last executing test programs:

26.473321017s ago: executing program 1 (id=782):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
unshare(0x2a020480)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

25.92532682s ago: executing program 1 (id=785):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1000\x00', 0x5)

25.460850902s ago: executing program 1 (id=790):
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xb6, 0x0, &(0x7f0000000280)="00ed2c05679588ddee792b9538f84cb6cc2e0dcd28d3e469a9b9c52df856a1a205ee8ed1929a574ed26d7dea1a40943efe202bedededb0360a2055e17345fc864bbb2dfa741c6602ab551593725fb357097468276a6d59e5e68de6a8ebb2f7192274a31c69b5c337fe609175b1fcf1714d69d77660240f7657cdbc3785b67ab525cae46c019437069fc299cf04b8bd11673eec17ab41576154ed23e461e04e822bfc1b3206d937bf6e594c36e845e446e9ea17eb7f13", 0x5, 0x0, 0x8}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

25.007378332s ago: executing program 1 (id=794):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x1)

24.564449513s ago: executing program 1 (id=797):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x1, @local}}, 0x1e)

23.104886948s ago: executing program 1 (id=808):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x7}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)

22.519255852s ago: executing program 32 (id=808):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x7}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)

9.413864995s ago: executing program 0 (id=859):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x8040480)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fcntl$setpipe(r0, 0x407, 0x60)

9.404386475s ago: executing program 2 (id=860):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6bdbb7dd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

9.352914146s ago: executing program 3 (id=861):
mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10)
write(r0, &(0x7f0000000800)='file ?evio.c +', 0xe)

9.352664056s ago: executing program 4 (id=862):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[], 0xfe, 0x551c, &(0x7f00000079c0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

7.737847355s ago: executing program 0 (id=863):
io_uring_setup(0x1195, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rmdir(&(0x7f0000000080)='./bus\x00')

7.733572045s ago: executing program 2 (id=864):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000014e24007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc)

7.724412665s ago: executing program 3 (id=865):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e23, 0x6462, @empty, 0x5e}, 0x0, {[0x3, 0x9, 0x3a, 0x2, 0x0, 0x8000c, 0x0, 0x8000]}}, 0x5c)

7.672801487s ago: executing program 4 (id=866):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0xa4480, 0x5, 0xbca6, 0x4, 0x7f, 0x0, 0x0, 0x10, 0x98}}, 0x50)
ftruncate(r0, 0x8008976)
lseek(r0, 0x5, 0x4)

5.966452857s ago: executing program 0 (id=867):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10008001}, 0x200400a0)

5.954240468s ago: executing program 2 (id=868):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x80)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

5.892054179s ago: executing program 3 (id=869):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x3a)

5.891878719s ago: executing program 4 (id=870):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x2, 0x14010, 0x5, &(0x7f0000002000)="07000000cb"}], 0x1})

4.105193542s ago: executing program 0 (id=871):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x0)

4.104684612s ago: executing program 2 (id=872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='./file0/file0\x00')

4.093422652s ago: executing program 3 (id=873):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x26a, 0x0})

4.040921923s ago: executing program 4 (id=874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/26, 0x1a, 0xff)

2.124105539s ago: executing program 0 (id=875):
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f000000b540))

2.123351579s ago: executing program 2 (id=876):
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f00000014c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@fat=@flush}, {@shortname_win95}]}, 0x89, 0x2c4, &(0x7f0000000b00)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a801adea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fcee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

2.113936779s ago: executing program 3 (id=877):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$link(0x8, r0, r2)

2.113556439s ago: executing program 4 (id=878):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}]}, 0x34}}, 0x8000)

793.25µs ago: executing program 0 (id=879):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x700, {0x0, 0x0, 0x0, r1, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x0)

496.25µs ago: executing program 2 (id=880):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0xfdef)
mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x5, 0x8, 0x810, r1, 0x3201a409)

279.03µs ago: executing program 3 (id=881):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_ublk_setup_io_uring(0x1f, &(0x7f00000000c0)={0x0, 0xa584, 0x100, 0xfffffffe, 0x1e8}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

0s ago: executing program 4 (id=882):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

link becomes ready
[   86.157512][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.167537][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.181623][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.191576][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.201019][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.246133][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.257575][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.297175][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.308488][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.321411][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.340560][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.352176][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.365983][ T4275] Bluetooth: hci0: command 0x040f tx timeout
[   86.372068][ T4275] Bluetooth: hci3: command 0x040f tx timeout
[   86.376427][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[   86.380210][ T4275] Bluetooth: hci1: command 0x040f tx timeout
[   86.385184][ T4289] Bluetooth: hci2: command 0x040f tx timeout
[   86.402092][ T4274] device veth0_macvtap entered promiscuous mode
[   86.413592][ T4274] device veth1_macvtap entered promiscuous mode
[   86.426023][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.435761][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.444515][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.454883][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.489391][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.502250][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.518671][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.528074][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.537658][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.545228][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.553352][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.562274][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.574212][ T4278] device veth0_vlan entered promiscuous mode
[   86.602941][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.615228][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.632709][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.648173][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.662293][ T4278] device veth1_vlan entered promiscuous mode
[   86.671965][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.681652][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.694723][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.706456][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.720009][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.758090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.777083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.786822][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.796724][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.843584][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.862596][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.876896][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.889139][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.911562][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.936310][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.950795][ T4277] device veth0_vlan entered promiscuous mode
[   86.981407][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.997253][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.033211][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.049864][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.063607][ T4278] device veth0_macvtap entered promiscuous mode
[   87.101362][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.113827][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.124162][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.136826][ T4278] device veth1_macvtap entered promiscuous mode
[   87.167563][ T4277] device veth1_vlan entered promiscuous mode
[   87.205580][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.213858][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.246946][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.256219][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.273823][ T4279] device veth0_vlan entered promiscuous mode
[   87.317892][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.329779][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.347623][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.365971][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.381308][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.392022][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.410240][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.433003][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.442815][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.452170][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.461699][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.474710][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.484129][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.510609][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.523789][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.543178][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.556301][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.574732][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.592058][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.601643][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.612430][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.622021][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.642998][ T4279] device veth1_vlan entered promiscuous mode
[   87.654371][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.664109][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.673384][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.689854][ T4277] device veth0_macvtap entered promiscuous mode
[   87.717351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.726864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.736145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.776599][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.784486][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.802821][ T4277] device veth1_macvtap entered promiscuous mode
[   87.824089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.833679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.861042][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.871630][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.900394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.936037][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.946607][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.965620][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.987421][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.997551][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.008515][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.019142][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.029962][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.051439][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.060946][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.082220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.092956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.102116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.111148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.121266][ T4279] device veth0_macvtap entered promiscuous mode
[   88.138828][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.148078][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.158951][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.171271][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.181571][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.192372][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.203273][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.216938][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.238604][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.260355][ T4279] device veth1_macvtap entered promiscuous mode
[   88.302755][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.321900][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.330656][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.338837][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.348815][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.363776][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.383349][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.392566][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.404382][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.430880][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   88.448184][ T4289] Bluetooth: hci2: command 0x0419 tx timeout
[   88.454283][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[   88.461232][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[   88.461253][ T4275] Bluetooth: hci3: command 0x0419 tx timeout
[   88.474210][ T4275] Bluetooth: hci0: command 0x0419 tx timeout
[   88.482981][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.491331][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.549149][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.611526][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.633476][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.653036][ T4364] jffs2: notice: (4364) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   88.671962][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.683501][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.700777][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.721062][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.731793][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.749284][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.792010][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.824397][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.855806][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.892173][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.944057][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.954394][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.965134][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.975671][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.993044][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.004577][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.020209][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.032272][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.074499][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.093214][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.133764][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.152952][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.201662][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.216183][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.281832][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.299017][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.359816][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.478790][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.503596][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.533544][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.578637][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.628991][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.664193][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.719643][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.769926][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.786132][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.055683][ T4394] loop1: detected capacity change from 0 to 64
[   90.223870][ T4394] hfs: walked past end of dir
[   90.553765][ T4406] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.822574][ T4385] loop2: detected capacity change from 0 to 40427
[   90.871836][ T4385] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   90.891675][ T4385] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   90.964351][ T4385] F2FS-fs (loop2): invalid crc value
[   90.998853][ T4385] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   91.039200][ T4422] loop0: detected capacity change from 0 to 512
[   91.109991][ T4398] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   91.235061][ T4385] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   91.256209][ T4385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   91.410844][   T26] audit: type=1800 audit(1786459834.435:2): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=10 res=0 errno=0
[   91.595483][ T4414] loop3: detected capacity change from 0 to 32768
[   91.610317][ T4278] syz-executor: attempt to access beyond end of device
[   91.610317][ T4278] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   91.807505][  T126] cfg80211: failed to load regulatory.db
[   91.862000][ T4430] netlink: 'syz.4.30': attribute type 8 has an invalid length.
[   91.934734][ T4412] loop1: detected capacity change from 0 to 32768
[   92.046841][   T26] audit: type=1326 audit(1786459835.075:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.3.31" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004df9e0d9 code=0x0
[   92.133583][ T4412] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   92.144417][ T4412] XFS (loop1): Mounting V5 Filesystem
[   92.259933][ T4412] XFS (loop1): Ending clean mount
[   92.343292][ T4412] XFS (loop1): Quotacheck needed: Please wait.
[   92.436652][ T4412] XFS (loop1): Quotacheck: Done.
[   92.572195][ T4273] XFS (loop1): Unmounting Filesystem
[   93.163937][ T4440] loop4: detected capacity change from 0 to 40427
[   93.212630][ T4440] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   93.222909][ T4440] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   93.293094][ T4440] F2FS-fs (loop4): Found nat_bits in checkpoint
[   93.335486][  T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.464788][ T4440] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   93.477491][ T4440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   93.511329][ T4451] loop2: detected capacity change from 0 to 32768
[   93.531708][ T4451] =======================================================
[   93.531708][ T4451] WARNING: The mand mount option has been deprecated and
[   93.531708][ T4451]          and is ignored by this kernel. Remove the mand
[   93.531708][ T4451]          option from the mount to silence this warning.
[   93.531708][ T4451] =======================================================
[   93.575352][  T126] usb 4-1: Using ep0 maxpacket: 8
[   93.595946][  T126] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   93.632234][  T126] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   93.657035][  T126] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   93.704811][  T126] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   93.739820][  T126] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   93.785521][  T126] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   93.821806][ T4451] JBD2: Ignoring recovery information on journal
[   93.829674][  T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.943551][ T4451] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   94.086833][  T126] usb 4-1: GET_CAPABILITIES returned 0
[   94.092595][  T126] usbtmc 4-1:16.0: can't read capabilities
[   94.334366][ T4278] ocfs2: Unmounting device (7,2) on (node local)
[   94.354030][ T4366] usb 4-1: USB disconnect, device number 2
[   94.829847][ T4479] loop2: detected capacity change from 0 to 512
[   94.905425][ T4481] netlink: 464 bytes leftover after parsing attributes in process `syz.4.40'.
[   95.219382][ T4487] loop4: detected capacity change from 0 to 512
[   95.333994][ T4490] loop2: detected capacity change from 0 to 2048
[   95.392896][ T4487] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   95.441200][ T4487] EXT4-fs (loop4): invalid journal inode
[   95.475768][ T4487] EXT4-fs (loop4): can't get journal size
[   95.496436][ T4490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   95.540624][ T4487] EXT4-fs (loop4): 1 truncate cleaned up
[   95.609956][ T4490] EXT4-fs (loop2): shut down requested (1)
[   95.632739][ T4487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   95.832214][ T4278] EXT4-fs (loop2): unmounting filesystem.
[   95.838980][    T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.007465][ T4279] EXT4-fs (loop4): unmounting filesystem.
[   96.035501][    T7] usb 4-1: Using ep0 maxpacket: 32
[   96.057499][    T7] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   96.095391][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.124560][    T7] usb 4-1: config 0 descriptor??
[   96.249496][ T4319] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.353664][    T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   96.382522][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   96.395937][    T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   96.403404][    T7] usb 4-1: media controller created
[   96.435312][ T4319] usb 3-1: Using ep0 maxpacket: 32
[   96.441616][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   96.443761][ T4319] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[   96.490341][ T4319] usb 3-1: config 0 has no interface number 0
[   96.510786][ T4319] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   96.548503][ T4319] usb 3-1: config 0 interface 85 has no altsetting 0
[   96.579059][ T4319] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   96.615363][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.637980][ T4319] usb 3-1: Product: syz
[   96.642294][ T4319] usb 3-1: Manufacturer: syz
[   96.662813][ T4319] usb 3-1: SerialNumber: syz
[   96.670359][    T7] az6027: usb out operation failed. (-71)
[   96.683713][    T7] az6027: usb out operation failed. (-71)
[   96.701702][ T4319] usb 3-1: config 0 descriptor??
[   96.708745][    T7] stb0899_attach: Driver disabled by Kconfig
[   96.735345][    T7] az6027: no front-end attached
[   96.735345][    T7] 
[   96.753393][    T7] az6027: usb out operation failed. (-71)
[   96.790643][    T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   96.814028][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[   96.861100][    T7] dvb-usb: schedule remote query interval to 400 msecs.
[   96.875417][    T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   96.933549][    T7] usb 4-1: USB disconnect, device number 3
[   97.028339][    T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   97.235220][ T4510] loop4: detected capacity change from 0 to 32768
[   97.334579][ T4510] JBD2: Ignoring recovery information on journal
[   97.452197][ T4510] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   97.546668][ T4319] appletouch 3-1:0.85: Geyser mode initialized.
[   97.564535][ T4319] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input5
[   97.601182][    C0] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[   97.803091][ T4320] usb 3-1: USB disconnect, device number 2
[   97.838838][ T4320] appletouch 3-1:0.85: input: appletouch disconnected
[   97.882155][ T4279] ocfs2: Unmounting device (7,4) on (node local)
[   98.124134][ T4534] ima: policy update failed
[   98.154504][   T26] audit: type=1802 audit(1786459841.175:4): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.67" res=0 errno=0
[   98.343507][ T4537] loop3: detected capacity change from 0 to 2048
[   98.447204][ T4541] Illegal XDP return value 4294967274 on prog  (id 5) dev N/A, expect packet loss!
[   98.497279][ T4537] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   98.513077][ T4537] EXT4-fs (loop3): shut down requested (1)
[   98.583096][ T4277] EXT4-fs (loop3): unmounting filesystem.
[   98.801370][ T4552] loop2: detected capacity change from 0 to 1024
[   98.831159][ T4552] EXT4-fs: Ignoring removed bh option
[   98.892409][ T4552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   98.939375][ T4552] EXT4-fs (loop2): shut down requested (2)
[   99.055842][ T4558] capability: warning: `syz.0.75' uses 32-bit capabilities (legacy support in use)
[   99.070607][ T4558] program syz.0.75 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   99.088358][ T4320] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.116390][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   99.140877][ T4278] EXT4-fs (loop2): unmounting filesystem.
[   99.285366][ T4320] usb 5-1: Using ep0 maxpacket: 8
[   99.292609][ T4320] usb 5-1: config 0 has no interfaces?
[   99.311544][ T4320] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   99.326083][ T4319] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[   99.345690][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.353756][ T4319] usb 2-1: Product: syz
[   99.368770][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.389120][ T4319] usb 2-1: Manufacturer: syz
[   99.393809][ T4319] usb 2-1: SerialNumber: syz
[   99.398836][ T4320] usb 5-1: Product: syz
[   99.413412][ T4320] usb 5-1: Manufacturer: syz
[   99.424716][ T4320] usb 5-1: SerialNumber: syz
[   99.437228][ T4319] usb 2-1: config 0 descriptor??
[   99.475711][ T4320] usb 5-1: config 0 descriptor??
[   99.511192][ T4319] gspca_main: sonixb-2.14.0 probing 0c45:6005
[   99.680956][ T4567] loop0: detected capacity change from 0 to 4096
[   99.700225][ T4321] usb 5-1: USB disconnect, device number 2
[   99.863920][ T4319] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7
[   99.937636][ T4567] ntfs3: loop0: failed to convert "0000" to iso8859-1
[   99.971945][ T4573] loop3: detected capacity change from 0 to 512
[  100.082971][ T4321] usb 2-1: USB disconnect, device number 2
[  100.921868][ T4594] netem: incorrect ge model size
[  100.938971][ T4594] netem: change failed
[  101.465521][  T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  101.670610][  T126] usb 1-1: Using ep0 maxpacket: 8
[  101.678913][  T126] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  101.714300][  T126] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.755394][  T126] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  101.797601][  T126] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  101.838779][  T126] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.882473][  T126] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  101.912015][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.160011][  T126] usb 1-1: GET_CAPABILITIES returned 0
[  102.168247][  T126] usbtmc 1-1:16.0: can't read capabilities
[  102.304629][ T4608] loop3: detected capacity change from 0 to 32768
[  102.354740][ T4608] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.97 (4608)
[  102.398805][  T126] usb 1-1: USB disconnect, device number 2
[  102.438530][ T4622] loop2: detected capacity change from 0 to 512
[  102.468225][ T4608] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  102.481176][ T4608] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  102.492020][ T4608] BTRFS info (device loop3): using free space tree
[  102.811515][ T4608] BTRFS info (device loop3): enabling ssd optimizations
[  103.045558][ T4620] loop1: detected capacity change from 0 to 32768
[  103.207573][ T4620] XFS (loop1): Mounting V5 Filesystem
[  103.579044][ T4277] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  103.656041][ T4620] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  103.762415][ T4620] XFS (loop1): Starting recovery (logdev: internal)
[  103.849722][ T4620] XFS (loop1): Ending recovery (logdev: internal)
[  103.858522][ T4513] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 10 /dev/loop3 scanned by udevd (4513)
[  103.882564][ T4663] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  103.891316][ T4663] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  103.996758][ T4663] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  104.004655][ T4663] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  104.106610][ T4273] XFS (loop1): Unmounting Filesystem
[  104.905525][ T4671] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.115367][ T4671] usb 5-1: Using ep0 maxpacket: 8
[  105.128687][ T4671] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  105.163326][ T4671] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.193879][ T4671] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.205974][ T4674] loop3: detected capacity change from 0 to 40427
[  105.214436][ T4671] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  105.228728][ T4674] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  105.235368][ T4671] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.254489][ T4674] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  105.264529][ T4671] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  105.280418][ T4674] F2FS-fs (loop3): invalid crc value
[  105.287343][ T4671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.318858][ T4674] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  105.513517][ T4671] usb 5-1: GET_CAPABILITIES returned 0
[  105.520675][ T4671] usbtmc 5-1:16.0: can't read capabilities
[  105.593286][ T4674] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  105.650646][ T4674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  105.748197][ T4321] usb 5-1: USB disconnect, device number 3
[  106.018488][ T4277] syz-executor: attempt to access beyond end of device
[  106.018488][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.482215][ T4704] loop0: detected capacity change from 0 to 32768
[  106.544723][ T4704] JBD2: Ignoring recovery information on journal
[  106.644322][ T4724] netem: unknown loss type 25
[  106.650813][ T4724] netem: change failed
[  106.658126][ T4704] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  106.797283][ T4274] ocfs2: Unmounting device (7,0) on (node local)
[  107.908210][ T4763] use of bytesused == 0 is deprecated and will be removed in the future,
[  107.945390][ T4763] use the actual size instead.
[  107.999097][ T4765] serio: Serial port ptm0
[  108.798800][ T4757] loop3: detected capacity change from 0 to 32768
[  108.915327][ T4757] JBD2: Ignoring recovery information on journal
[  109.054135][ T4757] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.272534][ T4277] ocfs2: Unmounting device (7,3) on (node local)
[  109.535531][ T4319] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  109.729049][ T4319] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  109.778132][ T4319] usb 5-1: config 0 has no interface number 0
[  109.818016][ T4319] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  109.906236][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.945021][ T4319] usb 5-1: Product: syz
[  109.974165][ T4319] usb 5-1: Manufacturer: syz
[  110.005216][ T4811] loop1: detected capacity change from 0 to 2048
[  110.033655][ T4319] usb 5-1: SerialNumber: syz
[  110.060233][ T4319] usb 5-1: config 0 descriptor??
[  110.079179][ T4811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  110.117792][ T4813] loop2: detected capacity change from 0 to 512
[  110.156552][ T4813] EXT4-fs: Ignoring removed oldalloc option
[  110.208035][ T4813] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.221684][ T4813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  110.252909][ T4813] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  110.319992][ T4319] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  110.328005][ T4813] EXT4-fs (loop2): 1 truncate cleaned up
[  110.347136][ T4319] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  110.361795][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  110.394599][ T4319] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  110.420875][ T4327] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  110.422984][ T4319] usb 5-1: media controller created
[  110.500425][ T4327] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  110.513637][ T4327] EXT4-fs (loop1): This should not happen!! Data will be lost
[  110.513637][ T4327] 
[  110.524037][ T4327] EXT4-fs (loop1): Total free blocks count 0
[  110.547991][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.563479][ T4327] EXT4-fs (loop1): Free/Dirty block details
[  110.583758][ T4327] EXT4-fs (loop1): free_blocks=2415919504
[  110.606850][ T4319] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  110.614129][ T4327] EXT4-fs (loop1): dirty_blocks=64
[  110.624211][ T4327] EXT4-fs (loop1): Block reservation details
[  110.635339][ T4327] EXT4-fs (loop1): i_reserved_data_blocks=4
[  110.655666][ T4327] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  110.729020][ T4319] usb 5-1: USB disconnect, device number 4
[  110.737534][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  110.803559][ T4824] loop3: detected capacity change from 0 to 512
[  110.861605][ T4824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[  110.883569][ T4829] loop2: detected capacity change from 0 to 16
[  110.900890][ T4824] System zones: 1-12
[  110.906700][ T4829] erofs: (device loop2): mounted with root inode @ nid 36.
[  110.922626][ T4829] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89
[  110.940471][ T4824] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.174: Directory hole found for htree index block 0
[  111.047099][ T4829] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  111.078978][ T4824] EXT4-fs (loop3): Remounting filesystem read-only
[  111.104106][ T4824] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  111.112791][ T4829] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89
[  111.124312][ T4824] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.174: Directory hole found for htree index block 0
[  111.147818][ T4829] syz.2.175: attempt to access beyond end of device
[  111.147818][ T4829] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  111.172863][ T4824] EXT4-fs (loop3): Remounting filesystem read-only
[  111.182605][ T4824] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  111.215369][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  111.256947][ T4829] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  111.297788][ T4824] EXT4-fs (loop3): shut down requested (1)
[  111.315492][ T4829] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  111.355705][   T26] audit: type=1800 audit(1786459854.385:5): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.175" name="file2" dev="loop2" ino=89 res=0 errno=0
[  111.486936][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  111.702663][ T4844] loop2: detected capacity change from 0 to 256
[  111.737827][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  111.890170][ T4826] loop1: detected capacity change from 0 to 32768
[  112.052709][ T4826] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  112.104824][ T4850] loop0: detected capacity change from 0 to 512
[  112.451893][ T4273] ocfs2: Unmounting device (7,1) on (node local)
[  112.550385][ T4861] loop2: detected capacity change from 0 to 256
[  112.706839][ T4865] loop4: detected capacity change from 0 to 128
[  112.793205][ T4850] EXT4-fs (loop0): Test dummy encryption mode enabled
[  112.818030][ T4850] EXT4-fs (loop0): bad geometry: block count 4294967294 exceeds size of device (256 blocks)
[  112.843832][ T4865] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  112.913225][ T4865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.034569][ T4871] netlink: 'syz.1.192': attribute type 7 has an invalid length.
[  113.079488][ T4871] netem: change failed
[  113.248614][  T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  113.373173][ T4879] input: syz0 as /devices/virtual/input/input8
[  113.433225][ T4671] kernel write not supported for file /vcsa (pid: 4671 comm: kworker/0:16)
[  113.467491][  T126] usb 1-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  113.493693][  T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.529345][  T126] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  113.551950][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  113.570135][  T126] usb 1-1: SerialNumber: syz
[  113.680867][ T4886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.198'.
[  113.699845][ T4888] netlink: 100 bytes leftover after parsing attributes in process `syz.1.199'.
[  113.792172][  T126] usb 1-1: 0:2 : does not exist
[  113.931514][  T126] usb 1-1: USB disconnect, device number 3
[  114.180242][ T4901] loop3: detected capacity change from 0 to 512
[  114.187297][ T4513] udevd[4513]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.260682][ T4901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  114.702719][ T4902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.029693][ T4915] program syz.1.211 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.146288][ T4921] bond0: option miimon: invalid value (18446744071829782528)
[  115.171015][ T4921] bond0: option miimon: allowed values 0 - 2147483647
[  115.321225][ T4927] netlink: 120 bytes leftover after parsing attributes in process `syz.3.217'.
[  115.644390][ T4940] loop4: detected capacity change from 0 to 2048
[  115.689595][ T4940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.857601][ T4942] loop0: detected capacity change from 0 to 4096
[  115.932423][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[  115.947000][ T4947] loop3: detected capacity change from 0 to 512
[  115.981342][ T4942] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  116.170791][ T4947] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.226: corrupted xattr block 95
[  116.409993][ T4947] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.226: bg 0: block 7: invalid block bitmap
[  116.486954][ T4947] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  116.524875][ T4947] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.226: corrupted xattr block 95
[  116.628591][ T4947] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117)
[  116.671355][ T4947] EXT4-fs (loop3): 1 orphan inode deleted
[  116.677891][ T4947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  116.811412][ T4963] loop4: detected capacity change from 0 to 1024
[  116.859460][ T4969] loop1: detected capacity change from 0 to 1024
[  116.919116][ T4969] EXT4-fs: inline encryption not supported
[  116.963924][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  117.072582][ T4969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  117.080718][ T4963] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  117.130772][ T4970] loop2: detected capacity change from 0 to 4096
[  117.162202][   T26] audit: type=1800 audit(1786460116.186:6): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.234" name="file1" dev="loop1" ino=15 res=0 errno=0
[  117.400448][ T4970] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  117.417354][ T4979] loop0: detected capacity change from 0 to 128
[  117.489113][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  117.510177][ T4979] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  117.665590][ T4979] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  117.952073][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  118.028456][ T4995] netlink: 88 bytes leftover after parsing attributes in process `syz.2.243'.
[  118.808095][ T5019] team0: Device gtp0 is of different type
[  118.924146][ T4671] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  119.097298][ T4671] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  119.112045][ T4671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.151544][ T4671] usb 3-1: config 0 descriptor??
[  119.167347][ T4671] cp210x 3-1:0.0: cp210x converter detected
[  119.276403][ T5025] loop3: detected capacity change from 0 to 128
[  119.318782][ T5025] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  119.352618][ T5025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.601013][ T4671] usb 3-1: cp210x converter now attached to ttyUSB0
[  119.635029][ T5033] loop4: detected capacity change from 0 to 256
[  119.678684][ T5033] exfat: Deprecated parameter 'namecase'
[  119.684839][ T5033] exfat: Deprecated parameter 'namecase'
[  119.772267][ T5033] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  119.788848][ T4671] usb 3-1: USB disconnect, device number 3
[  119.818661][ T4671] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  119.840874][ T4671] cp210x 3-1:0.0: device disconnected
[  120.044641][ T5041] loop4: detected capacity change from 0 to 128
[  121.168699][ T5048] loop0: detected capacity change from 0 to 32768
[  121.255399][ T5048] XFS (loop0): Mounting V5 Filesystem
[  121.274438][ T5071] loop4: detected capacity change from 0 to 64
[  121.375171][ T5073] loop3: detected capacity change from 0 to 1024
[  121.406076][ T5073] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.413988][ T5048] XFS (loop0): Ending clean mount
[  121.516490][ T5073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  121.545557][ T5073] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.655613][ T5073] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.278: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  121.738606][ T4274] XFS (loop0): Unmounting Filesystem
[  121.912454][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  122.376480][ T5091] loop4: detected capacity change from 0 to 64
[  122.917008][ T5105] loop2: detected capacity change from 0 to 256
[  122.984138][ T5107] scsi_strcpy_devinfo: vendor string 'vendoۉ*r' is too long
[  123.003056][ T5107] scsi_strcpy_devinfo: model string 'moí劌r•�™—˜r³ádel' is too long
[  123.075469][ T4671] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  123.120916][ T5109] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  123.128131][ T5109] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  123.286551][ T4671] usb 5-1: not running at top speed; connect to a high speed hub
[  123.319834][ T4671] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.341582][ T4671] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  123.372184][ T4671] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  123.392572][ T4671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.436623][ T4671] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  123.466753][ T4671] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  123.506846][ T4671] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  123.518485][ T4671] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  123.577571][ T4671] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  123.609607][ T4671] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  124.147682][  T126] usb 5-1: USB disconnect, device number 5
[  124.167203][  T126] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  124.207114][  T126] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  124.225589][  T126] keyspan 5-1:1.0: device disconnected
[  124.639807][ T5142] loop3: detected capacity change from 0 to 2048
[  124.649237][ T5140] loop2: detected capacity change from 0 to 8192
[  124.658169][ T5142] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362
[  124.727590][ T5142] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  124.741005][ T5140] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  124.765355][ T4671] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.823973][ T5140] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  124.833426][ T5142] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  124.852104][ T5142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.861393][ T5140] REISERFS (device loop2): using ordered data mode
[  124.898970][ T5140] reiserfs: using flush barriers
[  124.920726][ T5140] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  124.967336][ T4671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.989405][ T5140] REISERFS (device loop2): checking transaction log (loop2)
[  125.021502][ T4671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.043187][ T4671] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  125.124169][ T4671] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  125.147971][ T4671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.216334][ T4671] usb 1-1: config 0 descriptor??
[  125.371840][ T5140] REISERFS (device loop2): Using tea hash to sort names
[  125.400665][ T5140] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  125.649237][ T4671] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description
[  125.680946][ T4671] plantronics 0003:047F:FFFF.0001: parse failed
[  125.692760][ T4671] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22
[  125.802042][ T5163] loop1: detected capacity change from 0 to 256
[  125.851915][   T33] usb 1-1: USB disconnect, device number 4
[  125.870628][ T5163] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  125.951113][   T26] audit: type=1800 audit(1786460124.976:7): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.316" name="file2" dev="loop1" ino=1048604 res=0 errno=0
[  125.996800][ T5163] exFAT-fs (loop1): hint_cluster is invalid (17)
[  126.004926][ T5163] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[  126.039831][ T5163] exFAT-fs (loop1): Filesystem has been set read-only
[  126.082122][ T5163] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[  126.359217][ T5169] loop2: detected capacity change from 0 to 8192
[  127.483155][ T5208] loop4: detected capacity change from 0 to 32768
[  127.511570][ T5208] XFS (loop4): Mounting V5 Filesystem
[  127.547482][ T5208] XFS (loop4): Ending clean mount
[  127.620921][ T4279] XFS (loop4): Unmounting Filesystem
[  127.735190][ T5218] loop3: detected capacity change from 0 to 256
[  127.753155][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  127.774606][ T5194] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  127.811216][ T5194] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  127.837549][ T5194] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  127.843646][ T5194] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  127.919664][ T5194] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  127.939057][ T5194] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  127.951589][ T5194] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  127.991823][ T5194] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  128.010123][ T5194] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  128.029566][ T5194] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  128.076078][ T5194] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  128.104256][ T5194] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  128.112883][ T5194] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  128.148521][ T5194] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  128.445403][ T4671] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.465365][ T4670] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  128.586670][ T5235] loop2: detected capacity change from 0 to 512
[  128.594896][ T5235] EXT4-fs: Ignoring removed bh option
[  128.655431][ T4670] usb 4-1: Using ep0 maxpacket: 8
[  128.660662][ T4671] usb 2-1: Using ep0 maxpacket: 8
[  128.670237][ T4671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  128.684174][ T4670] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  128.699453][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  128.704054][ T4670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  128.717478][ T4671] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  128.730220][ T4671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.738821][ T4670] usb 4-1: Product: syz
[  128.743148][ T4670] usb 4-1: Manufacturer: syz
[  128.749234][ T4670] usb 4-1: SerialNumber: syz
[  128.755000][ T4671] usb 2-1: config 0 descriptor??
[  128.767782][ T4670] usb 4-1: config 0 descriptor??
[  128.778567][ T4670] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  128.795972][ T5235] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.852196][ T5241] input: syz1 as /devices/virtual/input/input9
[  128.977353][ T4671] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  128.992597][ T4670] gspca_sn9c2028: read1 error -32
[  129.003192][ T4670] gspca_sn9c2028: read1 error -32
[  129.097007][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  129.165407][ T4275] Bluetooth: hci0: command 0x0c1a tx timeout
[  129.199430][ T4671] usb 2-1: USB disconnect, device number 3
[  129.234923][ T4670] usb 4-1: USB disconnect, device number 4
[  129.561649][ T5258] netlink: 'syz.2.349': attribute type 5 has an invalid length.
[  129.578570][ T5257] loop0: detected capacity change from 0 to 1024
[  129.632432][ T5257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  129.663273][ T5257] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.720000][ T5257] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.350: lblock 0 mapped to illegal pblock 0 (length 6)
[  129.869284][ T5265] Bluetooth: MGMT ver 1.22
[  129.881813][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  129.888042][ T4275] Bluetooth: hci1: command 0x0c1a tx timeout
[  129.909669][ T5268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'.
[  129.932955][ T5266] loop4: detected capacity change from 0 to 2048
[  129.962683][ T5266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.971701][ T4275] Bluetooth: hci2: command 0x0c1a tx timeout
[  130.014020][ T5270] loop2: detected capacity change from 0 to 1024
[  130.046949][ T4275] Bluetooth: hci4: command 0x0c1a tx timeout
[  130.125589][ T4275] Bluetooth: hci3: command 0x0c1a tx timeout
[  130.315886][ T5268] nbd: socks must be embedded in a SOCK_ITEM attr
[  130.599251][ T5286] loop4: detected capacity change from 0 to 256
[  130.615519][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[  131.017786][ T5298] loop2: detected capacity change from 0 to 512
[  131.112678][ T5298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  131.127468][ T5298] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.245368][ T4275] Bluetooth: hci0: command 0x0406 tx timeout
[  131.903517][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  131.965551][ T4275] Bluetooth: hci1: command 0x0406 tx timeout
[  132.037488][ T5324] loop3: detected capacity change from 0 to 256
[  132.046629][ T4275] Bluetooth: hci2: command 0x0406 tx timeout
[  132.125437][ T4275] Bluetooth: hci4: command 0x0406 tx timeout
[  132.205477][ T4275] Bluetooth: hci3: command 0x0406 tx timeout
[  132.224951][ T5329] loop1: detected capacity change from 0 to 512
[  132.319835][ T5329] EXT4-fs (loop1): 1 truncate cleaned up
[  132.325805][ T5329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  132.452134][ T5329] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.380: bg 0: block 465: padding at end of block bitmap is not set
[  132.534431][ T5344] <½ž
[  132.566180][ T5329] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  132.605502][ T5329] EXT4-fs (loop1): This should not happen!! Data will be lost
[  132.605502][ T5329] 
[  132.641124][ T5329] EXT4-fs (loop1): Total free blocks count 0
[  132.655728][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'.
[  132.664721][ T5329] EXT4-fs (loop1): Free/Dirty block details
[  132.695207][ T5329] EXT4-fs (loop1): free_blocks=0
[  132.701740][ T5329] EXT4-fs (loop1): dirty_blocks=62
[  132.730475][ T5329] EXT4-fs (loop1): Block reservation details
[  132.756652][ T5329] EXT4-fs (loop1): i_reserved_data_blocks=62
[  132.770167][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.777087][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.987864][   T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28
[  133.263180][ T5365] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1
[  133.335314][   T33] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  133.545475][   T33] usb 1-1: Using ep0 maxpacket: 16
[  133.570051][   T33] usb 1-1: config 0 has no interfaces?
[  133.586390][   T33] usb 1-1: New USB device found, idVendor=05a9, idProduct=4519, bcdDevice= 0.09
[  133.606134][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  133.614506][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'.
[  133.635387][   T33] usb 1-1: SerialNumber: syz
[  133.650044][   T33] usb 1-1: config 0 descriptor??
[  133.667202][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'.
[  133.876261][ T4321] usb 1-1: USB disconnect, device number 5
[  134.716264][ T5423] capability: warning: `syz.4.422' uses deprecated v2 capabilities in a way that may be insecure
[  134.727873][ T5422] netlink: 'syz.1.421': attribute type 4 has an invalid length.
[  134.752821][ T5422] netlink: 17 bytes leftover after parsing attributes in process `syz.1.421'.
[  134.999602][ T5428] loop4: detected capacity change from 0 to 512
[  135.078742][ T5428] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  135.102377][ T5431] Set syz1 is full, maxelem 2 reached
[  135.134628][ T5428] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.424: corrupted in-inode xattr
[  135.175541][ T5428] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.424: couldn't read orphan inode 15 (err -117)
[  135.239271][ T5428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  135.277081][ T5413] loop2: detected capacity change from 0 to 32768
[  135.329864][ T5413] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.417 (5413)
[  135.392240][ T5413] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  135.423157][ T5413] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  135.454531][ T5413] BTRFS info (device loop2): setting nodatacow, compression disabled
[  135.505545][ T5413] BTRFS info (device loop2): setting datasum, datacow enabled
[  135.555369][ T5413] BTRFS info (device loop2): force clearing of disk cache
[  135.562599][ T5413] BTRFS info (device loop2): enabling ssd optimizations
[  135.588108][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  135.588113][ T5413] BTRFS info (device loop2): using spread ssd allocation scheme
[  135.631743][ T5413] BTRFS info (device loop2): turning on sync discard
[  135.677542][ T5413] BTRFS info (device loop2): turning on flush-on-commit
[  135.684931][ T5413] BTRFS info (device loop2): not using ssd optimizations
[  135.765786][ T5413] BTRFS info (device loop2): not using spread ssd allocation scheme
[  135.782936][ T5413] BTRFS info (device loop2): using free space tree
[  136.101312][ T5468] loop0: detected capacity change from 0 to 512
[  136.160105][ T5413] BTRFS info (device loop2): rebuilding free space tree
[  136.170389][ T5468] EXT4-fs (loop0): Test dummy encryption mode enabled
[  136.243346][ T5468] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.435: inode has both inline data and extents flags
[  136.322417][ T5468] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.435: couldn't read orphan inode 15 (err -117)
[  136.415440][ T5468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  136.781073][ T5413] BTRFS info (device loop2): balance: start -d -m
[  136.807451][ T5413] BTRFS info (device loop2): balance: canceled
[  136.955991][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.231024][ T5468] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  137.380197][ T5499] loop4: detected capacity change from 0 to 4096
[  137.431875][ T5499] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  137.607286][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  137.626688][ T5492] loop3: detected capacity change from 0 to 16384
[  137.870852][ T5512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.531333][ T5530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'.
[  138.805549][ T4321] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  138.853113][ T5545] process 'syz.3.464' launched './file1' with NULL argv: empty string added
[  139.010764][ T4321] usb 1-1: Using ep0 maxpacket: 8
[  139.018130][ T4321] usb 1-1: config 0 has no interfaces?
[  139.054784][ T4321] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  139.084622][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.103197][ T4321] usb 1-1: Product: syz
[  139.107689][ T4321] usb 1-1: Manufacturer: syz
[  139.122639][ T4321] usb 1-1: SerialNumber: syz
[  139.133668][ T4321] usb 1-1: config 0 descriptor??
[  139.235475][ T4666] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  139.392940][ T4668] usb 1-1: USB disconnect, device number 6
[  139.425557][ T4666] usb 3-1: Using ep0 maxpacket: 32
[  139.433915][ T4666] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  139.451506][ T4666] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  139.476699][ T4666] usb 3-1: config 2 has no interface number 0
[  139.489722][ T4666] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  139.510181][ T4666] usb 3-1: config 2 interface 88 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.525643][ T4666] usb 3-1: config 2 interface 88 has no altsetting 0
[  139.548421][ T4666] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  139.566077][ T4666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  139.584426][ T4666] usb 3-1: Product: syz
[  139.594561][ T4666] usb 3-1: Manufacturer: syz
[  139.604700][ T4666] usb 3-1: SerialNumber: syz
[  139.626616][ T5550] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  139.640682][ T4666] asix: probe of 3-1:2.88 failed with error -22
[  139.885805][ T4668] usb 3-1: USB disconnect, device number 4
[  139.984536][ T5579] netlink: 'syz.3.477': attribute type 1 has an invalid length.
[  139.994035][ T5579] netlink: 'syz.3.477': attribute type 2 has an invalid length.
[  140.017026][ T5579] netlink: 'syz.3.477': attribute type 1 has an invalid length.
[  140.024879][ T5579] netlink: 'syz.3.477': attribute type 2 has an invalid length.
[  140.393432][ T5590] tap0: tun_chr_ioctl cmd 1074025677
[  140.399521][ T5590] tap0: linktype set to 780
[  140.626904][ T5594] loop2: detected capacity change from 0 to 256
[  140.752296][ T5594] FAT-fs (loop2): Directory bread(block 64) failed
[  140.775588][ T5594] FAT-fs (loop2): Directory bread(block 65) failed
[  140.813951][ T5594] FAT-fs (loop2): Directory bread(block 66) failed
[  140.839744][ T5594] FAT-fs (loop2): Directory bread(block 67) failed
[  140.865520][ T5594] FAT-fs (loop2): Directory bread(block 68) failed
[  140.872153][ T5594] FAT-fs (loop2): Directory bread(block 69) failed
[  140.964624][ T5594] FAT-fs (loop2): Directory bread(block 70) failed
[  140.981934][ T5594] FAT-fs (loop2): Directory bread(block 71) failed
[  140.993304][ T5581] loop4: detected capacity change from 0 to 32768
[  141.000677][ T5594] FAT-fs (loop2): Directory bread(block 72) failed
[  141.008048][ T5594] FAT-fs (loop2): Directory bread(block 73) failed
[  141.027049][ T5581] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.478 (5581)
[  141.040458][ T5603] fuse: Bad value for 'fd'
[  141.130782][ T5581] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  141.174697][ T5581] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  141.236493][ T5581] BTRFS info (device loop4): setting nodatacow, compression disabled
[  141.244712][ T5581] BTRFS info (device loop4): setting datasum, datacow enabled
[  141.315500][ T5581] BTRFS info (device loop4): force clearing of disk cache
[  141.343236][ T5581] BTRFS info (device loop4): enabling ssd optimizations
[  141.381491][ T5581] BTRFS info (device loop4): using spread ssd allocation scheme
[  141.410997][ T5581] BTRFS info (device loop4): turning on sync discard
[  141.465555][ T5581] BTRFS info (device loop4): turning off barriers
[  141.472168][ T5581] BTRFS info (device loop4): setting nodatacow, compression disabled
[  141.544526][ T5581] BTRFS info (device loop4): not using ssd optimizations
[  141.595290][ T5581] BTRFS info (device loop4): not using spread ssd allocation scheme
[  141.635456][ T5581] BTRFS info (device loop4): using free space tree
[  141.822082][ T5628] program syz.2.493 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.134584][ T5581] BTRFS info (device loop4): rebuilding free space tree
[  142.465182][ T4279] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.498511][ T5659] netlink: 'syz.0.506': attribute type 2 has an invalid length.
[  142.517385][ T4668] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  142.724289][ T4668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  142.774418][ T4668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  142.800665][ T4668] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.836858][ T5678] loop0: detected capacity change from 0 to 512
[  142.849732][ T5678] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  142.860004][ T4668] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  142.905714][ T4668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  142.913889][ T4668] usb 3-1: Product: syz
[  142.952521][ T4668] usb 3-1: Manufacturer: syz
[  142.974325][ T4668] usb 3-1: SerialNumber: syz
[  143.023762][ T4338] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  143.221345][ T4668] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  143.430603][   T33] usb 3-1: USB disconnect, device number 5
[  143.454236][   T33] usblp0: removed
[  143.670706][ T4321] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  143.872568][ T4321] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  143.892793][ T4321] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  143.920670][ T4321] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  143.955317][ T4321] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.010717][ T4321] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.030136][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.057624][ T4321] usb 5-1: SerialNumber: syz
[  144.073448][ T5695] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  144.100980][ T4321] cdc_ether: probe of 5-1:1.0 failed with error -22
[  144.324748][ T4668] usb 5-1: USB disconnect, device number 6
[  144.664955][ T5726] netlink: 56 bytes leftover after parsing attributes in process `syz.3.529'.
[  144.923924][ T5730] loop3: detected capacity change from 0 to 1024
[  144.964863][ T5730] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  144.983506][ T5730] EXT4-fs (loop3): orphan cleanup on readonly fs
[  145.003072][ T5730] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.531: Freeing blocks not in datazone - block = 0, count = 4096
[  145.053339][ T5730] EXT4-fs (loop3): Remounting filesystem read-only
[  145.060576][ T5730] EXT4-fs (loop3): 1 orphan inode deleted
[  145.080420][ T5730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  145.186650][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  145.730499][ T5724] loop0: detected capacity change from 0 to 32768
[  146.225159][ T5760] loop1: detected capacity change from 0 to 2048
[  146.270253][ T5760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.309666][ T5766] bcache: register_bcache() error : failed to open device
[  146.665848][ T5775] loop1: detected capacity change from 0 to 8
[  146.814051][ T5775] SQUASHFS error: Failed to read block 0x4de: -5
[  146.838224][ T5775] SQUASHFS error: Failed to read block 0x4de: -5
[  146.844808][ T5775] SQUASHFS error: Failed to read block 0x4de: -5
[  146.914334][ T5775] SQUASHFS error: Failed to read block 0x4de: -5
[  146.924964][ T5775] SQUASHFS error: Failed to read block 0x4de: -5
[  146.944157][   T26] audit: type=1800 audit(1786460145.966:8): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.551" name="file1" dev="loop1" ino=5 res=0 errno=0
[  146.989697][ T5787] loop2: detected capacity change from 0 to 512
[  147.057044][ T5787] EXT4-fs error (device loop2): __ext4_iget:5102: inode #17: block 1803188595: comm syz.2.557: invalid block
[  147.179833][ T5787] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.557: couldn't read orphan inode 17 (err -117)
[  147.202256][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  147.388075][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  147.514902][ T5802] loop0: detected capacity change from 0 to 2048
[  147.558435][ T5802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.015121][ T5820] netlink: 'syz.1.570': attribute type 1 has an invalid length.
[  148.038036][ T5820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.570'.
[  148.044155][ T5821] hsr0: VLAN not yet supported
[  148.549675][ T1046] device offline error, dev sda, sector 721238 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.566701][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90154)
[  148.579320][ T1046] Buffer I/O error on device sda1, logical block 90116
[  148.587845][ T1046] device offline error, dev sda, sector 721254 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.598377][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90156)
[  148.610115][ T1046] Buffer I/O error on device sda1, logical block 90118
[  148.625372][ T1046] Buffer I/O error on device sda1, logical block 90119
[  148.632344][ T1046] Buffer I/O error on device sda1, logical block 90120
[  148.639581][ T1046] device offline error, dev sda, sector 721302 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.650138][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90162)
[  148.661767][ T1046] Buffer I/O error on device sda1, logical block 90124
[  148.668769][ T1046] device offline error, dev sda, sector 721438 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.679607][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90179)
[  148.691488][ T1046] Buffer I/O error on device sda1, logical block 90141
[  148.698628][ T1046] device offline error, dev sda, sector 721454 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.709226][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90181)
[  148.720986][ T1046] Buffer I/O error on device sda1, logical block 90143
[  148.728019][ T1046] device offline error, dev sda, sector 721470 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.738726][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90183)
[  148.750616][ T1046] Buffer I/O error on device sda1, logical block 90145
[  148.757704][ T1046] device offline error, dev sda, sector 721486 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.771516][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90185)
[  148.783480][ T1046] Buffer I/O error on device sda1, logical block 90147
[  148.790740][ T1046] device offline error, dev sda, sector 721526 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.801338][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90190)
[  148.813042][ T1046] Buffer I/O error on device sda1, logical block 90152
[  148.845110][ T1046] device offline error, dev sda, sector 721558 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.856180][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90194)
[  148.867898][ T1046] device offline error, dev sda, sector 721598 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  148.878703][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90199)
[  148.947792][ T3600] Aborting journal on device sda1-8.
[  148.954092][ T3600] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  148.972834][ T5835] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.578: Detected aborted journal
[  148.990393][ T5832] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.577: Detected aborted journal
[  149.022443][ T5830] Buffer I/O error on dev sda1, logical block 1, lost async page write
[  149.047670][ T5830] Buffer I/O error on dev sda1, logical block 131, lost async page write
[  149.065712][ T3600] JBD2: I/O error when updating journal superblock for sda1-8.
[  149.079029][ T5832] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  149.100503][ T5835] EXT4-fs (sda1): previous I/O error to superblock detected
[  149.117678][ T5835] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  149.125924][ T5830] Buffer I/O error on dev sda1, logical block 132, lost async page write
[  149.136081][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  149.173554][ T5832] EXT4-fs (sda1): I/O error while writing superblock
[  149.180504][ T5835] EXT4-fs (sda1): I/O error while writing superblock
[  149.188157][ T5832] EXT4-fs (sda1): Remounting filesystem read-only
[  149.196766][ T4261] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  149.211239][ T5835] EXT4-fs (sda1): Remounting filesystem read-only
[  149.236802][ T5827] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.575: Detected aborted journal
[  149.246316][ T4261] EXT4-fs (sda1): I/O error while writing superblock
[  149.254446][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  149.265685][ T5832] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.577: Detected aborted journal
[  149.285465][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  149.315455][ T4261] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  149.323724][ T4261] EXT4-fs (sda1): I/O error while writing superblock
[  149.331173][ T5827] EXT4-fs (sda1): previous I/O error to superblock detected
[  149.345387][ T5827] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  149.353865][ T5815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.569: Detected aborted journal
[  149.363997][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  149.382847][ T5832] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  149.389125][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  149.437358][ T5827] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.575: Detected aborted journal
[  149.470709][ T5815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.569: Detected aborted journal
[  149.961555][ T5830] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  150.209540][ T5837] loop3: detected capacity change from 0 to 32768
[  150.574407][ T5857] device veth0 entered promiscuous mode
[  150.598015][ T5856] device veth0 left promiscuous mode
[  151.175332][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  151.382630][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.401943][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.441941][    T7] usb 3-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00
[  151.461660][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.483870][    T7] usb 3-1: config 0 descriptor??
[  151.507489][ T5864] loop4: detected capacity change from 0 to 32768
[  151.579549][ T5859] loop0: detected capacity change from 0 to 32768
[  151.907739][    T7] hid-generic 0003:0EEF:722A.0002: unknown main item tag 0x0
[  151.928836][    T7] hid-generic 0003:0EEF:722A.0002: unbalanced collection at end of report description
[  151.992304][    T7] hid-generic: probe of 0003:0EEF:722A.0002 failed with error -22
[  152.115073][ T4666] usb 3-1: USB disconnect, device number 6
[  152.357075][ T5884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'.
[  152.414520][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'.
[  152.766030][ T5895] loop0: detected capacity change from 0 to 512
[  152.894042][ T5895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  152.925650][ T5895] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.997513][ T5885] loop3: detected capacity change from 0 to 32768
[  153.096868][ T5885] XFS (loop3): Mounting V5 Filesystem
[  153.110924][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  153.234607][ T5885] XFS (loop3): Ending clean mount
[  153.536909][ T4277] XFS (loop3): Unmounting Filesystem
[  153.723183][ T5931] loop4: detected capacity change from 0 to 256
[  153.991601][ T5936] EXT4-fs error: 115 callbacks suppressed
[  153.991617][ T5936] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.621: Detected aborted journal
[  154.016908][ T5937] netlink: 80 bytes leftover after parsing attributes in process `syz.2.620'.
[  154.093376][ T5936] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.621: Detected aborted journal
[  154.141149][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  154.155396][ T5936] EXT4-fs: 118 callbacks suppressed
[  154.155410][ T5936] EXT4-fs (sda1): Remounting filesystem read-only
[  154.180306][ T5939] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.622: Detected aborted journal
[  154.204203][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  154.211050][ T5939] EXT4-fs (sda1): Remounting filesystem read-only
[  154.238492][ T5939] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.622: Detected aborted journal
[  154.254752][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  154.278999][ T5941] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.623: Detected aborted journal
[  154.295430][ T5939] EXT4-fs (sda1): Remounting filesystem read-only
[  154.307891][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  154.321758][ T5942] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.616: Detected aborted journal
[  154.324984][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  154.345023][ T5941] EXT4-fs (sda1): Remounting filesystem read-only
[  154.354101][ T5940] MTRR 1 not used
[  154.370509][ T5941] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.623: Detected aborted journal
[  154.381699][ T5942] EXT4-fs (sda1): Remounting filesystem read-only
[  154.405447][ T5941] EXT4-fs (sda1): Remounting filesystem read-only
[  154.414414][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  154.420461][ T5942] EXT4-fs (sda1): Remounting filesystem read-only
[  154.979537][ T5958] loop4: detected capacity change from 0 to 128
[  154.999633][ T5958] EXT4-fs: inline encryption not supported
[  155.023410][ T5958] EXT4-fs (loop4): Test dummy encryption mode enabled
[  155.062444][ T5958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  155.076958][ T5958] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  155.089832][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[  155.348304][ T5969] loop3: detected capacity change from 0 to 128
[  155.462864][ T5969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.480831][ T5969] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.532395][ T5972] loop0: detected capacity change from 0 to 128
[  155.563009][ T5972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  155.602405][ T5972] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.619612][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  155.704514][   T26] audit: type=1800 audit(1786460154.726:9): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.634" name="file1" dev="loop0" ino=12 res=0 errno=0
[  155.711256][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  155.842500][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.881960][ T5962] loop2: detected capacity change from 0 to 32768
[  155.917750][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.926872][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.935940][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.944974][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.954057][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.963123][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.972185][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.981239][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  155.990328][ T5977] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  156.347159][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  156.592610][ T5991] loop3: detected capacity change from 0 to 4096
[  156.691145][ T5991] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  156.786308][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.645'.
[  156.803172][   T26] audit: type=1800 audit(1786460155.826:10): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.642" name="file1" dev="loop3" ino=30 res=0 errno=0
[  157.238649][ T6009] loop3: detected capacity change from 0 to 4096
[  157.295671][   T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  157.330481][ T6014] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.497137][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.526885][   T22] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.580107][   T22] usb 5-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11
[  157.607225][ T6020] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.655'.
[  157.616677][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.626692][   T22] usb 5-1: Product: syz
[  157.635570][   T22] usb 5-1: Manufacturer: syz
[  157.646251][   T22] usb 5-1: SerialNumber: syz
[  157.663914][   T22] r8152 5-1:1.0: Expected endpoints are not found
[  157.864935][   T22] r8152-cfgselector 5-1: Unknown version 0x0000
[  157.879611][   T22] r8152-cfgselector 5-1: USB disconnect, device number 7
[  158.015937][ T6028] loop2: detected capacity change from 0 to 4096
[  158.109552][ T6028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  158.433392][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  158.456186][ T6038] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  158.808967][ T6042] loop2: detected capacity change from 0 to 4096
[  158.854589][ T6042] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  159.028284][ T6051] EXT4-fs error: 114 callbacks suppressed
[  159.028300][ T6051] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.669: Detected aborted journal
[  159.093220][ T6052] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.670: Detected aborted journal
[  159.108979][ T6051] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.669: Detected aborted journal
[  159.146199][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  159.176624][ T6052] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.670: Detected aborted journal
[  159.198135][ T4261] EXT4-fs: 105 callbacks suppressed
[  159.198150][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  159.223940][ T6052] EXT4-fs (sda1): Remounting filesystem read-only
[  159.241116][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  159.257153][ T6055] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.671: Detected aborted journal
[  159.268123][ T6054] mtrr: base(0xf90000000) is not aligned on a size(0x0000) boundary
[  159.289108][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[  159.299882][ T6035] loop0: detected capacity change from 0 to 32768
[  159.301920][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  159.329778][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  159.336502][ T6055] EXT4-fs (sda1): Remounting filesystem read-only
[  159.360417][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  159.373255][ T6055] EXT4-fs (sda1): Remounting filesystem read-only
[  159.421342][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  159.441309][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  159.448704][ T6035] XFS (loop0): Mounting V5 Filesystem
[  159.454866][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  159.498722][ T6064] EXT4-fs (sda1): Remounting filesystem read-only
[  159.580890][ T6068] EXT4-fs (sda1): Remounting filesystem read-only
[  159.622517][ T6067] loop2: detected capacity change from 0 to 512
[  159.638590][ T6035] XFS (loop0): Ending clean mount
[  159.673969][ T6067] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  159.693490][   T26] audit: type=1800 audit(1786460158.716:11): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.661" name=2E02 dev="loop0" ino=6154 res=0 errno=0
[  159.751703][ T6067] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.673: bad orphan inode 131083
[  159.845800][ T6067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  159.912026][ T6067] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #2: block 13: comm syz.2.673: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  159.935882][ T4274] XFS (loop0): Unmounting Filesystem
[  160.244935][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  160.869359][ T6103] loop1: detected capacity change from 0 to 128
[  160.940892][ T6107] loop2: detected capacity change from 0 to 512
[  160.993941][ T6107] EXT4-fs: Ignoring removed bh option
[  161.045757][ T6107] EXT4-fs (loop2): Test dummy encryption mode enabled
[  161.052641][ T6107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  161.143486][ T6107] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.693: inode has both inline data and extents flags
[  161.177577][ T6107] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.693: couldn't read orphan inode 15 (err -117)
[  161.195964][ T6107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  161.450174][ T6119] loop1: detected capacity change from 0 to 4096
[  161.459236][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  161.473958][ T6121] loop0: detected capacity change from 0 to 2048
[  161.598290][ T6121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  161.623357][   T26] audit: type=1800 audit(1786460160.646:12): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.697" name="file0" dev="loop0" ino=13 res=0 errno=0
[  161.672248][ T6126] netlink: 'syz.3.700': attribute type 2 has an invalid length.
[  161.682071][ T6126] netlink: 'syz.3.700': attribute type 2 has an invalid length.
[  161.753746][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'.
[  161.772549][ T6130] loop3: detected capacity change from 0 to 256
[  161.801373][ T6130] exfat: Deprecated parameter 'utf8'
[  161.887763][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  161.964343][ T6130] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  162.508027][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.708'.
[  162.778562][ T6159] loop0: detected capacity change from 0 to 128
[  162.818408][ T6159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  162.873751][ T6159] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  162.905694][    C0] vkms_vblank_simulate: vblank timer overrun
[  162.915794][   T22] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  162.930314][   T26] audit: type=1326 audit(1786460161.956:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.016481][   T26] audit: type=1326 audit(1786460161.956:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.061613][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  163.088816][   T26] audit: type=1326 audit(1786460162.006:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.137182][   T22] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  163.165344][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.192416][   T26] audit: type=1326 audit(1786460162.006:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.241296][   T22] usb 5-1: config 0 descriptor??
[  163.296807][   T26] audit: type=1326 audit(1786460162.006:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.382480][   T26] audit: type=1326 audit(1786460162.006:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.486353][   T26] audit: type=1326 audit(1786460162.006:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.541313][ T6171] overlayfs: failed to set xattr on upper
[  163.601650][   T26] audit: type=1326 audit(1786460162.016:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.660413][   T26] audit: type=1326 audit(1786460162.016:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bfd9e0d9 code=0x7ffc0000
[  163.714645][   T22] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  163.740208][   T22] [drm] Initialized udl on minor 2
[  163.886191][   T22] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  163.916957][   T22] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  164.037651][ T6185] EXT4-fs error: 132 callbacks suppressed
[  164.037668][ T6185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.726: Detected aborted journal
[  164.054770][ T6188] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.725: Detected aborted journal
[  164.087972][ T6186] netlink: 'syz.0.726': attribute type 22 has an invalid length.
[  164.099891][ T6188] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.725: Detected aborted journal
[  164.106447][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'.
[  164.121318][ T4321] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  164.121912][ T4668] usb 5-1: USB disconnect, device number 8
[  164.150872][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  164.180154][ T6190] netlink: 'syz.0.726': attribute type 22 has an invalid length.
[  164.208815][    T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  164.233816][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'.
[  164.378722][ T6192] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.727: Detected aborted journal
[  164.380187][ T6191] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.728: Detected aborted journal
[  164.400324][ T6192] EXT4-fs: 116 callbacks suppressed
[  164.400365][ T6192] EXT4-fs (sda1): Remounting filesystem read-only
[  164.413004][    T7] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  164.424193][ T6191] EXT4-fs (sda1): Remounting filesystem read-only
[  164.437820][    T7] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.448075][    T7] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  164.459595][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.484525][ T6191] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.728: Detected aborted journal
[  164.492137][    T7] usb 3-1: config 0 descriptor??
[  164.508116][ T4513] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  164.524545][ T6191] EXT4-fs (sda1): Remounting filesystem read-only
[  164.532769][ T4513] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  164.551892][ T4513] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  164.650931][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  164.659132][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  164.711572][ T6181] EXT4-fs (sda1): Remounting filesystem read-only
[  164.722729][ T6195] EXT4-fs (sda1): Remounting filesystem read-only
[  164.786916][ T6195] EXT4-fs (sda1): Remounting filesystem read-only
[  164.806236][ T6197] EXT4-fs (sda1): Remounting filesystem read-only
[  164.820875][ T6197] EXT4-fs (sda1): Remounting filesystem read-only
[  164.860518][ T6198] device bond0 entered promiscuous mode
[  164.886303][ T6198] device bond_slave_0 entered promiscuous mode
[  164.898261][ T6198] device bond_slave_1 entered promiscuous mode
[  164.937468][ T6198] device batadv0 entered promiscuous mode
[  164.958961][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  164.970415][ T6198] 8021q: adding VLAN 0 to HW filter on device hsr1
[  164.982490][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  164.991248][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.011995][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x5
[  165.022838][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.032925][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.044970][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.063289][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.070778][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.083940][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.093665][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.106731][    T7] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0
[  165.130485][    T7] hid-rmi 0003:1532:011D.0003: hidraw0: USB HID v0.c1 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0
[  165.194499][    T7] usb 3-1: USB disconnect, device number 7
[  165.238858][ T6198] device bond0 left promiscuous mode
[  165.244575][ T6198] device bond_slave_0 left promiscuous mode
[  165.281927][ T6203] udevd[6203]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  165.295673][ T6198] device bond_slave_1 left promiscuous mode
[  165.329724][ T6198] device batadv0 left promiscuous mode
[  165.563339][ T6212] block2mtd: too many arguments
[  165.697074][ T6194] loop1: detected capacity change from 0 to 32768
[  165.747952][ T6216] Zero length message leads to an empty skb
[  165.834539][ T6194] read_mapping_page failed!
[  165.906338][ T6194] ERROR: (device loop1): txCommit: 
[  165.906338][ T6194] 
[  165.987971][ T6194] ERROR: (device loop1): remounting filesystem as read-only
[  166.430118][ T6232] loop0: detected capacity change from 0 to 2048
[  166.499150][ T6234] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  166.517780][ T6236] loop3: detected capacity change from 0 to 512
[  166.526881][ T6232] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  166.539035][ T6234] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  166.546380][ T6236] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  166.564722][ T6232] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  166.566716][ T6234] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  166.587088][ T6236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  166.598496][ T6236] System zones: 1-12
[  166.603602][ T6236] EXT4-fs (loop3): orphan cleanup on readonly fs
[  166.610216][ T6234] comedi comedi3: 8255: I/O port conflict (0xc9,4)
[  166.634202][ T6234] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  166.686521][ T6234] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  166.693170][ T6234] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  166.700805][ T6234] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  166.707633][ T6234] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  166.714739][ T6234] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  166.721458][ T6234] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  166.728395][ T6234] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  166.734913][ T6234] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  166.735378][ T6232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.742705][ T6234] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  166.764098][ T6236] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.748: bg 0: block 361: padding at end of block bitmap is not set
[  166.811646][ T6234] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  166.852162][ T6236] EXT4-fs (loop3): Remounting filesystem read-only
[  166.862318][ T6234] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  166.894555][ T6236] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  166.916405][ T6234] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  166.934844][ T6236] EXT4-fs (loop3): Remounting filesystem read-only
[  166.951792][ T6234] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  166.977103][ T6236] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.748: invalid indirect mapped block 12 (level 1)
[  167.004636][ T6234] comedi comedi3: 8255: I/O port conflict (0x10002,4)
[  167.059709][ T6234] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  167.072995][ T6236] EXT4-fs (loop3): Remounting filesystem read-only
[  167.098937][ T6236] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.748: invalid indirect mapped block 2 (level 2)
[  167.175719][ T6236] EXT4-fs (loop3): Remounting filesystem read-only
[  167.182990][ T6236] EXT4-fs (loop3): 1 truncate cleaned up
[  167.237253][ T6236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  167.337316][ T6236] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 5: comm syz.3.748: lblock 0 mapped to illegal pblock 5 (length 1)
[  167.352785][ T6246] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  167.452128][ T6236] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.748: error -117 reading directory block
[  167.611173][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  168.331088][ T6281] loop3: detected capacity change from 0 to 512
[  168.383059][ T6281] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  168.432485][ T6281] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  168.497477][ T6281] EXT4-fs (loop3): 1 truncate cleaned up
[  168.522163][ T6281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  168.567264][ T6281] EXT4-fs (loop3): shut down requested (2)
[  168.581198][ T6289] loop0: detected capacity change from 0 to 512
Aug 11 14:56:07 syzkaller kern.alert kernel: [  168.567264][ T62[  168.593418][ T6290] loop1: detected capacity change from 0 to 256
81] EXT4-fs (loop3): shut down requested (2)
[  168.626157][ T6289] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.656440][ T6290] exfat: Deprecated parameter 'utf8'
[  168.691493][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  168.693478][ T6289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.770: inode #1: comm syz.0.770: iget: illegal inode #
[  168.725755][ T6289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.770: error while reading EA inode 1 err=-117
[  168.753201][ T6290] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d)
[  168.813736][ T6289] EXT4-fs (loop0): 1 orphan inode deleted
[  168.836674][ T6289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  169.047367][ T6295] EXT4-fs error: 113 callbacks suppressed
[  169.047388][ T6295] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.772: Detected aborted journal
[  169.078783][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  169.160180][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  169.242665][ T6298] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.773: Detected aborted journal
[  169.354464][ T6299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.775: Detected aborted journal
[  169.390315][ T6299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.775: Detected aborted journal
[  169.425402][ T6299] EXT4-fs: 91 callbacks suppressed
[  169.426262][ T6299] EXT4-fs (sda1): Remounting filesystem read-only
[  169.440288][ T6298] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.773: Detected aborted journal
[  169.457368][ T6303] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.774: Detected aborted journal
[  169.468939][ T6298] EXT4-fs (sda1): Remounting filesystem read-only
[  169.494546][ T6302] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.776: Detected aborted journal
[  169.521433][ T6302] EXT4-fs (sda1): Remounting filesystem read-only
[  169.545554][ T6303] EXT4-fs (sda1): Remounting filesystem read-only
[  169.618245][ T6304] loop2: detected capacity change from 0 to 764
[  169.651608][ T6306] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.777: Detected aborted journal
[  169.671404][ T6303] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.774: Detected aborted journal
[  169.708727][ T6307] EXT4-fs (sda1): Remounting filesystem read-only
[  169.721038][ T6307] EXT4-fs (sda1): Remounting filesystem read-only
[  169.748761][ T6306] EXT4-fs (sda1): Remounting filesystem read-only
[  169.770288][ T6303] EXT4-fs (sda1): Remounting filesystem read-only
[  169.780712][ T6302] EXT4-fs (sda1): Remounting filesystem read-only
[  169.791488][ T6306] EXT4-fs (sda1): Remounting filesystem read-only
[  169.862709][ T6286] loop4: detected capacity change from 0 to 40427
[  169.905520][ T6286] F2FS-fs (loop4): invalid crc value
[  169.963106][ T6286] F2FS-fs (loop4): Found nat_bits in checkpoint
[  170.206600][ T6286] F2FS-fs (loop4): Start checkpoint disabled!
[  170.365385][ T6286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  170.367476][ T6315] loop2: detected capacity change from 0 to 32768
[  170.438105][ T6315] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: mode 03644 has unknown file type
[  170.454297][ T6315] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  170.464233][ T6315] OCFS2: File system is now read-only.
[  170.469772][ T6315] (syz.2.781,6315,1):ocfs2_read_locked_inode:554 ERROR: status = -30
[  170.478346][ T6315] (syz.2.781,6315,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  170.488359][ T6315] (syz.2.781,6315,1):ocfs2_init_global_system_inodes:461 ERROR: status = -30
[  170.497242][ T6315] (syz.2.781,6315,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  170.497274][ T6315] (syz.2.781,6315,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30
[  170.518387][ T6315] (syz.2.781,6315,1):ocfs2_initialize_super:2253 ERROR: status = -30
[  170.526697][ T6315] (syz.2.781,6315,1):ocfs2_fill_super:1176 ERROR: status = -30
[  170.968855][ T4332] kworker/u4:6: attempt to access beyond end of device
[  170.968855][ T4332] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  171.564143][ T6342] netlink: 'syz.0.793': attribute type 12 has an invalid length.
[  171.592521][ T6342] netlink: 'syz.0.793': attribute type 29 has an invalid length.
[  171.622865][ T6342] netlink: 148 bytes leftover after parsing attributes in process `syz.0.793'.
[  171.980429][ T6351] netlink: 'syz.0.796': attribute type 10 has an invalid length.
[  172.172355][ T6353] loop0: detected capacity change from 0 to 2048
[  172.213455][ T6332] loop2: detected capacity change from 0 to 32768
[  172.220188][ T6353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.264469][ T6338] loop3: detected capacity change from 0 to 32768
[  172.285585][ T6332] gfs2: Invalid block size shift
[  172.406036][ T6338] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  172.583744][ T4277] ocfs2: Unmounting device (7,3) on (node local)
[  172.951125][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.217871][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.529431][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.699164][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.851536][ T6380] loop4: detected capacity change from 0 to 4096
[  173.913301][ T6380] NILFS (loop4): invalid segment: Checksum error in segment payload
[  173.933057][ T6380] NILFS (loop4): trying rollback from an earlier position
[  174.007659][ T6380] NILFS (loop4): recovery complete
[  174.028752][ T6382] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.059215][ T6384] EXT4-fs error: 74 callbacks suppressed
[  174.059232][ T6384] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.813: Detected aborted journal
[  174.076410][ T6383] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.814: Detected aborted journal
[  174.107950][ T6381] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  174.129826][ T6384] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.813: Detected aborted journal
[  174.161446][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  174.226560][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  174.259171][ T6387] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  174.281670][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  174.307755][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  174.344893][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  174.439799][ T6391] EXT4-fs: 74 callbacks suppressed
[  174.439815][ T6391] EXT4-fs (sda1): Remounting filesystem read-only
[  174.475125][ T6391] EXT4-fs (sda1): Remounting filesystem read-only
[  174.523313][ T6392] netlink: 'syz.3.816': attribute type 12 has an invalid length.
[  174.554767][ T6392] netlink: 'syz.3.816': attribute type 29 has an invalid length.
[  174.572064][ T6392] netlink: 148 bytes leftover after parsing attributes in process `syz.3.816'.
[  174.581927][ T6392] netlink: 'syz.3.816': attribute type 3 has an invalid length.
[  174.592090][ T6392] netlink: 'syz.3.816': attribute type 2 has an invalid length.
[  174.612336][ T6392] netlink: 35 bytes leftover after parsing attributes in process `syz.3.816'.
[  174.804181][ T6389] EXT4-fs (sda1): Remounting filesystem read-only
[  174.997588][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  175.064843][ T6399] EXT4-fs (sda1): Remounting filesystem read-only
[  175.078253][ T6401] EXT4-fs (sda1): Remounting filesystem read-only
[  175.092403][ T6402] EXT4-fs (sda1): Remounting filesystem read-only
[  175.110121][ T6401] EXT4-fs (sda1): Remounting filesystem read-only
[  175.116792][ T6400] EXT4-fs (sda1): Remounting filesystem read-only
[  175.139907][ T6402] EXT4-fs (sda1): Remounting filesystem read-only
[  175.160049][ T6407] Falling back ldisc for ttyS3.
[  176.070642][   T11] device hsr_slave_0 left promiscuous mode
[  176.077936][   T11] device hsr_slave_1 left promiscuous mode
[  176.084695][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.092347][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.102793][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.110345][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.118158][   T11] device bridge_slave_1 left promiscuous mode
[  176.127908][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.140242][   T11] device bridge_slave_0 left promiscuous mode
[  176.146888][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.182240][   T11] device veth1_macvtap left promiscuous mode
[  176.189742][   T11] device veth0_macvtap left promiscuous mode
[  176.196282][   T11] device veth1_vlan left promiscuous mode
[  176.202551][   T11] device veth0_vlan left promiscuous mode
[  177.120571][   T11] team0 (unregistering): Port device team_slave_1 removed
[  177.173768][   T11] team0 (unregistering): Port device team_slave_0 removed
[  177.273204][ T6458] loop0: detected capacity change from 0 to 1024
[  177.309555][ T6459] loop3: detected capacity change from 0 to 2048
[  177.320592][ T6459] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  177.387750][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.419018][ T6459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.580089][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.054736][   T11] bond0 (unregistering): Released all slaves
[  179.072248][ T4261] EXT4-fs error: 110 callbacks suppressed
[  179.072266][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  179.102940][ T6471] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  179.149054][ T6472] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.835: Detected aborted journal
[  179.163977][ T6473] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.838: Detected aborted journal
[  179.184805][ T6475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.836: Detected aborted journal
[  179.203311][ T6474] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.837: Detected aborted journal
[  179.206467][ T6472] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.835: Detected aborted journal
[  179.230473][ T6474] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.837: Detected aborted journal
[  179.251155][ T6475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.836: Detected aborted journal
[  179.331238][ T6476] loop4: detected capacity change from 0 to 4096
[  179.346048][ T6476] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  179.417165][ T6473] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.838: Detected aborted journal
[  179.643459][ T6479] loop2: detected capacity change from 0 to 32768
[  180.168836][ T4261] EXT4-fs: 40 callbacks suppressed
[  180.168854][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  180.208780][ T6484] EXT4-fs (sda1): Remounting filesystem read-only
[  180.232199][ T6486] EXT4-fs (sda1): Remounting filesystem read-only
[  180.241100][ T6487] EXT4-fs (sda1): Remounting filesystem read-only
[  180.241898][ T6485] EXT4-fs (sda1): Remounting filesystem read-only
[  180.266043][ T6486] EXT4-fs (sda1): Remounting filesystem read-only
[  180.280583][ T6485] EXT4-fs (sda1): Remounting filesystem read-only
[  180.331337][ T6484] EXT4-fs (sda1): Remounting filesystem read-only
[  181.383121][ T6501] EXT4-fs (sda1): Remounting filesystem read-only
[  181.389928][ T6502] EXT4-fs (sda1): Remounting filesystem read-only
[  181.412875][ T6506] loop2: detected capacity change from 0 to 512
[  181.476847][ T6506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  181.513059][ T6506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  181.525667][ T6506] System zones: 1-2, 4-12, 8-8
[  181.575561][ T6506] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.844: iget: bad i_size value: 38620345925642
[  181.644971][ T6506] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.844: couldn't read orphan inode 15 (err -117)
[  181.771797][ T6506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  181.809352][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  181.809368][   T26] audit: type=1800 audit(1786460180.836:32): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.844" name="bus" dev="loop2" ino=18 res=0 errno=0
[  181.982376][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  182.636664][ T6525] netlink: 'syz.4.850': attribute type 3 has an invalid length.
[  182.644587][ T6525] netlink: 72 bytes leftover after parsing attributes in process `syz.4.850'.
[  185.381613][ T6541] EXT4-fs error: 48 callbacks suppressed
[  185.381633][ T6541] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  185.396198][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  185.441007][ T6542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal
[  185.444222][ T6543] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.857: Detected aborted journal
[  185.468203][ T6543] EXT4-fs: 22 callbacks suppressed
[  185.468220][ T6543] EXT4-fs (sda1): Remounting filesystem read-only
[  185.475631][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  185.487892][ T6544] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.855: Detected aborted journal
[  185.498413][ T6542] EXT4-fs (sda1): Remounting filesystem read-only
[  185.505555][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  185.518964][ T6546] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.858: Detected aborted journal
[  185.520086][ T6543] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.857: Detected aborted journal
[  185.530168][ T6544] EXT4-fs (sda1): Remounting filesystem read-only
[  185.540495][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  185.557344][ T6547] loop0: detected capacity change from 0 to 256
[  185.563884][ T6546] EXT4-fs (sda1): Remounting filesystem read-only
[  185.572368][ T6543] EXT4-fs (sda1): Remounting filesystem read-only
[  185.596188][ T6546] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.858: Detected aborted journal
[  185.609421][ T6546] EXT4-fs (sda1): Remounting filesystem read-only
[  185.619718][ T6547] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  185.633287][ T6542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal
[  185.651240][ T6544] EXT4-fs (sda1): Remounting filesystem read-only
[  185.723877][ T6542] EXT4-fs (sda1): Remounting filesystem read-only
[  187.466876][ T6566] loop4: detected capacity change from 0 to 40427
[  187.484311][ T6566] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  187.496118][ T6566] F2FS-fs (loop4): invalid crc value
[  187.509451][ T6566] F2FS-fs (loop4): Found nat_bits in checkpoint
[  187.551911][ T6566] F2FS-fs (loop4): recover fsync data on readonly fs
[  187.571482][ T6566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  188.884742][ T6576] loop0: detected capacity change from 0 to 2048
[  188.926969][ T6576] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  188.972193][ T6576] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  188.995527][ T6576] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  189.003393][ T6576] UDF-fs: Scanning with blocksize 512 failed
[  189.014844][ T6576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.558460][ T6582] EXT4-fs error: 32 callbacks suppressed
[  190.558481][ T6582] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  190.596443][ T6584] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.868: Detected aborted journal
[  190.608097][ T6584] EXT4-fs: 15 callbacks suppressed
[  190.608110][ T6584] EXT4-fs (sda1): Remounting filesystem read-only
[  190.613075][ T6583] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.867: Detected aborted journal
[  190.638861][ T6584] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.868: Detected aborted journal
[  190.653929][ T6587] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.870: Detected aborted journal
[  190.667865][ T6586] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.869: Detected aborted journal
[  190.671799][ T6583] EXT4-fs (sda1): Remounting filesystem read-only
[  190.679135][ T6586] EXT4-fs (sda1): Remounting filesystem read-only
[  190.692023][ T6584] EXT4-fs (sda1): Remounting filesystem read-only
[  190.698689][ T6587] EXT4-fs (sda1): Remounting filesystem read-only
[  190.711107][ T6586] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.869: Detected aborted journal
[  190.714532][ T6583] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.867: Detected aborted journal
[  190.731352][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[  190.745116][ T6583] EXT4-fs (sda1): Remounting filesystem read-only
[  190.745855][ T6586] EXT4-fs (sda1): Remounting filesystem read-only
[  190.758650][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  190.995463][    T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  191.175372][    T7] usb 5-1: Using ep0 maxpacket: 8
[  191.183132][    T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  191.192530][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.206456][    T7] pvrusb2: Hardware description: Terratec Grabster AV400
[  191.213553][    T7] pvrusb2: **********
[  191.217719][    T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  191.227896][    T7] pvrusb2: Important functionality might not be entirely working.
[  191.235811][    T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  191.247201][    T7] pvrusb2: **********
[  191.407803][ T6587] EXT4-fs (sda1): Remounting filesystem read-only
[  191.417283][ T2312] pvrusb2: Invalid write control endpoint
[  191.454224][ T2312] pvrusb2: Invalid write control endpoint
[  191.461377][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  191.475781][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  191.490270][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  191.502585][ T2312] pvrusb2: Device being rendered inoperable
[  191.517013][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  191.524576][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  191.539407][ T2312] pvrusb2: Attached sub-driver cx25840
[  191.550985][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  191.562421][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  191.619952][ T6590] pvrusb2: Attempted to execute control transfer when device not ok
[  191.629858][ T4666] usb 5-1: USB disconnect, device number 9
[  192.435630][ T6593] EXT4-fs (sda1): Remounting filesystem read-only
[  192.462461][ T6595] EXT4-fs (sda1): Remounting filesystem read-only
[  193.225435][ T6598] loop2: detected capacity change from 0 to 131072
[  193.238211][ T6598] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  193.246438][ T6598] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  193.261851][ T6598] F2FS-fs (loop2): invalid crc value
[  193.277455][ T6598] F2FS-fs (loop2): Found nat_bits in checkpoint
[  193.332955][ T6598] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  193.340157][ T6598] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  194.207209][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.213580][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.423108][ T6610] loop2: detected capacity change from 0 to 256
[  194.499154][ T6614] device veth0_virt_wifi entered promiscuous mode
[  196.427448][ T4261] EXT4-fs error: 37 callbacks suppressed
[  196.427467][ T4261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  196.444757][ T4261] EXT4-fs: 15 callbacks suppressed
[  196.444806][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: repeatedly failed to execute the program
proc=5 req=812 state=1 status=67 (errno 9: Bad file descriptor)
[  196.473762][ T6615] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  196.525365][ T6616] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.879: Detected aborted journal
[  196.540270][ T6618] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.880: Detected aborted journal
[  196.554828][ T6617] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.882: Detected aborted journal
[  196.570033][ T6616] EXT4-fs (sda1): Remounting filesystem read-only
[  196.577021][ T6618] EXT4-fs (sda1): Remounting filesystem read-only
[  196.583625][ T6617] EXT4-fs (sda1): Remounting filesystem read-only
[  196.591650][ T6619] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.881: Detected aborted journal
[  196.609709][ T6616] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.879: Detected aborted journal
[  196.622591][ T6618] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.880: Detected aborted journal
[  196.637026][ T6617] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.882: Detected aborted journal
[  196.648922][ T6619] EXT4-fs (sda1): Remounting filesystem read-only
[  196.662571][ T6619] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.881: Detected aborted journal
[  196.674010][ T6617] EXT4-fs (sda1): Remounting filesystem read-only
[  196.681147][ T6616] EXT4-fs (sda1): Remounting filesystem read-only
[  196.696782][ T4261] EXT4-fs (sda1): Remounting filesystem read-only
[  196.704609][ T6619] EXT4-fs (sda1): Remounting filesystem read-only
[  196.711664][ T6618] EXT4-fs (sda1): Remounting filesystem read-only
[  196.754530][ T6622] bond1 (unregistering): Released all slaves
[  197.460840][   T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.672298][   T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.724294][   T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.813131][   T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.924963][   T57] device hsr_slave_0 left promiscuous mode
[  198.931600][   T57] device hsr_slave_1 left promiscuous mode
[  198.938471][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.946888][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.956240][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.963727][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.971999][   T57] device bridge_slave_1 left promiscuous mode
[  198.978345][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.988385][   T57] device bridge_slave_0 left promiscuous mode
[  198.994583][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.021176][   T57] device veth1_macvtap left promiscuous mode
[  199.027502][   T57] device veth0_macvtap left promiscuous mode
[  199.033656][   T57] device veth1_vlan left promiscuous mode
[  199.039801][   T57] device veth0_vlan left promiscuous mode
[  199.647330][   T57] team0 (unregistering): Port device team_slave_1 removed
[  199.693470][   T57] team0 (unregistering): Port device team_slave_0 removed
[  199.737088][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.786172][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.119976][   T57] bond0 (unregistering): Released all slaves
[  200.718012][   T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.794379][   T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.883943][   T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.947326][   T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.091347][   T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.160109][   T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.227685][   T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.297788][   T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.452811][   T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.478230][ T3934] EXT4-fs error: 144 callbacks suppressed
[  201.478245][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  201.500237][ T6666] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  201.532890][ T6667] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  201.541361][   T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.575161][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  201.593533][ T6668] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  201.609385][ T6669] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  201.623685][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  201.650722][   T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.668049][ T6670] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  201.698792][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  201.731404][   T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.749259][ T6671] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  203.653931][   T57] device hsr_slave_0 left promiscuous mode
[  203.669079][   T57] device hsr_slave_1 left promiscuous mode
[  203.688817][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.706155][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.725051][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.733334][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.746886][   T57] device bridge_slave_1 left promiscuous mode
[  203.753160][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.764415][   T57] device bridge_slave_0 left promiscuous mode
[  203.771076][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.784159][   T57] device hsr_slave_0 left promiscuous mode
[  203.792338][   T57] device hsr_slave_1 left promiscuous mode
[  203.800268][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.813745][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.823945][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.832528][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.840486][   T57] device bridge_slave_1 left promiscuous mode
[  203.848008][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.858053][   T57] device bridge_slave_0 left promiscuous mode
[  203.864233][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.888826][   T57] device hsr_slave_0 left promiscuous mode
[  203.895916][   T57] device hsr_slave_1 left promiscuous mode
[  203.912504][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.920221][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.928444][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.936033][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.943911][   T57] device bridge_slave_1 left promiscuous mode
[  203.951906][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.960499][   T57] device bridge_slave_0 left promiscuous mode
[  203.967495][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.024657][   T57] device veth1_macvtap left promiscuous mode
[  204.030839][   T57] device veth0_macvtap left promiscuous mode
[  204.037197][   T57] device veth1_vlan left promiscuous mode
[  204.043044][   T57] device veth0_vlan left promiscuous mode
[  204.056848][   T57] device veth1_macvtap left promiscuous mode
[  204.062945][   T57] device veth0_macvtap left promiscuous mode
[  204.080028][   T57] device veth1_vlan left promiscuous mode
[  204.087427][   T57] device veth0_vlan left promiscuous mode
[  204.101287][   T57] device veth1_macvtap left promiscuous mode
[  204.112982][   T57] device veth0_macvtap left promiscuous mode
[  204.119578][   T57] device veth1_vlan left promiscuous mode
[  204.126382][   T57] device veth0_vlan left promiscuous mode
[  204.935600][   T57] team0 (unregistering): Port device team_slave_1 removed
[  204.985164][   T57] team0 (unregistering): Port device team_slave_0 removed
[  205.031909][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.098683][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.416316][   T57] bond0 (unregistering): Released all slaves
[  205.953375][   T57] team0 (unregistering): Port device team_slave_1 removed
[  205.999628][   T57] team0 (unregistering): Port device team_slave_0 removed
[  206.047571][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.093539][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.421118][   T57] bond0 (unregistering): Released all slaves