1)
[  130.790575][ T5598] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  130.827360][ T5603] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  130.857735][ T5603] BTRFS info (device loop0): using free space tree
[  130.886464][ T5603] BTRFS info (device loop0): has skinny extents
[  131.021177][ T5598] CIFS: iocharset name too long
[  131.246819][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  131.393121][ T5630] loop4: detected capacity change from 0 to 32768
[  131.431009][ T5603] BTRFS info (device loop0): enabling ssd optimizations
[  131.603383][ T5665] loop5: detected capacity change from 0 to 1024
[  131.679810][ T5630] XFS (loop4): Mounting V5 Filesystem
[  131.886558][ T5630] XFS (loop4): Ending clean mount
[  131.908744][ T4359] hfsplus: b-tree write err: -5, ino 25
[  131.948874][ T5677] loop1: detected capacity change from 0 to 128
[  131.963727][ T5630] XFS (loop4): Quotacheck needed: Please wait.
[  131.973223][ T4359] hfsplus: b-tree write err: -5, ino 4
[  131.979805][ T4359] hfsplus: b-tree write err: -5, ino 2
[  132.124287][ T5677] ufs: Invalid option: "type=ufs2" or missing value
[  132.165188][ T5630] XFS (loop4): Quotacheck: Done.
[  132.175380][ T5677] ufs: wrong mount options
[  132.268925][ T4189] XFS (loop4): Unmounting Filesystem
[  132.295270][ T5680] loop5: detected capacity change from 0 to 4096
[  132.611135][ T5681] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.689199][ T5680] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  132.797885][ T5680] Remounting filesystem read-only
[  132.871694][ T5680] NILFS error (device loop5): nilfs_readdir: bad page in #2
[  133.091868][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  133.099969][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.289536][ T5677] loop1: detected capacity change from 0 to 32768
[  133.334388][ T5671] loop3: detected capacity change from 0 to 32768
[  133.395421][ T5677] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.469 (5677)
[  133.507289][ T5677] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  133.592545][ T5671] XFS (loop3): Mounting V5 Filesystem
[  133.638118][ T5677] BTRFS info (device loop1): force zlib compression, level 3
[  133.710849][ T5677] BTRFS info (device loop1): force clearing of disk cache
[  133.762807][ T5671] XFS (loop3): Ending clean mount
[  133.781192][ T5677] BTRFS info (device loop1): setting nodatasum
[  133.787685][ T5677] BTRFS info (device loop1): allowing degraded mounts
[  133.907555][ T5677] BTRFS info (device loop1): enabling disk space caching
[  133.950566][ T5677] BTRFS info (device loop1): disk space caching is enabled
[  133.981434][ T5677] BTRFS info (device loop1): has skinny extents
[  134.007962][ T4187] XFS (loop3): Unmounting Filesystem
[  134.156990][ T5715] loop4: detected capacity change from 0 to 32768
[  134.204864][ T5677] BTRFS info (device loop1): clearing free space tree
[  134.214939][ T5677] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  134.241381][ T5677] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  134.459185][ T5711] loop5: detected capacity change from 0 to 32768
[  134.479597][ T5715] XFS (loop4): Mounting V5 Filesystem
[  134.679264][ T5715] XFS (loop4): Ending clean mount
[  134.692398][ T5711] XFS (loop5): Mounting V5 Filesystem
[  134.730788][ T5715] XFS (loop4): Quotacheck needed: Please wait.
[  134.970663][ T5722] loop0: detected capacity change from 0 to 32768
[  135.197534][ T5711] XFS (loop5): Ending clean mount
[  135.209251][ T5711] XFS (loop5): Quotacheck needed: Please wait.
[  135.235145][ T5722] JBD2: Ignoring recovery information on journal
[  135.242045][ T5715] XFS (loop4): Quotacheck: Done.
[  135.423851][ T4189] XFS (loop4): Unmounting Filesystem
[  135.438886][ T5722] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  135.541860][ T5711] XFS (loop5): Quotacheck: Done.
[  135.712203][ T5722] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  135.770974][ T4362] XFS (loop5): Unmounting Filesystem
[  135.824294][ T5722] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  135.851915][ T5722] OCFS2: File system is now read-only.
[  135.857705][ T5722] (syz.0.479,5722,0):ocfs2_search_chain:1761 ERROR: status = -30
[  135.900107][ T5722] (syz.0.479,5722,0):ocfs2_search_chain:1871 ERROR: status = -30
[  135.923479][ T5759] loop3: detected capacity change from 0 to 32768
[  135.965883][ T5722] (syz.0.479,5722,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  136.003878][ T5722] (syz.0.479,5722,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  136.037684][ T5722] (syz.0.479,5722,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  136.053230][ T5722] (syz.0.479,5722,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  136.065629][ T5722] (syz.0.479,5722,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  136.081871][ T5722] (syz.0.479,5722,1):ocfs2_mknod:385 ERROR: status = -30
[  136.124548][ T5759] XFS (loop3): Mounting V5 Filesystem
[  136.144541][ T5722] (syz.0.479,5722,0):ocfs2_mknod:502 ERROR: status = -30
[  136.214297][ T5722] (syz.0.479,5722,1):ocfs2_mkdir:659 ERROR: status = -30
[  136.354646][ T5770] loop1: detected capacity change from 0 to 40427
[  136.416350][ T5759] XFS (loop3): Ending clean mount
[  136.450266][ T5770] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  136.471703][ T5770] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  136.503925][ T5759] XFS (loop3): Quotacheck needed: Please wait.
[  136.544795][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  136.621303][ T5759] XFS (loop3): Quotacheck: Done.
[  136.670140][ T5770] F2FS-fs (loop1): Found nat_bits in checkpoint
[  136.957099][ T5770] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  136.969138][ T5770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  137.017413][ T4187] XFS (loop3): Unmounting Filesystem
[  137.159522][ T5770] attempt to access beyond end of device
[  137.159522][ T5770] loop1: rw=2049, want=45104, limit=40427
[  137.560941][ T4186] attempt to access beyond end of device
[  137.560941][ T4186] loop1: rw=2051, want=45104, limit=40427
[  137.605602][ T4186] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5
[  137.740972][ T5787] loop5: detected capacity change from 0 to 32768
[  137.966441][ T5785] loop4: detected capacity change from 0 to 40427
[  138.095435][ T5785] F2FS-fs (loop4): invalid crc value
[  138.157877][ T5785] F2FS-fs (loop4): Found nat_bits in checkpoint
[  138.327653][ T5785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  138.391244][ T5794] attempt to access beyond end of device
[  138.391244][ T5794] loop4: rw=2049, want=45104, limit=40427
[  138.514819][ T5793] loop3: detected capacity change from 0 to 32768
[  138.526660][   T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  138.551395][ T1324] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  138.584856][ T5793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.485 (5793)
[  138.652779][ T5793] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  138.670562][ T5793] BTRFS warning (device loop3): excessive commit interval 65536
[  138.681945][ T5793] BTRFS info (device loop3): using free space tree
[  138.689259][ T5793] BTRFS info (device loop3): has skinny extents
[  138.735584][ T5790] loop0: detected capacity change from 0 to 65536
[  138.801318][ T1324] usb 2-1: Using ep0 maxpacket: 32
[  138.889361][ T5790] XFS (loop0): Mounting V5 Filesystem
[  138.898376][ T5793] BTRFS info (device loop3): enabling ssd optimizations
[  138.906060][   T21] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  138.922198][   T21] usb 6-1: config 1 has no interface number 0
[  138.926588][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  138.954759][ T1324] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  138.960328][   T21] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  138.971267][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  138.986454][ T1324] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  138.996586][ T1324] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  139.010469][ T1324] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  139.038473][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.054297][ T1324] usb 2-1: config 0 descriptor??
[  139.064647][ T5790] XFS (loop0): Ending clean mount
[  139.089893][   T21] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.150739][ T4185] XFS (loop0): Unmounting Filesystem
[  139.291219][   T21] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  139.310093][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.356433][   T21] usb 6-1: Product: syz
[  139.360787][   T21] usb 6-1: Manufacturer: syz
[  139.368311][   T21] usb 6-1: SerialNumber: syz
[  139.471452][ T5800] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  139.493451][   T21] usb 6-1: Expected 3 endpoints, found: 2
[  139.509769][ T1324] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  139.741546][ T5762] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  140.071402][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  140.115409][ T5762] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  140.134399][ T5762] usb 5-1: config 0 has no interface number 0
[  140.141460][ T5762] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  140.153500][ T5762] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  140.168221][ T5762] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  140.201177][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.217474][ T5762] usb 5-1: config 0 descriptor??
[  140.243816][ T5831] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  140.285547][ T5762] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  140.341137][   T13] usb 4-1: Using ep0 maxpacket: 16
[  140.502461][   T13] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  140.519032][   T13] usb 4-1: config 0 has no interface number 0
[  140.532782][   T13] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  140.543749][   T13] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  140.560209][ T4234] usb 5-1: USB disconnect, device number 5
[  140.723752][   T13] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  140.738269][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.749643][   T13] usb 4-1: Product: syz
[  140.758069][   T13] usb 4-1: Manufacturer: syz
[  140.767686][   T13] usb 4-1: SerialNumber: syz
[  140.787683][   T13] usb 4-1: config 0 descriptor??
[  140.821507][ T5844] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  140.836323][ T5844] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  141.076551][ T5844] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  141.085011][ T5844] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  141.111398][ T5762] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  141.236732][ T5839] usb 2-1: USB disconnect, device number 6
[  141.272535][ T5839] usblp0: removed
[  141.331674][   T13] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  141.378411][ T4266] usb 6-1: USB disconnect, device number 5
[  141.491495][ T5762] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  141.521203][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.540822][ T5875] loop1: detected capacity change from 0 to 2048
[  141.553209][ T5762] usb 1-1: config 0 descriptor??
[  141.556676][   T13] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  141.588268][   T13] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  141.602454][ T5762] cp210x 1-1:0.0: cp210x converter detected
[  141.609555][ T5879] loop4: detected capacity change from 0 to 256
[  141.617074][   T13] asix: probe of 4-1:0.34 failed with error -71
[  141.638956][   T13] usb 4-1: USB disconnect, device number 9
[  141.656647][ T5879] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.670527][ T5881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.507'.
[  141.686070][ T5875] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  141.696717][ T5879] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  141.760009][ T5882] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.776906][ T5879] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb6280da2, utbl_chksum : 0xe619d30d)
[  141.963180][ T5886] bridge0: port 3(syz_tun) entered blocking state
[  141.975693][ T5884] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  142.005564][ T5886] bridge0: port 3(syz_tun) entered disabled state
[  142.044548][ T5762] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  142.057893][ T5886] device syz_tun entered promiscuous mode
[  142.066436][ T5886] bridge0: port 3(syz_tun) entered blocking state
[  142.074218][ T5886] bridge0: port 3(syz_tun) entered forwarding state
[  142.113429][ T5762] usb 1-1: cp210x converter now attached to ttyUSB0
[  142.199794][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'.
[  142.240761][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'.
[  142.308067][ T5762] usb 1-1: USB disconnect, device number 7
[  142.338129][ T5762] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  142.350900][ T5900] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  142.350900][ T5900] The task syz.1.514 (5900) triggered the difference, watch for misbehavior.
[  142.403584][ T5762] cp210x 1-1:0.0: device disconnected
[  142.444876][ T5906] loop5: detected capacity change from 0 to 256
[  142.541660][ T5906] FAT-fs (loop5): Directory bread(block 1285) failed
[  142.549139][ T5906] FAT-fs (loop5): Directory bread(block 1286) failed
[  142.595717][ T5906] FAT-fs (loop5): Directory bread(block 1287) failed
[  142.625345][ T5906] FAT-fs (loop5): Directory bread(block 1288) failed
[  142.655856][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'.
[  142.686197][ T5906] FAT-fs (loop5): Directory bread(block 1285) failed
[  142.721341][ T5906] FAT-fs (loop5): Directory bread(block 1286) failed
[  142.803039][ T5906] FAT-fs (loop5): Directory bread(block 1287) failed
[  142.810645][ T5906] FAT-fs (loop5): Directory bread(block 1288) failed
[  142.834933][ T5906] FAT-fs (loop5): Directory bread(block 1285) failed
[  142.866027][ T5906] FAT-fs (loop5): Directory bread(block 1286) failed
[  143.288078][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[  143.351588][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.531'.
[  143.586179][ T5954] loop4: detected capacity change from 0 to 256
[  143.670174][ T5958] device ipvlan2 entered promiscuous mode
[  143.685004][ T5958] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  143.756155][ T5960] loop1: detected capacity change from 0 to 4096
[  143.817200][ T5963] loop5: detected capacity change from 0 to 4096
[  143.875845][ T5963] EXT4-fs (loop5): Unrecognized mount option "dont_appraise" or missing value
[  143.938941][ T5960] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  144.325690][ T5981] loop5: detected capacity change from 0 to 256
[  144.460014][ T5981] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  144.585540][ T5999] loop4: detected capacity change from 0 to 1024
[  144.593472][ T4237] hid-generic 0005:10CF:5508.000C: item fetching failed at offset 0/1
[  144.677525][ T4237] hid-generic: probe of 0005:10CF:5508.000C failed with error -22
[  144.688170][ T5995] pimreg: tun_chr_ioctl cmd 21731
[  144.715098][ T5999] attempt to access beyond end of device
[  144.715098][ T5999] loop4: rw=0, want=5780, limit=1024
[  144.735266][ T5999] Buffer I/O error on dev loop4, logical block 2889, async page read
[  144.755743][ T5999] attempt to access beyond end of device
[  144.755743][ T5999] loop4: rw=0, want=393218, limit=1024
[  144.783080][ T5999] Buffer I/O error on dev loop4, logical block 196608, async page read
[  144.806294][ T5999] attempt to access beyond end of device
[  144.806294][ T5999] loop4: rw=0, want=393220, limit=1024
[  144.833525][ T5999] Buffer I/O error on dev loop4, logical block 196609, async page read
[  144.917148][ T5999] attempt to access beyond end of device
[  144.917148][ T5999] loop4: rw=0, want=393222, limit=1024
[  144.931700][ T6005] loop3: detected capacity change from 0 to 2048
[  144.941322][ T5999] Buffer I/O error on dev loop4, logical block 196610, async page read
[  144.999254][ T6006] attempt to access beyond end of device
[  144.999254][ T6006] loop4: rw=0, want=5780, limit=1024
[  145.018584][ T6005] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  145.048527][ T5999] attempt to access beyond end of device
[  145.048527][ T5999] loop4: rw=0, want=393224, limit=1024
[  145.065251][ T5175] udevd[5175]: incorrect nilfs2 checksum on /dev/loop3
[  145.111293][ T5999] Buffer I/O error on dev loop4, logical block 196611, async page read
[  145.131734][ T6015] Cannot find add_set index 4 as target
[  145.161449][ T6016] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.194733][ T5999] attempt to access beyond end of device
[  145.194733][ T5999] loop4: rw=0, want=393226, limit=1024
[  145.278157][ T5999] Buffer I/O error on dev loop4, logical block 196612, async page read
[  145.291215][ T5999] attempt to access beyond end of device
[  145.291215][ T5999] loop4: rw=0, want=393228, limit=1024
[  145.325314][ T5999] Buffer I/O error on dev loop4, logical block 196613, async page read
[  145.352918][ T5999] attempt to access beyond end of device
[  145.352918][ T5999] loop4: rw=0, want=393230, limit=1024
[  145.404192][ T5999] Buffer I/O error on dev loop4, logical block 196614, async page read
[  145.460944][ T5999] attempt to access beyond end of device
[  145.460944][ T5999] loop4: rw=0, want=393232, limit=1024
[  145.517293][ T5999] Buffer I/O error on dev loop4, logical block 196615, async page read
[  145.583804][ T5999] Buffer I/O error on dev loop4, logical block 196616, async page read
[  145.912167][ T6032] loop3: detected capacity change from 0 to 256
[  146.131466][   T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  146.351665][ T6051] loop5: detected capacity change from 0 to 128
[  146.426031][ T6056] syzkaller0: tun_chr_ioctl cmd 1074025677
[  146.432580][ T6056] syzkaller0: linktype set to 773
[  146.469459][ T6051] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  146.518401][ T6058] loop0: detected capacity change from 0 to 512
[  146.526662][   T13] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  146.548451][ T6051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.557525][   T13] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  146.569663][ T5839] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  146.618883][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  146.641642][ T6058] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  146.645531][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  146.695850][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  146.711380][ T6058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  146.732388][ T6058] EXT4-fs (loop0): orphan cleanup on readonly fs
[  146.781308][ T6058] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.583: bad orphan inode 267
[  146.881258][   T13] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  146.906867][ T6058] EXT4-fs (loop0): Remounting filesystem read-only
[  146.913273][   T13] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  146.931487][ T5839] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  146.940437][ T5839] usb 4-1: config 0 has no interface number 0
[  146.947166][   T13] usb 5-1: Product: syz
[  146.950415][ T6058] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none.
[  146.965443][   T13] usb 5-1: Manufacturer: syz
[  146.990230][ T5839] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.002451][ T5839] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.044096][ T6058] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.583: dx entry: limit 0 != root limit 125
[  147.062461][   T13] cdc_wdm 5-1:1.0: skipping garbage
[  147.067959][   T13] cdc_wdm 5-1:1.0: skipping garbage
[  147.068979][ T5839] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  147.108175][ T6058] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.583: Corrupt directory, running e2fsck is recommended
[  147.131366][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.141668][   T13] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  147.148016][   T13] cdc_wdm 5-1:1.0: Unknown control protocol
[  147.163540][ T5839] usb 4-1: config 0 descriptor??
[  147.326306][ T6072] capability: warning: `syz.1.590' uses 32-bit capabilities (legacy support in use)
[  147.399461][ T6072] program syz.1.590 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.496380][ T6079] loop5: detected capacity change from 0 to 256
[  147.551724][ T6079] exfat: Bad value for 'uid'
[  147.576748][ T6083] program syz.1.594 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.684613][ T5839] prodikeys 0003:041E:2801.000D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[  147.722958][ T5839] hid_prodikeys: hid-prodikeys: failed to find output report
[  147.722958][ T5839] 
[  147.837308][ T6079] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.895049][ T5839] usb 4-1: USB disconnect, device number 10
[  147.986572][ T5762] usb 5-1: USB disconnect, device number 6
[  148.069656][ T6092] fido_id[6092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  148.144132][ T6100] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  148.244248][ T6102] program syz.4.601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.355078][ T6106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'.
[  148.449608][ T6104] EXT4-fs (loop5): Ignoring removed bh option
[  148.469594][ T6104] EXT4-fs (loop5): Ignoring removed nobh option
[  148.598084][ T6104] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000003,bsddf,bh,max_dir_size_kb=0x00000000004007b1,user_xattr,nouid32,nobh,noload,nouid32,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none.
[  148.871345][ T4237] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  149.301341][ T4237] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  149.309954][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.431399][ T4237] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  149.440651][ T4237] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  149.481180][ T4237] usb 4-1: Manufacturer: syz
[  149.522098][ T4237] usb 4-1: config 0 descriptor??
[  149.691199][ T4237] rc_core: IR keymap rc-hauppauge not found
[  149.697474][ T4237] Registered IR keymap rc-empty
[  149.725767][ T4237] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  149.752934][ T6144] set_capacity_and_notify: 2 callbacks suppressed
[  149.752951][ T6144] loop0: detected capacity change from 0 to 8
[  149.782038][ T4237] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  149.941166][    C0] igorplugusb 4-1:0.0: Error: urb status = -32
[  149.949349][ T5762] usb 4-1: USB disconnect, device number 11
[  150.035551][ T6131] loop1: detected capacity change from 0 to 32768
[  150.074846][ T6129] loop4: detected capacity change from 0 to 32768
[  150.123532][ T6131] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.614 (6131)
[  150.146944][ T6132] loop5: detected capacity change from 0 to 32768
[  150.180506][ T6131] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  150.209339][ T6131] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  150.224238][ T6131] BTRFS info (device loop1): use zstd compression, level 3
[  150.232866][ T6131] BTRFS info (device loop1): using free space tree
[  150.240113][ T6131] BTRFS info (device loop1): has skinny extents
[  150.267668][ T6129] XFS (loop4): Mounting V5 Filesystem
[  150.327219][ T6132] XFS (loop5): Mounting V5 Filesystem
[  150.367229][ T6129] XFS (loop4): Ending clean mount
[  150.454425][ T6132] XFS (loop5): Ending clean mount
[  150.490625][ T4174] XFS (loop5): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  150.551566][ T4174] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 
[  150.600857][ T6131] BTRFS info (device loop1): enabling ssd optimizations
[  150.625090][ T6189] loop3: detected capacity change from 0 to 64
[  150.662729][ T4174] XFS (loop5): Unmount and run xfs_repair
[  150.697011][ T4174] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  150.720751][ T4174] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  150.741232][ T4174] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10  ....... ........
[  150.750415][ T4174] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  150.769300][ T4174] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37  ...... ....@..@7
[  150.779559][ T4174] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  150.794928][ T4174] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  150.807286][ T4174] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  150.818339][ T4174] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  150.828323][ T6132] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74
[  150.844628][ T4189] XFS (loop4): Unmounting Filesystem
[  150.844843][ T6132] XFS (loop5): Failed to initialize disk quotas.
[  151.204804][ T6198] loop0: detected capacity change from 0 to 128
[  151.214753][ T4362] XFS (loop5): Unmounting Filesystem
[  151.352649][ T6198] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.395065][ T6198] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.818614][ T6208] loop4: detected capacity change from 0 to 512
[  151.880754][ T6204] loop3: detected capacity change from 0 to 4096
[  151.980501][ T6208] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.633: Invalid inode bitmap blk 4 in block_group 0
[  152.011880][ T6208] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback.
[  152.115914][ T6215] loop0: detected capacity change from 0 to 764
[  152.155577][ T6208] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  152.188997][ T6208] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.633: Invalid inode bitmap blk 4 in block_group 0
[  152.316388][ T6208] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  152.677233][ T6224] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  153.068298][ T6235] loop5: detected capacity change from 0 to 4096
[  153.153693][ T6235] __ntfs_warning: 54 callbacks suppressed
[  153.153711][ T6235] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  153.256870][ T6235] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  153.297147][ T6235] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  153.332891][ T6235] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  153.398101][   T26] audit: type=1800 audit(1773782352.292:73): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.650" name="bus" dev="loop0" ino=26 res=0 errno=0
[  153.447262][ T6235] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  153.520865][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.654'.
[  153.543912][ T6249] handle_bad_sector: 123 callbacks suppressed
[  153.543943][ T6249] attempt to access beyond end of device
[  153.543943][ T6249] loop0: rw=34817, want=1030, limit=1024
[  153.591866][ T6235] ntfs: volume version 3.1.
[  153.635917][ T6235] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota.
[  153.698613][ T6235] ntfs: (device loop5): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  153.803733][  T308] hfsplus: b-tree write err: -5, ino 25
[  153.828100][  T308] hfsplus: b-tree write err: -5, ino 4
[  153.851818][  T308] hfsplus: b-tree write err: -5, ino 2
[  153.867731][  T308] hfsplus: b-tree write err: -5, ino 26
[  153.890245][ T6258] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  153.900506][ T6258] REISERFS (device loop4): using ordered data mode
[  153.907396][ T6258] reiserfs: using flush barriers
[  153.921630][ T6258] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  153.940449][ T6258] REISERFS (device loop4): checking transaction log (loop4)
[  153.965305][ T6258] REISERFS (device loop4): Using r5 hash to sort names
[  154.121368][ T6258] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  154.188133][ T6272] EXT4-fs (loop0): inline encryption not supported
[  154.215738][ T6272] EXT4-fs (loop0): Ignoring removed nobh option
[  154.255834][ T6272] EXT4-fs (loop0): Ignoring removed bh option
[  154.294355][ T6272] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  154.384496][ T6272] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  154.613907][ T6289] device batadv_slave_1 entered promiscuous mode
[  154.636137][ T6288] device batadv_slave_1 left promiscuous mode
[  154.892442][ T5835] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  155.034245][ T6299] set_capacity_and_notify: 3 callbacks suppressed
[  155.034265][ T6299] loop1: detected capacity change from 0 to 8192
[  155.118485][ T5177]  loop1: p1 < > p4 < >
[  155.324856][ T6299]  loop1: p1 < > p4 < >
[  155.352222][ T6322] loop3: detected capacity change from 0 to 512
[  155.502820][ T6322] FAT-fs (loop3): Directory bread(block 199916) failed
[  155.561883][ T6322] FAT-fs (loop3): Directory bread(block 199917) failed
[  155.570296][ T6322] FAT-fs (loop3): Directory bread(block 199918) failed
[  155.679874][ T6322] FAT-fs (loop3): Directory bread(block 199919) failed
[  155.717707][ T6322] FAT-fs (loop3): Directory bread(block 199920) failed
[  155.764194][ T6322] FAT-fs (loop3): Directory bread(block 199921) failed
[  155.801709][ T6322] FAT-fs (loop3): Directory bread(block 199922) failed
[  155.819593][ T6322] FAT-fs (loop3): Directory bread(block 199923) failed
[  155.839560][ T5175] udevd[5175]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  155.860392][ T6341] loop4: detected capacity change from 0 to 128
[  155.872682][ T4192] udevd[4192]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  155.951938][ T6341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  156.019335][ T4192] udevd[4192]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  156.024135][ T5176] udevd[5176]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  156.041490][ T6341] hpfs: filesystem error: improperly stopped
[  156.048292][ T6341] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  156.065913][ T6322] FAT-fs (loop3): FAT read failed (blocknr 128)
[  156.090001][ T6341] hpfs: You really don't want any checks? You are crazy...
[  156.100117][ T6341] hpfs: hpfs_map_sector(): read error
[  156.114992][ T6341] hpfs: code page support is disabled
[  156.126442][ T6341] hpfs: hpfs_map_4sectors(): unaligned read
[  156.135929][ T6341] hpfs: hpfs_map_4sectors(): unaligned read
[  156.189012][ T6341] hpfs: filesystem error: unable to find root dir
[  156.227582][ T6341] hpfs: hpfs_map_4sectors(): unaligned read
[  156.237381][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready
[  156.269968][ T6341] hpfs: hpfs_map_sector(): read error
[  156.337141][ T5835] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  156.357872][ T6347] loop3: detected capacity change from 0 to 2048
[  156.382542][ T6347] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  156.398300][ T6347] NILFS (loop3): mounting unchecked fs
[  156.437186][ T6347] NILFS (loop3): recovery complete
[  156.444632][ T6350] loop0: detected capacity change from 0 to 1024
[  156.460278][ T6351] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.591134][ T5835] usb 2-1: Using ep0 maxpacket: 16
[  156.685319][  T308] hfsplus: b-tree write err: -5, ino 25
[  156.711346][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.724687][  T308] hfsplus: b-tree write err: -5, ino 4
[  156.742165][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.753360][  T308] hfsplus: b-tree write err: -5, ino 2
[  156.758974][  T308] hfsplus: b-tree write err: -5, ino 26
[  156.769568][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  156.797461][ T5835] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  156.847673][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.868382][ T5835] usb 2-1: config 0 descriptor??
[  157.213924][ T6377] loop4: detected capacity change from 0 to 4096
[  157.310110][ T6377] ntfs: volume version 3.1.
[  157.363336][ T5835] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  157.381680][ T5835] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  157.393314][ T5835] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  157.409551][ T5835] microsoft 0003:045E:07DA.000E: No inputs registered, leaving
[  157.426052][ T5835] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  157.442328][ T5835] microsoft 0003:045E:07DA.000E: no inputs found
[  157.465650][ T5835] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway
[  157.578476][ T5835] usb 2-1: USB disconnect, device number 7
[  157.671388][ T6391] loop3: detected capacity change from 0 to 1024
[  157.736092][ T6393] fido_id[6393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  157.787802][ T6391] hfsplus: bad catalog entry type
[  157.829737][  T154] hfsplus: b-tree write err: -5, ino 25
[  157.839143][  T154] hfsplus: b-tree write err: -5, ino 4
[  157.850714][  T154] hfsplus: b-tree write err: -5, ino 2
[  158.217014][ T6417] loop4: detected capacity change from 0 to 512
[  158.266414][ T6417] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  158.286482][ T6416] loop1: detected capacity change from 0 to 4096
[  158.320254][ T6417] EXT4-fs (loop4): 1 orphan inode deleted
[  158.327830][ T6417] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.346755][ T6417] EXT4-fs (loop4): shut down requested (2)
[  158.411429][ T6422] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.711252][ T6437] loop3: detected capacity change from 0 to 1024
[  158.784692][ T6432] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  158.883203][ T6432] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  158.924412][ T6437] hfsplus: request for non-existent node 62977 in B*Tree
[  158.932474][ T6432] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  158.968245][ T6444] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  158.981088][   T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  158.984704][ T6437] hfsplus: request for non-existent node 62977 in B*Tree
[  159.112740][    T9] hfsplus: b-tree write err: -5, ino 3
[  159.261181][   T13] usb 5-1: Using ep0 maxpacket: 32
[  159.401545][   T13] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  159.410168][   T13] usb 5-1: config 0 has no interface number 0
[  159.427631][ T6450] rock: directory entry would overflow storage
[  159.473597][ T6450] rock: sig=0x4f50, size=4, remaining=3
[  159.480656][ T6450] iso9660: Corrupted directory entry in block 6 of inode 1792
[  159.551152][ T5762] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  159.576380][ T6464] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  159.609861][ T6464] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  159.671547][   T13] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  159.682008][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.690676][   T13] usb 5-1: Product: syz
[  159.718540][   T13] usb 5-1: Manufacturer: syz
[  159.726655][   T13] usb 5-1: SerialNumber: syz
[  159.742222][   T13] usb 5-1: config 0 descriptor??
[  159.750911][ T4359] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  159.765706][ T6466] erofs: (device loop1): mounted with root inode @ nid 36.
[  159.810253][   T13] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  159.911661][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.931280][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.958517][ T5762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.005525][ T5762] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.025269][   T13] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  160.039012][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.064054][   T13] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  160.087314][ T6472] set_capacity_and_notify: 5 callbacks suppressed
[  160.087332][ T6472] loop5: detected capacity change from 0 to 512
[  160.109567][ T5762] usb 1-1: config 0 descriptor??
[  160.137988][ T6472] EXT4-fs (loop5): first meta block group too large: 16711680 (group descriptor block count 1)
[  160.367430][ T6462] loop3: detected capacity change from 0 to 32768
[  160.395860][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.407499][ T6476] device bridge_slave_0 left promiscuous mode
[  160.414809][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.436131][   T13] usb 5-1: USB disconnect, device number 7
[  160.442195][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  160.461412][ T6462] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.739 (6462)
[  160.526464][   T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  160.543946][ T6462] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  160.573236][ T6462] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  160.584750][   T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  160.616914][ T6462] BTRFS info (device loop3): use zstd compression, level 3
[  160.627609][   T13] quatech2 5-1:0.51: device disconnected
[  160.635464][ T5762] plantronics 0003:047F:FFFF.000F: unbalanced collection at end of report description
[  160.651582][ T6462] BTRFS info (device loop3): using free space tree
[  160.681685][ T5762] plantronics 0003:047F:FFFF.000F: parse failed
[  160.688218][ T6462] BTRFS info (device loop3): has skinny extents
[  160.711955][ T5762] plantronics: probe of 0003:047F:FFFF.000F failed with error -22
[  160.738216][ T6480] loop5: detected capacity change from 0 to 8192
[  160.797754][ T6480] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  160.830263][ T6480] REISERFS (device loop5): using ordered data mode
[  160.846807][ T5762] usb 1-1: USB disconnect, device number 8
[  160.911213][ T6480] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  160.932282][ T6480] REISERFS (device loop5): checking transaction log (loop5)
[  161.003458][ T6480] REISERFS (device loop5): Using r5 hash to sort names
[  161.014685][ T6480] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  161.021926][ T6462] BTRFS info (device loop3): enabling ssd optimizations
[  161.033522][ T6480] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  161.661752][ T6522] loop0: detected capacity change from 0 to 2048
[  161.809355][ T6531] loop1: detected capacity change from 0 to 1024
[  161.840513][ T6532] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.161132][ T6537] loop5: detected capacity change from 0 to 1024
[  162.289860][ T6522] NILFS (loop0): error -2 truncating bmap (ino=16)
[  162.298419][ T6537] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.391357][  T144] hfsplus: b-tree write err: -5, ino 25
[  162.397274][  T144] hfsplus: b-tree write err: -5, ino 4
[  162.474827][ T6532] ------------[ cut here ]------------
[  162.481503][ T6532] WARNING: CPU: 1 PID: 6532 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0
[  162.491539][ T6532] Modules linked in:
[  162.495503][ T6532] CPU: 1 PID: 6532 Comm: segctord Not tainted syzkaller #0
[  162.503063][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  162.514779][ T6532] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  162.521118][ T6532] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff
[  162.543823][ T6532] RSP: 0018:ffffc90003e5f390 EFLAGS: 00010293
[  162.550422][ T6532] RAX: ffffffff830ec6ac RBX: ffff8880750a91a0 RCX: ffff88801e468000
[  162.558774][ T6532] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002
[  162.567670][ T6532] RBP: 0000000000000003 R08: ffff88805e8f49ff R09: 1ffff1100bd1e93f
[  162.576466][ T6532] R10: dffffc0000000000 R11: ffffed100bd1e940 R12: ffff88801e469788
[  162.585108][ T6532] R13: ffff88805e7029e0 R14: 00000000003f0002 R15: ffff888025491eb0
[  162.593843][ T6532] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  162.603430][ T6532] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.610156][ T6532] CR2: 0000200000000100 CR3: 0000000064dc4000 CR4: 00000000003506e0
[  162.618365][ T6532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  162.626606][ T6532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  162.634964][ T6532] Call Trace:
[  162.638679][ T6532]  <TASK>
[  162.641936][ T6532]  nilfs_dat_commit_update+0x24/0x40
[  162.647511][ T6532]  nilfs_btree_commit_update_v+0x93/0x410
[  162.653593][ T6532]  nilfs_btree_propagate+0x95a/0xcf0
[  162.659630][ T6532]  nilfs_bmap_propagate+0x70/0x120
[  162.664992][ T6532]  nilfs_segctor_apply_buffers+0x15d/0x320
[  162.671151][ T6532]  ? nilfs_collect_file_data+0xc0/0xc0
[  162.676684][ T6532]  nilfs_segctor_scan_file+0x7af/0x9d0
[  162.682303][ T6532]  ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0
[  162.689845][ T6532]  ? nilfs_segbuf_extend_segsum+0x25d/0x360
[  162.696229][ T6532]  ? rcu_is_watching+0x11/0xa0
[  162.701092][ T6532]  nilfs_segctor_do_construct+0x1c26/0x6ca0
[  162.707259][ T6532]  ? verify_lock_unused+0x140/0x140
[  162.712703][ T6532]  ? nilfs_transaction_unlock+0x220/0x220
[  162.718574][ T6532]  ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70
[  162.725174][ T6532]  ? clear_nonspinnable+0x60/0x60
[  162.730340][ T6532]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  162.736057][ T6532]  ? __lock_acquire+0x7d10/0x7d10
[  162.741432][ T6532]  ? __rwlock_init+0x140/0x140
[  162.746445][ T6532]  ? do_raw_spin_unlock+0x11d/0x230
[  162.751930][ T6532]  ? _raw_spin_unlock+0x24/0x40
[  162.757038][ T6532]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  162.762816][ T6532]  nilfs_segctor_construct+0x17b/0x690
[  162.768423][ T6532]  nilfs_segctor_thread+0x523/0x1180
[  162.773935][ T6532]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  162.780239][ T6532]  ? nilfs_iput_work_func+0x70/0x70
[  162.785583][ T6532]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  162.791737][ T6532]  ? _raw_spin_unlock+0x40/0x40
[  162.796643][ T6532]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  162.803198][ T6532]  ? init_wait_entry+0xd0/0xd0
[  162.808038][ T6532]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  162.814205][ T6532]  ? __kthread_parkme+0x157/0x1b0
[  162.819660][ T6532]  kthread+0x436/0x520
[  162.823935][ T6532]  ? nilfs_iput_work_func+0x70/0x70
[  162.829400][ T6532]  ? kthread_blkcg+0xd0/0xd0
[  162.834447][ T6532]  ret_from_fork+0x1f/0x30
[  162.839179][ T6532]  </TASK>
[  162.842313][ T6532] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  162.849849][ T6532] CPU: 1 PID: 6532 Comm: segctord Not tainted syzkaller #0
[  162.857085][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  162.868005][ T6532] Call Trace:
[  162.871426][ T6532]  <TASK>
[  162.874389][ T6532]  dump_stack_lvl+0x188/0x250
[  162.879366][ T6532]  ? show_regs_print_info+0x20/0x20
[  162.884795][ T6532]  ? load_image+0x400/0x400
[  162.889360][ T6532]  panic+0x2e5/0x810
[  162.893522][ T6532]  ? bpf_jit_dump+0xd0/0xd0
[  162.898182][ T6532]  ? ret_from_fork+0x1f/0x30
[  162.903205][ T6532]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  162.908711][ T6532]  __warn+0x248/0x2b0
[  162.912741][ T6532]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  162.918563][ T6532]  report_bug+0x1b7/0x2e0
[  162.923141][ T6532]  handle_bug+0x3a/0x70
[  162.927460][ T6532]  exc_invalid_op+0x16/0x40
[  162.932145][ T6532]  asm_exc_invalid_op+0x16/0x20
[  162.937224][ T6532] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  162.943244][ T6532] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff
[  162.963682][ T6532] RSP: 0018:ffffc90003e5f390 EFLAGS: 00010293
[  162.970011][ T6532] RAX: ffffffff830ec6ac RBX: ffff8880750a91a0 RCX: ffff88801e468000
[  162.978390][ T6532] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002
[  162.987553][ T6532] RBP: 0000000000000003 R08: ffff88805e8f49ff R09: 1ffff1100bd1e93f
[  162.996890][ T6532] R10: dffffc0000000000 R11: ffffed100bd1e940 R12: ffff88801e469788
[  163.004923][ T6532] R13: ffff88805e7029e0 R14: 00000000003f0002 R15: ffff888025491eb0
[  163.013641][ T6532]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  163.020740][ T6532]  nilfs_dat_commit_update+0x24/0x40
[  163.027290][ T6532]  nilfs_btree_commit_update_v+0x93/0x410
[  163.034331][ T6532]  nilfs_btree_propagate+0x95a/0xcf0
[  163.040812][ T6532]  nilfs_bmap_propagate+0x70/0x120
[  163.047158][ T6532]  nilfs_segctor_apply_buffers+0x15d/0x320
[  163.055327][ T6532]  ? nilfs_collect_file_data+0xc0/0xc0
[  163.061555][ T6532]  nilfs_segctor_scan_file+0x7af/0x9d0
[  163.068081][ T6532]  ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0
[  163.075811][ T6532]  ? nilfs_segbuf_extend_segsum+0x25d/0x360
[  163.082555][ T6532]  ? rcu_is_watching+0x11/0xa0
[  163.088271][ T6532]  nilfs_segctor_do_construct+0x1c26/0x6ca0
[  163.096072][ T6532]  ? verify_lock_unused+0x140/0x140
[  163.102054][ T6532]  ? nilfs_transaction_unlock+0x220/0x220
[  163.108388][ T6532]  ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70
[  163.115453][ T6532]  ? clear_nonspinnable+0x60/0x60
[  163.121221][ T6532]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  163.127740][ T6532]  ? __lock_acquire+0x7d10/0x7d10
[  163.134280][ T6532]  ? __rwlock_init+0x140/0x140
[  163.139583][ T6532]  ? do_raw_spin_unlock+0x11d/0x230
[  163.145232][ T6532]  ? _raw_spin_unlock+0x24/0x40
[  163.150566][ T6532]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  163.156267][ T6532]  nilfs_segctor_construct+0x17b/0x690
[  163.161803][ T6532]  nilfs_segctor_thread+0x523/0x1180
[  163.167404][ T6532]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  163.174198][ T6532]  ? nilfs_iput_work_func+0x70/0x70
[  163.179971][ T6532]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  163.186274][ T6532]  ? _raw_spin_unlock+0x40/0x40
[  163.191303][ T6532]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  163.197250][ T6532]  ? init_wait_entry+0xd0/0xd0
[  163.202670][ T6532]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  163.208895][ T6532]  ? __kthread_parkme+0x157/0x1b0
[  163.214168][ T6532]  kthread+0x436/0x520
[  163.218574][ T6532]  ? nilfs_iput_work_func+0x70/0x70
[  163.224022][ T6532]  ? kthread_blkcg+0xd0/0xd0
[  163.228755][ T6532]  ret_from_fork+0x1f/0x30
[  163.233328][ T6532]  </TASK>
[  163.236811][ T6532] Kernel Offset: disabled
[  163.241952][ T6532] Rebooting in 86400 seconds..