last executing test programs:

5.987236754s ago: executing program 4 (id=729):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000400)=ANY=[@ANYBLOB='nls=cp1250,decompose,nodecompose,umask=00000000000000000020001,\x00'], 0x1, 0x6b3, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b)

5.544429403s ago: executing program 4 (id=732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_ISOLATED={0x5}]}}}]}, 0x4c}}, 0x0)

5.136701377s ago: executing program 4 (id=736):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380707b, 0x0, 0x1, 0x0, &(0x7f0000000080))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

4.60773108s ago: executing program 4 (id=741):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000002c0)={[{@datacow}, {@rescan_uuid_tree}, {@compress_force}, {@space_cache_v2}, {@ssd}, {}, {@clear_cache}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000740)=0x400)

2.82288344s ago: executing program 3 (id=765):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nodecompose,decompose,nls=cp864,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x20, 0x6de, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000080)=""/29, 0x1d)

2.76609188s ago: executing program 2 (id=766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)

2.71176031s ago: executing program 2 (id=767):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)

2.472244816s ago: executing program 3 (id=768):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x1)
sendfile(r1, r0, 0x0, 0x100000500)

2.309714386s ago: executing program 3 (id=770):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/83, 0x53}], 0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x2)

2.217694119s ago: executing program 4 (id=772):
r0 = semget$private(0x0, 0x4, 0x4)
semop(r0, &(0x7f0000000000)=[{0x1, 0x7, 0x1800}, {0x3, 0x0, 0x1000}, {0x3, 0xff, 0x1800}], 0x3)
semctl$IPC_RMID(r0, 0x0, 0x0)

2.030661865s ago: executing program 2 (id=776):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000900)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xe4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x143042, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x0)

1.756035184s ago: executing program 0 (id=778):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

1.638929092s ago: executing program 2 (id=779):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x603, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

1.634632451s ago: executing program 0 (id=780):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b6, &(0x7f0000000a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000680)={0x31, 0x8, 0x5, 0xffffffffffffffff, 0x403, 0x5})

1.557090587s ago: executing program 4 (id=781):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@err_ro}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x1, 0x6, 0x7, 0x0, 0x800000000007fff, 0x7a, 0xfffffffffffffffa, 0x81})
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))

1.51810438s ago: executing program 3 (id=782):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.445602767s ago: executing program 2 (id=783):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

1.265008743s ago: executing program 3 (id=784):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

1.224606756s ago: executing program 1 (id=785):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000040)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=")
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.08451871s ago: executing program 0 (id=786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010000180"], 0x48}}, 0x0)

868.25937ms ago: executing program 3 (id=787):
r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff0ff447cd9caded4abf65767e9dbbd7b5841a8ce3eae5cb5abfd7d4fb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e0000000000000000000000b5ff5bb6b1fa869800651587af", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480))
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

808.236189ms ago: executing program 0 (id=788):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0)

653.34085ms ago: executing program 1 (id=789):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

566.705774ms ago: executing program 0 (id=790):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x18, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d00009f8aa9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}})

525.821147ms ago: executing program 0 (id=791):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18)
open(&(0x7f0000000140)='./file0\x00', 0xa063, 0x84)

397.395644ms ago: executing program 1 (id=792):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x3}, &(0x7f0000000080), 0x0, 0x10000, 0xb7e, 0x7ff, 0x9, 0x14, 0xffffffffffffffff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0xffff9b0c}, 0x0, 0x0, 0xcf, 0xd3, 0x7, 0x3, 0x8, 0x3}}], 0xb0, 0x4040000}, 0x0)

370.859078ms ago: executing program 1 (id=793):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c)
writev(r0, &(0x7f0000001680)=[{&(0x7f00000003c0)="c5", 0x1}], 0x1)

319.292729ms ago: executing program 1 (id=795):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYRES32], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

29.844195ms ago: executing program 1 (id=796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x40040)

0s ago: executing program 2 (id=797):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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")
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x200, 0x1, 0xfffffffffffffffc, 0x6, 0x1})

kernel console output (not intermixed with test programs):

.474491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.483955][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.491784][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.500534][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.510907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.520304][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.527541][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.536463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.562902][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.571900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.595999][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.614233][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.625909][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.636081][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.646617][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.660411][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.670660][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.700809][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.711111][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.721426][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.738737][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   55.757808][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.769625][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.784312][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.791540][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.801820][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.826175][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.835781][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.845976][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.855981][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.879008][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.891093][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.904652][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.920076][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   55.936587][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.952243][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.961657][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.971068][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.979313][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.987965][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.996914][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.005548][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.012830][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.039715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.051965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.064873][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.071972][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.090870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.101447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.111253][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.119413][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.129004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.138155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.148493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.187632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.198847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.216217][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.230221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.239248][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.248363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.256276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.264723][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.273623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.282256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.292432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.300883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.311964][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   56.322073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.332002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.350426][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.361226][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.386289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.395956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.406171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.416236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.425661][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.434308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.441960][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.454401][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.467796][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.489568][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.502468][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.525429][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.534872][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.544782][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.551987][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.560558][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.569405][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.578399][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.587192][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.595982][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.605261][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.614063][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.621421][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.659624][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.671595][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.686349][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.699417][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.713591][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.730560][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.739533][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.749439][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.759115][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.768549][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.784461][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   56.800750][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.816499][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.829953][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.841624][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.851744][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.860807][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.868110][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.876430][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.891850][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.904759][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.920991][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.953157][ T4230] Bluetooth: hci2: command 0x041b tx timeout
[   56.959914][ T4230] Bluetooth: hci3: command 0x041b tx timeout
[   56.967466][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.977826][ T4230] Bluetooth: hci0: command 0x041b tx timeout
[   56.983038][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.987863][ T4230] Bluetooth: hci4: command 0x041b tx timeout
[   56.999593][ T4230] Bluetooth: hci1: command 0x041b tx timeout
[   57.000812][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.020652][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.029361][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.038026][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.045990][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.055052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.063736][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.070778][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.078881][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.087527][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.096223][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.105951][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.114738][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.123479][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.130978][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.158919][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.187119][ T4184] device veth0_vlan entered promiscuous mode
[   57.203359][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.219124][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.228536][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.243254][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.252405][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.262774][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.294636][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.306248][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.317476][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.328799][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.344976][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.357232][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.378028][ T4184] device veth1_vlan entered promiscuous mode
[   57.408438][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.445016][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.455193][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.476206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.485843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.495986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.505123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.517462][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.540286][ T4184] device veth0_macvtap entered promiscuous mode
[   57.548784][ T4183] device veth0_vlan entered promiscuous mode
[   57.563611][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.574537][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.585778][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.599380][ T4184] device veth1_macvtap entered promiscuous mode
[   57.614108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.628462][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.638775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.664976][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.685659][ T4183] device veth1_vlan entered promiscuous mode
[   57.703542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.714263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.724308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.733041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.741871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.750300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.760094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.769487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.778517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.788556][ T4185] device veth0_vlan entered promiscuous mode
[   57.801885][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.835143][ T4186] device veth0_vlan entered promiscuous mode
[   57.841926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.850333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.860834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.871276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.881074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.889844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.898687][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.916119][ T4185] device veth1_vlan entered promiscuous mode
[   57.928699][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.937931][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.947476][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.956908][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.977863][ T4186] device veth1_vlan entered promiscuous mode
[   57.986395][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.995866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   58.004765][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.012278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.019962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.029809][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.049611][ T4183] device veth0_macvtap entered promiscuous mode
[   58.065906][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.099096][ T4183] device veth1_macvtap entered promiscuous mode
[   58.114410][ T4185] device veth0_macvtap entered promiscuous mode
[   58.125149][ T4185] device veth1_macvtap entered promiscuous mode
[   58.141473][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.152534][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.165955][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.173373][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.181444][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.189719][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.198096][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.206203][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.215767][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.224342][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.232359][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.242379][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.251793][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.294282][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.305839][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.318997][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.335090][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.348554][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.359428][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.370417][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.381661][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.396657][ T4186] device veth0_macvtap entered promiscuous mode
[   58.407323][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.416807][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.425739][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.435266][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.444272][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.452995][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.461761][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.471165][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.486062][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.518421][ T4186] device veth1_macvtap entered promiscuous mode
[   58.528581][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.537788][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.546836][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.556544][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.567995][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.579502][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.590523][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.601995][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.613786][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.624529][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.634533][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.645416][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.648176][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.663197][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.672173][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.694638][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.703395][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.712353][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.724942][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.733631][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.768072][ T4188] device veth0_vlan entered promiscuous mode
[   58.776177][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.785565][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.828613][ T4188] device veth1_vlan entered promiscuous mode
[   58.847894][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.859826][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.871799][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.884029][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.894530][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.905790][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.917711][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.942350][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   58.954537][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.963516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.964818][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.974278][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.991385][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.004224][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.018512][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.029187][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.040319][ T4230] Bluetooth: hci1: command 0x040f tx timeout
[   59.043865][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.046694][ T4230] Bluetooth: hci4: command 0x040f tx timeout
[   59.061220][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.063066][ T4230] Bluetooth: hci0: command 0x040f tx timeout
[   59.078193][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.079783][ T4230] Bluetooth: hci3: command 0x040f tx timeout
[   59.090482][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.101672][ T4230] Bluetooth: hci2: command 0x040f tx timeout
[   59.125221][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.134610][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.145328][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.157060][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.166847][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.175679][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.184922][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.221722][ T4188] device veth0_macvtap entered promiscuous mode
[   59.261902][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.272149][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.288654][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.319156][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.328461][ T4188] device veth1_macvtap entered promiscuous mode
[   59.358215][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.392926][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.400948][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.431619][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.454303][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.458584][ T4267] capability: warning: `syz.1.6' uses deprecated v2 capabilities in a way that may be insecure
[   59.468579][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.485834][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.496281][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.507444][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.518205][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.544803][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.556483][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.569550][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.580068][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.592381][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.598556][ T4269] loop1: detected capacity change from 0 to 4096
[   59.608367][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.619897][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.642861][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.647953][ T4269] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[   59.650785][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.679968][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.699947][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.710247][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.718499][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   59.725510][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.733714][ T4269] ntfs3: loop1: Failed to load $Extend.
[   59.739580][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.755003][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.765619][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.781357][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.794786][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.820854][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.830034][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.853117][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.906127][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.915478][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.927535][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.927542][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.945790][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.954784][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.980208][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.076740][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.116866][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.147841][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.224186][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.232162][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.278969][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.316643][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.334153][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.384275][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.392120][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.410044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.443337][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.454413][ T4282] loop0: detected capacity change from 0 to 4096
[   60.495336][ T4289] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.509575][ T4285] device bridge0 entered promiscuous mode
[   60.526398][ T4285] device macvlan2 entered promiscuous mode
[   60.587549][ T4282] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   61.115397][ T4318] comedi comedi3: Minor 32773 is invalid!
[   61.132265][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   61.167078][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   61.191971][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[   61.218475][ T4231] Bluetooth: hci4: command 0x0419 tx timeout
[   61.252638][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   61.499068][ T4343] atomic_op ffff888073473198 conn xmit_atomic 0000000000000000
[   61.728020][ T4360] loop4: detected capacity change from 0 to 512
[   61.817440][ T4366] netlink: 'syz.0.47': attribute type 4 has an invalid length.
[   61.859770][ T4360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[   61.892905][ T4360] System zones: 1-2, 4-12, 8-8
[   61.980116][ T4360] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.45: iget: bad i_size value: 38620345925642
[   62.097624][ T4360] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.45: couldn't read orphan inode 15 (err -117)
[   62.127332][ T4360] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[   62.196168][ T4379] netlink: 1 bytes leftover after parsing attributes in process `syz.2.53'.
[   62.365997][ T4368] loop1: detected capacity change from 0 to 32768
[   62.383013][ T4379] syz.2.53 (4379) used greatest stack depth: 19952 bytes left
[   62.438198][ T4391] netlink: 'syz.4.57': attribute type 8 has an invalid length.
[   62.460608][ T4368] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.49 (4368)
[   62.578293][ T4368] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   62.608970][ T4368] BTRFS info (device loop1): turning off barriers
[   62.629630][ T4368] BTRFS info (device loop1): enabling ssd optimizations
[   62.682725][ T4368] BTRFS info (device loop1): using spread ssd allocation scheme
[   62.733196][ T4368] BTRFS info (device loop1): enabling auto defrag
[   62.739773][ T4368] BTRFS info (device loop1): not using ssd optimizations
[   62.793852][ T4404] Zero length message leads to an empty skb
[   62.852868][ T4368] BTRFS info (device loop1): not using spread ssd allocation scheme
[   62.932758][ T4368] BTRFS info (device loop1): ignoring data csums
[   62.975225][ T4368] BTRFS info (device loop1): force zlib compression, level 3
[   63.046234][ T4368] BTRFS info (device loop1): enabling ssd optimizations
[   63.064419][ T4368] BTRFS info (device loop1): using spread ssd allocation scheme
[   63.078762][ T4416] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   63.098511][ T4368] BTRFS info (device loop1): using free space tree
[   63.124987][ T4368] BTRFS info (device loop1): has skinny extents
[   63.126811][ T4415] loop4: detected capacity change from 0 to 1024
[   63.174351][ T4415] =======================================================
[   63.174351][ T4415] WARNING: The mand mount option has been deprecated and
[   63.174351][ T4415]          and is ignored by this kernel. Remove the mand
[   63.174351][ T4415]          option from the mount to silence this warning.
[   63.174351][ T4415] =======================================================
[   63.221734][ T4422] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0)
[   63.319149][ T4385] loop3: detected capacity change from 0 to 32768
[   63.369145][ T4415] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #3: block 1: comm syz.4.70: lblock 1 mapped to illegal pblock 1 (length 1)
[   63.431507][ T4385] 
[   63.431507][ T4385]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   63.431507][ T4385] 
[   63.456746][ T4415] Quota error (device loop4): write_blk: dquota write failed
[   63.502862][ T4415] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   63.530869][ T4415] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.70: Failed to acquire dquot type 0
[   63.611289][ T4415] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.70: Freeing blocks not in datazone - block = 0, count = 4096
[   63.650569][ T4415] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.70: Invalid inode bitmap blk 0 in block_group 0
[   63.674299][  T144] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   63.712487][ T4454] loop0: detected capacity change from 0 to 128
[   63.737585][  T144] Quota error (device loop4): remove_tree: Can't read quota data block 1
[   63.778555][  T144] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0
[   63.794216][ T4368] BTRFS error (device loop1): ignoredatacsums must be used with ro mount option
[   63.834316][ T4415] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[   63.861245][ T4385] 
[   63.861245][ T4385]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   63.861245][ T4385] 
[   63.873395][ T4415] EXT4-fs (loop4): 1 orphan inode deleted
[   63.907937][ T4415] EXT4-fs (loop4): mounted filesystem without journal. Opts: €�; ,errors=continue. Quota mode: writeback.
[   63.922990][ T4385] 
[   63.922990][ T4385]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   63.922990][ T4385] 
[   64.019890][ T4457] 
[   64.019890][ T4457]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.019890][ T4457] 
[   64.304384][ T4473] loop4: detected capacity change from 0 to 256
[   64.309401][ T4407] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4407)
[   64.439091][ T4188] 
[   64.439091][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.439091][ T4188] 
[   64.484431][ T4188] 
[   64.484431][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.484431][ T4188] 
[   64.808302][   T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   65.029152][ T4503] loop2: detected capacity change from 0 to 128
[   65.052371][ T4507] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   65.134227][ T4501] loop1: detected capacity change from 0 to 4096
[   65.194565][   T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.208379][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   65.225262][ T4501] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   65.254220][ T4503] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   65.272098][ T4501] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   65.299005][   T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   65.314985][ T4503] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 7 (only 1 groups)
[   65.339974][ T4501] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   65.354984][ T4501] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   65.371177][   T21] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   65.371543][ T4501] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   65.413248][ T4501] ntfs: volume version 3.1.
[   65.419987][ T4501] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   65.434656][ T4501] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   65.501555][ T4520] loop3: detected capacity change from 0 to 512
[   65.594539][ T4520] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   65.623013][   T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   65.632207][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.663069][ T4520] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.105: invalid indirect mapped block 4294967295 (level 0)
[   65.688555][ T4520] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.105: invalid indirect mapped block 4294967295 (level 1)
[   65.708660][ T4520] EXT4-fs (loop3): 1 orphan inode deleted
[   65.714745][ T4520] EXT4-fs (loop3): 1 truncate cleaned up
[   65.720426][ T4520] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,lazytime,block_validity,block_validity,nojournal_checksum,quota,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[   65.739827][   T21] usb 5-1: Product: syz
[   65.741846][ T4528] loop0: detected capacity change from 0 to 512
[   65.772675][ T4528] EXT4-fs (loop0): Ignoring removed nobh option
[   65.780190][ T4528] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   65.797686][ T4528] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.106: iget: bad i_size value: 38620345925642
[   65.832037][   T21] usb 5-1: Manufacturer: syz
[   65.892678][   T21] usb 5-1: SerialNumber: syz
[   65.982825][ T4528] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.106: couldn't read orphan inode 15 (err -117)
[   66.043725][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback.
[   66.140394][ T4528] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.106: invalid indirect mapped block 3973251072 (level 0)
[   66.268418][   T21] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[   66.277807][   T21] cdc_ncm 5-1:1.0: bind() failure
[   66.342959][   T21] usb 5-1: USB disconnect, device number 2
[   66.349586][ T4544] delete_channel: no stack
[   66.383439][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   66.479747][ T4533] loop2: detected capacity change from 0 to 32768
[   66.517312][ T4533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.110 (4533)
[   66.566494][ T4551] loop1: detected capacity change from 0 to 1024
[   66.596856][ T4533] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   66.616447][ T4533] BTRFS info (device loop2): using free space tree
[   66.636707][ T4533] BTRFS info (device loop2): has skinny extents
[   66.644092][ T4232] usb 4-1: Using ep0 maxpacket: 8
[   66.772909][ T4232] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[   66.781089][ T1269] hfsplus: b-tree write err: -5, ino 25
[   66.829036][ T1269] hfsplus: b-tree write err: -5, ino 4
[   66.836016][ T4547] loop0: detected capacity change from 0 to 32768
[   66.843398][ T1269] hfsplus: b-tree write err: -5, ino 2
[   66.932729][ T4232] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   66.942308][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.984866][ T4572] loop1: detected capacity change from 0 to 256
[   67.027827][ T4232] usb 4-1: Product: syz
[   67.028781][ T4569] loop4: detected capacity change from 0 to 4096
[   67.032032][ T4232] usb 4-1: Manufacturer: syz
[   67.032072][ T4232] usb 4-1: SerialNumber: syz
[   67.038845][ T4533] BTRFS info (device loop2): enabling ssd optimizations
[   67.082407][ T4232] usb 4-1: config 0 descriptor??
[   67.121880][ T4572] FAT-fs (loop1): Directory bread(block 64) failed
[   67.167593][ T4232] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   67.215209][ T4572] FAT-fs (loop1): Directory bread(block 65) failed
[   67.235269][ T4572] FAT-fs (loop1): Directory bread(block 66) failed
[   67.248181][ T4232] usb 4-1: setting power ON
[   67.273162][ T4232] dvb-usb: bulk message failed: -22 (2/0)
[   67.293008][ T4572] FAT-fs (loop1): Directory bread(block 67) failed
[   67.319839][ T4569] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   67.332018][ T4572] FAT-fs (loop1): Directory bread(block 68) failed
[   67.342329][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   67.354278][  T155] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   67.368708][ T4538] dvb-usb: bulk message failed: -22 (3/0)
[   67.373806][ T4572] FAT-fs (loop1): Directory bread(block 69) failed
[   67.382354][ T4569] ntfs3: loop4: Failed to load $Extend.
[   67.422882][ T4538] dvb-usb: bulk message failed: -22 (6/0)
[   67.428885][ T4572] FAT-fs (loop1): Directory bread(block 70) failed
[   67.461568][ T4572] FAT-fs (loop1): Directory bread(block 71) failed
[   67.463907][ T4232] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   67.493100][ T4572] FAT-fs (loop1): Directory bread(block 72) failed
[   67.521593][ T4572] FAT-fs (loop1): Directory bread(block 73) failed
[   67.542892][ T4232] usb 4-1: media controller created
[   67.601840][ T4185] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22.
[   67.603047][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   67.681255][ T4185] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22.
[   67.720571][ T4232] usb 4-1: selecting invalid altsetting 6
[   67.796976][ T4232] usb 4-1: digital interface selection failed (-22)
[   67.854768][ T4232] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   67.873939][ T4583] loop0: detected capacity change from 0 to 32768
[   67.983902][ T4232] usb 4-1: setting power OFF
[   67.989466][ T4232] dvb-usb: bulk message failed: -22 (2/0)
[   68.022842][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   68.067369][ T4232] (NULL device *): no alternate interface
[   68.158385][ T4594] hfsplus: Filesystem is marked locked, mounting read-only.
[   68.192308][ T4594] hfsplus: filesystem is marked locked, leaving read-only.
[   68.204894][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   68.267365][ T4232] usb 4-1: USB disconnect, device number 2
[   68.532389][ T4583] XFS (loop0): Mounting V5 Filesystem
[   68.796509][ T4583] XFS (loop0): Starting recovery (logdev: internal)
[   68.811505][ T4583] XFS (loop0): log record CRC mismatch: found 0x0, expected 0x510a7222.
[   68.820306][ T4583] 00000000: 00 00 00 01 00 00 00 08 aa 20 00 00 6e 55 00 00  ......... ..nU..
[   68.829674][ T4583] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   68.838602][ T4583] XFS (loop0): Internal error xlog_recover_process at line 2919 of file fs/xfs/xfs_log_recover.c.  Caller xlog_do_recovery_pass+0x826/0xd50
[   68.855862][ T4583] CPU: 0 PID: 4583 Comm: syz.0.124 Not tainted syzkaller #0
[   68.863696][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   68.873776][ T4583] Call Trace:
[   68.877067][ T4583]  <TASK>
[   68.880120][ T4583]  dump_stack_lvl+0x188/0x250
[   68.885136][ T4583]  ? show_regs_print_info+0x20/0x20
[   68.890371][ T4583]  ? xfs_rw_bdev+0x467/0x4e0
[   68.894983][ T4583]  ? xfs_error_report+0x8e/0xc0
[   68.899851][ T4583]  ? xlog_do_recovery_pass+0x826/0xd50
[   68.905442][ T4583]  ? xlog_do_recovery_pass+0x826/0xd50
[   68.911039][ T4583]  xlog_recover_process+0x30c/0x3c0
[   68.916473][ T4583]  xlog_do_recovery_pass+0x826/0xd50
[   68.921908][ T4583]  ? xlog_do_io+0x340/0x340
[   68.926551][ T4583]  ? xlog_alloc_buf_cancel_table+0x1b8/0x1e0
[   68.932557][ T4583]  xlog_do_log_recovery+0x48/0x90
[   68.937781][ T4583]  xlog_do_recover+0xe9/0x4a0
[   68.942487][ T4583]  xlog_recover+0x35d/0x410
[   68.947193][ T4583]  xfs_log_mount+0x393/0x6b0
[   68.952086][ T4583]  xfs_mountfs+0xb37/0x1b30
[   68.958237][ T4583]  ? xfs_default_resblks+0x70/0x70
[   68.963474][ T4583]  ? rcu_is_watching+0x11/0xa0
[   68.968632][ T4583]  ? trace_xfs_inode_timestamp_range+0x84/0x1d0
[   68.975022][ T4583]  xfs_fs_fill_super+0x11a4/0x13f0
[   68.980438][ T4583]  get_tree_bdev+0x3f1/0x610
[   68.985057][ T4583]  ? xfs_mount_set_dax_mode+0x100/0x100
[   68.990717][ T4583]  vfs_get_tree+0x88/0x270
[   68.995240][ T4583]  do_new_mount+0x24a/0xa40
[   68.999949][ T4583]  __se_sys_mount+0x2e3/0x3d0
[   69.004753][ T4583]  ? __x64_sys_mount+0xc0/0xc0
[   69.009628][ T4583]  ? lockdep_hardirqs_on+0x94/0x140
[   69.014844][ T4583]  ? __x64_sys_mount+0x1c/0xc0
[   69.019747][ T4583]  do_syscall_64+0x4c/0xa0
[   69.024184][ T4583]  ? clear_bhb_loop+0x30/0x80
[   69.028874][ T4583]  ? clear_bhb_loop+0x30/0x80
[   69.033567][ T4583]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   69.039491][ T4583] RIP: 0033:0x7f0ed974da0a
[   69.043939][ T4583] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.063684][ T4583] RSP: 002b:00007f0ed79a5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   69.072114][ T4583] RAX: ffffffffffffffda RBX: 00007f0ed79a5ee0 RCX: 00007f0ed974da0a
[   69.080100][ T4583] RDX: 0000200000000000 RSI: 00002000000096c0 RDI: 00007f0ed79a5ea0
[   69.088312][ T4583] RBP: 0000200000000000 R08: 00007f0ed79a5ee0 R09: 0000000000000000
[   69.096584][ T4583] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000096c0
[   69.104580][ T4583] R13: 00007f0ed79a5ea0 R14: 0000000000009768 R15: 0000200000000040
[   69.112701][ T4583]  </TASK>
[   69.118199][ T4583] XFS (loop0): log mount/recovery failed: error -117
[   69.178807][ T4583] XFS (loop0): log mount failed
[   69.184848][ T4637] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   69.310913][ T4643] netlink: 'syz.3.142': attribute type 1 has an invalid length.
[   69.489246][ T4649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'.
[   69.548122][ T4619] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.123 (4619)
[   69.622380][ T4619] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   69.676475][ T4619] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[   69.722089][ T4619] BTRFS info (device loop2): use lzo compression, level 0
[   69.744857][ T4619] BTRFS info (device loop2): using free space tree
[   69.751578][ T4619] BTRFS info (device loop2): has skinny extents
[   70.062108][ T4667] set_capacity_and_notify: 3 callbacks suppressed
[   70.062124][ T4667] loop1: detected capacity change from 0 to 2048
[   70.105500][ T4664] loop0: detected capacity change from 0 to 32768
[   70.124961][ T4673] netlink: 'syz.4.154': attribute type 4 has an invalid length.
[   70.156545][ T4673] netlink: 3649 bytes leftover after parsing attributes in process `syz.4.154'.
[   70.186425][ T4664] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   70.195266][ T4664] gfs2: fsid=syz:syz: unknown hostdata (\)
[   70.252026][ T4682] program syz.3.155 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.281076][ T4667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.521078][ T4619] BTRFS info (device loop2): enabling ssd optimizations
[   70.572795][ T4707] loop0: detected capacity change from 0 to 4096
[   70.641358][ T4707] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   70.697736][ T4707] ntfs3: loop0: Failed to load $Extend.
[   70.740723][ T4703] loop3: detected capacity change from 0 to 8192
[   70.797205][ T4713] tipc: Started in network mode
[   70.822786][ T4713] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   70.844215][ T4713] tipc: Enabled bearer <eth:vlan0>, priority 10
[   70.850837][ T4703] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   70.863878][ T4703] REISERFS (device loop3): using ordered data mode
[   70.870518][ T4703] reiserfs: using flush barriers
[   70.992202][ T4703] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   71.019088][ T4725] loop1: detected capacity change from 0 to 128
[   71.124844][ T4173] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 10 /dev/loop2 scanned by udevd (4173)
[   71.181214][ T4725] FAT-fs (loop1): Directory bread(block 524322) failed
[   71.286229][ T4725] FAT-fs (loop1): Directory bread(block 524323) failed
[   71.322793][ T4730] sock: sock_timestamping_bind_phc: sock not bind to device
[   71.325178][ T4725] FAT-fs (loop1): Directory bread(block 524324) failed
[   71.369327][ T4703] REISERFS (device loop3): checking transaction log (loop3)
[   71.422650][ T4725] FAT-fs (loop1): Directory bread(block 524325) failed
[   71.429906][ T4725] FAT-fs (loop1): Directory bread(block 524326) failed
[   71.455326][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.462063][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.479753][ T4725] FAT-fs (loop1): Directory bread(block 524327) failed
[   71.485567][ T4703] REISERFS (device loop3): Using r5 hash to sort names
[   71.486947][ T4725] FAT-fs (loop1): Directory bread(block 524328) failed
[   71.501208][ T4725] FAT-fs (loop1): Directory bread(block 524329) failed
[   71.556672][ T4703] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   71.666818][ T4725] FAT-fs (loop1): Directory bread(block 524322) failed
[   71.693533][ T4725] FAT-fs (loop1): Directory bread(block 524323) failed
[   71.745066][ T4742] loop0: detected capacity change from 0 to 128
[   71.801874][ T4703] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "journal_ioprio=0x0000000000000006"
[   71.892531][ T4745] loop4: detected capacity change from 0 to 512
[   71.943600][ T4183] sysv_free_block: flc_count > flc_size
[   71.949652][ T4183] sysv_free_block: flc_count > flc_size
[   71.964727][ T4745] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   71.977104][ T4469] tipc: Node number set to 10005162
[   72.007980][ T4183] sysv_free_block: flc_count > flc_size
[   72.038015][ T4183] sysv_free_block: flc_count > flc_size
[   72.062367][ T4183] sysv_free_block: flc_count > flc_size
[   72.077143][ T4183] sysv_free_block: flc_count > flc_size
[   72.084449][ T4745] EXT4-fs (loop4): orphan cleanup on readonly fs
[   72.091400][ T4183] sysv_free_block: flc_count > flc_size
[   72.102392][ T4183] sysv_free_block: flc_count > flc_size
[   72.108561][ T4183] sysv_free_block: flc_count > flc_size
[   72.114794][ T4183] sysv_free_block: flc_count > flc_size
[   72.121511][ T4183] sysv_free_inode: inode 0,1,2 or nonexistent inode
[   72.139410][ T4745] EXT4-fs error (device loop4): mb_free_blocks:1874: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   72.263599][ T4745] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.180: corrupted inode contents
[   72.306079][ T4745] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #12: comm syz.4.180: mark_inode_dirty error
[   72.360387][ T4762] loop1: detected capacity change from 0 to 128
[   72.367447][ T4745] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.180: corrupted inode contents
[   72.389739][ T4758] loop0: detected capacity change from 0 to 4096
[   72.419185][ T4745] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.180: mark_inode_dirty error
[   72.432486][ T4762] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   72.478573][ T4758] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   72.494883][ T4762] hpfs: filesystem error: improperly stopped
[   72.503642][ T4745] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.180: corrupted inode contents
[   72.533285][ T4762] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   72.543628][ T4762] hpfs: You really don't want any checks? You are crazy...
[   72.563970][ T4745] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   72.583363][ T4762] hpfs: hpfs_map_sector(): read error
[   72.596801][ T4762] hpfs: code page support is disabled
[   72.603563][ T4762] hpfs: hpfs_map_4sectors(): unaligned read
[   72.610001][ T4762] hpfs: hpfs_map_4sectors(): unaligned read
[   72.616609][ T4762] hpfs: filesystem error: unable to find root dir
[   72.632729][ T4745] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.180: corrupted inode contents
[   72.691960][ T4745] EXT4-fs error (device loop4): ext4_truncate:4279: inode #12: comm syz.4.180: mark_inode_dirty error
[   72.712272][ T4463] hid-generic 0004:0004:FFFF0001.0001: unknown main item tag 0x0
[   72.730818][ T4745] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   72.738892][ T4463] hid-generic 0004:0004:FFFF0001.0001: unknown main item tag 0x0
[   72.748186][ T4463] hid-generic 0004:0004:FFFF0001.0001: unknown main item tag 0x0
[   72.755666][ T4745] EXT4-fs (loop4): 1 truncate cleaned up
[   72.771599][ T4745] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,i_version,journal_dev=0x0000000000000005,errors=continue,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback.
[   72.774277][ T4463] hid-generic 0004:0004:FFFF0001.0001: hidraw0: <UNKNOWN> HID v0.b3 Device [syz0] on syz1
[   72.854243][ T4183] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[   72.888290][ T4183] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[   72.907593][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   72.972735][ T4616] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   73.037780][ T4780] capability: warning: `syz.2.197' uses 32-bit capabilities (legacy support in use)
[   73.089770][ T4776] fido_id[4776]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   73.129464][ T4778] loop4: detected capacity change from 0 to 4096
[   73.166464][ T4778] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[   73.332824][ T4616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.383834][ T4616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.412688][ T4463] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.432855][ T4616] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[   73.460314][ T4616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.490368][ T4616] usb 4-1: config 0 descriptor??
[   73.583828][ T4791] exfat: Deprecated parameter 'utf8'
[   73.589303][ T4791] exfat: Deprecated parameter 'namecase'
[   73.595676][ T4791] exfat: Deprecated parameter 'utf8'
[   73.609892][ T4775] XFS (loop1): Mounting V5 Filesystem
[   73.655234][ T4791] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d)
[   73.679108][ T4775] XFS (loop1): Ending clean mount
[   73.808477][ T4184] XFS (loop1): Unmounting Filesystem
[   73.823000][ T4463] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[   73.835552][ T4463] usb 1-1: config 0 has no interface number 0
[   73.949038][ T4470] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   73.957194][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'.
[   73.998046][ T4616] logitech-djreceiver 0003:046D:C71F.0002: item fetching failed at offset 3/7
[   74.028389][ T4463] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[   74.031672][ T4616] logitech-djreceiver 0003:046D:C71F.0002: logi_dj_probe: parse failed
[   74.047123][ T4616] logitech-djreceiver: probe of 0003:046D:C71F.0002 failed with error -22
[   74.047663][ T4463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.072351][ T4463] usb 1-1: Product: syz
[   74.077081][ T4463] usb 1-1: Manufacturer: syz
[   74.081758][ T4463] usb 1-1: SerialNumber: syz
[   74.111459][ T4463] usb 1-1: config 0 descriptor??
[   74.251055][ T4614] usb 4-1: USB disconnect, device number 3
[   74.262871][ T4470] usb 3-1: Using ep0 maxpacket: 8
[   74.428088][ T4818] hfs: hfs: Invalid key length: 94
[   74.487707][ T4185] hfs: node 4:3 still has 1 user(s)!
[   74.564960][ T4463] usb 1-1: Found UVC 0.08 device syz (046d:0823)
[   74.571443][ T4463] usb 1-1: No valid video chain found.
[   74.585415][ T4463] usb 1-1: USB disconnect, device number 2
[   74.602789][ T4470] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[   74.611865][ T4470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.662456][ T4470] usb 3-1: Product: syz
[   74.689252][ T4470] usb 3-1: Manufacturer: syz
[   74.702320][ T4470] usb 3-1: SerialNumber: syz
[   74.992887][ T4470] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[   75.004983][ T4835] NILFS (loop3): invalid segment: Checksum error in segment payload
[   75.022830][ T4470] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[   75.044956][ T4835] NILFS (loop3): trying rollback from an earlier position
[   75.057981][ T4470] mxuport: probe of 3-1:254.0 failed with error -71
[   75.109602][ T4470] usb 3-1: USB disconnect, device number 2
[   75.133468][ T4835] NILFS (loop3): recovery complete
[   75.166422][ T4847] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.488798][ T4855] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.500765][ T4840] set_capacity_and_notify: 6 callbacks suppressed
[   75.500780][ T4840] loop4: detected capacity change from 0 to 32768
[   75.532683][ T4614] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   75.678646][ T4840] XFS (loop4): Mounting V5 Filesystem
[   75.779710][ T4840] XFS (loop4): Ending clean mount
[   75.782692][ T4614] usb 1-1: Using ep0 maxpacket: 16
[   75.803488][ T4840] XFS (loop4): Quotacheck needed: Please wait.
[   75.900260][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'.
[   75.913559][ T4614] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.943465][ T4614] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   75.984450][ T4840] XFS (loop4): Quotacheck: Done.
[   76.100601][ T4185] XFS (loop4): Unmounting Filesystem
[   76.123373][ T4614] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   76.141008][ T4614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.177673][ T4614] usb 1-1: Product: syz
[   76.186722][ T4614] usb 1-1: Manufacturer: syz
[   76.192330][ T4614] usb 1-1: SerialNumber: syz
[   76.225527][ T4614] r8152-cfgselector 1-1: config 0 descriptor??
[   76.493766][ T4614] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[   76.567133][    T7] cfg80211: failed to load regulatory.db
[   76.668816][ T4902] loop3: detected capacity change from 0 to 512
[   76.716125][ T4615] usb 1-1: USB disconnect, device number 3
[   76.796587][ T4902] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   76.838012][ T4902] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   76.888429][ T4902] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   76.932680][ T4614] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   76.947755][ T4902] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   76.990629][ T4902] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   77.005229][ T4902] EXT4-fs (loop3): orphan cleanup on readonly fs
[   77.015061][ T4902] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.238: bg 0: block 34: padding at end of block bitmap is not set
[   77.034676][ T4902] __quota_error: 9 callbacks suppressed
[   77.034692][ T4902] Quota error (device loop3): write_blk: dquota write failed
[   77.051668][ T4902] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   77.062334][ T4902] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.238: Failed to acquire dquot type 1
[   77.102737][ T4902] EXT4-fs (loop3): 1 truncate cleaned up
[   77.188039][ T4902] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback.
[   77.373027][ T4614] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.412664][ T4614] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[   77.452312][ T4614] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   77.494359][ T4614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.548864][ T4614] usb 5-1: config 0 descriptor??
[   77.608320][ T4614] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   77.641320][ T4614] dvb-usb: bulk message failed: -22 (3/0)
[   77.682387][ T4614] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   77.751799][ T4614] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   77.808170][ T4903] dvb-usb: bulk message failed: -22 (4/0)
[   77.816605][ T4614] usb 5-1: media controller created
[   77.858104][ T4614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   77.873431][ T4946] loop3: detected capacity change from 0 to 256
[   77.936698][ T4614] dvb-usb: bulk message failed: -22 (6/0)
[   77.954814][ T4614] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   78.020350][ T4946] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   78.095536][ T4614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[   78.174661][ T4614] dvb-usb: schedule remote query interval to 150 msecs.
[   78.181952][ T4614] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   78.314573][ T4614] usb 5-1: USB disconnect, device number 3
[   78.480899][ T4614] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   78.820779][ T4936] loop2: detected capacity change from 0 to 32768
[   78.935959][ T4936] XFS (loop2): Mounting V5 Filesystem
[   79.034991][ T4936] XFS (loop2): Ending clean mount
[   79.050784][ T4936] XFS (loop2): Quotacheck needed: Please wait.
[   79.087597][ T5000] loop0: detected capacity change from 0 to 1024
[   79.119152][ T4936] XFS (loop2): Quotacheck: Done.
[   79.135215][ T5000] EXT4-fs (loop0): Ignoring removed orlov option
[   79.162900][ T4472] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   79.180648][ T5000] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[   79.210154][ T5000] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks
[   79.229267][ T4983] loop1: detected capacity change from 0 to 32768
[   79.236265][ T5000] EXT4-fs warning (device loop0): ext4_resize_fs:2004: can't shrink FS - resize aborted
[   79.273177][ T4983] XFS: attr2 mount option is deprecated.
[   79.317316][ T4983] XFS (loop1): Mounting V5 Filesystem
[   79.359754][ T4186] XFS (loop2): Unmounting Filesystem
[   79.402626][ T4983] XFS (loop1): Ending clean mount
[   79.420276][ T4983] XFS (loop1): Quotacheck needed: Please wait.
[   79.544675][ T4472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   79.566225][ T4472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.585473][ T4472] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   79.588988][ T4983] XFS (loop1): Quotacheck: Done.
[   79.632928][ T4472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.684405][ T4472] usb 5-1: config 0 descriptor??
[   79.723868][ T4472] hub 5-1:0.0: USB hub found
[   79.736835][ T5024] loop3: detected capacity change from 0 to 1024
[   79.792530][ T4184] XFS (loop1): Unmounting Filesystem
[   79.916283][ T4250] hfsplus: b-tree write err: -5, ino 25
[   79.922307][ T4250] hfsplus: b-tree write err: -5, ino 4
[   79.949736][ T4472] hub 5-1:0.0: 1 port detected
[   79.978822][ T4250] hfsplus: b-tree write err: -5, ino 2
[   79.992823][ T4250] hfsplus: b-tree write err: -5, ino 26
[   80.173344][ T4472] hub 5-1:0.0: hub_hub_status failed (err = -71)
[   80.180622][ T4472] hub 5-1:0.0: config failed, can't get hub status (err -71)
[   80.339272][ T4472] usbhid 5-1:0.0: can't add hid device: -71
[   80.354776][ T4472] usbhid: probe of 5-1:0.0 failed with error -71
[   80.371860][ T5043] loop0: detected capacity change from 0 to 2048
[   80.413519][ T4472] usb 5-1: USB disconnect, device number 4
[   80.491862][ T5043] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   80.535839][ T5043] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   80.557495][ T5043] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   80.576423][ T5043] UDF-fs: Scanning with blocksize 512 failed
[   80.608805][ T5043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.876376][ T5039] loop2: detected capacity change from 0 to 32768
[   80.937287][ T5057] loop0: detected capacity change from 0 to 1024
[   80.968347][ T5059] loop4: detected capacity change from 0 to 1024
[   81.059212][ T5039] JBD2: Ignoring recovery information on journal
[   81.094462][ T5045] loop3: detected capacity change from 0 to 32768
[   81.127732][ T5057] hfsplus: trying to free free bnode 0(1)
[   81.146905][ T5059] hfsplus: b-tree write err: -5, ino 2
[   81.171402][  T155] hfsplus: b-tree write err: -5, ino 25
[   81.171574][  T155] hfsplus: b-tree write err: -5, ino 4
[   81.171651][  T155] hfsplus: b-tree write err: -5, ino 2
[   81.171716][  T155] hfsplus: b-tree write err: -5, ino 26
[   81.220700][ T5045] XFS (loop3): Mounting V5 Filesystem
[   81.265733][ T5039] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   81.377830][ T4286] hfsplus: b-tree write err: -5, ino 25
[   81.390521][ T5045] XFS (loop3): Ending clean mount
[   81.430717][ T4286] hfsplus: b-tree write err: -5, ino 4
[   81.445107][ T4286] hfsplus: b-tree write err: -5, ino 2
[   81.459638][ T5045] XFS (loop3): Quotacheck needed: Please wait.
[   81.492211][ T5073] loop1: detected capacity change from 0 to 256
[   81.541814][ T5076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'.
[   81.544212][ T5073] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   81.556825][ T5076] device vlan2 entered promiscuous mode
[   81.575796][ T5039] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[   81.633810][ T5045] XFS (loop3): Quotacheck: Done.
[   81.649069][ T5076] device bridge0 entered promiscuous mode
[   81.652925][ T5039] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   81.652964][ T5039] OCFS2: File system is now read-only.
[   81.652974][ T5039] (syz.2.280,5039,0):ocfs2_find_leaf:1941 ERROR: status = -30
[   81.652996][ T5039] (syz.2.280,5039,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[   81.653018][ T5039] (syz.2.280,5039,0):ocfs2_fiemap:782 ERROR: status = -30
[   81.879586][ T4188] XFS (loop3): Unmounting Filesystem
[   81.966017][ T4186] ocfs2: Unmounting device (7,2) on (node local)
[   82.197126][ T5081] loop0: detected capacity change from 0 to 8192
[   82.335493][ T5081] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   82.388914][ T5081] REISERFS (device loop0): using ordered data mode
[   82.437336][ T5081] reiserfs: using flush barriers
[   82.458376][ T5081] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   82.498376][ T5098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.303'.
[   82.551309][ T5081] REISERFS (device loop0): checking transaction log (loop0)
[   82.596989][ T5081] REISERFS (device loop0): Using r5 hash to sort names
[   82.641833][ T5081] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   82.797472][ T5081] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "journal_ioprio=0x0000000000000006"
[   83.179277][ T5115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.310'.
[   83.212758][ T5115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.310'.
[   83.262503][ T5116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.310'.
[   83.396520][ T5108] loop1: detected capacity change from 0 to 40427
[   83.421493][ T5105] loop3: detected capacity change from 0 to 40427
[   83.445899][ T5124] loop4: detected capacity change from 0 to 1024
[   83.501704][ T5105] F2FS-fs (loop3): invalid crc value
[   83.508479][ T5108] F2FS-fs (loop1): invalid crc value
[   83.563996][ T5108] F2FS-fs (loop1): Found nat_bits in checkpoint
[   83.570695][ T5105] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   83.736962][ T5108] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   83.750053][ T5141] loop2: detected capacity change from 0 to 1024
[   83.760522][ T5124] Process accounting resumed
[   83.835832][ T4575] hfsplus: b-tree write err: -5, ino 25
[   83.866379][ T5105] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[   83.867419][ T4575] hfsplus: b-tree write err: -5, ino 4
[   83.914350][ T5105] F2FS-fs (loop3): Start checkpoint disabled!
[   83.925242][ T4575] hfsplus: b-tree write err: -5, ino 2
[   83.942957][ T4575] hfsplus: b-tree write err: -5, ino 20
[   83.969466][ T5105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   84.101526][ T4184] attempt to access beyond end of device
[   84.101526][ T4184] loop1: rw=2049, want=45104, limit=40427
[   84.662778][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   84.942785][    T7] usb 5-1: Using ep0 maxpacket: 8
[   84.964599][ T5184] erofs: (device loop1): mounted with root inode @ nid 36.
[   85.002008][ T5184] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   85.019338][ T5184] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[   85.093178][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.134798][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.173230][    T7] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[   85.211276][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.221746][    T7] usb 5-1: config 0 descriptor??
[   85.227964][ T5193] exfat: Deprecated parameter 'namecase'
[   85.269299][ T5193] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d)
[   85.452301][ T5197] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.495067][ T5199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.346'.
[   85.634487][    C1] sd 0:0:1:0: tag#2320 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   85.644599][    C1] sd 0:0:1:0: tag#2320 CDB: Read(6) 08 18 4b 56 00 40
[   85.714619][    T7] cherry 0003:046A:0027.0003: report_id 4302 is invalid
[   85.726779][    T7] cherry 0003:046A:0027.0003: item 0 2 1 8 parsing failed
[   85.750419][    T7] cherry: probe of 0003:046A:0027.0003 failed with error -22
[   85.937786][    T7] usb 5-1: USB disconnect, device number 5
[   85.952391][ T5221] set_capacity_and_notify: 4 callbacks suppressed
[   85.952405][ T5221] loop3: detected capacity change from 0 to 4096
[   85.966897][ T5218] loop1: detected capacity change from 0 to 4096
[   86.043278][ T5222] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.067199][ T5223] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.291244][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[   86.391903][ T5227] syz.1.357 (5227) used greatest stack depth: 19704 bytes left
[   86.423117][ T5231] loop3: detected capacity change from 0 to 2048
[   86.487391][ T5231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.732196][ T5219] loop2: detected capacity change from 0 to 40427
[   86.768940][ T5247] loop3: detected capacity change from 0 to 64
[   86.849330][ T5219] F2FS-fs (loop2): Found nat_bits in checkpoint
[   86.894880][ T5247] attempt to access beyond end of device
[   86.894880][ T5247] loop3: rw=0, want=1026, limit=64
[   86.927537][ T5253] loop0: detected capacity change from 0 to 1024
[   86.958165][ T5247] Buffer I/O error on dev loop3, logical block 512, async page read
[   86.980803][ T5219] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   86.989205][ T5255] loop4: detected capacity change from 0 to 2048
[   86.997288][ T5219] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   87.012705][ T5247] attempt to access beyond end of device
[   87.012705][ T5247] loop3: rw=0, want=113154, limit=64
[   87.048024][ T5258] lo speed is unknown, defaulting to 1000
[   87.069145][ T5258] lo speed is unknown, defaulting to 1000
[   87.071741][ T5247] Buffer I/O error on dev loop3, logical block 56576, async page read
[   87.083925][ T5255] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.115689][ T5258] lo speed is unknown, defaulting to 1000
[   87.213340][ T5258] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   87.264356][ T5258] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   87.450623][ T5258] lo speed is unknown, defaulting to 1000
[   87.504759][   T26] audit: type=1326 audit(1773253300.646:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.4.378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82b9a8d799 code=0x0
[   87.543895][ T5258] lo speed is unknown, defaulting to 1000
[   87.568455][ T5258] lo speed is unknown, defaulting to 1000
[   87.583597][ T5258] lo speed is unknown, defaulting to 1000
[   87.620515][ T5258] lo speed is unknown, defaulting to 1000
[   87.863565][ T5286] loop0: detected capacity change from 0 to 65
[   87.929490][ T5290] loop2: detected capacity change from 0 to 512
[   87.992044][ T5286] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[   88.013447][ T5290] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   88.034368][ T5290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[   88.085706][ T5290] System zones: 1-12
[   88.091240][ T5290] EXT4-fs (loop2): orphan cleanup on readonly fs
[   88.153609][ T5290] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.387: Directory hole found for htree index block 0
[   88.212648][ T5290] EXT4-fs (loop2): Remounting filesystem read-only
[   88.220340][ T5290] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[   88.262289][ T5283] loop3: detected capacity change from 0 to 40427
[   88.292759][ T5290] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.387: Directory hole found for htree index block 0
[   88.340878][ T5283] F2FS-fs (loop3): invalid crc value
[   88.356253][ T5290] EXT4-fs (loop2): Remounting filesystem read-only
[   88.399996][ T5290] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   88.411996][ T5283] F2FS-fs (loop3): Found nat_bits in checkpoint
[   88.452777][ T5290] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback.
[   88.592873][ T5283] F2FS-fs (loop3): Start checkpoint disabled!
[   88.638644][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.689890][ T5306] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.708099][ T5283] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   88.768704][ T5306] EXT4-fs error (device loop4): ext4_group_add:1699: inode #7: comm syz.4.394: iget: checksum invalid
[   88.792529][ T5320] delete_channel: no stack
[   88.851139][ T5306] EXT4-fs warning (device loop4): ext4_group_add:1701: Error opening resize inode
[   88.857426][ T5283] F2FS-fs (loop3): Skipping Checkpoint. Checkpoints currently disabled.
[   88.891225][ T5325] netlink: 'syz.2.401': attribute type 1 has an invalid length.
[   89.535968][ T5353] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   89.562646][ T5353] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   89.597761][ T5353] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   89.623239][ T5353] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   89.641717][ T5353] System zones: 0-2, 18-18, 34-35
[   89.650183][ T5353] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.750554][ T5358] rock: directory entry would overflow storage
[   89.792653][ T5358] rock: sig=0x4654, size=5, remaining=4
[   90.030952][ T5339] XFS (loop4): Mounting V5 Filesystem
[   90.112445][ T5339] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[   90.142753][ T5374] erofs: (device loop3): mounted with root inode @ nid 36.
[   90.166395][ T5339] XFS (loop4): Ending clean mount
[   90.252152][ T5375] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[   90.269703][ T5374] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36
[   90.281723][ T4185] XFS (loop4): Unmounting Filesystem
[   90.303888][ T5374] attempt to access beyond end of device
[   90.303888][ T5374] loop3: rw=0, want=64, limit=16
[   90.343813][ T5374] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95]
[   90.466439][ T5383] netlink: 'syz.1.424': attribute type 4 has an invalid length.
[   90.571966][ T5385] EXT4-fs (loop3): Test dummy encryption mode enabled
[   90.640780][ T5385] EXT4-fs error (device loop3): __ext4_iget:4912: inode #11: block 1: comm syz.3.425: invalid block
[   90.702766][ T4229] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   90.738555][ T5385] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.425: couldn't read orphan inode 11 (err -117)
[   90.790567][ T5385] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,test_dummy_encryption=v1,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none.
[   90.984419][ T5398] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.063084][ T4229] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[   91.081052][ T4229] usb 3-1: config 0 has no interface number 0
[   91.087685][ T4229] usb 3-1: config 0 interface 32 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   91.099356][ T4229] usb 3-1: config 0 interface 32 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.134497][ T5393] set_capacity_and_notify: 8 callbacks suppressed
[   91.134521][ T5393] loop4: detected capacity change from 0 to 32768
[   91.151804][ T4229] usb 3-1: config 0 interface 32 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.189861][ T4229] usb 3-1: config 0 interface 32 has no altsetting 0
[   91.197775][ T4229] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   91.212942][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.242975][ T4229] usb 3-1: config 0 descriptor??
[   91.307235][ T5393] XFS (loop4): Mounting V5 Filesystem
[   91.395759][ T5393] XFS (loop4): Ending clean mount
[   91.425571][ T4185] XFS (loop4): Unmounting Filesystem
[   91.531694][ T5402] loop1: detected capacity change from 0 to 32768
[   91.540817][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'.
[   91.576311][ T5402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.431 (5402)
[   91.651368][ T5402] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   91.670177][ T5402] BTRFS info (device loop1): using free space tree
[   91.698123][ T5402] BTRFS info (device loop1): has skinny extents
[   91.726050][ T4229] uclogic 0003:145F:0212.0004: interface is invalid, ignoring
[   91.908778][ T5438] netlink: 'syz.3.440': attribute type 1 has an invalid length.
[   91.945578][ T5438] netlink: 144 bytes leftover after parsing attributes in process `syz.3.440'.
[   91.959297][ T5438] netlink: 96 bytes leftover after parsing attributes in process `syz.3.440'.
[   91.961182][ T4614] usb 3-1: USB disconnect, device number 3
[   92.058573][ T5402] BTRFS info (device loop1): enabling ssd optimizations
[   92.100975][ T5455] loop4: detected capacity change from 0 to 512
[   92.169417][ T4250] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   92.221308][ T5455] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   92.303124][ T5455] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.590132][ T5472] loop2: detected capacity change from 0 to 64
[   93.027320][ T5490] device dummy0 entered promiscuous mode
[   93.093432][ T5490] device dummy0 left promiscuous mode
[   93.791842][ T5483] loop2: detected capacity change from 0 to 32768
[   93.803797][ T5500] loop0: detected capacity change from 0 to 65536
[   93.834150][ T5486] loop3: detected capacity change from 0 to 32768
[   93.889938][ T5486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.457 (5486)
[   93.915324][ T5483] (syz.2.455,5483,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   93.962716][ T5486] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   94.025698][ T5486] BTRFS info (device loop3): using free space tree
[   94.032392][ T5486] BTRFS info (device loop3): has skinny extents
[   94.067367][ T5500] XFS (loop0): Mounting V5 Filesystem
[   94.084778][ T5495] loop4: detected capacity change from 0 to 40427
[   94.098188][ T5483] (syz.2.455,5483,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.152829][ T5495] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[   94.242393][ T5495] F2FS-fs (loop4): invalid crc value
[   94.315392][ T5495] F2FS-fs (loop4): Found nat_bits in checkpoint
[   94.326120][ T5507] loop1: detected capacity change from 0 to 32768
[   94.351428][ T5483] JBD2: Ignoring recovery information on journal
[   94.374132][ T5507] gfs2: quota_quantum mount option requires a positive numeric argument
[   94.458321][ T5500] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x22 dinode
[   94.469511][ T5500] XFS (loop0): Unmount and run xfs_repair
[   94.475927][ T5500] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   94.483471][ T5500] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[   94.492633][ T5500] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.501744][ T5500] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 69 c5 88 88  ..e.....4.Xhi...
[   94.512052][ T5500] 00000030: 34 f7 58 68 69 c5 88 88 00 00 00 00 00 00 00 00  4.Xhi...........
[   94.521371][ T5500] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.531282][ T5500] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.541221][ T5500] 00000060: ff ff ff ff d0 67 36 04 00 00 00 00 00 00 00 02  .....g6.........
[   94.551675][ T5500] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08  ................
[   94.562395][ T5500] XFS (loop0): failed to read RT inodes
[   94.645962][ T5483] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   94.701984][ T5495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   95.071444][ T5486] BTRFS info (device loop3): enabling ssd optimizations
[   95.159295][ T4186] ocfs2: Unmounting device (7,2) on (node local)
[   95.379983][ T4250] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   95.533706][ T5562] loop0: detected capacity change from 0 to 1024
[   95.706076][   T26] audit: type=1800 audit(1773253308.846:3): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.477" name="file1" dev="loop0" ino=20 res=0 errno=0
[   96.188867][ T5558] set_capacity_and_notify: 1 callbacks suppressed
[   96.188889][ T5558] loop4: detected capacity change from 0 to 32768
[   96.235345][ T5569] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   96.298492][ T5569] ntfs3: loop2: failed to convert "0080" to koi8-ru
[   96.318668][ T5558] JBD2: Ignoring recovery information on journal
[   96.383847][ T5580] devtmpfs: Too few inodes for current use
[   96.489903][ T5558] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   96.760664][ T5558] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[   96.789795][ T5558] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   96.827193][ T5558] OCFS2: File system is now read-only.
[   96.843828][ T5558] (syz.4.474,5558,1):ocfs2_search_chain:1761 ERROR: status = -30
[   96.871702][ T5558] (syz.4.474,5558,1):ocfs2_search_chain:1871 ERROR: status = -30
[   96.896429][ T5558] (syz.4.474,5558,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   96.920973][ T5558] (syz.4.474,5558,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   96.955986][ T5558] (syz.4.474,5558,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[   96.966580][ T5558] (syz.4.474,5558,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[   96.997272][ T5558] (syz.4.474,5558,1):ocfs2_mknod_locked:639 ERROR: status = -30
[   97.011492][ T5592] loop3: detected capacity change from 0 to 8192
[   97.021233][ T5558] (syz.4.474,5558,1):ocfs2_mknod:385 ERROR: status = -30
[   97.025111][ T5578] loop0: detected capacity change from 0 to 40427
[   97.037071][ T5558] (syz.4.474,5558,1):ocfs2_mknod:502 ERROR: status = -30
[   97.067678][ T5578] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   97.071387][ T5592] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   97.086726][ T5558] (syz.4.474,5558,1):ocfs2_mkdir:659 ERROR: status = -30
[   97.099782][ T5592] REISERFS (device loop3): using ordered data mode
[   97.108816][ T5592] reiserfs: using flush barriers
[   97.119663][ T5578] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   97.119990][ T5592] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   97.198510][ T5586] loop1: detected capacity change from 0 to 40427
[   97.202931][ T5578] F2FS-fs (loop0): invalid crc value
[   97.218597][ T5592] REISERFS (device loop3): checking transaction log (loop3)
[   97.228196][ T5586] F2FS-fs (loop1): invalid crc value
[   97.253695][ T5592] REISERFS (device loop3): Using r5 hash to sort names
[   97.261208][ T5592] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   97.283363][ T5592] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   97.294604][ T5578] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   97.306847][ T5586] F2FS-fs (loop1): Found nat_bits in checkpoint
[   97.308032][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[   97.491958][ T5592] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[   97.492873][ T5586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   97.581476][ T5578] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   97.584726][ T5592] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[   97.588888][ T5578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   97.658485][ T5605] loop4: detected capacity change from 0 to 1024
[   97.664168][ T5592] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[   97.723739][ T4184] attempt to access beyond end of device
[   97.723739][ T4184] loop1: rw=2049, want=45104, limit=40427
[   97.867562][  T155] hfsplus: b-tree write err: -5, ino 25
[   97.878048][  T155] hfsplus: b-tree write err: -5, ino 4
[   97.897033][  T155] hfsplus: b-tree write err: -5, ino 2
[   97.920661][  T155] hfsplus: b-tree write err: -5, ino 26
[   97.927372][ T4183] attempt to access beyond end of device
[   97.927372][ T4183] loop0: rw=2049, want=45104, limit=40427
[   98.295366][ T5615] loop3: detected capacity change from 0 to 256
[   98.650294][ T5609] loop2: detected capacity change from 0 to 32768
[   98.735020][ T5630] loop0: detected capacity change from 0 to 1024
[   99.072962][ T5641] loop4: detected capacity change from 0 to 128
[   99.126165][ T5647] loop0: detected capacity change from 0 to 2048
[   99.163157][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   99.178295][ T5641] VFS: Found a Xenix FS (block size = 512) on device loop4
[   99.191020][ T5647] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   99.299978][ T5656] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.300602][ T4185] sysv_free_block: trying to free block not in datazone
[   99.320328][ T5647] attempt to access beyond end of device
[   99.320328][ T5647] loop0: rw=524288, want=33554432, limit=2048
[   99.333022][ T5658] netlink: 44 bytes leftover after parsing attributes in process `syz.3.517'.
[   99.359246][ T4185] sysv_free_inode: inode 0,1,2 or nonexistent inode
[   99.433685][ T4229] usb 2-1: Using ep0 maxpacket: 16
[   99.508249][ T5662] attempt to access beyond end of device
[   99.508249][ T5662] loop0: rw=0, want=33554432, limit=2048
[   99.509202][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.573008][ T4229] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   99.599369][ T4229] usb 2-1: config 0 has no interface number 0
[   99.607014][ T4229] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.631134][ T5662] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3)
[   99.650011][ T5647] Remounting filesystem read-only
[   99.655348][ T5662] NILFS (loop0): error -5 reading inode: ino=12
[   99.657630][ T4229] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.662498][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.683607][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.695432][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.724881][ T5669] hfs: request for non-existent node 131072 in B*Tree
[   99.734873][ T5669] hfs: request for non-existent node 131072 in B*Tree
[   99.742444][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.768980][ T4229] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   99.790521][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.792732][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.813692][ T4229] usb 2-1: config 0 descriptor??
[   99.820878][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.878948][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.913328][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   99.972729][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  100.059786][ T5686] exfat: Deprecated parameter 'namecase'
[  100.068807][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  100.080727][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'.
[  100.091489][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  100.104805][ T5686] exfat: Deprecated parameter 'utf8'
[  100.115975][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  100.141349][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  100.146122][ T5686] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  100.169709][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  100.196690][ T5647] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  100.217418][   T26] audit: type=1800 audit(1773253313.356:4): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.511" name="file2" dev="loop0" ino=16 res=0 errno=0
[  100.332722][ T5647] syz.0.511 (5647) used greatest stack depth: 19536 bytes left
[  100.507207][ T4229] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71
[  100.537134][ T4229] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71
[  100.577483][ T4229] uclogic 0003:28BD:0071.0005: pen probing failed: -71
[  100.589008][ T4229] uclogic 0003:28BD:0071.0005: failed probing parameters: -71
[  100.612822][ T4229] uclogic: probe of 0003:28BD:0071.0005 failed with error -71
[  100.634171][ T4229] usb 2-1: USB disconnect, device number 2
[  100.732701][ T4480] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  100.752870][ T5680] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[  100.777135][ T5680] F2FS-fs (loop4): invalid crc value
[  100.835288][ T5680] F2FS-fs (loop4): Found nat_bits in checkpoint
[  100.865146][ T5693] F2FS-fs (loop2): invalid crc value
[  100.904579][ T5693] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  100.958605][ T5680] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  101.012960][ T4480] usb 1-1: Using ep0 maxpacket: 32
[  101.067172][   T26] audit: type=1800 audit(1773253314.206:5): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.526" name="file1" dev="loop4" ino=10 res=0 errno=0
[  101.095575][ T5693] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  101.152797][ T4480] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  101.172706][ T5693] F2FS-fs (loop2): Start checkpoint disabled!
[  101.172759][ T4480] usb 1-1: config 0 has no interface number 0
[  101.185433][ T4185] attempt to access beyond end of device
[  101.185433][ T4185] loop4: rw=2049, want=45104, limit=40427
[  101.207487][ T4480] usb 1-1: config 0 interface 184 has no altsetting 0
[  101.216993][ T5693] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  101.392881][ T4480] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  101.402306][ T4480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.442641][ T4480] usb 1-1: Product: syz
[  101.446924][ T4480] usb 1-1: Manufacturer: syz
[  101.451737][ T4480] usb 1-1: SerialNumber: syz
[  101.480332][ T4480] usb 1-1: config 0 descriptor??
[  101.553710][ T4480] smsc75xx v1.0.0
[  101.883493][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'.
[  101.986924][ T5733] netlink: 'syz.2.542': attribute type 3 has an invalid length.
[  102.006689][ T5737] set_capacity_and_notify: 5 callbacks suppressed
[  102.006711][ T5737] loop4: detected capacity change from 0 to 64
[  102.094080][ T5737] hfs: request for non-existent node 131072 in B*Tree
[  102.121441][ T5737] hfs: request for non-existent node 131072 in B*Tree
[  102.176697][ T5721] loop1: detected capacity change from 0 to 32768
[  102.237877][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.261452][ T4480] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  102.288240][ T4480] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  102.302359][ T5721] JBD2: Ignoring recovery information on journal
[  102.360881][ T4480] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  102.403628][ T5721] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  102.454081][ T4480] smsc75xx: probe of 1-1:0.184 failed with error -71
[  102.492642][ T4229] usb 4-1: Using ep0 maxpacket: 8
[  102.533283][ T4480] usb 1-1: USB disconnect, device number 4
[  102.586863][ T4184] ocfs2: Unmounting device (7,1) on (node local)
[  102.658387][ T5753] sp0: Synchronizing with TNC
[  102.706978][ T5752] [U] è
[  102.772929][ T4229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  102.792764][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.800872][ T4229] usb 4-1: Product: syz
[  102.852595][ T4229] usb 4-1: Manufacturer: syz
[  102.862226][ T5758] loop1: detected capacity change from 0 to 16
[  102.863594][ T4229] usb 4-1: SerialNumber: syz
[  102.882310][ T5746] loop2: detected capacity change from 0 to 32768
[  102.904257][ T4229] usb 4-1: config 0 descriptor??
[  102.912064][ T5761] loop0: detected capacity change from 0 to 64
[  102.927919][ T5758] erofs: (device loop1): mounted with root inode @ nid 36.
[  102.957401][ T5758] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  102.998538][ T5746] XFS (loop2): Mounting V5 Filesystem
[  103.099971][ T5746] XFS (loop2): Ending clean mount
[  103.162937][ T4229] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  103.229724][ T4186] XFS (loop2): Unmounting Filesystem
[  103.662819][ T4229] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  103.701005][ T4229] usb 4-1: USB disconnect, device number 4
[  103.819293][ T5807] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  104.015107][ T5811] loop4: detected capacity change from 0 to 8192
[  104.059151][ T5811] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  104.113127][ T5811] REISERFS (device loop4): using ordered data mode
[  104.119708][ T5811] reiserfs: using flush barriers
[  104.142677][ T5811] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11
[  104.173048][ T5811] REISERFS (device loop4): checking transaction log (loop4)
[  104.194325][ T5811] REISERFS (device loop4): Using r5 hash to sort names
[  104.233075][ T5811] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  104.257958][ T5811] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  104.312220][ T5814] loop1: detected capacity change from 0 to 32768
[  104.522433][ T5833] syz.2.592 uses obsolete (PF_INET,SOCK_PACKET)
[  105.367881][ T5829] loop0: detected capacity change from 0 to 32768
[  105.563813][ T5848] loop4: detected capacity change from 0 to 32768
[  105.573391][ T5829] XFS (loop0): Mounting V5 Filesystem
[  105.613313][ T5848] XFS: attr2 mount option is deprecated.
[  105.708809][ T5874] loop2: detected capacity change from 0 to 2048
[  105.736371][ T5857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.603 (5857)
[  105.741223][ T5848] XFS (loop4): Mounting V5 Filesystem
[  105.769153][ T5829] XFS (loop0): Ending clean mount
[  105.797209][ T5857] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  105.806434][ T5857] BTRFS info (device loop1): force zlib compression, level 3
[  105.814916][ T5857] BTRFS info (device loop1): enabling ssd optimizations
[  105.823161][ T5857] BTRFS info (device loop1): allowing degraded mounts
[  105.831948][ T5857] BTRFS info (device loop1): force clearing of disk cache
[  105.836303][ T5882] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.847249][ T5857] BTRFS info (device loop1): using free space tree
[  105.857654][ T5857] BTRFS info (device loop1): has skinny extents
[  105.910586][ T5848] XFS (loop4): Ending clean mount
[  105.919038][ T5848] XFS (loop4): Quotacheck needed: Please wait.
[  105.978579][ T5848] XFS (loop4): Quotacheck: Done.
[  106.042220][ T4183] XFS (loop0): Unmounting Filesystem
[  106.050009][ T5857] BTRFS info (device loop1): clearing free space tree
[  106.065915][ T5857] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.099409][ T5857] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.100579][ T4185] XFS (loop4): Unmounting Filesystem
[  106.231220][ T5857] BTRFS info (device loop1): creating free space tree
[  106.300816][ T5857] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.326667][ T4467] kernel write not supported for file /244/clear_refs (pid: 4467 comm: kworker/0:11)
[  106.337881][ T5857] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.420751][ T5857] BTRFS info (device loop1): checking UUID tree
[  106.660352][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'.
[  106.949912][ T5925] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  107.033606][ T5931] set_capacity_and_notify: 3 callbacks suppressed
[  107.033620][ T5931] loop4: detected capacity change from 0 to 16
[  107.131153][ T5931] erofs: (device loop4): mounted with root inode @ nid 36.
[  107.219402][ T5939] program syz.3.626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.414567][ T5944] netlink: 140 bytes leftover after parsing attributes in process `syz.2.629'.
[  107.456892][ T5946] loop3: detected capacity change from 0 to 1024
[  107.499896][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'.
[  107.590795][ T5946] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  107.650614][ T5946] EXT4-fs (loop3): group descriptors corrupted!
[  107.678785][ T5958] rdma_op ffff88801a5f51f0 conn xmit_rdma 0000000000000000
[  108.018637][ T5966] loop2: detected capacity change from 0 to 4096
[  108.089786][ T5966] ntfs: volume version 3.1.
[  108.132740][ T4467] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  108.412685][ T4467] usb 5-1: Using ep0 maxpacket: 8
[  108.642889][ T5980] loop1: detected capacity change from 0 to 32768
[  108.686338][ T5980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.650 (5980)
[  108.723075][ T4467] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  108.730054][ T5980] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  108.749158][ T4467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.761779][ T5980] BTRFS info (device loop1): using free space tree
[  108.797966][ T4467] usb 5-1: Product: syz
[  108.808108][ T4467] usb 5-1: Manufacturer: syz
[  108.810870][ T5980] BTRFS info (device loop1): has skinny extents
[  108.822402][ T4467] usb 5-1: SerialNumber: syz
[  108.894367][ T4467] usb 5-1: config 0 descriptor??
[  108.975103][ T4467] gspca_main: sq930x-2.14.0 probing 2770:930c
[  109.197820][ T5980] BTRFS info (device loop1): enabling ssd optimizations
[  109.403094][ T6043] loop2: detected capacity change from 0 to 1024
[  109.476360][ T6040] loop0: detected capacity change from 0 to 4096
[  109.663292][ T4467] gspca_sq930x: reg_w 0305 fd00 failed -71
[  109.669584][ T4467] sq930x: probe of 5-1:0.0 failed with error -71
[  109.695570][ T6040] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  109.753521][ T4467] usb 5-1: USB disconnect, device number 6
[  109.790095][ T6043] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noblock_validity,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none.
[  109.939644][ T6043] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.026517][   T13] Bluetooth: hci1: command 0x0411 tx timeout
[  110.140575][ T4183] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  110.184662][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  110.205236][ T4183] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  110.399652][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'.
[  110.878469][ T6088] loop4: detected capacity change from 0 to 8
[  110.984830][ T6059] loop3: detected capacity change from 0 to 32768
[  111.036888][ T6088] SQUASHFS error: lzo decompression failed, data probably corrupt
[  111.062719][ T6088] SQUASHFS error: Failed to read block 0x91: -5
[  111.094566][ T6088] SQUASHFS error: Unable to read metadata cache entry [8f]
[  111.124129][ T6059] XFS (loop3): Mounting V5 Filesystem
[  111.129937][ T6088] SQUASHFS error: Unable to read inode 0x11f
[  111.186317][ T6074] loop2: detected capacity change from 0 to 32768
[  111.301322][ T6059] XFS (loop3): Ending clean mount
[  111.378067][ T6078] loop0: detected capacity change from 0 to 32768
[  111.493586][ T4188] XFS (loop3): Unmounting Filesystem
[  111.823218][ T6085] XFS (loop1): Mounting V5 Filesystem
[  111.979148][ T6085] XFS (loop1): Ending clean mount
[  111.997455][ T6085] XFS (loop1): Quotacheck needed: Please wait.
[  112.082656][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.103781][ T6085] XFS (loop1): Quotacheck: Done.
[  112.157744][ T6102] JBD2: Ignoring recovery information on journal
[  112.198391][ T6102] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has bad extent record (0, 304, 0)
[  112.219075][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.226153][ T6102] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  112.236078][ T6102] (syz.0.669,6102,1):ocfs2_get_clusters:624 ERROR: status = -30
[  112.243984][ T6102] (syz.0.669,6102,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  112.252464][ T6102] (syz.0.669,6102,1):ocfs2_bmap:488 ERROR: get_blocks() failed, block = 32
[  112.263187][ T6102] (syz.0.669,6102,1):ocfs2_bmap:489 ERROR: status = -30
[  112.270219][ T6102] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  112.293434][ T6102] JBD2: bad block at offset 32
[  112.301765][ T6102] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  112.332854][ T4184] XFS (loop1): Unmounting Filesystem
[  112.451105][ T4183] ocfs2: Unmounting device (7,0) on (node local)
[  112.563376][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.592653][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.612969][    T7] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  112.632450][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.689715][    T7] usb 3-1: config 0 descriptor??
[  112.881226][ T6123] set_capacity_and_notify: 2 callbacks suppressed
[  112.881241][ T6123] loop4: detected capacity change from 0 to 32768
[  112.990401][ T6143] loop3: detected capacity change from 0 to 512
[  113.004184][ T6123] JBD2: Ignoring recovery information on journal
[  113.172926][ T6143] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  113.184910][ T6123] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  113.278540][ T6159] loop1: detected capacity change from 0 to 4096
[  113.331007][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  113.331546][ T6143] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  113.383111][    T7] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71
[  113.434814][    T7] usb 3-1: USB disconnect, device number 4
[  113.485437][ T6143] EXT4-fs (loop3): 1 truncate cleaned up
[  113.491159][ T6143] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,stripe=0x0000000000000007,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none.
[  113.674366][ T6143] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 3 (only 1 groups)
[  113.893027][ T6175] loop4: detected capacity change from 0 to 1024
[  114.029248][ T6175] hfsplus: b-tree write err: -5, ino 2
[  114.123163][ T4286] hfsplus: b-tree write err: -5, ino 25
[  114.128928][ T4286] hfsplus: b-tree write err: -5, ino 4
[  114.613563][ T6211] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.715'.
[  114.699865][ T6189] loop0: detected capacity change from 0 to 32768
[  114.787938][ T6189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.705 (6189)
[  114.838271][ T6213] loop3: detected capacity change from 0 to 8192
[  114.858544][ T6189] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  114.888514][ T6189] BTRFS info (device loop0): force clearing of disk cache
[  114.919168][ T6189] BTRFS info (device loop0): metadata ratio 0
[  114.946568][ T6189] BTRFS info (device loop0): enabling ssd optimizations
[  114.966688][ T6213] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  114.985555][ T6189] BTRFS info (device loop0): using spread ssd allocation scheme
[  114.998892][ T6189] BTRFS info (device loop0): using free space tree
[  115.005744][ T6189] BTRFS info (device loop0): has skinny extents
[  115.019293][ T6213] REISERFS (device loop3): using ordered data mode
[  115.041964][ T6193] loop2: detected capacity change from 0 to 32768
[  115.062670][ T6213] reiserfs: using flush barriers
[  115.089884][ T6213] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  115.098484][ T6230] loop4: detected capacity change from 0 to 2368
[  115.123067][ T6213] REISERFS (device loop3): checking transaction log (loop3)
[  115.156749][ T6213] REISERFS (device loop3): Using r5 hash to sort names
[  115.174202][ T6193] XFS (loop2): Mounting V5 Filesystem
[  115.255560][ T6213] reiserfs: enabling write barrier flush mode
[  115.279652][ T6213] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  115.412866][ T6213] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  115.447862][ T6193] XFS (loop2): Ending clean mount
[  115.462371][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.4.723'.
[  115.495940][ T6213] REISERFS (device loop3): Remounting filesystem read-only
[  115.504184][ T6213] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  115.520654][ T6213] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  115.539429][ T6213] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  115.551417][ T6213] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error
[  115.582670][ T6213] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  115.603651][ T6213] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  115.629192][ T6189] BTRFS info (device loop0): clearing free space tree
[  115.646466][ T6264] loop1: detected capacity change from 0 to 256
[  115.653792][ T6189] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  115.689768][ T6189] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  115.693282][ T6213] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  115.717137][ T4186] XFS (loop2): Unmounting Filesystem
[  115.738407][ T6189] BTRFS info (device loop0): creating free space tree
[  115.738926][ T6266] loop4: detected capacity change from 0 to 1024
[  115.758680][ T6189] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  115.774970][ T6213] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  115.813162][ T6189] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.008680][ T6213] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  116.038537][   T26] audit: type=1804 audit(1773253329.186:6): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.729" name=2F6E6577726F6F742F3133352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop4" ino=26 res=1 errno=0
[  116.106025][ T6213] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  116.153499][ T4286] hfsplus: b-tree write err: -5, ino 25
[  116.155302][ T6213] REISERFS (device loop3): Remounting filesystem read-only
[  116.169049][ T4286] hfsplus: b-tree write err: -5, ino 4
[  116.188544][ T4286] hfsplus: b-tree write err: -5, ino 2
[  116.214060][ T6268] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  116.231891][ T4286] hfsplus: b-tree write err: -5, ino 26
[  116.233439][ T6213] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error
[  116.342922][ T6268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.763603][ T6281] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.790164][ T6279] VFS: Found a Xenix FS (block size = 512) on device loop2
[  116.908146][ T6275] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  116.927059][ T4186] sysv_free_block: trying to free block not in datazone
[  116.945361][ T6275] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12)
[  116.970375][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  117.002139][ T6275] Remounting filesystem read-only
[  117.010925][ T6275] NILFS (loop4): error -5 truncating bmap (ino=12)
[  117.065004][ T4185] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  117.075355][ T6290] hfs: request for non-existent node 1280 in B*Tree
[  117.101052][ T6290] hfs: request for non-existent node 1280 in B*Tree
[  117.320740][ T4286] hfs: request for non-existent node 1280 in B*Tree
[  117.347462][ T6296] rock: directory entry would overflow storage
[  117.373770][ T4286] hfs: request for non-existent node 1280 in B*Tree
[  117.442751][ T4472] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  117.450970][ T6296] rock: sig=0x5850, size=36, remaining=22
[  117.513749][ T4469] Bluetooth: hci2: command 0x080c tx timeout
[  117.721615][ T6304] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  117.722270][ T4472] usb 2-1: Using ep0 maxpacket: 16
[  117.903002][ T4472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 247, changing to 7
[  117.917753][ T4472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 10239, setting to 1024
[  118.026835][ T6319] set_capacity_and_notify: 6 callbacks suppressed
[  118.026851][ T6319] loop0: detected capacity change from 0 to 64
[  118.037441][ T6294] loop4: detected capacity change from 0 to 32768
[  118.156115][ T4472] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  118.167448][ T6294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.741 (6294)
[  118.176400][ T4472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.218742][ T4472] usb 2-1: Product: syz
[  118.229605][ T6316] loop2: detected capacity change from 0 to 8192
[  118.231447][ T4472] usb 2-1: Manufacturer: syz
[  118.241971][ T4472] usb 2-1: SerialNumber: syz
[  118.288846][ T4472] usb 2-1: config 0 descriptor??
[  118.335581][ T6294] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  118.353690][ T4472] hub 2-1:0.0: bad descriptor, ignoring hub
[  118.362772][ T4472] hub: probe of 2-1:0.0 failed with error -5
[  118.385348][ T4472] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[  118.397699][ T6294] BTRFS info (device loop4): force zlib compression, level 3
[  118.435090][ T6294] BTRFS info (device loop4): enabling ssd optimizations
[  118.501519][ T6294] BTRFS info (device loop4): allowing degraded mounts
[  118.530074][ T6337] loop0: detected capacity change from 0 to 128
[  118.547964][ T6294] BTRFS info (device loop4): force clearing of disk cache
[  118.601914][ T6294] BTRFS info (device loop4): using free space tree
[  118.648184][ T6294] BTRFS info (device loop4): has skinny extents
[  118.874768][ T6337] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  118.938319][ T6337] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.959659][ T6294] BTRFS info (device loop4): clearing free space tree
[  118.976854][ T6294] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  118.988804][ T6294] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  119.019042][ T6294] BTRFS info (device loop4): creating free space tree
[  119.044003][ T6365] loop3: detected capacity change from 0 to 1024
[  119.095209][ T6294] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  119.212616][ T6294] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  119.228019][  T144] hfsplus: b-tree write err: -5, ino 25
[  119.234330][  T144] hfsplus: b-tree write err: -5, ino 4
[  119.240303][  T144] hfsplus: b-tree write err: -5, ino 2
[  119.240331][ T6294] BTRFS info (device loop4): checking UUID tree
[  119.722788][ T6387] loop2: detected capacity change from 0 to 256
[  119.785235][ T6381] loop1: detected capacity change from 0 to 4096
[  119.889944][ T6381] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  120.173103][ T6395] loop0: detected capacity change from 0 to 1024
[  120.288501][ T6395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  120.462975][ T6395] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.487671][ T6411] siw: device registration error -23
[  120.496541][ T6410] loop1: detected capacity change from 0 to 256
[  120.528548][ T6395] EXT4-fs (loop0): Online resizing not supported with bigalloc
[  120.641380][ T6410] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d)
[  120.683334][ T6410] exFAT-fs (loop1): failed to load alloc-bitmap
[  120.689922][ T6410] exFAT-fs (loop1): failed to recognize exfat type
[  120.784078][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'.
[  120.824284][ T6405] loop2: detected capacity change from 0 to 32768
[  120.904575][ T6405] (syz.2.783,6405,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  120.924587][ T6410] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback.
[  120.953743][ T6410] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.969388][ T6405] (syz.2.783,6405,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.055561][ T6399] (syz.4.781,6399,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.114733][ T6416] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  121.143101][ T6416] REISERFS (device loop3): using ordered data mode
[  121.152006][ T6399] (syz.4.781,6399,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.167899][ T6416] reiserfs: using flush barriers
[  121.170391][ T6405] JBD2: Ignoring recovery information on journal
[  121.182474][ T6416] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  121.199669][ T6416] REISERFS (device loop3): checking transaction log (loop3)
[  121.254871][ T6416] REISERFS (device loop3): Using r5 hash to sort names
[  121.328423][ T6399] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present!
[  121.343138][ T6416] reiserfs: enabling write barrier flush mode
[  121.385468][ T6416] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  121.425539][ T6416] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  121.432804][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.795'.
[  121.436720][ T6416] REISERFS (device loop3): Remounting filesystem read-only
[  121.453644][ T6399] JBD2: Ignoring recovery information on journal
[  121.453808][ T6416] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  121.476249][ T6416] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  121.490635][ T6405] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  121.492970][ T6416] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  121.512020][ T6416] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error
[  121.520888][ T6416] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  121.537029][ T6416] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  121.548223][ T6416] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  121.566005][ T6416] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  121.618357][ T6399] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  121.708478][ T4186] ocfs2: Unmounting device (7,2) on (node local)
[  121.769752][ T6416] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  121.877701][ T4188] ------------[ cut here ]------------
[  121.893228][ T4188] kernel BUG at fs/reiserfs/journal.c:1913!
[  121.900215][ T4188] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  121.906588][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Not tainted syzkaller #0
[  121.914676][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  121.925490][ T4188] RIP: 0010:do_journal_release+0x4e2/0x4f0
[  121.931510][ T4188] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c8 83 bd ff e9 f9 fc ff ff e8 6e 78 78 ff <0f> 0b e8 67 78 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3
[  121.952322][ T4188] RSP: 0018:ffffc90002f0fb80 EFLAGS: 00010293
[  121.958934][ T4188] RAX: ffffffff8200a8a2 RBX: 1ffff920005e1f74 RCX: ffff88807d5d0000
[  121.966920][ T4188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  121.975045][ T4188] RBP: ffffc90002f0fc78 R08: ffffc90002f0fbf7 R09: ffffc90002f0fbc0
[  121.983391][ T4188] R10: dffffc0000000000 R11: fffff520005e1f7f R12: ffffc900033c1000
[  121.991830][ T4188] R13: dffffc0000000000 R14: ffff88801d948678 R15: 0000000000000000
[  122.000039][ T4188] FS:  0000555556595500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  122.009174][ T4188] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.015955][ T4188] CR2: 00007fce5ef95bd8 CR3: 000000006391e000 CR4: 00000000003506f0
[  122.023914][ T4188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  122.031869][ T4188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  122.039843][ T4188] Call Trace:
[  122.043207][ T4188]  <TASK>
[  122.046136][ T4188]  ? journal_release+0x30/0x30
[  122.050990][ T4188]  ? do_raw_spin_unlock+0x11d/0x230
[  122.056481][ T4188]  journal_release+0x1b/0x30
[  122.061060][ T4188]  reiserfs_put_super+0x267/0x510
[  122.066065][ T4188]  ? hook_inode_free_security+0xa0/0xa0
[  122.071711][ T4188]  ? evict_inodes+0x642/0x6a0
[  122.076370][ T4188]  ? reiserfs_dirty_inode+0x260/0x260
[  122.081818][ T4188]  ? reiserfs_dirty_inode+0x260/0x260
[  122.087174][ T4188]  generic_shutdown_super+0x130/0x300
[  122.092738][ T4188]  kill_block_super+0x7c/0xe0
[  122.097400][ T4188]  deactivate_locked_super+0x93/0xf0
[  122.102760][ T4188]  cleanup_mnt+0x42d/0x4e0
[  122.107298][ T4188]  ? lockdep_hardirqs_on+0x94/0x140
[  122.112575][ T4188]  task_work_run+0x125/0x1a0
[  122.117256][ T4188]  exit_to_user_mode_loop+0x10f/0x130
[  122.122636][ T4188]  exit_to_user_mode_prepare+0xee/0x180
[  122.128178][ T4188]  syscall_exit_to_user_mode+0x16/0x40
[  122.133637][ T4188]  do_syscall_64+0x58/0xa0
[  122.138124][ T4188]  ? clear_bhb_loop+0x30/0x80
[  122.142785][ T4188]  ? clear_bhb_loop+0x30/0x80
[  122.147445][ T4188]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  122.153324][ T4188] RIP: 0033:0x7fb41090a9d7
[  122.157825][ T4188] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  122.177778][ T4188] RSP: 002b:00007ffc5f3c42b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  122.186617][ T4188] RAX: 0000000000000000 RBX: 00007fb41099f050 RCX: 00007fb41090a9d7
[  122.194680][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5f3c4370
[  122.202897][ T4188] RBP: 00007ffc5f3c4370 R08: 00007ffc5f3c5370 R09: 00000000ffffffff
[  122.210855][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5f3c5400
[  122.218820][ T4188] R13: 00007fb41099f050 R14: 000000000001dbbd R15: 00007ffc5f3c5440
[  122.226846][ T4188]  </TASK>
[  122.229870][ T4188] Modules linked in:
[  122.244061][ T4188] ---[ end trace 83fb53157f03a717 ]---
[  122.249798][ T4188] RIP: 0010:do_journal_release+0x4e2/0x4f0
[  122.256102][ T4188] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c8 83 bd ff e9 f9 fc ff ff e8 6e 78 78 ff <0f> 0b e8 67 78 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3
[  122.277496][ T4188] RSP: 0018:ffffc90002f0fb80 EFLAGS: 00010293
[  122.285080][ T4188] RAX: ffffffff8200a8a2 RBX: 1ffff920005e1f74 RCX: ffff88807d5d0000
[  122.293419][ T4188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  122.299783][ T6443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  122.302371][ T4188] RBP: ffffc90002f0fc78 R08: ffffc90002f0fbf7 R09: ffffc90002f0fbc0
[  122.317828][ T6443] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.321476][ T4188] R10: dffffc0000000000 R11: fffff520005e1f7f R12: ffffc900033c1000
[  122.345043][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  122.370781][ T4188] R13: dffffc0000000000 R14: ffff88801d948678 R15: 0000000000000000
[  122.388353][ T4188] FS:  0000555556595500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  122.398323][ T4188] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.406600][ T4188] CR2: 00007f64bd69d000 CR3: 000000006391e000 CR4: 00000000003506e0
[  122.415530][ T4188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  122.436623][ T4188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  122.453802][ T4188] Kernel panic - not syncing: Fatal exception
[  122.460921][ T4188] Kernel Offset: disabled
[  122.465424][ T4188] Rebooting in 86400 seconds..