last executing test programs:

9.008591065s ago: executing program 4 (id=840):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0011812835000000000000001100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)

8.918551339s ago: executing program 4 (id=843):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101803, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]})

8.778065704s ago: executing program 4 (id=846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002000010026bd7000fbdbdf2502101004090000060600010008000200ac14142a080017004e224e24080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

8.60319306s ago: executing program 4 (id=848):
unshare(0x20000400)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd})
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x929, 0x1a3100)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)

8.526739842s ago: executing program 4 (id=850):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0)
socket(0x10, 0x3, 0x0)
pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

8.367433618s ago: executing program 4 (id=852):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
ioctl$KDSIGACCEPT(r0, 0x800455ca, 0x6)

2.438449746s ago: executing program 0 (id=911):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x480c, 0x3, 0x2f, 0x1, 0x20, 0x47, 0x3, 0xed, 0xfe, 0x49, 0xc, 0x3}, {0x5296, 0x401, 0xa, 0xc1, 0xd, 0x1, 0x47, 0xf1, 0x7, 0x3, 0x44, 0x3, 0x40000000006}, {0x7, 0x4, 0x1, 0x3e, 0x5a, 0x9, 0x8, 0xf8, 0x0, 0x8, 0x81, 0x3, 0x4}], 0x7})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2.110390017s ago: executing program 3 (id=919):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000040)

2.031427289s ago: executing program 3 (id=921):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0xe3, 0x1, &(0x7f0000000000)="ee", 0x6, 0x1, 0x4c4a, 0x4155, 0xd, 0x1, 0x9, 'syz1\x00'})

1.971673432s ago: executing program 3 (id=923):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.858809426s ago: executing program 1 (id=925):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa097)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x604, 0x13, r0, 0x68f38000)

1.763674809s ago: executing program 1 (id=927):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000600)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x8e}}, {}, {@errors_remount}, {@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb}}, {@quota}]}, 0x5, 0x50d, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18)

1.400485111s ago: executing program 1 (id=930):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
creat(0x0, 0x68)
unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.316084945s ago: executing program 3 (id=931):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0xfc, 0x0, @tick, {0x0, 0xfd}, {}, @raw32}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7, 0x4, {0x1}, 0xfffffffe, 0x100000})

1.229657997s ago: executing program 3 (id=933):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.198430559s ago: executing program 3 (id=934):
r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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")
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7, 0x1ff)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0205867, &(0x7f00000000c0)=ANY=[])

1.045144764s ago: executing program 1 (id=935):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xb, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1af90}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

971.045177ms ago: executing program 2 (id=936):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020600)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0205648, &(0x7f0000000080)={0xf010000, 0x0, 0x4, 0x4, 0x0, {0x77359400}, {0x5, 0x8, 0x0, 0x0, 0x0, 0xd, "3acfa8ee"}})

857.798161ms ago: executing program 1 (id=937):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000)
syncfs(r0)

851.416691ms ago: executing program 2 (id=938):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x8, 0x8001})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000)

703.798496ms ago: executing program 2 (id=939):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
unshare(0x8040480)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

587.77752ms ago: executing program 2 (id=940):
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x400, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfe, 0x69f, &(0x7f0000000f00)="$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")
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9", 0xa)
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002000000"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0)

583.79995ms ago: executing program 0 (id=941):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4)
sendto$packet(r0, &(0x7f0000000180)='\x00\x00\x00', 0x3, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @broadcast}, 0x14)

499.995393ms ago: executing program 2 (id=942):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xbf)
getdents64(r0, 0x0, 0x0)

488.059023ms ago: executing program 1 (id=943):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000002740)=ANY=[], 0x1, 0x616a, &(0x7f0000009780)="$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")
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

487.594274ms ago: executing program 0 (id=944):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x81}, {0x6, 0x61, 0x6, 0xfffffffc}]})
write$ppp(r0, &(0x7f00000008c0)="00003be032c6a4", 0x7)

359.250998ms ago: executing program 0 (id=945):
io_setup(0xca, &(0x7f0000000080)=<r0=>0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000480), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r1, &(0x7f0000000140)="e5ed6dd8c28ce374a9991b119a575f82eeb4fe0366c48f49b5830beb2fe516e43c4065ad72d51fd2a19955be74d9c74a0764681b66812090e2f5a9cc0a678964a8bd877b7b301df8a0071a3db4745dc889d6c158b9ebc3cdc8e45af26ab43790af545d10b3a7ae7c02d062d574a028c98f5a44d44ca85bb095349418f5ffcc55ebb900eea47dd463b8e1a83eb061179d54b36399968b2ede680f1f234dc71d5f107d12c318b4c51f0820d49be9702a5bace4e3d6c9df81f6a5c86fd7c752bfe5c5641e6cb9567a94cf4f25be7d9f67bb6d746657a5c0631dade3805207c27c9a2b188215cff9fa099f3bb570caae3fdf79a0c3f4", 0xb499, 0x8}])

180.651414ms ago: executing program 0 (id=946):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001ac0)={0x0, 0x6, 0x0, 0x2})

462.431µs ago: executing program 2 (id=947):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[], 0x228}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000000c0)="4701", 0x1c, 0x81, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @multicast}, 0x14)

0s ago: executing program 0 (id=948):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x4000009a, 0x0, 0x8}]})

kernel console output (not intermixed with test programs):

ep mac addresses unique to avoid problems!
[   80.768161][ T4206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.778907][ T4206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.789118][ T4206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.799829][ T4206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.811815][ T4206] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.822341][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.830548][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.839422][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.843349][ T4202] Bluetooth: hci4: command 0x040f tx timeout
[   80.853586][ T4202] Bluetooth: hci2: command 0x040f tx timeout
[   80.855847][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.859648][ T4202] Bluetooth: hci0: command 0x040f tx timeout
[   80.872157][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.873765][ T4202] Bluetooth: hci1: command 0x040f tx timeout
[   80.894943][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.902936][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.917067][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.919511][ T4206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.928217][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.934503][ T4202] Bluetooth: hci3: command 0x040f tx timeout
[   80.945935][ T4206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.956963][ T4206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.965811][ T4206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.982757][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.998171][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.008363][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.019215][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.029115][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.039686][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.049774][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.060622][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.071559][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.083931][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.091855][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.099833][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.109148][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.142370][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.153017][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.165275][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.175793][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.185638][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.197270][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.207143][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.217655][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.229048][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.261913][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.271028][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.289290][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.299063][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.307398][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.309355][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.335083][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.343886][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.343905][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.362675][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.371759][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.380538][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.399147][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.408596][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.418180][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.459338][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.492845][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.523320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.633104][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.643426][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.656062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.671999][ T4271] loop3: detected capacity change from 0 to 1024
[   81.680513][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.689482][ T4271] =======================================================
[   81.689482][ T4271] WARNING: The mand mount option has been deprecated and
[   81.689482][ T4271]          and is ignored by this kernel. Remove the mand
[   81.689482][ T4271]          option from the mount to silence this warning.
[   81.689482][ T4271] =======================================================
[   81.698569][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.759619][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.815676][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.839145][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.854674][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.855670][ T4271] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   81.862865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.894240][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.940211][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.987260][ T4271] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.120091][ T4289] loop0: detected capacity change from 0 to 1024
[   82.138392][ T4271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 112: padding at end of block bitmap is not set
[   82.165322][ T4271] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[   82.189661][ T4271] EXT4-fs (loop3): This should not happen!! Data will be lost
[   82.189661][ T4271] 
[   82.250344][ T4271] EXT4-fs (loop3): Total free blocks count 0
[   82.314021][ T4271] EXT4-fs (loop3): Free/Dirty block details
[   82.377011][ T4271] EXT4-fs (loop3): free_blocks=0
[   82.405175][ T4271] EXT4-fs (loop3): dirty_blocks=16
[   82.436481][ T4271] EXT4-fs (loop3): Block reservation details
[   82.442622][ T4271] EXT4-fs (loop3): i_reserved_data_blocks=1
[   82.478466][ T4298] loop4: detected capacity change from 0 to 512
[   82.566747][ T4298] EXT4-fs (loop4): 1 truncate cleaned up
[   82.572440][ T4298] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[   82.640518][ T4298] autofs4:pid:4298:autofs_fill_super: pipe file descriptor does not contain proper ops
[   82.915230][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.934490][ T4202] Bluetooth: hci1: command 0x0419 tx timeout
[   82.950835][ T4202] Bluetooth: hci0: command 0x0419 tx timeout
[   82.975554][ T4202] Bluetooth: hci2: command 0x0419 tx timeout
[   82.981656][ T4202] Bluetooth: hci4: command 0x0419 tx timeout
[   83.024734][ T4202] Bluetooth: hci3: command 0x0419 tx timeout
[   83.079691][ T4300] loop0: detected capacity change from 0 to 40427
[   83.193340][ T4300] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   83.199951][ T4300] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   83.258045][ T4296] loop2: detected capacity change from 0 to 32768
[   83.284345][ T4300] F2FS-fs (loop0): invalid crc value
[   83.290897][ T4321] bridge0: port 2(bridge_slave_1) entered listening state
[   83.340809][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.376667][ T4300] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   83.515220][ T4321] syz.3.21 (4321) used greatest stack depth: 20304 bytes left
[   83.633234][ T4330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23'.
[   83.671959][ T4300] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   83.679702][ T4300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   83.898988][ T4296] ERROR: (device loop2): dbAlloc: the hint is outside the map
[   83.898988][ T4296] 
[   83.926772][ T4296] ERROR: (device loop2): remounting filesystem as read-only
[   83.942963][ T4296] ERROR: (device loop2): diWrite: ixpxd invalid
[   83.942963][ T4296] 
[   83.953549][ T4296] ERROR: (device loop2): txCommit: 
[   83.953549][ T4296] 
[   83.967544][ T4197] attempt to access beyond end of device
[   83.967544][ T4197] loop0: rw=2049, want=45104, limit=40427
[   84.322749][ T4346] binder: 4345:4346 ioctl c018620c 200000000140 returned -1
[   84.382871][ T4348] xt_hashlimit: max too large, truncated to 1048576
[   84.407031][ T4348] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   84.497870][ T4351] loop3: detected capacity change from 0 to 512
[   84.582477][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'.
[   84.601593][ T4359] device bond0 entered promiscuous mode
[   84.602175][ T4361] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure
[   84.611525][ T4359] device bond_slave_0 entered promiscuous mode
[   84.634949][ T4359] device bond_slave_1 entered promiscuous mode
[   84.652155][ T4351] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.677271][ T4359] device bond0 left promiscuous mode
[   84.682923][ T4359] device bond_slave_0 left promiscuous mode
[   84.697836][ T4351] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   84.717721][ T4364] loop2: detected capacity change from 0 to 64
[   84.747405][ T4359] device bond_slave_1 left promiscuous mode
[   84.751307][ T4351] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.34: bg 0: block 104: invalid block bitmap
[   84.809120][ T4351] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   84.850824][ T4351] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.34: invalid indirect mapped block 1 (level 1)
[   84.883326][ T4202] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   85.024007][ T4351] EXT4-fs (loop3): 1 truncate cleaned up
[   85.030109][ T4351] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   85.103527][ T4375] sctp: [Deprecated]: syz.2.43 (pid 4375) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.103527][ T4375] Use struct sctp_sack_info instead
[   85.243830][ T4202] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[   85.279796][ T4202] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   85.311174][ T4202] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   85.405807][ T4394] loop1: detected capacity change from 0 to 16
[   85.457211][   T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.459399][ T4394] erofs: (device loop1): mounted with root inode @ nid 36.
[   85.465289][ T4202] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.508463][ T4202] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   85.538035][ T4202] usb 5-1: Product: syz
[   85.554895][ T4202] usb 5-1: SerialNumber: syz
[   85.610504][ T4400] loop2: detected capacity change from 0 to 8192
[   85.620268][ T4202] cdc_ncm 5-1:1.0: skipping garbage
[   85.627238][ T4202] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[   85.634190][ T4202] cdc_ncm 5-1:1.0: bind() failure
[   85.719391][ T4400] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   85.724947][   T26] usb 1-1: Using ep0 maxpacket: 8
[   85.742858][ T4400] REISERFS (device loop2): using ordered data mode
[   85.750418][ T4400] reiserfs: using flush barriers
[   85.765526][ T4400] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   85.773281][ T4405] loop1: detected capacity change from 0 to 256
[   85.796186][ T4400] REISERFS (device loop2): checking transaction log (loop2)
[   85.820153][ T4400] REISERFS (device loop2): Using r5 hash to sort names
[   85.830039][ T4400] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   85.842141][ T4405] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   85.918859][   T26] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[   85.932754][   T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   85.970727][ T4405] exFAT-fs (loop1): hint_cluster is invalid (17)
[   85.976728][   T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   85.990132][   T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[   86.039216][   T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   86.062901][   T26] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.081585][   T26] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   86.091869][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.357469][    T7] usb 5-1: USB disconnect, device number 2
[   86.367327][   T26] usb 1-1: GET_CAPABILITIES returned 0
[   86.376223][   T26] usbtmc 1-1:16.0: can't read capabilities
[   86.596553][ T4423] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   86.632399][    T7] usb 1-1: USB disconnect, device number 2
[   86.656230][ T4431] program syz.2.67 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.687836][ T4423] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   86.747956][ T4423] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   86.761229][ T4423] UDF-fs: Scanning with blocksize 512 failed
[   86.792563][ T4423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.806700][ T4436] set_capacity_and_notify: 1 callbacks suppressed
[   86.806722][ T4436] loop3: detected capacity change from 0 to 256
[   86.851644][ T4436] exfat: Deprecated parameter 'utf8'
[   86.877860][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'.
[   86.922906][ T4436] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[   87.283329][   T26] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   87.494769][ T4455] loop4: detected capacity change from 0 to 2048
[   87.561032][ T4455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.663550][   T26] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   87.681608][   T26] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   87.700461][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.777090][ T4463] loop4: detected capacity change from 0 to 64
[   87.785549][   T26] gspca_main: stv0680-2.14.0 probing 041e:4007
[   88.128340][ T4469] loop1: detected capacity change from 0 to 4096
[   88.284616][ T4482] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.295664][ T4483] loop4: detected capacity change from 0 to 512
[   88.376038][ T4483] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.392715][ T4469] syz.1.85 (4469) used greatest stack depth: 18872 bytes left
[   88.451147][ T4483] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.90: invalid indirect mapped block 256 (level 2)
[   88.546041][ T4483] EXT4-fs (loop4): 2 truncates cleaned up
[   88.551969][ T4483] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback.
[   88.661315][   T25] audit: type=1800 audit(1780340222.451:2): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.90" name="file1" dev="loop4" ino=15 res=0 errno=0
[   88.683019][ T4488] process 'syz.1.91' launched '/dev/fd/3' with NULL argv: empty string added
[   88.788478][  T154] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[   88.825092][  T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   88.855686][  T154] EXT4-fs (loop4): This should not happen!! Data will be lost
[   88.855686][  T154] 
[   88.888578][  T154] EXT4-fs (loop4): Total free blocks count 0
[   88.899842][  T154] EXT4-fs (loop4): Free/Dirty block details
[   88.910773][  T154] EXT4-fs (loop4): free_blocks=0
[   88.916403][  T154] EXT4-fs (loop4): dirty_blocks=2
[   88.926647][  T154] EXT4-fs (loop4): Block reservation details
[   88.953048][  T154] EXT4-fs (loop4): i_reserved_data_blocks=2
[   88.965599][   T26] stv0680 3-1:4.0: Could not get descriptor 0200
[   88.967963][ T4496] loop1: detected capacity change from 0 to 4096
[   88.987730][  T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16843019 with max blocks 1 with error 28
[   89.012507][ T4496] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[   89.039698][  T154] EXT4-fs (loop4): This should not happen!! Data will be lost
[   89.039698][  T154] 
[   89.058448][ T4494] loop3: detected capacity change from 0 to 4096
[   89.183410][   T26] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[   89.202144][   T26] stv0680 3-1:4.0: last error: 2,  command = 0x22
[   89.229449][ T4494] NILFS error (device loop3): nilfs_readdir: zero-length directory entry
[   89.264921][   T26] usb 3-1: USB disconnect, device number 2
[   89.589742][ T4500] loop4: detected capacity change from 0 to 8192
[   89.639547][ T4504] loop0: detected capacity change from 0 to 4096
[   89.645608][ T4500] FAT-fs (loop4): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value
[   89.691256][ T4512] netem: incorrect ge model size
[   89.712242][ T4512] netem: change failed
[   89.745394][ T4504] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[   90.201029][ T4524] [U] ^H^C
[   90.339132][ T4536] loop2: detected capacity change from 0 to 1024
[   90.643411][ T4541] attempt to access beyond end of device
[   90.643411][ T4541] loop2: rw=0, want=5780, limit=1024
[   90.832947][ T1515] hfsplus: b-tree write err: -5, ino 8
[   91.034969][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   91.076117][ T4554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.231279][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   91.255761][ T4557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.272371][ T4567] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   92.112319][ T4595] set_capacity_and_notify: 1 callbacks suppressed
[   92.112333][ T4595] loop1: detected capacity change from 0 to 512
[   92.230254][ T4568] loop2: detected capacity change from 0 to 40427
[   92.299085][ T4568] F2FS-fs (loop2): invalid crc value
[   92.334526][ T4595] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   92.360023][ T4568] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   92.395191][ T4595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   92.460750][ T4595] System zones: 1-12
[   92.472340][ T4577] loop4: detected capacity change from 0 to 40427
[   92.558114][ T4577] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff
[   92.565429][ T4595] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   92.575295][ T4577] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4
[   92.610212][ T4577] F2FS-fs (loop4): invalid crc value
[   92.616862][ T4595] EXT4-fs (loop1): 1 truncate cleaned up
[   92.629207][ T4595] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,nodiscard,,errors=continue. Quota mode: none.
[   92.653883][    C0] vkms_vblank_simulate: vblank timer overrun
[   92.697219][ T4577] F2FS-fs (loop4): Found nat_bits in checkpoint
[   92.779593][ T4568] F2FS-fs (loop2): Start checkpoint disabled!
[   92.882931][ T4577] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0
[   92.905927][ T4568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   92.954041][ T4577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   93.134227][ T4577] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0
[   93.202435][ T4577] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x41a/0x5a0
[   93.257332][  T154] attempt to access beyond end of device
[   93.257332][  T154] loop2: rw=1, want=45104, limit=40427
[   93.337270][  T154] attempt to access beyond end of device
[   93.337270][  T154] loop2: rw=2049, want=45112, limit=40427
[   93.365034][ T4206] attempt to access beyond end of device
[   93.365034][ T4206] loop4: rw=2049, want=45104, limit=40427
[   93.380660][ T4634] capability: warning: `syz.0.148' uses 32-bit capabilities (legacy support in use)
[   93.447604][ T4634] program syz.0.148 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.070952][ T4661] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   94.201852][ T4665] loop4: detected capacity change from 0 to 512
[   94.216145][ T4638] loop1: detected capacity change from 0 to 40427
[   94.267925][ T4638] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   94.275473][ T4638] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   94.342021][ T4665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.420507][ T4638] F2FS-fs (loop1): invalid crc value
[   94.473495][ T4638] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   94.617615][ T4669] loop0: detected capacity change from 0 to 4096
[   94.678562][ T4638] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   94.701343][ T4638] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   94.875883][ T4196] attempt to access beyond end of device
[   94.875883][ T4196] loop1: rw=2049, want=45104, limit=40427
[   95.044566][ T4692] loop4: detected capacity change from 0 to 64
[   95.228780][   T25] audit: type=1800 audit(1780340229.021:3): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.170" name="file1" dev="loop4" ino=5 res=0 errno=0
[   95.356162][ T4705] [U] 
[   95.387834][ T4705] [U] K{‘
[   95.391117][ T4705] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[   95.419859][ T4705] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[   95.514798][ T4705] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[   95.555092][ T4705] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<Ã	¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[   95.768560][ T4705] [U] 	+�W‰G?]£Ó'A:	»Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[   95.833966][ T4705] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$	µ.Î7YÓ±œ2³
[   95.879611][ T4705] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[   95.930552][ T4705] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[   96.034920][ T4738] loop2: detected capacity change from 0 to 16
[   96.044508][ T4705] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡	Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[   96.088761][ T4738] erofs: (device loop2): mounted with root inode @ nid 36.
[   96.135442][   T25] audit: type=1800 audit(1780340229.931:4): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file1" dev="loop2" ino=86 res=0 errno=0
[   96.168651][ T4738] attempt to access beyond end of device
[   96.168651][ T4738] loop2: rw=0, want=34359738488, limit=16
[   96.188567][ T4705] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ	ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË	³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q	ÌDWŸÒظ=ؽ|Q¬	ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`ƦM¢XÎÂ"Ä\
[   96.194190][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'.
[   96.316479][ T4746] netlink: 39 bytes leftover after parsing attributes in process `syz.0.194'.
[   96.351729][ T4705] [U] {;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[   96.377137][ T4705] [U] I,Ç>ÇÓ¤	ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í	Ø¿
[   96.443446][ T4705] [U] 22½“Æ©ÐÛ©X?0;3U±
[   96.456806][ T4705] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,	‘Ä	ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ	ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[   96.487775][ T4760] loop2: detected capacity change from 0 to 512
[   96.560445][ T4705] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[   96.573376][ T4763] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   96.589988][ T4705] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[   96.603407][ T4760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   96.627129][ T4705] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[   96.676995][ T4760] EXT4-fs (loop2): 1 truncate cleaned up
[   96.680070][ T4705] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[   96.682676][ T4760] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   96.696305][ T4705] [U] ¹EC�
[   96.710462][ T4705] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[   96.790635][ T4768] loop0: detected capacity change from 0 to 512
[   96.875232][ T4768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[   96.906187][ T4768] System zones: 1-12
[   96.947422][ T4768] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.202: missing EA_INODE flag
[   96.972730][ T4704] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[   96.998956][ T4768] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.202: error while reading EA inode 12 err=-117
[   97.028193][ T4768] EXT4-fs (loop0): 1 orphan inode deleted
[   97.034562][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback.
[   97.065842][ T4764] F2FS-fs (loop1): invalid crc value
[   97.095117][ T4764] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   97.275667][ T4764] F2FS-fs (loop1): Start checkpoint disabled!
[   97.297125][ T4764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   97.641887][    T9] attempt to access beyond end of device
[   97.641887][    T9] loop1: rw=1, want=45104, limit=40427
[   97.660626][ T4784] set_capacity_and_notify: 1 callbacks suppressed
[   97.660648][ T4784] loop3: detected capacity change from 0 to 4096
[   97.679883][    T9] attempt to access beyond end of device
[   97.679883][    T9] loop1: rw=2049, want=45112, limit=40427
[   97.969588][ T4784] EXT4-fs (loop3): Test dummy encryption mode enabled
[   97.990430][ T4784] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   98.022893][ T4784] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   98.047741][ T4784] System zones: 0-5
[   98.075680][ T4784] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[   98.183045][ T4806] loop1: detected capacity change from 0 to 256
[   98.279582][ T4806] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.341502][ T4806] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   98.405171][ T4784] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   98.420636][ T4806] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   98.891750][ T4836] loop1: detected capacity change from 0 to 128
[   98.908079][ T4826] loop2: detected capacity change from 0 to 8192
[   99.013757][ T4826] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   99.081746][ T4836] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   99.114924][ T4821] loop0: detected capacity change from 0 to 40427
[   99.124092][ T4826] REISERFS (device loop2): using ordered data mode
[   99.138881][ T4826] reiserfs: using flush barriers
[   99.144134][ T4836] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   99.162609][ T4821] F2FS-fs (loop0): invalid crc value
[   99.182199][ T4826] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   99.206985][ T4826] REISERFS (device loop2): checking transaction log (loop2)
[   99.234841][ T4821] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   99.280354][ T4826] REISERFS (device loop2): Using r5 hash to sort names
[   99.340960][ T4853] loop3: detected capacity change from 0 to 512
[   99.341960][ T4826] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   99.358833][ T4854] input: syz1 as /devices/virtual/input/input5
[   99.445906][ T4821] F2FS-fs (loop0): Start checkpoint disabled!
[   99.479038][ T4821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   99.534103][ T4853] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.234: iget: bad i_size value: 38620345925642
[   99.596575][ T4853] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.234: couldn't read orphan inode 15 (err -117)
[   99.659390][ T4853] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000012,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[   99.734606][ T1515] attempt to access beyond end of device
[   99.734606][ T1515] loop0: rw=1, want=45104, limit=40427
[   99.783560][ T1515] attempt to access beyond end of device
[   99.783560][ T1515] loop0: rw=2049, want=45112, limit=40427
[   99.986796][ T4868] netlink: 340 bytes leftover after parsing attributes in process `syz.2.240'.
[  100.013697][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.080848][ T4870] input: syz1 as /devices/virtual/input/input6
[  100.147303][ T4872] loop0: detected capacity change from 0 to 64
[  100.263406][   T21] usb 2-1: Using ep0 maxpacket: 16
[  100.273126][   T25] audit: type=1800 audit(1780340234.061:5): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.238" name="file1" dev="loop0" ino=5 res=0 errno=0
[  100.376213][ T4876] trusted_key: encrypted_key: keyword 'upäate' not recognized
[  100.385377][   T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.400995][   T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.440110][   T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.498967][   T21] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  100.525313][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.592002][   T21] usb 2-1: config 0 descriptor??
[  100.700294][ T4874] loop2: detected capacity change from 0 to 32768
[  100.788778][ T4874] (syz.2.242,4874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.824884][ T4874] (syz.2.242,4874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.849253][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'.
[  100.926611][ T4874] (syz.2.242,4874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  100.969740][ T4874] (syz.2.242,4874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  101.044504][ T4874] JBD2: Ignoring recovery information on journal
[  101.109189][   T21] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[  101.197827][ T4874] (syz.2.242,4874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  101.219723][ T4874] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.239415][ T4874] (syz.2.242,4874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  101.270023][ T4874] (syz.2.242,4874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  101.330521][   T21] microsoft 0003:045E:07DA.0001: No inputs registered, leaving
[  101.354457][ T4902] loop4: detected capacity change from 0 to 32768
[  101.358191][   T21] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  101.420122][   T21] microsoft 0003:045E:07DA.0001: no inputs found
[  101.431409][ T4902] 
[  101.431409][ T4902]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.431409][ T4902] 
[  101.459048][   T21] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[  101.548239][   T21] usb 2-1: USB disconnect, device number 2
[  101.586363][ T4195] ocfs2: Unmounting device (7,2) on (node local)
[  101.604961][ T4251] ERROR: (device loop4): diWrite: ixpxd invalid
[  101.604961][ T4251] 
[  101.628106][ T4251] ERROR: (device loop4): txCommit: 
[  101.628106][ T4251] 
[  101.663351][ T4251] jfs_write_inode: jfs_commit_inode failed!
[  101.704451][ T4206] 
[  101.704451][ T4206]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.704451][ T4206] 
[  101.718305][ T4917] fido_id[4917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  101.738893][ T4206] 
[  101.738893][ T4206]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  101.738893][ T4206] 
[  101.768196][ T4919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.264'.
[  101.787291][ T4915] loop3: detected capacity change from 0 to 4096
[  101.840162][ T4915] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  101.948324][ T4915] ntfs: volume version 3.1.
[  102.313114][ T4938] Falling back ldisc for ttyS3.
[  102.506639][ T4949] Zero length message leads to an empty skb
[  102.586953][ T4953] tap0: tun_chr_ioctl cmd 1074025677
[  102.592598][ T4953] tap0: linktype set to 804
[  102.703238][ T4942] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  103.179152][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'.
[  103.308974][ T4958] set_capacity_and_notify: 1 callbacks suppressed
[  103.308989][ T4958] loop0: detected capacity change from 0 to 32768
[  103.410948][ T4958] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[  103.410948][ T4958] 
[  103.462052][ T4958] ERROR: (device loop0): remounting filesystem as read-only
[  103.504843][ T4958] jfs_create: dtInsert returned -EIO
[  103.505554][ T4980] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[  103.505554][ T4980] 
[  103.554115][ T4958] ERROR: (device loop0): jfs_create: 
[  103.554115][ T4958] 
[  103.594283][ T4980] ERROR: (device loop0): dbDiscardAG: -EIO
[  103.594283][ T4980] 
[  103.613418][ T4238] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  104.023773][ T4238] usb 3-1: unable to get BOS descriptor or descriptor too short
[  104.063437][ T4238] usb 3-1: not running at top speed; connect to a high speed hub
[  104.190297][ T5014] loop0: detected capacity change from 0 to 1024
[  104.282395][ T5018] loop3: detected capacity change from 0 to 2048
[  104.339129][ T4238] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f
[  104.342301][ T5018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.369590][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.380385][ T5005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.398401][ T4238] usb 3-1: Product: syz
[  104.405110][ T4238] usb 3-1: Manufacturer: syz
[  104.414469][ T4238] usb 3-1: SerialNumber: syz
[  104.458226][    T7] kernel write not supported for file /sequencer (pid: 7 comm: kworker/0:0)
[  104.755638][ T4238] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  105.091372][ T5022] loop0: detected capacity change from 0 to 32768
[  105.112648][ T5053] loop1: detected capacity change from 0 to 2048
[  105.121771][ T5022] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.308 (5022)
[  105.152801][ T5022] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  105.165660][ T5022] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  105.176634][ T5022] BTRFS info (device loop0): use zstd compression, level 3
[  105.183981][ T5022] BTRFS info (device loop0): using free space tree
[  105.190605][ T5022] BTRFS info (device loop0): has skinny extents
[  105.223822][ T5053] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  105.281181][ T5053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.391062][ T5022] BTRFS info (device loop0): enabling ssd optimizations
[  105.403843][ T4238] gp8psk: usb out operation failed.
[  105.420026][ T4238] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  105.439048][ T4238] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19)
[  105.451021][ T4238] usb 3-1: USB disconnect, device number 3
[  105.549939][   T25] audit: type=1800 audit(1780340495.339:6): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="file1" dev="loop0" ino=260 res=0 errno=0
[  105.990976][ T4391] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  106.238824][ T4391] usb 2-1: Using ep0 maxpacket: 32
[  106.274305][ T5109] loop3: detected capacity change from 0 to 256
[  106.353113][ T5112] program syz.4.333 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.363731][ T4391] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  106.372108][ T4391] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  106.396163][ T4391] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  106.428436][ T4391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  106.458567][ T4391] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  106.499014][ T4391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  106.528273][ T4391] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  106.561332][ T4391] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  106.613253][ T4391] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  106.651630][ T4391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.690694][ T5125] program syz.3.338 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.691492][ T4391] usb 2-1: config 0 descriptor??
[  106.788750][ T5133] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[  106.976161][ T4391] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  107.011763][ T5142] loop3: detected capacity change from 0 to 2048
[  107.091680][ T5146] loop2: detected capacity change from 0 to 8
[  107.136457][ T5142] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.225320][ T5142] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.261594][ T4391] usb 2-1: USB disconnect, device number 3
[  107.331514][ T4391] usblp0: removed
[  107.452023][ T5156] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.479504][ T5156] bond0: (slave bond1): Enslaving as an active interface with an up link
[  107.557015][ T5166] loop2: detected capacity change from 0 to 256
[  107.594169][ T5166] exfat: Deprecated parameter 'namecase'
[  107.635502][ T5166] exfat: Deprecated parameter 'utf8'
[  107.708936][ T5166] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  108.115954][ T5190] loop2: detected capacity change from 0 to 512
[  108.127924][ T5191] kvm [5188]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2000000
[  108.175275][ T5196] netlink: 56 bytes leftover after parsing attributes in process `syz.3.369'.
[  108.201312][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'.
[  108.252973][ T5190] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.299944][ T5190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  108.315026][ T5190] System zones: 1-12
[  108.330792][ T5199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.385932][ T5190] EXT4-fs (loop2): 1 truncate cleaned up
[  108.404633][ T5190] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  108.441473][   T25] audit: type=1800 audit(1780340498.229:7): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.366" name="file1" dev="loop2" ino=15 res=0 errno=0
[  108.595877][ T5212] loop1: detected capacity change from 0 to 512
[  108.738666][ T5212] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.376: bad orphan inode 15
[  108.760654][ T5212] ext4_test_bit(bit=14, block=5) = 0
[  108.769767][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  108.923616][ T4238] Bluetooth: hci5: command 0x1003 tx timeout
[  108.938278][  T146] Bluetooth: hci5: sending frame failed (-49)
[  108.957297][ T5230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.064627][ T5235] loop1: detected capacity change from 0 to 512
[  109.106248][ T5235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.150938][ T5235] EXT4-fs (loop1): 1 truncate cleaned up
[  109.159249][ T5235] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  109.510369][ T5261] loop1: detected capacity change from 0 to 64
[  109.555125][ T5253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.603691][ T5263] loop2: detected capacity change from 0 to 4096
[  109.603814][ T5261] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  109.726613][ T5267] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.863710][ T5271] loop0: detected capacity change from 0 to 512
[  109.963618][ T5271] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.348006][ T5285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.410'.
[  110.728115][ T5275] loop1: detected capacity change from 0 to 40427
[  110.836426][ T5308] syz.0.419 uses obsolete (PF_INET,SOCK_PACKET)
[  110.874296][ T5275] F2FS-fs (loop1): invalid crc value
[  110.940245][ T5275] F2FS-fs (loop1): Found nat_bits in checkpoint
[  111.003481][ T4238] Bluetooth: hci5: command 0x1001 tx timeout
[  111.009581][  T146] Bluetooth: hci5: sending frame failed (-49)
[  111.039144][ T5275] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  111.053302][ T1107] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  111.123262][ T5275] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  111.155790][ T5320] loop0: detected capacity change from 0 to 2048
[  111.231729][ T5320] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,acl,mb_optimize_scan=0x0000000000000000,journal_dev=0x0000000000000801,quota,noblock_validity,,errors=continue. Quota mode: writeback.
[  111.264672][ T5320] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.399501][ T5320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.424: bg 0: block 345: padding at end of block bitmap is not set
[  111.463815][ T5320] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  111.503414][ T1107] usb 3-1: config 4 has an invalid interface number: 244 but max is 2
[  111.524696][ T1107] usb 3-1: config 4 has an invalid interface number: 244 but max is 2
[  111.537948][ T1107] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 3
[  111.559328][ T1107] usb 3-1: config 4 has no interface number 1
[  111.567728][ T1107] usb 3-1: config 4 interface 244 has no altsetting 0
[  111.575395][ T1107] usb 3-1: config 4 interface 244 has no altsetting 1
[  111.582180][ T1107] usb 3-1: config 4 interface 0 has no altsetting 0
[  111.669071][ T5327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  111.845558][ T1107] usb 3-1: string descriptor 0 read error: -22
[  111.862202][ T1107] usb 3-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice=15.88
[  111.893296][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.901015][ T5330] loop0: detected capacity change from 0 to 2048
[  111.997523][ T1107] usb-storage 3-1:4.244: USB Mass Storage device detected
[  112.029708][ T5330] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  112.076396][ T1107] usb-storage 3-1:4.244: Quirks match for vid 054c pid 087d: 4000000
[  112.175872][ T1107] usb-storage 3-1:4.0: USB Mass Storage device detected
[  112.190484][ T5341] loop1: detected capacity change from 0 to 256
[  112.238855][ T1107] usb-storage 3-1:4.0: Quirks match for vid 054c pid 087d: 4000000
[  112.313805][ T1107] usb 3-1: USB disconnect, device number 4
[  112.349060][ T5341] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d)
[  112.443282][ T4391] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  112.457790][ T5332] chnl_net:caif_netlink_parms(): no params data found
[  112.560980][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.568354][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.580529][ T5332] device bridge_slave_0 entered promiscuous mode
[  112.589573][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.596971][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.605855][ T5332] device bridge_slave_1 entered promiscuous mode
[  112.681537][ T5332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.693346][ T4391] usb 1-1: Using ep0 maxpacket: 32
[  112.711338][ T5332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.759450][ T5332] team0: Port device team_slave_0 added
[  112.786796][ T5332] team0: Port device team_slave_1 added
[  112.813292][ T4391] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  112.821410][ T4391] usb 1-1: config 0 has no interface number 0
[  112.860633][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.867770][ T4391] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  112.890985][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.923230][ T4391] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  112.993562][ T5332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.011469][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.030140][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.056117][    C1] vkms_vblank_simulate: vblank timer overrun
[  113.083425][ T1107] Bluetooth: hci5: command 0x1009 tx timeout
[  113.099022][ T5332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.143374][ T4391] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  113.170442][ T4391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.188790][ T4391] usb 1-1: Product: syz
[  113.201221][ T4391] usb 1-1: Manufacturer: syz
[  113.209038][ T4391] usb 1-1: SerialNumber: syz
[  113.240000][ T4391] usb 1-1: config 0 descriptor??
[  113.280545][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.322741][ T5332] device hsr_slave_0 entered promiscuous mode
[  113.340231][ T5332] device hsr_slave_1 entered promiscuous mode
[  113.363281][ T5332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.400079][ T5332] Cannot create hsr debugfs directory
[  113.460328][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.513440][ T4391] radio-si470x 1-1:0.35: this is not a si470x device.
[  113.539322][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.593363][ T4391] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  113.619969][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.681505][ T5369] loop2: detected capacity change from 0 to 32768
[  113.791810][ T5369] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  113.791810][ T5369] 
[  113.838849][ T5095] usb 1-1: USB disconnect, device number 3
[  113.969539][  T154] read_mapping_page failed!
[  113.976804][  T154] ERROR: (device loop2): txCommit: 
[  113.976804][  T154] 
[  113.990309][  T154] jfs_write_inode: jfs_commit_inode failed!
[  114.043438][ T1110] Bluetooth: hci3: command 0x0409 tx timeout
[  114.423188][ T5399] loop1: detected capacity change from 0 to 256
[  114.905003][ T5417] loop2: detected capacity change from 0 to 2048
[  114.973909][ T5417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.200617][ T5424] loop1: detected capacity change from 0 to 4096
[  115.205016][ T5332] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  115.245684][ T5424] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  115.285144][ T5401] loop0: detected capacity change from 0 to 32768
[  115.285974][ T5332] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  115.319630][ T5424] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  115.356419][ T5424] ntfs3: loop1: Failed to load $Extend.
[  115.381098][ T5332] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  115.428891][ T5431] loop2: detected capacity change from 0 to 128
[  115.445125][  T144] device hsr_slave_0 left promiscuous mode
[  115.471140][  T144] device hsr_slave_1 left promiscuous mode
[  115.501038][ T5401] XFS (loop0): Mounting V5 Filesystem
[  115.508382][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.517235][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.528652][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.537898][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.544769][ T5401] XFS (loop0): Ending clean mount
[  115.550683][  T144] device bridge_slave_1 left promiscuous mode
[  115.559275][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.608586][ T5401] XFS (loop0): Quotacheck needed: Please wait.
[  115.655025][  T144] device bridge_slave_0 left promiscuous mode
[  115.667405][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.702408][  T144] device veth1_macvtap left promiscuous mode
[  115.735900][  T144] device veth0_macvtap left promiscuous mode
[  115.744131][  T144] device veth1_vlan left promiscuous mode
[  115.759862][  T144] device veth0_vlan left promiscuous mode
[  115.772163][ T5401] XFS (loop0): Quotacheck: Done.
[  115.951229][ T4197] XFS (loop0): Unmounting Filesystem
[  116.123396][ T1110] Bluetooth: hci3: command 0x041b tx timeout
[  116.143859][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  116.169212][  T144] team0 (unregistering): Port device team_slave_1 removed
[  116.220060][  T144] team0 (unregistering): Port device team_slave_0 removed
[  116.236278][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.259592][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.373075][  T144] bond0 (unregistering): Released all slaves
[  116.403282][    T7] usb 3-1: Using ep0 maxpacket: 32
[  116.419464][ T5332] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  116.561521][ T5332] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.568590][    T7] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.586705][    T7] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.599143][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  116.611078][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  116.648825][ T5332] 8021q: adding VLAN 0 to HW filter on device team0
[  116.706797][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  116.720202][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.732581][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.733574][    T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  116.739738][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.758900][    T7] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  116.767954][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  116.778479][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.780947][    T7] usb 3-1: Product: syz
[  116.788734][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.797841][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.801061][    T7] usb 3-1: Manufacturer: syz
[  116.806087][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.839720][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  116.855087][    T7] hub 3-1:4.0: USB hub found
[  116.860791][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  116.902693][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.922882][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.942277][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  116.958618][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.969090][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.975417][ T5456] loop1: detected capacity change from 0 to 32768
[  116.982703][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.992332][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.004433][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  117.012862][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.036109][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  117.051475][ T5456] JBD2: Ignoring recovery information on journal
[  117.116445][ T5456] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  117.168810][    T7] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[  117.286105][ T5456] (syz.1.465,5456,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=255, inode=0, rec_len=0, name_len=0
[  117.311429][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.335768][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.400594][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  117.463420][ T4196] ocfs2: Unmounting device (7,1) on (node local)
[  117.473519][ T1515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  117.484146][ T1515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.556415][   T13] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0
[  117.558013][ T5332] device veth0_vlan entered promiscuous mode
[  117.583577][ T4391] usb 3-1: USB disconnect, device number 5
[  117.616133][   T13] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0
[  117.629838][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  117.645107][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.663019][   T13] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0
[  117.674432][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.682253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.724557][   T13] hid-generic 0004:0004:FFFF0001.0002: hidraw0: <UNKNOWN> HID v0.b3 Device [syz0] on syz1
[  117.752223][ T5332] device veth1_vlan entered promiscuous mode
[  117.867876][ T5472] fido_id[5472]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  117.909966][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  117.920301][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  117.935944][ T5476] netlink: 128 bytes leftover after parsing attributes in process `syz.1.468'.
[  117.990641][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  118.050710][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  118.077796][ T5332] device veth0_macvtap entered promiscuous mode
[  118.095308][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'.
[  118.132012][ T5332] device veth1_macvtap entered promiscuous mode
[  118.180874][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.205704][ T4391] Bluetooth: hci3: command 0x040f tx timeout
[  118.232751][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.256068][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.267970][ T5487] netlink: 'syz.1.475': attribute type 3 has an invalid length.
[  118.281998][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.293079][ T5487] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.475'.
[  118.316021][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.328957][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.355012][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.399108][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.443103][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.480887][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  118.544447][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  118.571586][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.613582][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.654980][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.675280][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.689752][ T5502] virtiofs: Unexpected value for 'dax'
[  118.696764][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.730536][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.761109][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.800644][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.830501][ T5506] loop1: detected capacity change from 0 to 1024
[  118.842913][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.888331][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.910086][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.964252][ T5508] netlink: 'syz.2.486': attribute type 5 has an invalid length.
[  118.993971][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  119.027998][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.064229][ T5332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.081916][ T5514] loop0: detected capacity change from 0 to 256
[  119.098574][ T5332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.146760][ T5506] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  119.148595][ T5332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.158503][ T5506] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  119.164695][ T5514] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  119.182381][ T5517] hfsplus: b-tree write err: -5, ino 22
[  119.191580][ T5332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.243568][ T4391] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.283792][ T5519] loop2: detected capacity change from 0 to 24
[  119.334808][ T5519] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  119.385837][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.397106][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.428870][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.444149][ T5519] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  119.454419][    T9] hfsplus: b-tree write err: -5, ino 25
[  119.460331][    T9] hfsplus: b-tree write err: -5, ino 4
[  119.483682][    T9] hfsplus: b-tree write err: -5, ino 2
[  119.503428][ T4391] usb 5-1: Using ep0 maxpacket: 8
[  119.512368][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.524486][    T9] hfsplus: b-tree write err: -5, ino 23
[  119.542112][    T9] hfsplus: b-tree write err: -5, ino 22
[  119.548724][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.576515][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.623983][ T4391] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  119.653771][ T5524] loop0: detected capacity change from 0 to 256
[  119.673335][ T4391] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  119.723878][ T4391] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  119.764077][ T5531] loop3: detected capacity change from 0 to 128
[  119.798666][ T4391] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.799909][ T5532] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  119.799909][ T5532] The task syz.1.493 (5532) triggered the difference, watch for misbehavior.
[  119.844581][ T4391] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  119.877995][ T4391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.924493][ T5531] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x00000000000000da,,errors=continue. Quota mode: none.
[  119.972837][ T5531] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.253389][ T4391] usb 5-1: GET_CAPABILITIES returned 0
[  120.258954][ T4391] usbtmc 5-1:16.0: can't read capabilities
[  120.288626][ T1110] Bluetooth: hci3: command 0x0419 tx timeout
[  120.422137][ T5545] loop2: detected capacity change from 0 to 4096
[  120.448168][ T5545] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  120.484411][ T5537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.510700][ T5095] usb 5-1: USB disconnect, device number 3
[  120.652878][ T5545] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  120.794347][   T25] audit: type=1800 audit(1780340510.589:8): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.500" name="file1" dev="loop2" ino=30 res=0 errno=0
[  120.855859][  T144] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  120.870538][ T4195] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  120.880469][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  120.895987][ T4195] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  120.904450][   T13] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  120.918598][  T144] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  120.931250][ T4195] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[  121.026929][ T5553] loop3: detected capacity change from 0 to 32768
[  121.101214][ T5553] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.504 (5553)
[  121.126081][ T5553] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  121.146725][ T5553] BTRFS info (device loop3): setting nodatasum
[  121.152935][ T5553] BTRFS info (device loop3): force zlib compression, level 3
[  121.201433][ T5553] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  121.237575][ T5553] BTRFS info (device loop3): use lzo compression, level 0
[  121.252982][ T5553] BTRFS info (device loop3): turning on flush-on-commit
[  121.270572][ T5553] BTRFS info (device loop3): enabling auto defrag
[  121.290861][ T5553] BTRFS info (device loop3): max_inline at 4096
[  121.299455][ T5576] loop4: detected capacity change from 0 to 4096
[  121.311103][ T5553] BTRFS info (device loop3): using free space tree
[  121.328279][ T5553] BTRFS info (device loop3): has skinny extents
[  121.343884][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  121.351712][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  121.389139][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.417669][ T5583] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.428741][   T13] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  121.471490][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.531200][   T13] usb 2-1: config 0 descriptor??
[  121.545092][ T5553] BTRFS info (device loop3): enabling ssd optimizations
[  121.623381][    T7] usb 3-1: Using ep0 maxpacket: 16
[  121.764339][    T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.777228][    T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.791625][    T7] usb 3-1: config 0 interface 0 has no altsetting 0
[  121.811365][    T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  121.826709][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.846150][    T7] usb 3-1: config 0 descriptor??
[  121.867550][ T5604] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  121.874722][ T5604] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  122.034987][   T13] konepure 0003:1E7D:2DBE.0003: unbalanced delimiter at end of report description
[  122.049862][ T5618] loop4: detected capacity change from 0 to 24
[  122.054085][   T13] konepure 0003:1E7D:2DBE.0003: parse failed
[  122.074882][   T13] konepure: probe of 0003:1E7D:2DBE.0003 failed with error -22
[  122.075835][ T5618] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  122.158171][ T5618] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  122.251742][   T13] usb 2-1: USB disconnect, device number 4
[  122.318191][ T5627] loop4: detected capacity change from 0 to 128
[  122.340313][    T7] hid (null): nested delimiters
[  122.426866][ T5627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  122.455321][ T5627] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.488104][ T5094] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  122.543943][   T13] usb 3-1: USB disconnect, device number 6
[  122.594292][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'.
[  122.647941][ T5641] netlink: 'syz.4.528': attribute type 1 has an invalid length.
[  122.733086][ T5094] usb 1-1: Using ep0 maxpacket: 16
[  122.774417][ T5645] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  122.843312][ T5645] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  122.856269][ T5094] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  122.867835][ T5094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.918095][ T5094] usb 1-1: config 0 descriptor??
[  122.994595][ T5094] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  123.223340][ T5094] usb 1-1: Detected FT232BM
[  123.241437][ T5667] futex_wake_op: syz.4.540 tries to shift op by -1; fix this program
[  123.264416][ T5667] fuse: Unexpected value for 'default_permissions'
[  123.448954][ T5094] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  123.516843][ T5094] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  123.598641][ T5677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.740372][ T5095] usb 1-1: USB disconnect, device number 4
[  123.771172][ T5095] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  123.798713][ T5095] ftdi_sio 1-1:0.0: device disconnected
[  123.809607][ T5665] XFS (loop2): Mounting V5 Filesystem
[  123.955325][ T5665] XFS (loop2): Ending clean mount
[  123.963321][ T5665] XFS (loop2): Quotacheck needed: Please wait.
[  124.032484][ T5699] set_capacity_and_notify: 3 callbacks suppressed
[  124.032499][ T5699] loop3: detected capacity change from 0 to 512
[  124.189997][ T5699] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.202590][ T5665] XFS (loop2): Quotacheck: Done.
[  124.350649][ T4195] XFS (loop2): Unmounting Filesystem
[  124.369392][ T5708] loop1: detected capacity change from 0 to 256
[  124.404207][ T5701] loop4: detected capacity change from 0 to 32768
[  124.560038][ T5708] FAT-fs (loop1): Directory bread(block 64) failed
[  124.571278][ T5708] FAT-fs (loop1): Directory bread(block 65) failed
[  124.602687][ T5708] FAT-fs (loop1): Directory bread(block 66) failed
[  124.609366][ T5708] FAT-fs (loop1): Directory bread(block 67) failed
[  124.634720][ T5708] FAT-fs (loop1): Directory bread(block 68) failed
[  124.699372][ T5708] FAT-fs (loop1): Directory bread(block 69) failed
[  124.721233][ T5708] FAT-fs (loop1): Directory bread(block 70) failed
[  124.739095][ T5708] FAT-fs (loop1): Directory bread(block 71) failed
[  124.762624][ T5708] FAT-fs (loop1): Directory bread(block 72) failed
[  124.769663][ T5708] FAT-fs (loop1): Directory bread(block 73) failed
[  125.120211][ T5729] rtc_cmos 00:00: Alarms can be up to one day in the future
[  125.159578][ T1110] rtc_cmos 00:00: Alarms can be up to one day in the future
[  125.178647][ T1110] rtc_cmos 00:00: Alarms can be up to one day in the future
[  125.208931][ T1110] rtc_cmos 00:00: Alarms can be up to one day in the future
[  125.240805][ T1110] rtc_cmos 00:00: Alarms can be up to one day in the future
[  125.280173][ T5743] loop1: detected capacity change from 0 to 128
[  125.286880][ T1110] rtc rtc0: __rtc_set_alarm: err=-22
[  125.381443][ T5743] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  125.421954][ T5743] hpfs: filesystem error: improperly stopped
[  125.445919][ T5743] hpfs: You really don't want any checks? You are crazy...
[  125.487748][ T5743] hpfs: hpfs_map_sector(): read error
[  125.505906][ T5743] hpfs: code page support is disabled
[  125.533704][ T5743] hpfs: hpfs_map_4sectors(): unaligned read
[  125.549953][ T5743] hpfs: hpfs_map_4sectors(): unaligned read
[  125.556368][ T5743] hpfs: filesystem error: unable to find root dir
[  125.749688][ T4269] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  125.782728][ T4238] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.172839][ T4238] usb 1-1: config 0 has an invalid interface number: 216 but max is 0
[  126.181288][ T4238] usb 1-1: config 0 has no interface number 0
[  126.187502][ T4238] usb 1-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[  126.197702][ T4238] usb 1-1: config 0 interface 216 altsetting 4 has an invalid endpoint with address 0xDB, skipping
[  126.208677][ T4238] usb 1-1: config 0 interface 216 has no altsetting 0
[  126.212715][ T1110] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  126.215707][ T4238] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  126.231973][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.242764][ T4238] usb 1-1: config 0 descriptor??
[  126.272923][ T5748] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  126.280661][ T5748] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  126.293654][ T4238] usb 1-1: NFC: intf ffff888073d65000 id ffffffff8cb53340
[  126.332747][ T4269] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  126.342282][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.350368][ T4269] usb 3-1: Product: syz
[  126.354839][ T4269] usb 3-1: Manufacturer: syz
[  126.359433][ T4269] usb 3-1: SerialNumber: syz
[  126.366062][ T4269] usb 3-1: config 0 descriptor??
[  126.512722][ T4269] usb 1-1: USB disconnect, device number 5
[  126.583023][ T1110] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  126.592291][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.603271][ T1110] usb 4-1: config 0 descriptor??
[  126.645789][ T1110] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  126.853021][ T1110] gp8psk: usb in 128 operation failed.
[  127.045010][ T5779] loop4: detected capacity change from 0 to 8192
[  127.101519][ T5779]  loop4: p1 p2 p3 p4
[  127.112604][ T1110] gp8psk: FW Version = 220.37.51 (0xdc2533)  Build 2136/100/214
[  127.133189][ T5779] loop4: p1 start 51379968 is beyond EOD, truncated
[  127.143963][ T5779] loop4: p3 size 100663552 extends beyond EOD, truncated
[  127.164548][ T5779] loop4: p4 size 81920 extends beyond EOD, truncated
[  127.202627][ T5784] loop0: detected capacity change from 0 to 1024
[  127.211980][ T5774] loop1: detected capacity change from 0 to 32768
[  127.314767][ T5774] XFS (loop1): Mounting V5 Filesystem
[  127.332840][ T1110] gp8psk: usb in 149 operation failed.
[  127.338355][ T1110] gp8psk: failed to get FPGA version
[  127.360719][ T4497] hfsplus: b-tree write err: -5, ino 8
[  127.373982][ T1110] gp8psk: usb in 138 operation failed.
[  127.397187][ T1110] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  127.423296][ T5791] loop4: detected capacity change from 0 to 2048
[  127.429442][ T5774] XFS (loop1): Ending clean mount
[  127.445292][ T5774] XFS (loop1): Quotacheck needed: Please wait.
[  127.479050][ T1110] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  127.498417][ T5774] XFS (loop1): Quotacheck: Done.
[  127.501867][ T5791] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  127.555105][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  127.581831][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  127.599692][ T5799] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.608495][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  127.647214][ T1110] usb 4-1: USB disconnect, device number 2
[  127.720970][ T4196] XFS (loop1): Unmounting Filesystem
[  128.039321][ T5818] loop0: detected capacity change from 0 to 16
[  128.066186][ T5820] option changes via remount are deprecated (pid=5819 comm=syz.3.603)
[  128.129130][ T5818] erofs: (device loop0): mounted with root inode @ nid 36.
[  128.135006][ T5822] loop3: detected capacity change from 0 to 4096
[  128.310361][ T5822] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  128.472349][ T4391] usb 3-1: USB disconnect, device number 7
[  128.607462][ T5838] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  128.628913][ T5838] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  128.713843][ T5840] attempt to access beyond end of device
[  128.713843][ T5840] loop3: rw=0, want=45068, limit=64
[  128.756289][ T5840] Buffer I/O error on dev loop3, logical block 22533, async page read
[  128.810408][ T5840] attempt to access beyond end of device
[  128.810408][ T5840] loop3: rw=0, want=45068, limit=64
[  128.844977][ T4238] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  128.845070][ T5840] Buffer I/O error on dev loop3, logical block 22533, async page read
[  128.942420][ T4251] attempt to access beyond end of device
[  128.942420][ T4251] loop2: rw=1, want=1041, limit=128
[  128.950902][ T5095] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  129.068056][ T5845] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  129.142416][ T4238] usb 1-1: Using ep0 maxpacket: 32
[  129.202445][ T5095] usb 5-1: Using ep0 maxpacket: 16
[  129.278382][ T4238] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  129.294058][ T4238] usb 1-1: config 0 has no interface number 0
[  129.308038][ T4238] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.322530][ T5095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.337927][ T4238] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.364207][ T5095] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  129.377807][ T4238] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  129.396683][ T5095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.406496][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.425158][ T5095] usb 5-1: config 0 descriptor??
[  129.462619][ T4238] usb 1-1: config 0 descriptor??
[  129.478176][ T5861] set_capacity_and_notify: 3 callbacks suppressed
[  129.478190][ T5861] loop3: detected capacity change from 0 to 256
[  129.603626][ T5861] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  129.759580][ T5865] loop3: detected capacity change from 0 to 2048
[  129.765138][ T5849] loop2: detected capacity change from 0 to 32768
[  129.856584][ T5869] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.879959][ T5849] XFS (loop2): Mounting V5 Filesystem
[  129.886638][ T5863] loop1: detected capacity change from 0 to 32768
[  129.936167][ T5095] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  130.020071][ T5849] XFS (loop2): Ending clean mount
[  130.028883][ T5849] XFS (loop2): Quotacheck needed: Please wait.
[  130.154505][ T4238] uclogic 0003:28BD:0094.0006: pen parameters not found
[  130.165730][ T4238] uclogic 0003:28BD:0094.0006: interface is invalid, ignoring
[  130.173260][ T5849] XFS (loop2): Quotacheck: Done.
[  130.297706][ T4195] XFS (loop2): Unmounting Filesystem
[  130.357957][ T4238] usb 1-1: USB disconnect, device number 6
[  130.405279][ T1107] usb 5-1: USB disconnect, device number 4
[  130.499547][ T5880] loop3: detected capacity change from 0 to 32768
[  130.555999][ T5880] (syz.3.628,5880,0):ocfs2_find_slot:468 ERROR: no free slots available!
[  130.566733][ T5880] (syz.3.628,5880,1):ocfs2_mount_volume:1811 ERROR: status = -22
[  130.616196][ T5880] (syz.3.628,5880,1):ocfs2_fill_super:1177 ERROR: status = -22
[  130.819427][ T5885] Failed to get privilege flags for destination (handle=0x2:0x400)
[  130.882127][ T4269] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  131.192609][ T5898] loop0: detected capacity change from 0 to 4096
[  131.265518][ T5898] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  131.322138][ T4269] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  131.331227][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.356491][ T4269] usb 2-1: config 0 descriptor??
[  131.414109][ T4269] cp210x 2-1:0.0: cp210x converter detected
[  131.707324][ T5907] loop4: detected capacity change from 0 to 32768
[  131.790161][ T5907] add_index: next_index = 0.  Resetting!
[  131.820807][ T5907] find_entry called with index >= next_index
[  131.825307][ T5911] loop2: detected capacity change from 0 to 32768
[  131.850046][ T5907] find_entry called with index >= next_index
[  131.865249][ T5907] find_entry called with index >= next_index
[  131.878559][ T4269] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  131.896708][ T5911] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  131.910836][ T5921] loop3: detected capacity change from 0 to 4096
[  131.911358][ T5907] find_entry called with index >= next_index
[  131.933430][ T5911] JBD2: Ignoring recovery information on journal
[  131.944480][ T4269] usb 2-1: cp210x converter now attached to ttyUSB0
[  131.953916][ T5907] non-latin1 character 0x3ff found in JFS file name
[  131.960915][ T5907] mount with iocharset=utf8 to access
[  132.035690][ T5911] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  132.046309][ T1110] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  132.084141][ T5921] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  132.175200][ T5095] usb 2-1: USB disconnect, device number 5
[  132.193955][ T5095] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  132.238350][ T5095] cp210x 2-1:0.0: device disconnected
[  132.291979][ T1110] usb 1-1: Using ep0 maxpacket: 8
[  132.312888][ T4195] ocfs2: Unmounting device (7,2) on (node local)
[  132.413211][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.438824][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.468575][ T1110] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  132.492920][ T1110] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  132.505274][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.524126][ T5094] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  132.546080][ T1110] usb 1-1: config 0 descriptor??
[  132.590793][ T5932] loop2: detected capacity change from 0 to 1024
[  132.685620][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.692961][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.707860][ T5932] hfsplus: b-tree write err: -5, ino 20
[  132.794524][ T4269] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.803131][ T4497] hfsplus: b-tree write err: -5, ino 25
[  132.813883][ T4497] hfsplus: b-tree write err: -5, ino 4
[  132.819597][ T4497] hfsplus: b-tree write err: -5, ino 2
[  132.830789][ T4497] hfsplus: b-tree write err: -5, ino 20
[  133.023897][ T1110] dragonrise 0003:0079:0006.0007: unknown main item tag 0x6
[  133.039675][ T1110] dragonrise 0003:0079:0006.0007: report_id 48829 is invalid
[  133.052016][ T5094] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  133.064601][ T5094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.072786][ T4269] usb 5-1: Using ep0 maxpacket: 16
[  133.073876][ T1110] dragonrise 0003:0079:0006.0007: item 0 2 1 8 parsing failed
[  133.109991][ T5094] usb 4-1: Product: syz
[  133.118833][ T5094] usb 4-1: Manufacturer: syz
[  133.124345][ T1110] dragonrise 0003:0079:0006.0007: parse failed
[  133.135377][ T5094] usb 4-1: SerialNumber: syz
[  133.143415][ T1110] dragonrise: probe of 0003:0079:0006.0007 failed with error -22
[  133.204538][ T5094] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  133.227642][ T4269] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[  133.295470][ T5094] usb 1-1: USB disconnect, device number 7
[  133.446787][ T4269] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  133.466282][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.501839][ T4269] usb 5-1: Product: syz
[  133.519056][ T4269] usb 5-1: Manufacturer: syz
[  133.524167][ T4269] usb 5-1: SerialNumber: syz
[  133.620728][ T5957] program syz.1.661 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.636539][ T5937] XFS (loop2): Mounting V5 Filesystem
[  133.695771][ T5937] XFS (loop2): Ending clean mount
[  133.710431][ T5937] XFS (loop2): Quotacheck needed: Please wait.
[  133.757280][ T5937] XFS (loop2): Quotacheck: Done.
[  133.832738][ T1110] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  133.951263][ T4269] usb 5-1: USB disconnect, device number 5
[  133.996473][ T5968] EXT4-fs (loop0): Test dummy encryption mode enabled
[  134.011469][ T5968] EXT4-fs (loop0): Ignoring removed orlov option
[  134.032898][ T4195] XFS (loop2): Unmounting Filesystem
[  134.055016][ T5968] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  134.186247][ T5968] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[  134.212134][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.258877][ T5977] EXT4-fs (loop0): Ignoring removed orlov option
[  134.273177][ T5977] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[  134.309489][ T5977] EXT4-fs (loop0): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[  134.494007][ T5981] set_capacity_and_notify: 3 callbacks suppressed
[  134.494022][ T5981] loop4: detected capacity change from 0 to 2048
[  134.525365][ T5094] usb 4-1: USB disconnect, device number 3
[  134.713335][ T5981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.913532][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'.
[  134.944820][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.676'.
[  134.972871][ T6000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.678'.
[  135.014191][ T6000] sch_fq: defrate 0 ignored.
[  135.062532][ T6006] program syz.3.681 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.081729][ T1110] usb 4-1: Service connection timeout for: 256
[  135.087928][ T1110] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  135.130263][ T1110] ath9k_htc: Failed to initialize the device
[  135.159228][ T5094] usb 4-1: ath9k_htc: USB layer deinitialized
[  135.445655][ T6037] loop4: detected capacity change from 0 to 256
[  135.499823][ T6029] loop1: detected capacity change from 0 to 16
[  135.531977][ T6037] FAT-fs (loop4): Directory bread(block 64) failed
[  135.566104][ T6037] FAT-fs (loop4): Directory bread(block 65) failed
[  135.587177][ T6037] FAT-fs (loop4): Directory bread(block 66) failed
[  135.608835][ T6037] FAT-fs (loop4): Directory bread(block 67) failed
[  135.627558][ T6029] erofs: (device loop1): mounted with root inode @ nid 36.
[  135.638913][ T6037] FAT-fs (loop4): Directory bread(block 68) failed
[  135.648501][ T6037] FAT-fs (loop4): Directory bread(block 69) failed
[  135.674708][ T6037] FAT-fs (loop4): Directory bread(block 70) failed
[  135.693906][ T6037] FAT-fs (loop4): Directory bread(block 71) failed
[  135.713701][ T6037] FAT-fs (loop4): Directory bread(block 72) failed
[  135.730496][ T6037] FAT-fs (loop4): Directory bread(block 73) failed
[  135.957638][ T6054] loop1: detected capacity change from 0 to 4096
[  136.168329][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'.
[  136.393525][ T6068] bond0: (slave bond_slave_0): Releasing backup interface
[  136.611010][ T6089] sctp: [Deprecated]: syz.3.720 (pid 6089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.611010][ T6089] Use struct sctp_sack_info instead
[  136.778457][ T6097] loop3: detected capacity change from 0 to 512
[  136.801396][ T4269] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  136.843918][ T6104] tipc: Started in network mode
[  136.851109][ T6104] tipc: Node identity ac14140f, cluster identity 4711
[  136.872347][ T6104] tipc: New replicast peer: 255.255.255.255
[  136.937370][ T6104] tipc: Enabled bearer <udp:syz2>, priority 10
[  137.092355][ T4269] usb 3-1: Using ep0 maxpacket: 32
[  137.211633][ T4269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.241279][ T4269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.255704][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  137.267441][ T4269] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  137.278416][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.304874][ T6128] loop1: detected capacity change from 0 to 256
[  137.316257][ T4269] usb 3-1: config 0 descriptor??
[  137.360118][ T6128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  137.386973][ T6132] device team_slave_0 entered promiscuous mode
[  137.394185][ T6132] device team_slave_1 entered promiscuous mode
[  137.417532][ T6132] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  137.511490][ T1107] usb 5-1: Using ep0 maxpacket: 16
[  137.596508][ T6137] loop3: detected capacity change from 0 to 4096
[  137.641494][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.661086][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.672700][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  137.686238][ T1107] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  137.699598][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.728499][ T1107] usb 5-1: config 0 descriptor??
[  137.798372][ T6150] loop0: detected capacity change from 0 to 2048
[  137.824267][ T4269] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[  137.840426][ T4269] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[  137.858659][ T4269] koneplus 0003:1E7D:2D51.0008: item fetching failed at offset 2/5
[  137.882184][ T4269] koneplus 0003:1E7D:2D51.0008: parse failed
[  137.924667][ T4269] koneplus: probe of 0003:1E7D:2D51.0008 failed with error -22
[  137.948334][ T6150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.001009][ T5089] tipc: Node number set to 2886997007
[  138.086128][ T5094] usb 3-1: USB disconnect, device number 8
[  138.233166][ T1107] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  138.244486][ T1107] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  138.252245][ T1107] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  138.259965][ T1107] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max
[  138.269614][ T1107] microsoft 0003:045E:07DA.0009: report is too long
[  138.276610][ T1107] microsoft 0003:045E:07DA.0009: item 0 4 0 8 parsing failed
[  138.306387][ T1107] microsoft 0003:045E:07DA.0009: parse failed
[  138.331913][ T1107] microsoft: probe of 0003:045E:07DA.0009 failed with error -22
[  138.441980][ T4238] usb 5-1: USB disconnect, device number 6
[  138.521227][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  138.617879][ T6162] netlink: 'syz.2.753': attribute type 8 has an invalid length.
[  138.657784][ T6164] loop2: detected capacity change from 0 to 736
[  138.771236][ T1107] usb 4-1: Using ep0 maxpacket: 8
[  138.851202][ T5094] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  138.926908][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.948227][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.980568][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  139.016178][ T1107] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  139.028646][ T6175] loop4: detected capacity change from 0 to 128
[  139.035323][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.046657][ T1107] usb 4-1: config 0 descriptor??
[  139.101260][ T5094] usb 1-1: Using ep0 maxpacket: 8
[  139.180872][ T6175] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  139.231530][ T5094] usb 1-1: config 0 has no interfaces?
[  139.241554][ T5094] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  139.301770][ T5094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.356624][ T6175] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  139.399139][ T5094] usb 1-1: config 0 descriptor??
[  139.668278][ T5095] usb 1-1: USB disconnect, device number 8
[  139.807081][ T6181] set_capacity_and_notify: 1 callbacks suppressed
[  139.807091][ T6181] loop2: detected capacity change from 0 to 131072
[  139.890169][ T6181] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  139.896986][ T6181] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  139.907880][ T6181] F2FS-fs (loop2): invalid crc value
[  139.932687][ T1107] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  139.951233][ T1107] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  139.968063][ T6192] loop1: detected capacity change from 0 to 1024
[  139.981713][ T1107] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  139.989654][ T6181] F2FS-fs (loop2): Found nat_bits in checkpoint
[  140.031376][ T1107] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  140.038568][ T1107] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  140.045683][ T1107] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  140.046666][ T6192] EXT4-fs (loop1): Ignoring removed orlov option
[  140.052836][ T1107] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  140.067356][ T1107] elecom 0003:056E:00FE.000A: item fetching failed at offset 12/70
[  140.075946][ T1107] elecom: probe of 0003:056E:00FE.000A failed with error -22
[  140.095876][ T6181] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  140.103079][ T6181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  140.150691][ T5094] usb 4-1: USB disconnect, device number 4
[  140.251817][ T6192] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  140.316272][ T6207] loop4: detected capacity change from 0 to 256
[  140.328259][ T6205] netlink: 232 bytes leftover after parsing attributes in process `syz.0.770'.
[  140.349551][ T6205] netlink: 56 bytes leftover after parsing attributes in process `syz.0.770'.
[  140.381724][ T6207] exfat: Deprecated parameter 'utf8'
[  140.435909][ T6207] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  140.780600][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.779'.
[  140.813359][ T6221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.779'.
[  141.290782][ T1107] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  141.564314][ T6242] loop3: detected capacity change from 0 to 32768
[  141.600895][ T1107] usb 5-1: Using ep0 maxpacket: 32
[  141.637516][ T6242] XFS (loop3): Mounting V5 Filesystem
[  141.664930][ T6246] loop0: detected capacity change from 0 to 40427
[  141.705510][ T6242] XFS (loop3): Ending clean mount
[  141.737214][ T6246] F2FS-fs (loop0): invalid crc value
[  141.751077][ T1107] usb 5-1: config 0 has an invalid interface number: 68 but max is 0
[  141.751103][ T1107] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  141.751123][ T1107] usb 5-1: config 0 has no interface number 0
[  141.768452][ T6246] F2FS-fs (loop0): Found nat_bits in checkpoint
[  141.803339][ T5332] XFS (loop3): Unmounting Filesystem
[  141.912957][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'.
[  141.924527][ T1107] usb 5-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0
[  141.925791][ T6270] device erspan0 entered promiscuous mode
[  141.946151][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.949771][ T6246] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  141.955784][ T1107] usb 5-1: Product: syz
[  141.965522][ T1107] usb 5-1: Manufacturer: syz
[  141.970133][ T1107] usb 5-1: SerialNumber: syz
[  141.984204][ T1107] usb 5-1: config 0 descriptor??
[  142.020358][ T6246] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  142.321310][ T1107] uvcvideo 5-1:0.68: Found Unit with invalid ID 0
[  142.327899][ T1107] usb 5-1: Found UVC 0.40 device syz (045e:0703)
[  142.342918][ T1107] usb 5-1: No valid video chain found.
[  142.350379][ T6279] sg_read: process 115 (syz.3.794) changed security contexts after opening file descriptor, this is not allowed.
[  142.372403][ T1107] usb 5-1: USB disconnect, device number 7
[  142.479321][ T6283] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  142.960345][ T6307] loop4: detected capacity change from 0 to 1764
[  143.268860][ T6313] input: syz0 as /devices/virtual/input/input8
[  143.414862][ T6291] loop0: detected capacity change from 0 to 32768
[  143.540989][ T6291] XFS (loop0): Mounting V5 Filesystem
[  143.624318][ T6302] loop1: detected capacity change from 0 to 40427
[  143.629540][ T6316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.655589][ T6291] XFS (loop0): Ending clean mount
[  143.690454][ T6302] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  143.719071][ T6302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  143.737515][ T6309] loop3: detected capacity change from 0 to 40427
[  143.752506][ T6329] loop4: detected capacity change from 0 to 1024
[  143.762356][ T6309] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  143.791335][ T6302] F2FS-fs (loop1): Found nat_bits in checkpoint
[  143.819798][ T4197] XFS (loop0): Unmounting Filesystem
[  143.823465][ T6309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  143.878982][ T6309] F2FS-fs (loop3): invalid crc value
[  143.918825][ T6309] F2FS-fs (loop3): Found nat_bits in checkpoint
[  143.935057][   T25] audit: type=1800 audit(1780340789.732:9): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.818" name="file1" dev="loop4" ino=1 res=0 errno=0
[  143.959478][ T6302] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  143.975256][ T6302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  144.006934][ T6309] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  144.015514][ T6309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  144.241553][ T4205] block nbd0: Receive control failed (result -32)
[  144.273333][  T150] block nbd0: Dead connection, failed to find a fallback
[  144.281117][  T150] block nbd0: shutting down sockets
[  144.288424][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.300242][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.310283][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.321159][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.329041][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.343809][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.352460][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.363800][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.375511][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.386530][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.399819][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.411130][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.425259][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.436532][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.449485][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.460400][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.480499][ T4187] ldm_validate_partition_table(): Disk read failed.
[  144.487305][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.498163][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.533712][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.544613][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  144.552776][ T4187] Dev nbd0: unable to read RDB block 0
[  144.558777][ T4187]  nbd0: unable to read partition table
[  144.567853][ T4187] ldm_validate_partition_table(): Disk read failed.
[  144.575066][ T1110] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  144.585427][ T4187] Dev nbd0: unable to read RDB block 0
[  144.591566][ T4187]  nbd0: unable to read partition table
[  144.647307][ T4187] ldm_validate_partition_table(): Disk read failed.
[  144.684007][ T6354] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0002]
[  144.692789][ T4187] Dev nbd0: unable to read RDB block 0
[  144.704892][ T4187]  nbd0: unable to read partition table
[  144.730048][ T6354] System zones: 0-5
[  144.731339][ T4187] ldm_validate_partition_table(): Disk read failed.
[  144.772713][ T4187] Dev nbd0: unable to read RDB block 0
[  144.778620][ T6354] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug,,errors=continue. Quota mode: writeback.
[  144.801409][ T4187]  nbd0: unable to read partition table
[  144.820437][ T1110] usb 3-1: Using ep0 maxpacket: 32
[  144.853761][ T6354] EXT4-fs (loop1): shut down requested (1)
[  144.940556][ T1110] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  144.993441][ T1110] usb 3-1: config 0 has no interface number 0
[  145.079669][ T6372] set_capacity_and_notify: 2 callbacks suppressed
[  145.079684][ T6372] loop1: detected capacity change from 0 to 64
[  145.115319][ T6373] loop4: detected capacity change from 0 to 256
[  145.150589][ T1110] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  145.162261][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.175647][ T1110] usb 3-1: Product: syz
[  145.198455][ T1110] usb 3-1: Manufacturer: syz
[  145.209713][ T6373] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  145.233750][ T1110] usb 3-1: SerialNumber: syz
[  145.283285][ T1110] usb 3-1: config 0 descriptor??
[  145.321771][ T1110] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  145.372451][   T25] audit: type=1800 audit(1780340791.172:10): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.834" name="file1" dev="loop1" ino=21 res=0 errno=0
[  145.412936][ T6372] hfs: request for non-existent node -16318464 in B*Tree
[  145.421785][ T6372] hfs: request for non-existent node -16318464 in B*Tree
[  145.461760][ T6372] hfs: request for non-existent node -16318464 in B*Tree
[  145.476577][ T6372] hfs: request for non-existent node -16318464 in B*Tree
[  145.535859][ T1110] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  145.554990][ T1110] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  145.631871][ T4251] hfs: request for non-existent node -16318464 in B*Tree
[  145.648640][ T4251] hfs: request for non-existent node -16318464 in B*Tree
[  145.912499][ T6396] tap0: tun_chr_ioctl cmd 1074025681
[  145.953234][ T5094] usb 3-1: USB disconnect, device number 9
[  145.966769][ T6399] loop0: detected capacity change from 0 to 256
[  145.970223][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108
[  145.995954][ T6399] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  146.016960][ T5094] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  146.056591][ T5094] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  146.080595][ T5094] quatech2 3-1:0.51: device disconnected
[  146.098993][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.846'.
[  146.125315][ T6399] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008)
[  146.489498][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'.
[  146.633401][ T6402] loop1: detected capacity change from 0 to 40427
[  146.654038][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'.
[  146.691094][ T6402] F2FS-fs (loop1): invalid crc value
[  146.736247][ T6402] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  146.936392][ T6402] F2FS-fs (loop1): Start checkpoint disabled!
[  146.974233][ T6402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7
[  147.025126][    C0] sd 0:0:1:0: tag#3252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  147.035094][    C0] sd 0:0:1:0: tag#3252 CDB: Variable length, sa=0xa880
[  147.042021][    C0] sd 0:0:1:0: tag#3252 CDB[00]: 7f 00 00 00 00 00 3a 11 a8 80 20 69 c6 91 b7 89
[  147.051091][    C0] sd 0:0:1:0: tag#3252 CDB[10]: 60 b9 f3 18 1e 01 c3 aa 18 83 12 c7 7d 5c a1 bc
[  147.060272][    C0] sd 0:0:1:0: tag#3252 CDB[20]: 6e
[  147.123193][ T6444] loop0: detected capacity change from 0 to 128
[  147.172064][ T4497] attempt to access beyond end of device
[  147.172064][ T4497] loop1: rw=2049, want=45104, limit=40427
[  147.316990][ T6438] loop2: detected capacity change from 0 to 32768
[  147.402285][ T1110] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  147.650121][ T1110] usb 4-1: Using ep0 maxpacket: 32
[  147.693415][ T1110] usb 4-1: too many configurations: 17, using maximum allowed: 8
[  147.793532][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  147.813257][ T1110] usb 4-1: config 0 has no interface number 0
[  147.855732][ T6446] loop0: detected capacity change from 0 to 32768
[  147.910042][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  147.927718][ T1110] usb 4-1: config 0 has no interface number 0
[  147.947558][ T6446] XFS (loop0): Mounting V5 Filesystem
[  148.004859][ T6446] XFS (loop0): Ending clean mount
[  148.010337][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  148.018389][ T1110] usb 4-1: config 0 has no interface number 0
[  148.092672][ T4197] XFS (loop0): Unmounting Filesystem
[  148.100252][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  148.113794][ T1110] usb 4-1: config 0 has no interface number 0
[  148.200047][   T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  148.202349][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  148.215955][ T1110] usb 4-1: config 0 has no interface number 0
[  148.303665][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  148.315060][ T1110] usb 4-1: config 0 has no interface number 0
[  148.400203][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  148.413516][ T1110] usb 4-1: config 0 has no interface number 0
[  148.491436][ T1110] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  148.499494][ T1110] usb 4-1: config 0 has no interface number 0
[  148.520269][ T5089] Bluetooth: hci5: command 0x1003 tx timeout
[  148.526366][ T4209] Bluetooth: hci5: sending frame failed (-49)
[  148.621723][ T6482] syzkaller1: tun_chr_ioctl cmd 1074025677
[  148.630863][ T6482] syzkaller1: linktype set to 773
[  148.670091][ T1110] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  148.689410][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.709639][ T1110] usb 4-1: Product: syz
[  148.714308][ T1110] usb 4-1: Manufacturer: syz
[  148.719065][ T1110] usb 4-1: SerialNumber: syz
[  148.731499][ T1110] usb 4-1: config 0 descriptor??
[  148.750146][   T13] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  148.759251][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.779308][   T13] usb 3-1: Product: syz
[  148.790798][ T1110] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) driver version 1.00
[  148.799882][   T13] usb 3-1: Manufacturer: syz
[  148.804584][   T13] usb 3-1: SerialNumber: syz
[  148.814444][   T13] usb 3-1: config 0 descriptor??
[  148.991397][ T6486] loop1: detected capacity change from 0 to 32768
[  149.043685][ T6486] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  149.057908][ T6486] JBD2: Ignoring recovery information on journal
[  149.087130][ T5094] usb 3-1: USB disconnect, device number 10
[  149.142724][ T6486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  149.199913][ T1110] etas_es58x 4-1:0.2: es58x_get_product_info: Could not read the product info: -EPROTO
[  149.210702][ T1110] etas_es58x: probe of 4-1:0.2 failed with error -71
[  149.227877][ T1110] usb 4-1: USB disconnect, device number 5
[  149.374838][ T4196] ocfs2: Unmounting device (7,1) on (node local)
[  149.420156][ T6497] loop0: detected capacity change from 0 to 128
[  149.435363][ T6497] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  149.450090][ T6497] hpfs: filesystem error: improperly stopped
[  149.456132][ T6497] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  149.464245][ T6497] hpfs: You really don't want any checks? You are crazy...
[  149.477052][ T6497] hpfs: hpfs_map_sector(): read error
[  149.498780][ T6497] hpfs: code page support is disabled
[  149.505494][ T6497] hpfs: hpfs_map_4sectors(): unaligned read
[  149.517137][ T6497] hpfs: hpfs_map_4sectors(): unaligned read
[  149.523447][ T6497] hpfs: filesystem error: unable to find root dir
[  149.681160][ T6503] device erspan0 entered promiscuous mode
[  150.092814][ T6505] loop0: detected capacity change from 0 to 40427
[  150.109356][ T6505] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  150.117250][ T6505] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  150.136362][ T6505] F2FS-fs (loop0): invalid crc value
[  150.145076][ T6505] F2FS-fs (loop0): Found nat_bits in checkpoint
[  150.178355][ T6505] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  150.185646][ T6505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  150.219746][ T5094] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  150.284188][ T4197] attempt to access beyond end of device
[  150.284188][ T4197] loop0: rw=2049, want=40968, limit=40427
[  150.289067][ T6525] loop2: detected capacity change from 0 to 512
[  150.324857][ T4497] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  150.334463][ T4497] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  150.395858][ T6525] EXT4-fs (loop2): 1 orphan inode deleted
[  150.407303][ T6525] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  150.425174][ T6525] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.579785][ T5095] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  150.589977][ T5094] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  150.610408][   T13] Bluetooth: hci5: command 0x1001 tx timeout
[  150.610989][ T5094] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  150.616533][ T4209] Bluetooth: hci5: sending frame failed (-49)
[  150.643129][ T5094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.704638][ T5094] gspca_main: stv0680-2.14.0 probing 041e:4007
[  150.806454][ T6534] loop0: detected capacity change from 0 to 32768
[  150.842552][ T5095] usb 2-1: Using ep0 maxpacket: 32
[  150.844797][ T6534] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  150.858670][ T6534] JBD2: Ignoring recovery information on journal
[  150.884089][ T6534] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  150.929636][ T1110] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  150.975914][ T4197] ocfs2: Unmounting device (7,0) on (node local)
[  150.982879][ T5095] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.993314][ T5095] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.007686][ T5095] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.022267][ T5095] usb 2-1: config 0 interface 0 has no altsetting 0
[  151.029307][ T5095] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  151.038847][ T5095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.049044][ T5095] usb 2-1: config 0 descriptor??
[  151.147273][ T6540] loop0: detected capacity change from 0 to 1024
[  151.165751][ T6540] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  151.169747][ T1110] usb 3-1: Using ep0 maxpacket: 16
[  151.299693][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.312812][ T1110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  151.376710][ T6545] loop0: detected capacity change from 0 to 8192
[  151.434816][ T6545] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  151.446086][ T6545] REISERFS (device loop0): using ordered data mode
[  151.452790][ T6545] reiserfs: using flush barriers
[  151.460018][ T6545] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.476710][ T6545] REISERFS (device loop0): checking transaction log (loop0)
[  151.479900][ T1110] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  151.524881][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.538780][ T5095] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x7
[  151.551828][ T5095] corsair-cpro 0003:1B1C:0C10.000B: item fetching failed at offset 3/5
[  151.563348][ T1110] usb 3-1: Product: syz
[  151.567550][ T1110] usb 3-1: Manufacturer: syz
[  151.576135][ T5095] corsair-cpro: probe of 0003:1B1C:0C10.000B failed with error -22
[  151.585456][ T1110] usb 3-1: SerialNumber: syz
[  151.600121][ T6545] REISERFS (device loop0): Using tea hash to sort names
[  151.608652][ T6545] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  151.764738][ T4238] usb 2-1: USB disconnect, device number 6
[  151.909723][ T1110] usb 3-1: 0:2 : does not exist
[  151.929696][ T5094] stv0680 4-1:4.0: Could not get descriptor 0200
[  151.954249][ T1110] usb 3-1: USB disconnect, device number 11
[  152.036698][ T6554] loop0: detected capacity change from 0 to 1024
[  152.151079][ T5094] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  152.159295][ T5094] stv0680 4-1:4.0: last error: 34,  command = 0xf
[  152.192445][ T5094] usb 4-1: USB disconnect, device number 6
[  152.194906][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.338237][ T1110] kernel write not supported for file [eventfd] (pid: 1110 comm: kworker/1:2)
[  152.426646][ T6566] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[  152.538456][ T6572] loop2: detected capacity change from 0 to 764
[  152.557127][ T6574] loop1: detected capacity change from 0 to 64
[  152.604156][ T6572] rock: directory entry would overflow storage
[  152.616362][ T6572] rock: sig=0x4654, size=5, remaining=4
[  152.649665][   T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  152.705392][ T4238] Bluetooth: hci5: command 0x1009 tx timeout
[  152.840013][ T1110] hid-generic 0005:4C4A:4155.000C: item fetching failed at offset 0/1
[  152.898663][ T1110] hid-generic: probe of 0005:4C4A:4155.000C failed with error -22
[  153.053141][ T6596] loop1: detected capacity change from 0 to 512
[  153.080318][   T13] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  153.088679][   T13] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  153.106454][   T13] usb 1-1: config 220 has no interface number 2
[  153.116334][ T6598] loop2: detected capacity change from 0 to 64
[  153.123451][   T13] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  153.138131][   T13] usb 1-1: config 220 interface 0 has no altsetting 0
[  153.145408][   T13] usb 1-1: config 220 interface 76 has no altsetting 0
[  153.156228][   T13] usb 1-1: config 220 interface 1 has no altsetting 0
[  153.207490][ T6596] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,barrier=0x000000000000008e,bsddf,errors=remount-ro,init_itable,auto_da_alloc=0x00000000000000eb,quota,. Quota mode: writeback.
[  153.220814][ T6598] hfs: request for non-existent node 131072 in B*Tree
[  153.239686][ T6596] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.252530][ T6598] hfs: request for non-existent node 131072 in B*Tree
[  153.325485][ T6596] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.927: directory missing '..'
[  153.359778][   T13] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  153.377749][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.388277][   T13] usb 1-1: Product: syz
[  153.393399][   T13] usb 1-1: Manufacturer: syz
[  153.398185][   T13] usb 1-1: SerialNumber: syz
[  153.615492][ T6610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.725568][ T6609] NILFS (loop2): corrupt root inode
[  153.731621][ T6615] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.769715][   T13] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  153.781358][   T13] usb 1-1: No valid video chain found.
[  153.808293][   T13] usb 1-1: selecting invalid altsetting 0
[  153.950458][   T13] usb 1-1: selecting invalid altsetting 0
[  153.972723][   T13] usbtest: probe of 1-1:220.1 failed with error -22
[  154.007630][   T13] usb 1-1: USB disconnect, device number 9
[  154.155569][ T4251] attempt to access beyond end of device
[  154.155569][ T4251] loop1: rw=1, want=1041, limit=128
[  154.388194][ T6614] XFS (loop3): Mounting V5 Filesystem
[  154.527404][ T6647] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.655551][ T6614] XFS (loop3): Ending clean mount
[  154.788373][ T4195] ------------[ cut here ]------------
[  154.794618][ T4195] WARNING: CPU: 1 PID: 4195 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0
[  154.804142][ T4195] Modules linked in:
[  154.808913][ T4195] CPU: 1 PID: 4195 Comm: syz-executor Not tainted syzkaller #0
[  154.816796][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  154.826954][ T4195] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  154.832990][ T4195] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 54 03 00 e8 03 45 6a fe e8 2e 79 f1 fd e9 b8 fc ff ff e8 f4 44 6a fe <0f> 0b e9 16 fc ff ff e8 e8 44 6a fe e8 13 79 f1 fd e9 74 fe ff ff
[  154.852685][ T4195] RSP: 0018:ffffc90002f1f840 EFLAGS: 00010293
[  154.858861][ T4195] RAX: ffffffff830f03fc RBX: ffff88807476d1a0 RCX: ffff88807c2ebb80
[  154.867045][ T4195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000006000002
[  154.875090][ T4195] RBP: 0000000000000003 R08: ffff888062e580d3 R09: 1ffff1100c5cb01a
[  154.883480][ T4195] R10: dffffc0000000000 R11: ffffed100c5cb01b R12: ffff88807c2ed308
[  154.891860][ T4195] R13: ffff888073e75820 R14: 0000000006000002 R15: ffffc90002f1f8f8
[  154.899911][ T4195] FS:  0000555566250500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  154.908958][ T4195] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.915811][ T4195] CR2: 00007f803ffa4158 CR3: 0000000063cf1000 CR4: 00000000003526e0
[  154.924184][ T4195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  154.932216][ T4195] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  154.940234][ T4195] Call Trace:
[  154.943526][ T4195]  <TASK>
[  154.946476][ T4195]  nilfs_direct_delete+0x287/0x2e0
[  154.951654][ T4195]  ? nilfs_direct_insert+0x4c0/0x4c0
[  154.957055][ T4195]  nilfs_bmap_truncate+0x2e6/0x560
[  154.962234][ T4195]  ? nilfs_bmap_delete+0x3c0/0x3c0
[  154.967604][ T4195]  ? __up_read+0x2b2/0x6b0
[  154.972144][ T4195]  ? up_read+0x20/0x20
[  154.976330][ T4195]  ? nilfs_bmap_last_key+0x10a/0x120
[  154.981718][ T4195]  nilfs_truncate_bmap+0x1ad/0x320
[  154.986851][ T4195]  ? nilfs_update_inode+0x1d0/0x1d0
[  154.992330][ T4195]  ? nilfs_transaction_begin+0x527/0x710
[  154.997979][ T4195]  nilfs_evict_inode+0x210/0x4b0
[  155.003000][ T4195]  ? nilfs_set_file_dirty+0x400/0x400
[  155.008389][ T4195]  ? do_raw_spin_unlock+0x11d/0x230
[  155.013649][ T4195]  ? nilfs_set_file_dirty+0x400/0x400
[  155.019078][ T4195]  evict+0x4c9/0x8d0
[  155.023004][ T4195]  ? proc_nr_inodes+0x320/0x320
[  155.027868][ T4195]  ? do_raw_spin_unlock+0x11d/0x230
[  155.033144][ T4195]  ? _raw_spin_unlock+0x24/0x40
[  155.038002][ T4195]  ? iput+0x706/0x8a0
[  155.042031][ T4195]  do_unlinkat+0x3e7/0x710
[  155.046472][ T4195]  ? __virt_addr_valid+0x3c6/0x470
[  155.051642][ T4195]  ? fsnotify_link_count+0xf0/0xf0
[  155.056759][ T4195]  ? strncpy_from_user+0x1fb/0x360
[  155.061915][ T4195]  ? getname_flags+0x1fe/0x500
[  155.066689][ T4195]  __x64_sys_unlink+0x45/0x50
[  155.071397][ T4195]  do_syscall_64+0x4c/0xa0
[  155.075819][ T4195]  ? clear_bhb_loop+0x30/0x80
[  155.080548][ T4195]  ? clear_bhb_loop+0x30/0x80
[  155.085225][ T4195]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.091166][ T4195] RIP: 0033:0x7f99cbb5ff47
[  155.095597][ T4195] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  155.115330][ T4195] RSP: 002b:00007fff3a88f6e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  155.123801][ T4195] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99cbb5ff47
[  155.131823][ T4195] RDX: 00007fff3a88f710 RSI: 00007fff3a88f7a0 RDI: 00007fff3a88f7a0
[  155.139840][ T4195] RBP: 00007fff3a88f7a0 R08: 00007fff3a8907a0 R09: 00000000ffffffff
[  155.147824][ T4195] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff3a890890
[  155.155833][ T4195] R13: 00007f99cbbf61ca R14: 0000000000025c2c R15: 00007fff3a892a50
[  155.163851][ T4195]  </TASK>
[  155.166874][ T4195] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  155.174146][ T4195] CPU: 1 PID: 4195 Comm: syz-executor Not tainted syzkaller #0
[  155.181693][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  155.191736][ T4195] Call Trace:
[  155.195001][ T4195]  <TASK>
[  155.197920][ T4195]  dump_stack_lvl+0x188/0x250
[  155.202602][ T4195]  ? show_regs_print_info+0x20/0x20
[  155.207789][ T4195]  ? load_image+0x400/0x400
[  155.212280][ T4195]  panic+0x2e5/0x810
[  155.216166][ T4195]  ? bpf_jit_dump+0xd0/0xd0
[  155.220763][ T4195]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  155.226143][ T4195]  __warn+0x248/0x2b0
[  155.230121][ T4195]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  155.235477][ T4195]  report_bug+0x1b7/0x2e0
[  155.239993][ T4195]  handle_bug+0x3a/0x70
[  155.244133][ T4195]  exc_invalid_op+0x16/0x40
[  155.248653][ T4195]  asm_exc_invalid_op+0x16/0x20
[  155.253494][ T4195] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  155.259460][ T4195] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 54 03 00 e8 03 45 6a fe e8 2e 79 f1 fd e9 b8 fc ff ff e8 f4 44 6a fe <0f> 0b e9 16 fc ff ff e8 e8 44 6a fe e8 13 79 f1 fd e9 74 fe ff ff
[  155.279054][ T4195] RSP: 0018:ffffc90002f1f840 EFLAGS: 00010293
[  155.285260][ T4195] RAX: ffffffff830f03fc RBX: ffff88807476d1a0 RCX: ffff88807c2ebb80
[  155.293221][ T4195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000006000002
[  155.301333][ T4195] RBP: 0000000000000003 R08: ffff888062e580d3 R09: 1ffff1100c5cb01a
[  155.309303][ T4195] R10: dffffc0000000000 R11: ffffed100c5cb01b R12: ffff88807c2ed308
[  155.317268][ T4195] R13: ffff888073e75820 R14: 0000000006000002 R15: ffffc90002f1f8f8
[  155.325353][ T4195]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  155.330746][ T4195]  nilfs_direct_delete+0x287/0x2e0
[  155.335850][ T4195]  ? nilfs_direct_insert+0x4c0/0x4c0
[  155.341221][ T4195]  nilfs_bmap_truncate+0x2e6/0x560
[  155.346870][ T4195]  ? nilfs_bmap_delete+0x3c0/0x3c0
[  155.352330][ T4195]  ? __up_read+0x2b2/0x6b0
[  155.356774][ T4195]  ? up_read+0x20/0x20
[  155.360845][ T4195]  ? nilfs_bmap_last_key+0x10a/0x120
[  155.366648][ T4195]  nilfs_truncate_bmap+0x1ad/0x320
[  155.371854][ T4195]  ? nilfs_update_inode+0x1d0/0x1d0
[  155.377095][ T4195]  ? nilfs_transaction_begin+0x527/0x710
[  155.382748][ T4195]  nilfs_evict_inode+0x210/0x4b0
[  155.387682][ T4195]  ? nilfs_set_file_dirty+0x400/0x400
[  155.393046][ T4195]  ? do_raw_spin_unlock+0x11d/0x230
[  155.398234][ T4195]  ? nilfs_set_file_dirty+0x400/0x400
[  155.403613][ T4195]  evict+0x4c9/0x8d0
[  155.407506][ T4195]  ? proc_nr_inodes+0x320/0x320
[  155.412338][ T4195]  ? do_raw_spin_unlock+0x11d/0x230
[  155.417524][ T4195]  ? _raw_spin_unlock+0x24/0x40
[  155.422370][ T4195]  ? iput+0x706/0x8a0
[  155.426573][ T4195]  do_unlinkat+0x3e7/0x710
[  155.431002][ T4195]  ? __virt_addr_valid+0x3c6/0x470
[  155.436108][ T4195]  ? fsnotify_link_count+0xf0/0xf0
[  155.441211][ T4195]  ? strncpy_from_user+0x1fb/0x360
[  155.446318][ T4195]  ? getname_flags+0x1fe/0x500
[  155.451085][ T4195]  __x64_sys_unlink+0x45/0x50
[  155.455752][ T4195]  do_syscall_64+0x4c/0xa0
[  155.460159][ T4195]  ? clear_bhb_loop+0x30/0x80
[  155.464821][ T4195]  ? clear_bhb_loop+0x30/0x80
[  155.469490][ T4195]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.475389][ T4195] RIP: 0033:0x7f99cbb5ff47
[  155.479792][ T4195] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  155.499401][ T4195] RSP: 002b:00007fff3a88f6e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  155.507803][ T4195] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99cbb5ff47
[  155.515768][ T4195] RDX: 00007fff3a88f710 RSI: 00007fff3a88f7a0 RDI: 00007fff3a88f7a0
[  155.523740][ T4195] RBP: 00007fff3a88f7a0 R08: 00007fff3a8907a0 R09: 00000000ffffffff
[  155.531714][ T4195] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff3a890890
[  155.539683][ T4195] R13: 00007f99cbbf61ca R14: 0000000000025c2c R15: 00007fff3a892a50
[  155.547651][ T4195]  </TASK>
[  155.550893][ T4195] Kernel Offset: disabled
[  155.555523][ T4195] Rebooting in 86400 seconds..