last executing test programs:

1m21.461860815s ago: executing program 1 (id=31):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)

1m21.105943306s ago: executing program 1 (id=36):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000180)=0x4000000, 0x4)

1m19.907836901s ago: executing program 1 (id=46):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,umask=00000000000000000005676,keep_last_dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp865,dmask=00000000000000000000001,discard,uid=', @ANYRESHEX=0xee00, @ANYBLOB="969043c7ff1774ebb8582e00"], 0x80, 0x1500, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)

1m19.083372711s ago: executing program 1 (id=53):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)

1m18.812995357s ago: executing program 1 (id=56):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)

1m18.206464891s ago: executing program 1 (id=60):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x697, &(0x7f0000000f80)="$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")
setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x841, 0x0)
llistxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=""/79, 0x37)

1m17.535928726s ago: executing program 32 (id=60):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x697, &(0x7f0000000f80)="$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")
setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x841, 0x0)
llistxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=""/79, 0x37)

3.829681576s ago: executing program 4 (id=592):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback={0x0, 0x7ffffffe}, 0x3}, 0x1c)

2.864920951s ago: executing program 2 (id=601):
unshare(0x22020600)
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x651a8097ae4aa9b5, 0x0, 0x10000000}, 0x10)

2.798399002s ago: executing program 4 (id=602):
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

2.613611774s ago: executing program 2 (id=603):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x1)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140))

2.434411474s ago: executing program 2 (id=605):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b80)=ANY=[], 0x41, 0x5e97, &(0x7f0000005e00)="$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")
mknod(&(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1008000)
rename(&(0x7f00000003c0)='./file3\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.305510377s ago: executing program 4 (id=606):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32)

2.210554442s ago: executing program 5 (id=607):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)

2.155490862s ago: executing program 0 (id=608):
io_setup(0x239f, &(0x7f0000000380)=<r0=>0x0)
r1 = eventfd2(0x5, 0x1)
io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}])

2.034711413s ago: executing program 3 (id=609):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x200cc0)
pread64(r0, 0x0, 0x0, 0x1f381b18)

1.892186587s ago: executing program 4 (id=610):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)

1.800070443s ago: executing program 0 (id=611):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.794538133s ago: executing program 3 (id=612):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x20441, 0x42)
fallocate(r0, 0x11, 0x0, 0x53)

1.601558327s ago: executing program 5 (id=613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d697400f0ff4f0002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000099"], 0xdc}}, 0x20000000)

1.539303547s ago: executing program 0 (id=614):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, 0x0)

1.316364835s ago: executing program 4 (id=615):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

1.216859492s ago: executing program 3 (id=616):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$loop(&(0x7f0000000540), 0xf8f, 0x8102)
ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000580))

1.207472264s ago: executing program 5 (id=617):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x2, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)

1.068315207s ago: executing program 2 (id=618):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}})

925.719422ms ago: executing program 0 (id=619):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x40}}, 0x4048000)

897.694547ms ago: executing program 5 (id=620):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)='g', 0x1)
setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0)

892.335648ms ago: executing program 3 (id=621):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="595327bd7000000000086b00000008000300", @ANYRES32=0x0, @ANYBLOB="06009d"], 0x38}}, 0x0)

733.547315ms ago: executing program 2 (id=622):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0x20dd9f83, 0x1, 0x71e, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7c, 0x3a, 0xb763599953cb091d, {0x8, 0x6fd8f84a}, 0x3, 0xed}})

610.608576ms ago: executing program 0 (id=623):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000240)={'batadv_slave_1\x00', {0x2, 0x1, @empty}})

588.357499ms ago: executing program 2 (id=624):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

492.886046ms ago: executing program 3 (id=625):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0x4, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[], 0x28}, {&(0x7f0000001640)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830)

448.134133ms ago: executing program 5 (id=626):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
read(r0, &(0x7f0000002fc0)=""/4096, 0x1000)

168.622571ms ago: executing program 3 (id=627):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000340)={{}, 0x20000215, &(0x7f0000000300)=[0x1000], 0x3, 0x2})

109.651281ms ago: executing program 0 (id=628):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000ec0)=ANY=[], 0x6f0)

22.214436ms ago: executing program 4 (id=629):
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="04582eb131b4482012422d93055ce6f9aa87eb7a453adddee71b9ee82ace0489dfb90969ce0a8f9cae95a17755f84096468af58eb00bc972bac5ace2e43078b50eadb48273cf591cb804ab872cbe4848e0147bd3a464763139271002af5b988c75383e205e26b15b2086ead50a8b4ef5feedc627ab5ea2c58a878316a4f9ba9abdf48d13ad5579ab096e1e4abf5a91b04f7705daf1a8dca4b275b436fdee2431f1818b95e45184df89691cf13f2f137550bad3eefa00"})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x2, @raw_data="59a98cc87d94863a42b3542bf56977d9c49e3bbeb949546ad70c4b93ad31dbf8742c16a9bc975f6aaa4a25fbc77859534236ce39241b2cd6deec82aaad87d738b54cfc45d0a764e7391e013911ec90fd719e5931bcbb081eafe5e176f0b6045023e42c9af99f1d53fc0b9aab36bbc1bd1eef2a807ed1de78f3ff2c7fadca8645905ba5befed6bc6c299ab027f5b16978e63645e96f964936e079e03f5d376a487dcf3ed80ff6d4d1520a853f94e69298b96ab8f2b4eb53c3ed306308a2bb1789c6c7f9d2e2b9944c"})

0s ago: executing program 5 (id=630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048)

kernel console output (not intermixed with test programs):

lave_1: link becomes ready
[   84.195665][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.206508][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.256887][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.273623][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.289439][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.299212][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.314838][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.322243][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.345579][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.363572][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.404713][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.416185][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.425169][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.440486][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.459007][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.469048][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.484488][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.491732][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.505615][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.517110][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.570679][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.593850][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.603364][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.613472][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.623549][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.631889][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.649610][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.686359][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.706938][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.722735][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.731873][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.748786][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.758932][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.774682][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.789094][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.804340][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.820740][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   84.838858][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.899425][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.920050][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.934125][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.941373][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.957040][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.967365][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.981810][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.988980][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.006879][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   85.062264][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   85.083948][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.099762][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.117646][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.129435][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.145535][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.159508][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.171754][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.228691][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.244215][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.260032][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.269831][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.285217][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.300755][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   85.332311][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.356986][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.382296][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.402411][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.432213][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.440812][ T4269] device veth0_vlan entered promiscuous mode
[   85.453516][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.462024][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.527461][ T4269] device veth1_vlan entered promiscuous mode
[   85.538897][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.548852][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.586013][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.602794][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.623450][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.669732][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.679555][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.700175][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.720920][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.745980][ T4274] device veth0_vlan entered promiscuous mode
[   85.758105][ T4269] device veth0_macvtap entered promiscuous mode
[   85.776687][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.796444][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.816314][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.839346][ T4274] device veth1_vlan entered promiscuous mode
[   85.858918][ T4269] device veth1_macvtap entered promiscuous mode
[   85.872691][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.882800][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.891948][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.900763][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.910839][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.951808][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[   85.958690][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.978360][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.986742][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.024445][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.032285][ T4282] Bluetooth: hci2: command 0x040f tx timeout
[   86.032335][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[   86.045757][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[   86.052357][ T4282] Bluetooth: hci0: command 0x040f tx timeout
[   86.097309][ T4279] device veth0_vlan entered promiscuous mode
[   86.142238][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.172434][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.192720][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.209393][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.219075][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.239003][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.251054][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.268767][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.290526][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.308711][ T4274] device veth0_macvtap entered promiscuous mode
[   86.329227][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.343001][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.358146][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.376110][ T4279] device veth1_vlan entered promiscuous mode
[   86.394654][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.405904][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.415190][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.424098][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.452861][ T4274] device veth1_macvtap entered promiscuous mode
[   86.468406][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.479277][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.506599][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.532337][ T4279] device veth0_macvtap entered promiscuous mode
[   86.560695][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.573368][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.583928][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.609204][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.641278][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.682981][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.692949][ T4279] device veth1_macvtap entered promiscuous mode
[   86.722976][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.734148][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.744378][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.754656][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.764191][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.786838][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.811241][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.834056][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.863878][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.886260][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.908995][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.943584][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.955880][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.970468][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.987301][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.999226][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.018103][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.036184][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.045032][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.058108][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.069148][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.080720][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.090505][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.099700][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.109133][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.150643][ T4268] device veth0_vlan entered promiscuous mode
[   87.175470][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   87.185028][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.199876][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.216999][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.227765][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.239474][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.252544][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.262360][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.277488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.299127][ T4268] device veth1_vlan entered promiscuous mode
[   87.344602][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.357984][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.369266][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.378415][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.411829][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.420292][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.432851][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.442840][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.463127][ T4278] device veth0_vlan entered promiscuous mode
[   87.506057][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.528951][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.537761][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.549881][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.562351][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.570376][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.587128][ T4278] device veth1_vlan entered promiscuous mode
[   87.613607][ T4268] device veth0_macvtap entered promiscuous mode
[   87.663738][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.672876][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.706691][ T4268] device veth1_macvtap entered promiscuous mode
[   87.726089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.738806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.750738][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.784261][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.802633][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.825961][ T4278] device veth0_macvtap entered promiscuous mode
[   87.851444][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.861027][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.885242][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.896376][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.911061][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.926254][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.937448][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.958770][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.971392][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.986951][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.000546][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.031611][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   88.045600][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.062363][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.077367][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.087956][ T4278] device veth1_macvtap entered promiscuous mode
[   88.125197][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.136044][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[   88.142230][ T4282] Bluetooth: hci4: command 0x0419 tx timeout
[   88.145198][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[   88.148260][ T4275] Bluetooth: hci2: command 0x0419 tx timeout
[   88.174847][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.190985][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.211763][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.226969][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.239470][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.253270][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.271621][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.279494][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.295764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.304896][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.319392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.328881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.350021][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.362156][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.370908][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.380064][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.398938][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.411549][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.423198][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.434797][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.444834][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.455602][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.465608][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.476352][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.488399][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.500515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.510269][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.553033][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.570668][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.587260][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.598965][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.646786][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.647177][   T26] audit: type=1326 audit(1776080086.730:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341659c819 code=0x7ffc0000
[   88.681657][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.697423][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.708688][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.728483][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.739225][   T26] audit: type=1326 audit(1776080086.780:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f341659c819 code=0x7ffc0000
[   88.769856][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.782078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.794470][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.799833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.845681][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.864538][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.882259][   T26] audit: type=1326 audit(1776080086.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341659c819 code=0x7ffc0000
[   88.890966][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.937262][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.964657][   T26] audit: type=1326 audit(1776080086.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f341659c819 code=0x7ffc0000
[   89.006652][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.011606][   T26] audit: type=1326 audit(1776080086.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341659c819 code=0x7ffc0000
[   89.101058][   T26] audit: type=1326 audit(1776080086.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341659c819 code=0x7ffc0000
[   89.138848][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.224695][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.315304][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.450751][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.459481][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.489037][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.496843][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.529416][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.555546][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.647725][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.657751][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.672331][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.685965][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.710502][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.747975][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.194159][ T4384] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure
[   90.266089][ T4385] loop0: detected capacity change from 0 to 512
[   90.417769][ T4385] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.15: bg 0: block 393: padding at end of block bitmap is not set
[   90.496885][ T4385] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   90.526549][ T4385] EXT4-fs (loop0): 2 truncates cleaned up
[   90.546001][ T4385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   90.722307][ T4385] =======================================================
[   90.722307][ T4385] WARNING: The mand mount option has been deprecated and
[   90.722307][ T4385]          and is ignored by this kernel. Remove the mand
[   90.722307][ T4385]          option from the mount to silence this warning.
[   90.722307][ T4385] =======================================================
[   90.773396][ T4402] loop1: detected capacity change from 0 to 256
[   90.843454][ T4404] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET)
[   90.850267][ T4385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.853033][ T4402] exfat: Deprecated parameter 'namecase'
[   90.882815][ T4385] EXT4-fs (loop0): can't enable nombcache during remount
[   90.893352][ T4402] exfat: Deprecated parameter 'utf8'
[   90.963673][ T4402] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   90.967322][ T4406] capability: warning: `syz.4.24' uses 32-bit capabilities (legacy support in use)
[   91.068548][ T4400] loop3: detected capacity change from 0 to 8192
[   91.139777][ T4279] EXT4-fs (loop0): unmounting filesystem.
[   91.213456][ T4400] FAT-fs (loop3): error, invalid access to FAT (entry 0x00008115)
[   91.263771][ T4400] FAT-fs (loop3): Filesystem has been set read-only
[   91.388008][ T4412] netlink: 5 bytes leftover after parsing attributes in process `syz.1.27'.
[   91.466295][ T4414] loop0: detected capacity change from 0 to 136
[   91.527206][ T4414] Attempt to read inode for relocated directory
[   91.957505][ T4430] loop3: detected capacity change from 0 to 128
[   92.065646][ T4430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   92.189938][ T4435] loop4: detected capacity change from 0 to 256
[   92.225586][ T4430] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   92.274112][    T7] cfg80211: failed to load regulatory.db
[   92.293126][ T4435] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010281, chksum : 0x636004dd, utbl_chksum : 0xe619d30d)
[   92.388589][ T4435] syz.4.37: attempt to access beyond end of device
[   92.388589][ T4435] loop4: rw=524288, sector=34359738488, nr_sectors = 16 limit=256
[   92.468377][ T4435] syz.4.37: attempt to access beyond end of device
[   92.468377][ T4435] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   92.490716][   T26] audit: type=1800 audit(1776080090.570:8): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.37" name="file1" dev="loop4" ino=1048600 res=0 errno=0
[   92.515991][ T4439] syz.4.37: attempt to access beyond end of device
[   92.515991][ T4439] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   92.577135][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'.
[   92.588022][   T26] audit: type=1800 audit(1776080090.680:9): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.37" name="file1" dev="loop4" ino=1048600 res=0 errno=0
[   92.609997][ T4268] EXT4-fs (loop3): unmounting filesystem.
[   92.649132][ T4441] netlink: 5 bytes leftover after parsing attributes in process `syz.2.39'.
[   93.021656][ T4426] loop0: detected capacity change from 0 to 32768
[   93.090766][ T4426] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.33 (4426)
[   93.189360][ T4453] loop2: detected capacity change from 0 to 8
[   93.242665][ T4453] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   93.259752][ T4426] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   93.279048][ T4426] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   93.309783][ T4410] udevd[4410]: incorrect cramfs checksum on /dev/loop2
[   93.338497][ T4426] BTRFS info (device loop0): using free space tree
[   93.350185][ T4456] loop1: detected capacity change from 0 to 256
[   93.381887][ T4456] exfat: Deprecated parameter 'namecase'
[   93.491857][ T4456] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[   93.644469][ T4456] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5)
[   93.674226][ T4426] BTRFS info (device loop0): enabling ssd optimizations
[   93.750780][ T4481] netlink: 'syz.3.50': attribute type 1 has an invalid length.
[   93.776376][ T4456] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5)
[   93.999027][ T4279] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   94.033156][ T4317] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   94.282827][ T4317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.306889][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.335941][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.347630][ T4317] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[   94.357357][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.399774][ T4317] usb 5-1: config 0 descriptor??
[   94.649254][  T125] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   94.881505][  T125] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[   94.917219][ T4317] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0
[   94.930211][  T125] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[   94.950297][  T125] usb 4-1: Product: syz
[   94.960472][  T125] usb 4-1: Manufacturer: syz
[   94.979603][  T125] usb 4-1: SerialNumber: syz
[   94.994590][ T1313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.057699][  T125] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[   95.126510][ T4316] usb 5-1: USB disconnect, device number 2
[   95.220157][ T1313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.231758][ T4506] loop2: detected capacity change from 0 to 4096
[   95.310794][ T4509] fido_id[4509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   95.427069][ T1313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.462054][  T125] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   95.516951][  T125] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[   95.585638][ T1313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.665863][ T4506] EXT4-fs (loop2): Test dummy encryption mode enabled
[   95.688685][  T125] usb 4-1: USB disconnect, device number 2
[   95.721672][ T4506] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[   95.743301][ T4506] System zones: 0-5
[   95.794239][ T4506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   96.184174][ T4274] EXT4-fs (loop2): unmounting filesystem.
[   96.398163][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.408365][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.417362][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.431888][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.439501][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   96.447167][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.921304][ T4333] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.968009][ T4546] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in;
[   96.968009][ T4546]    program syz.2.73 not setting count and/or reply_len properly
[   97.117511][ T4333] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[   97.148932][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.177120][ T4333] usb 4-1: Product: syz
[   97.191488][ T4333] usb 4-1: Manufacturer: syz
[   97.205958][ T4552] loop4: detected capacity change from 0 to 128
[   97.212588][ T4333] usb 4-1: SerialNumber: syz
[   97.227874][ T4333] usb 4-1: config 0 descriptor??
[   97.248915][ T4552] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   97.288296][ T4552] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   97.298954][ T4333] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[   97.427926][ T4333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   97.475493][ T4333] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[   97.493497][ T4536] dvb-usb: bulk message failed: -22 (7/0)
[   97.505414][ T4324] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   97.567681][ T4333] usb 4-1: media controller created
[   97.670708][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   97.797732][ T4570] loop2: detected capacity change from 0 to 256
[   97.859281][ T4570] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   97.995478][ T4570] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008)
[   98.055975][ T4333] DVB: Unable to find symbol mt352_attach()
[   98.070610][ T4570] exFAT-fs (loop2): Filesystem has been set read-only
[   98.111351][ T4570] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072301b60 iblock : 8, err : -5)
[   98.163106][ T4570] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008)
[   98.230077][ T4525] chnl_net:caif_netlink_parms(): no params data found
[   98.243279][ T4570] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008)
[   98.319806][   T26] audit: type=1326 audit(1776080096.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4929f9c819 code=0x7ffc0000
[   98.412266][   T26] audit: type=1326 audit(1776080096.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4929f9c819 code=0x7ffc0000
[   98.494898][ T4333] DVB: Unable to find symbol nxt6000_attach()
[   98.501376][ T4333] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[   98.511517][ T4275] Bluetooth: hci1: command 0x0409 tx timeout
[   98.560142][   T26] audit: type=1326 audit(1776080096.460:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4929f9c819 code=0x7ffc0000
[   98.580106][ T4333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[   98.587468][   T26] audit: type=1326 audit(1776080096.460:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4929f9c819 code=0x7ffc0000
[   98.717750][   T26] audit: type=1326 audit(1776080096.480:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4929f9c819 code=0x7ffc0000
[   98.728828][ T4333] dvb-usb: schedule remote query interval to 1000 msecs.
[   98.797201][ T4333] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[   98.821482][ T4333] dvb-usb: bulk message failed: -22 (7/0)
[   98.838850][ T4333] dvb-usb: bulk message failed: -22 (7/0)
[   98.855957][ T4333] usb 4-1: USB disconnect, device number 3
[   99.017092][ T4333] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[   99.146038][ T4593] loop0: detected capacity change from 0 to 4096
[   99.208936][ T4593] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   99.223435][ T4591] loop2: detected capacity change from 0 to 8192
[   99.310866][ T4591] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   99.371342][ T4591] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   99.398640][ T4591] REISERFS (device loop2): using ordered data mode
[   99.491219][ T4591] reiserfs: using flush barriers
[   99.565994][ T4593] ntfs3: loop0: failed to convert "c46c" to cp855
[   99.601349][ T4591] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   99.619708][ T4591] REISERFS (device loop2): checking transaction log (loop2)
[  100.017431][ T4591] REISERFS (device loop2): Using tea hash to sort names
[  100.046226][ T4591] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  100.114245][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.114250][ T4591] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  100.143140][ T4525] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.161835][ T4525] device bridge_slave_0 entered promiscuous mode
[  100.310759][ T1313] device hsr_slave_0 left promiscuous mode
[  100.336178][ T1313] device hsr_slave_1 left promiscuous mode
[  100.363994][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.391650][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.412909][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.439266][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.492236][ T1313] device bridge_slave_1 left promiscuous mode
[  100.506101][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.587734][ T1313] device bridge_slave_0 left promiscuous mode
[  100.595801][ T4275] Bluetooth: hci1: command 0x041b tx timeout
[  100.626263][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.722426][ T1313] device veth1_macvtap left promiscuous mode
[  100.734643][ T1313] device veth0_macvtap left promiscuous mode
[  100.759762][ T1313] device veth1_vlan left promiscuous mode
[  100.786512][ T1313] device veth0_vlan left promiscuous mode
[  101.557205][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'.
[  102.445220][ T4651] loop0: detected capacity change from 0 to 32768
[  102.554586][   T26] audit: type=1800 audit(1776080100.640:15): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.108" name="file1" dev="loop0" ino=4 res=0 errno=0
[  102.626682][ T4651] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  102.626682][ T4651] 
[  102.651394][ T4651] ERROR: (device loop0): remounting filesystem as read-only
[  102.672154][ T4283] Bluetooth: hci1: command 0x040f tx timeout
[  102.683971][ T4651] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  102.683971][ T4651] 
[  102.696473][ T4651] xtLookup: xtSearch returned -5
[  102.702020][ T4651] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt
[  102.702020][ T4651] 
[  102.738831][ T4666] loop3: detected capacity change from 0 to 1024
[  102.778133][ T4666] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  102.830389][ T4666] EXT4-fs (loop3): orphan cleanup on readonly fs
[  102.899332][ T4666] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.114: Invalid inode table block 0 in block_group 0
[  102.935823][ T4666] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  102.948071][ T4666] EXT4-fs error (device loop3): ext4_quota_write:7253: inode #3: comm syz.3.114: mark_inode_dirty error
[  102.981667][ T4666] Quota error (device loop3): write_blk: dquota write failed
[  102.989236][ T4666] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  103.020173][ T4666] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.114: Failed to acquire dquot type 0
[  103.078619][ T4666] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.114: Invalid inode table block 0 in block_group 0
[  103.097075][ T4666] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  103.127046][ T1313] team0 (unregistering): Port device team_slave_1 removed
[  103.142741][ T4666] EXT4-fs error (device loop3): ext4_ext_truncate:4460: inode #15: comm syz.3.114: mark_inode_dirty error
[  103.175305][ T4666] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.114: Invalid inode table block 0 in block_group 0
[  103.223581][ T4666] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  103.237227][ T4666] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  103.248300][ T4666] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.114: Invalid inode table block 0 in block_group 0
[  103.267171][ T4666] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  103.280940][ T4666] EXT4-fs error (device loop3): ext4_truncate:4325: inode #15: comm syz.3.114: mark_inode_dirty error
[  103.294650][ T1313] team0 (unregistering): Port device team_slave_0 removed
[  103.305497][ T4666] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  103.319850][ T4666] EXT4-fs (loop3): 1 truncate cleaned up
[  103.337678][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  103.428890][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.500540][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.534117][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  103.558279][ T4671] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.742323][ T4675] loop3: detected capacity change from 0 to 4096
[  103.784790][ T4675] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  103.992501][ T4268] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  104.000497][ T4268] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  104.011510][ T4268] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  104.409326][ T1313] bond0 (unregistering): Released all slaves
[  104.534161][ T4681] loop0: detected capacity change from 0 to 32768
[  104.554120][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.566082][ T4525] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.575503][ T4525] device bridge_slave_1 entered promiscuous mode
[  104.664262][ T4683] tipc: MTU too low for tipc bearer
[  104.718827][ T4681] XFS (loop0): Mounting V5 Filesystem
[  104.751543][ T4283] Bluetooth: hci1: command 0x0419 tx timeout
[  104.773210][ T4525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.785468][ T4525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.906161][ T4525] team0: Port device team_slave_0 added
[  104.926448][ T4695] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.936032][ T4695] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.944865][ T4695] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.953767][ T4695] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.970920][ T4695] Zero length message leads to an empty skb
[  104.999728][ T4525] team0: Port device team_slave_1 added
[  105.035965][ T4681] XFS (loop0): Ending clean mount
[  105.078378][ T4681] XFS (loop0): Quotacheck needed: Please wait.
[  105.116520][ T4525] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.190711][ T4525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.255770][ T4525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.309832][ T4525] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.321522][ T4681] XFS (loop0): Quotacheck: Done.
[  105.336906][ T4525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.363036][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.370493][ T4525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.582471][ T4525] device hsr_slave_0 entered promiscuous mode
[  105.666699][ T4525] device hsr_slave_1 entered promiscuous mode
[  105.912628][ T4279] XFS (loop0): Unmounting Filesystem
[  105.944939][ T4713] loop3: detected capacity change from 0 to 1764
[  105.994097][ T4718] process 'syz.4.132' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  106.097761][    C0] vkms_vblank_simulate: vblank timer overrun
[  106.224780][ T4713] iso9660: Corrupted directory entry in block 2 of inode 1920
[  106.549339][ T4525] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  106.617332][ T4525] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  106.645505][ T4525] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  106.693614][ T4525] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  107.020568][ T4525] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.099402][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.123821][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.155873][ T4525] 8021q: adding VLAN 0 to HW filter on device team0
[  107.224037][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.252438][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  107.291438][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.298797][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.321048][ T4743] loop0: detected capacity change from 0 to 1024
[  107.364033][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.420582][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  107.439669][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  107.487907][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.495139][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.544761][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  107.625751][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  107.649220][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  107.667904][ T4722] loop4: detected capacity change from 0 to 32768
[  107.679267][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  107.720489][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  107.753677][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  107.763252][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.772442][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.781973][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.791898][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.812193][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.838199][ T4722] XFS (loop4): Mounting V5 Filesystem
[  107.856194][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.052145][ T4722] XFS (loop4): Ending clean mount
[  108.250602][ T4278] XFS (loop4): Unmounting Filesystem
[  108.738843][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.768820][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.802269][ T4525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.834554][ T4746] loop3: detected capacity change from 0 to 32768
[  108.940519][ T4746] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  108.940519][ T4746] 
[  109.048873][ T4746] ERROR: (device loop3): remounting filesystem as read-only
[  109.421743][ T4333] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  109.653535][ T4333] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  109.674858][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.722553][ T4333] usb 1-1: config 0 descriptor??
[  109.935610][ T4333] [drm] vendor descriptor length:6 data:06 5f 01 04 50 78 00 00 00 00 00
[  109.957271][ T4333] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  110.160902][ T4333] [drm:udl_init] *ERROR* Selecting channel failed
[  110.224640][ T4333] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  110.240147][ T4333] [drm] Initialized udl on minor 2
[  110.251661][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  110.268476][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  110.299639][ T4333] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  110.341554][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  110.367288][ T4333] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  110.395880][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  110.422763][ T4333] usb 1-1: USB disconnect, device number 2
[  110.455112][ T4525] device veth0_vlan entered promiscuous mode
[  110.467670][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  110.478364][   T22] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  110.493328][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  110.527625][   T22] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  110.547593][   T22] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  110.555130][ T4525] device veth1_vlan entered promiscuous mode
[  110.678763][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  110.687962][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  110.728154][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  110.754340][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  110.774886][ T4525] device veth0_macvtap entered promiscuous mode
[  110.826387][ T4525] device veth1_macvtap entered promiscuous mode
[  110.929223][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.981668][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.011243][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.041582][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.061201][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.101287][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.131228][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.151335][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.199498][ T4525] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.225883][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  111.250439][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  111.286278][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.315451][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.368538][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.410589][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.451215][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.469486][ T4819] loop2: detected capacity change from 0 to 512
[  111.499027][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.520800][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.541222][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.563867][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.601239][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.629946][ T4819] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.160: ea_inode with extended attributes
[  111.679746][ T4819] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.160: error while reading EA inode 11 err=-117
[  111.741266][ T4525] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.765183][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.776308][ T4816] loop0: detected capacity change from 0 to 32768
[  111.792827][ T4819] EXT4-fs (loop2): 1 orphan inode deleted
[  111.798690][ T4819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  111.809660][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.848545][ T4812] loop3: detected capacity change from 0 to 32768
[  111.879364][ T4806] loop4: detected capacity change from 0 to 40427
[  111.898690][ T4806] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  111.907655][ T4806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  111.909844][ T4525] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.936668][ T4525] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.945428][ T4816] XFS (loop0): Mounting V5 Filesystem
[  111.954301][ T4806] F2FS-fs (loop4): invalid crc value
[  112.026698][ T4525] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.038112][ T4525] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.077306][ T4806] F2FS-fs (loop4): Found nat_bits in checkpoint
[  112.086604][ T4812] XFS (loop3): Mounting V5 Filesystem
[  112.095345][ T4816] XFS (loop0): Ending clean mount
[  112.108283][ T4816] XFS (loop0): Quotacheck needed: Please wait.
[  112.208875][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  112.219497][ T4816] XFS (loop0): Quotacheck: Done.
[  112.279389][ T4812] XFS (loop3): Ending clean mount
[  112.356726][ T4812] XFS (loop3): Quotacheck needed: Please wait.
[  112.436151][ T4806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  112.477642][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.486897][ T4806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  112.499604][ T4812] XFS (loop3): Quotacheck: Done.
[  112.518815][ T4279] XFS (loop0): Unmounting Filesystem
[  112.565902][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.648407][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  112.658401][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.688351][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.759699][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  112.920769][ T4852] loop2: detected capacity change from 0 to 512
[  112.936709][ T4268] XFS (loop3): Unmounting Filesystem
[  114.101482][ T4875] loop2: detected capacity change from 0 to 256
[  114.187942][ T4875] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  114.273396][ T4875] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  114.297406][ T4878] loop5: detected capacity change from 0 to 512
[  114.474376][ T4878] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  114.501443][ T4878] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.574207][ T4878] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.171: invalid size
[  114.851907][ T4525] EXT4-fs (loop5): unmounting filesystem.
[  115.230202][   T26] audit: type=1326 audit(1776080113.310:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4898 comm="syz.0.178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4929f9c819 code=0x0
[  115.252021][ T4901] usb usb7: usbfs: process 4901 (syz.4.179) did not claim interface 0 before use
[  115.479942][ T4907] loop2: detected capacity change from 0 to 2048
[  115.517317][ T4907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.859752][ T4882] loop3: detected capacity change from 0 to 40427
[  115.921859][ T4882] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x3ffff
[  115.938586][ T4882] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  115.974299][ T4882] F2FS-fs (loop3): invalid crc value
[  116.009300][ T4882] F2FS-fs (loop3): Found nat_bits in checkpoint
[  116.207902][ T4882] F2FS-fs (loop3): Start checkpoint disabled!
[  116.288625][ T4921] loop5: detected capacity change from 0 to 128
[  116.325468][ T4882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  116.342981][ T4926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.187'.
[  116.381788][ T4926] unsupported nlmsg_type 40
[  116.430048][ T4921] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  116.532142][ T4921] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.601272][ T4315] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  116.653823][ T4921] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 5 (only 1 groups)
[  116.805794][ T4315] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  116.842033][ T4315] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  116.885781][ T4315] usb 1-1: Product: syz
[  116.890053][ T4315] usb 1-1: Manufacturer: syz
[  116.904433][ T4525] EXT4-fs (loop5): unmounting filesystem.
[  116.905333][ T4315] usb 1-1: SerialNumber: syz
[  116.946954][ T4315] usb 1-1: config 0 descriptor??
[  117.183209][ T4943] device gretap0 entered promiscuous mode
[  117.214646][ T4315] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  117.244430][ T4943] device vlan2 entered promiscuous mode
[  117.269021][ T4914] loop4: detected capacity change from 0 to 32768
[  117.437822][ T4315] peak_usb 1-1:0.0 can0: sending command failure: -8
[  117.446072][ T4315] peak_usb 1-1:0.0 can0: sending command failure: -8
[  117.475851][ T4315] peak_usb 1-1:0.0 can0: sending command failure: -8
[  117.511734][ T4949] MetaData crosses page boundary!!
[  117.519373][ T4947] loop3: detected capacity change from 0 to 2048
[  117.578979][ T4947] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  117.609967][ T4951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'.
[  117.613968][ T4949] lblock = 6161616161, size  = 370544640
[  117.625228][ T4315] peak_usb: probe of 1-1:0.0 failed with error -8
[  117.664096][ T4947] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  117.680888][ T4949] CPU: 1 PID: 4949 Comm: syz.4.184 Not tainted syzkaller #0
[  117.688286][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  117.691499][ T4315] usb 1-1: USB disconnect, device number 3
[  117.698399][ T4949] Call Trace:
[  117.707579][ T4949]  <TASK>
[  117.710561][ T4949]  dump_stack_lvl+0x188/0x24e
[  117.715319][ T4949]  ? __wake_up_bit+0x210/0x210
[  117.720145][ T4949]  ? show_regs_print_info+0x12/0x12
[  117.725409][ T4949]  ? load_image+0x400/0x400
[  117.729980][ T4949]  __get_metapage+0xaa8/0xfa0
[  117.734765][ T4949]  dtSearch+0x5d5/0x2050
[  117.739140][ T4949]  jfs_symlink+0x851/0xfb0
[  117.743736][ T4949]  ? jfs_unlink+0xa00/0xa00
[  117.748335][ T4949]  ? make_kgid+0x660/0x660
[  117.752807][ T4949]  ? apparmor_path_symlink+0x1ac/0x230
[  117.758325][ T4949]  ? lookup_one_qstr_excl+0x11c/0x240
[  117.763757][ T4949]  ? generic_permission+0x230/0x510
[  117.769035][ T4949]  ? inode_permission+0xef/0x480
[  117.774028][ T4949]  ? bpf_lsm_inode_symlink+0x5/0x10
[  117.779297][ T4949]  ? security_inode_symlink+0xb2/0x100
[  117.784870][ T4949]  vfs_symlink+0x247/0x3d0
[  117.789357][ T4949]  do_symlinkat+0x1b6/0x400
[  117.793938][ T4949]  ? vfs_symlink+0x3d0/0x3d0
[  117.798596][ T4949]  ? getname_flags+0x206/0x500
[  117.803427][ T4949]  __x64_sys_symlink+0x7a/0x90
[  117.808264][ T4949]  do_syscall_64+0x4c/0xa0
[  117.812746][ T4949]  ? clear_bhb_loop+0x60/0xb0
[  117.817525][ T4949]  ? clear_bhb_loop+0x60/0xb0
[  117.822260][ T4949]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.828210][ T4949] RIP: 0033:0x7f1137b9c819
[  117.832697][ T4949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.852364][ T4949] RSP: 002b:00007f1135df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  117.860950][ T4949] RAX: ffffffffffffffda RBX: 00007f1137e16090 RCX: 00007f1137b9c819
[  117.868995][ T4949] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900
[  117.877032][ T4949] RBP: 00007f1137c32c91 R08: 0000000000000000 R09: 0000000000000000
[  117.885151][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.893268][ T4949] R13: 00007f1137e16128 R14: 00007f1137e16090 R15: 00007ffd0fcd4a18
[  117.901319][ T4949]  </TASK>
[  117.955266][ T4947] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  118.030959][ T4947] UDF-fs: Scanning with blocksize 512 failed
[  118.042528][ T4949] bread failed!
[  118.193288][ T4947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.203527][ T4958] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[  119.839000][ T5015] loop0: detected capacity change from 0 to 64
[  120.227713][ T5019] loop3: detected capacity change from 0 to 2048
[  120.394976][ T5019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  120.551686][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  120.579392][ T5033] netem: incorrect ge model size
[  120.681322][ T5033] netem: change failed
[  120.724108][ T5039] loop3: detected capacity change from 0 to 64
[  120.964578][ T5047] loop5: detected capacity change from 0 to 128
[  121.061398][ T5047] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  121.107592][ T5047] FAT-fs (loop5): Filesystem has been set read-only
[  121.752821][ T5057] loop3: detected capacity change from 0 to 2048
[  121.932222][ T5057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  121.976893][ T5065] loop4: detected capacity change from 0 to 512
[  122.049846][ T5065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  122.063527][ T5070] loop2: detected capacity change from 0 to 256
[  122.131348][ T5065] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  122.158768][ T5065] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  122.172966][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  122.200136][ T5052] loop0: detected capacity change from 0 to 32768
[  122.207285][ T5065] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  122.245784][ T5070] FAT-fs (loop2): Directory bread(block 64) failed
[  122.263333][ T5070] FAT-fs (loop2): Directory bread(block 65) failed
[  122.270062][ T5070] FAT-fs (loop2): Directory bread(block 66) failed
[  122.287736][ T5065] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  122.315452][ T5052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.233 (5052)
[  122.341552][ T5075] loop5: detected capacity change from 0 to 256
[  122.384599][ T5065] EXT4-fs (loop4): orphan cleanup on readonly fs
[  122.401439][ T5070] FAT-fs (loop2): Directory bread(block 67) failed
[  122.408196][ T5075] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  122.439720][ T5070] FAT-fs (loop2): Directory bread(block 68) failed
[  122.469989][ T5075] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  122.490296][ T5070] FAT-fs (loop2): Directory bread(block 69) failed
[  122.509534][ T5065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.236: bg 0: block 34: padding at end of block bitmap is not set
[  122.513496][ T5070] FAT-fs (loop2): Directory bread(block 70) failed
[  122.530859][ T5052] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.531436][ T5052] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  122.564107][ T5070] FAT-fs (loop2): Directory bread(block 71) failed
[  122.575550][ T5070] FAT-fs (loop2): Directory bread(block 72) failed
[  122.593033][ T5070] FAT-fs (loop2): Directory bread(block 73) failed
[  122.596777][ T5052] BTRFS info (device loop0): force clearing of disk cache
[  122.610212][ T5075] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  122.632031][ T5052] BTRFS info (device loop0): force zlib compression, level 3
[  122.649816][ T5065] Quota error (device loop4): write_blk: dquota write failed
[  122.667367][ T5052] BTRFS info (device loop0): metadata ratio 3
[  122.688945][ T5065] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  122.706340][   T26] audit: type=1800 audit(1776080120.790:17): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.240" name="file1" dev="loop5" ino=1048612 res=0 errno=0
[  122.727631][ T5052] BTRFS info (device loop0): enabling auto defrag
[  122.756198][ T5052] BTRFS info (device loop0): max_inline at 0
[  122.762764][ T5065] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.236: Failed to acquire dquot type 1
[  122.790095][ T5052] BTRFS info (device loop0): enabling disk space caching
[  122.802843][ T5052] BTRFS info (device loop0): disk space caching is enabled
[  122.830890][ T5065] EXT4-fs (loop4): 1 truncate cleaned up
[  122.842295][ T5065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  123.092939][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  123.203637][ T5052] BTRFS info (device loop0): enabling ssd optimizations
[  123.232808][ T5052] BTRFS info (device loop0): rebuilding free space tree
[  123.399064][ T5052] BTRFS info (device loop0): disabling free space tree
[  123.458721][ T5052] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.491983][ T5052] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.610848][ T5078] loop3: detected capacity change from 0 to 32768
[  123.943264][ T4279] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.002377][ T5078] JBD2: Ignoring recovery information on journal
[  124.377004][ T4598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (4598)
[  124.405514][ T5129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'.
[  124.471508][ T5078] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  124.722422][ T5140] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  124.848262][ T5140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  124.903290][ T5140] System zones: 0-1, 15-15, 18-18, 34-34
[  124.925636][ T4268] ocfs2: Unmounting device (7,3) on (node local)
[  124.949220][ T5140] EXT4-fs (loop5): orphan cleanup on readonly fs
[  124.978265][ T5140] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  125.040443][ T5140] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  125.061305][ T5140] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  125.072747][ T5140] EXT4-fs (loop5): 1 truncate cleaned up
[  125.091617][ T5140] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  125.122958][   T26] audit: type=1326 audit(1776080123.210:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  125.204767][ T5140] fscrypt (loop5, inode 16): Error -61 getting encryption context
[  125.226205][   T26] audit: type=1326 audit(1776080123.250:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82dfd5d04e code=0x7ffc0000
[  125.259223][ T5154] fscrypt (loop5, inode 16): Error -61 getting encryption context
[  125.365404][   T26] audit: type=1326 audit(1776080123.250:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  125.494942][ T4525] EXT4-fs (loop5): unmounting filesystem.
[  125.522056][   T26] audit: type=1326 audit(1776080123.250:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  125.675406][   T26] audit: type=1326 audit(1776080123.250:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  125.861379][   T26] audit: type=1326 audit(1776080123.310:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  125.968392][ T5167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.492725][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.265'.
[  126.729019][ T5148] set_capacity_and_notify: 1 callbacks suppressed
[  126.729054][ T5148] loop2: detected capacity change from 0 to 40427
[  126.819441][ T5148] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[  126.872610][ T5148] F2FS-fs (loop2): invalid crc value
[  126.922683][ T5148] F2FS-fs (loop2): Found nat_bits in checkpoint
[  127.094440][ T5193] loop4: detected capacity change from 0 to 256
[  127.193061][ T5148] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  127.228626][ T5194] [U] 
[  127.609412][ T4274] syz-executor: attempt to access beyond end of device
[  127.609412][ T4274] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.639995][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'.
[  127.983313][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'.
[  128.120385][ T5214] loop5: detected capacity change from 0 to 256
[  128.174533][ T5214] exfat: Deprecated parameter 'namecase'
[  128.180335][ T5214] exfat: Deprecated parameter 'namecase'
[  128.208451][ T5183] loop3: detected capacity change from 0 to 40427
[  128.268467][ T5183] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  128.285166][ T5214] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9b7485c9, utbl_chksum : 0xe619d30d)
[  128.310946][ T5183] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  128.345441][ T5183] F2FS-fs (loop3): invalid crc value
[  128.405678][ T5183] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  128.694539][ T5183] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  128.731321][ T5183] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  128.874914][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  128.874932][   T26] audit: type=1800 audit(1776080126.960:34): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.267" name="file1" dev="loop3" ino=10 res=0 errno=0
[  129.058939][ T4268] syz-executor: attempt to access beyond end of device
[  129.058939][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.522499][ T5245] loop4: detected capacity change from 0 to 16
[  129.550321][ T5245] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  129.672685][ T5249] loop2: detected capacity change from 0 to 1024
[  129.840738][ T5221] loop0: detected capacity change from 0 to 40427
[  129.915515][ T5221] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  129.947399][ T5221] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  130.010844][   T41] hfsplus: b-tree write err: -5, ino 25
[  130.025257][   T41] hfsplus: b-tree write err: -5, ino 4
[  130.047370][   T41] hfsplus: b-tree write err: -5, ino 2
[  130.055241][ T5221] F2FS-fs (loop0): Found nat_bits in checkpoint
[  130.191316][ T5126] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  130.265052][ T5221] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  130.282864][ T5221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  130.401280][ T5126] usb 6-1: Using ep0 maxpacket: 32
[  130.408558][ T5126] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  130.449283][ T5126] usb 6-1: config 0 has no interface number 0
[  130.478295][ T5126] usb 6-1: config 0 interface 12 has no altsetting 0
[  130.513649][ T5126] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  130.539019][ T5126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.577149][ T5126] usb 6-1: Product: syz
[  130.591719][ T5126] usb 6-1: Manufacturer: syz
[  130.596460][ T5126] usb 6-1: SerialNumber: syz
[  130.643347][ T5126] usb 6-1: config 0 descriptor??
[  131.067913][   T26] audit: type=1326 audit(1776080129.150:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1137b9c819 code=0x7ffc0000
[  131.150742][   T26] audit: type=1326 audit(1776080129.190:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1137b9c819 code=0x7ffc0000
[  131.298516][ T5126] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  131.301828][   T26] audit: type=1326 audit(1776080129.190:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1137b9c819 code=0x7ffc0000
[  131.329020][ T5126] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  131.361235][ T5126] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  131.386019][   T26] audit: type=1326 audit(1776080129.190:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1137b9c819 code=0x7ffc0000
[  131.400173][ T5126] f81534: probe of 6-1:0.12 failed with error -71
[  131.475564][   T26] audit: type=1326 audit(1776080129.190:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1137b9c819 code=0x7ffc0000
[  131.521515][ T5126] usb 6-1: USB disconnect, device number 2
[  131.592845][ T5288] loop4: detected capacity change from 0 to 4096
[  131.611429][   T26] audit: type=1326 audit(1776080129.190:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1137b9c819 code=0x7ffc0000
[  131.728819][   T26] audit: type=1326 audit(1776080129.190:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1137b9c819 code=0x7ffc0000
[  131.821038][ T5295] loop3: detected capacity change from 0 to 512
[  131.848124][ T5294] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.990524][ T5299] loop2: detected capacity change from 0 to 512
[  132.032494][ T5299] EXT4-fs: Ignoring removed bh option
[  132.078662][ T5299] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  132.150517][ T5302] loop5: detected capacity change from 0 to 1024
[  132.168268][ T5299] EXT4-fs (loop2): 1 truncate cleaned up
[  132.181647][ T5299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  132.494295][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  132.578376][ T5311] loop0: detected capacity change from 0 to 8192
[  132.668542][ T5318] loop4: detected capacity change from 0 to 256
[  132.689081][ T5317] loop3: detected capacity change from 0 to 256
[  132.712157][ T5318] exfat: Deprecated parameter 'utf8'
[  132.717694][ T5318] exfat: Deprecated parameter 'namecase'
[  132.746671][ T5311] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  132.790463][ T5318] exfat: Deprecated parameter 'namecase'
[  132.822591][ T5318] exfat: Deprecated parameter 'utf8'
[  132.828103][ T5311] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  132.846163][ T5311] REISERFS (device loop0): using ordered data mode
[  132.853115][ T5311] reiserfs: using flush barriers
[  132.865219][ T5311] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  132.882545][ T5311] REISERFS (device loop0): checking transaction log (loop0)
[  132.894293][ T5311] REISERFS (device loop0): Using r5 hash to sort names
[  132.905766][ T5311] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  132.947345][ T5318] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  132.990214][ T5311] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  133.117283][ T5311] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  133.234923][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  133.242007][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  133.290516][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  133.721198][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  133.767556][ T5345] loop0: detected capacity change from 0 to 1024
[  133.931386][ T4316] usb 3-1: Using ep0 maxpacket: 8
[  133.939646][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  133.976433][ T4316] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  134.002624][ T4316] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  134.025926][ T4316] usb 3-1: Product: syz
[  134.030192][ T4316] usb 3-1: Manufacturer: syz
[  134.045668][ T4316] usb 3-1: SerialNumber: syz
[  134.294206][ T4316] usb 3-1: Handspring Visor / Palm OS: port 255, is for unknown use
[  134.311218][ T4316] usb 3-1: Handspring Visor / Palm OS: port 255, is for unknown use
[  134.329593][ T4316] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[  134.504045][ T4316] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[  134.523271][ T4316] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  134.556752][ T4316] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  134.582102][ T4316] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  134.616949][ T4316] usb 3-1: USB disconnect, device number 2
[  134.661814][ T4316] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  134.674077][ T5337] loop3: detected capacity change from 0 to 40427
[  134.702960][ T4316] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  134.721631][ T5337] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  134.729456][ T5337] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  134.769730][ T4316] visor 3-1:1.0: device disconnected
[  134.790589][ T5339] loop5: detected capacity change from 0 to 32768
[  134.858241][ T5337] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.947582][ T5339] XFS (loop5): Mounting V5 Filesystem
[  134.982288][ T5337] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  134.989434][ T5337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.000484][ T5349] loop4: detected capacity change from 0 to 32768
[  135.089812][ T5349] XFS (loop4): Invalid device [./file1], error=-15
[  135.103678][ T5339] XFS (loop5): Ending clean mount
[  135.212100][   T26] audit: type=1800 audit(1776080133.290:42): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.328" name="file1" dev="loop3" ino=11 res=0 errno=0
[  135.403850][ T4525] XFS (loop5): Unmounting Filesystem
[  135.941440][ T5122] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  136.131232][ T5122] usb 5-1: Using ep0 maxpacket: 16
[  136.139206][ T5122] usb 5-1: unable to get BOS descriptor or descriptor too short
[  136.208311][ T5122] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  136.241104][ T5122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.280151][ T5122] usb 5-1: Product: syz
[  136.300412][ T5122] usb 5-1: Manufacturer: syz
[  136.311225][ T5122] usb 5-1: SerialNumber: syz
[  136.914361][ T5368] set_capacity_and_notify: 1 callbacks suppressed
[  136.914381][ T5368] loop2: detected capacity change from 0 to 32768
[  137.087793][ T5368] XFS (loop2): Mounting V5 Filesystem
[  137.199715][ T5379] loop0: detected capacity change from 0 to 32768
[  137.223449][ T5379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.339 (5379)
[  137.241366][ T5122] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  137.344972][ T5368] XFS (loop2): Ending clean mount
[  137.378472][ T5368] XFS (loop2): Quotacheck needed: Please wait.
[  137.383731][ T5379] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.421905][ T5379] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  137.445343][ T5122] usb 5-1: unable to get BOS descriptor or descriptor too short
[  137.472672][ T5379] BTRFS info (device loop0): setting nodatasum
[  137.478960][ T5379] BTRFS info (device loop0): force zlib compression, level 3
[  137.496225][ T5122] usb 5-1: device firmware changed
[  137.525366][ T5379] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  137.545057][ T5122] usb 5-1: USB disconnect, device number 3
[  137.590855][ T5368] XFS (loop2): Quotacheck: Done.
[  137.596091][ T4314] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  137.611482][ T5379] BTRFS info (device loop0): use lzo compression, level 0
[  137.652302][ T5379] BTRFS info (device loop0): turning on flush-on-commit
[  137.659359][ T5379] BTRFS info (device loop0): enabling auto defrag
[  137.718365][ T5379] BTRFS info (device loop0): max_inline at 4096
[  137.728498][ T5379] BTRFS info (device loop0): using free space tree
[  137.735607][ T5122] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.801323][ T4314] usb 6-1: Using ep0 maxpacket: 32
[  137.809483][ T4314] usb 6-1: config 0 has an invalid interface number: 202 but max is 1
[  137.851638][ T4314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.916200][ T4314] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  137.931503][ T4314] usb 6-1: config 0 has no interface number 0
[  137.937866][ T4314] usb 6-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  137.951506][ T5122] usb 5-1: Using ep0 maxpacket: 16
[  137.966774][ T4314] usb 6-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  137.978231][ T4314] usb 6-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  137.992140][ T4314] usb 6-1: config 0 interface 202 has no altsetting 0
[  137.999808][ T5122] usb 5-1: unable to get BOS descriptor or descriptor too short
[  138.008064][ T5379] BTRFS info (device loop0): enabling ssd optimizations
[  138.020444][ T4314] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  138.030134][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.038634][ T4314] usb 6-1: Product: syz
[  138.043088][ T4314] usb 6-1: Manufacturer: syz
[  138.047811][ T4314] usb 6-1: SerialNumber: syz
[  138.054799][ T4274] XFS (loop2): Unmounting Filesystem
[  138.064146][ T5122] usb 5-1: string descriptor 0 read error: -22
[  138.071539][ T5122] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  138.091949][ T4314] usb 6-1: config 0 descriptor??
[  138.114655][ T5122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.225589][ T5408] loop3: detected capacity change from 0 to 32768
[  138.247013][ T4314] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  138.290616][ T4279] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.309100][ T4324] usb 6-1: Failed to submit usb control message: -71
[  138.317300][ T5128] usb 6-1: USB disconnect, device number 3
[  138.337199][ T4324] usb 6-1: unable to send the bmi data to the device: -71
[  138.341459][ T5122] usb 5-1: reset high-speed USB device number 4 using dummy_hcd
[  138.417331][ T5408] XFS (loop3): Mounting V5 Filesystem
[  138.424212][ T4324] usb 6-1: unable to get target info from device
[  138.462016][ T4324] usb 6-1: could not get target info (-71)
[  138.510790][ T4324] usb 6-1: could not probe fw (-71)
[  138.662127][ T5408] XFS (loop3): Ending clean mount
[  139.065799][ T5451] loop5: detected capacity change from 0 to 512
[  139.109474][ T4268] XFS (loop3): Unmounting Filesystem
[  139.133752][ T5451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  139.217940][ T5122] usb 5-1: USB disconnect, device number 4
[  139.237635][ T5451] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  139.300397][ T5453] loop4: detected capacity change from 0 to 64
[  139.317329][ T5451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  139.381291][ T5451] System zones: 1-12
[  139.387153][ T5451] EXT4-fs (loop5): orphan cleanup on readonly fs
[  139.395219][ T5451] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.347: invalid indirect mapped block 2 (level 2)
[  139.410375][ T5451] EXT4-fs (loop5): Remounting filesystem read-only
[  139.419740][ T5451] EXT4-fs (loop5): 1 truncate cleaned up
[  139.425658][ T5451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  139.592447][ T4525] EXT4-fs (loop5): unmounting filesystem.
[  140.532686][ T5447] loop0: detected capacity change from 0 to 40427
[  140.566104][ T5447] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  140.588396][ T5476] loop4: detected capacity change from 0 to 8192
[  140.592426][ T4316] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  140.613839][ T5447] F2FS-fs (loop0): invalid crc value
[  140.639846][ T5476] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  140.664058][ T5447] F2FS-fs (loop0): Found nat_bits in checkpoint
[  140.700966][ T5476] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  140.741751][ T5476] REISERFS (device loop4): using ordered data mode
[  140.748357][ T5476] reiserfs: using flush barriers
[  140.801233][ T5476] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  140.812474][ T4316] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  140.858885][ T5447] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  140.877525][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.889991][ T5476] REISERFS (device loop4): checking transaction log (loop4)
[  140.918552][ T4316] usb 6-1: Product: syz
[  140.948871][ T4316] usb 6-1: Manufacturer: syz
[  140.955273][ T5476] REISERFS (device loop4): Using r5 hash to sort names
[  140.969269][ T4316] usb 6-1: SerialNumber: syz
[  140.982422][ T5476] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  141.019267][ T4316] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  141.048853][ T5463] loop2: detected capacity change from 0 to 32768
[  141.133673][ T4279] syz-executor: attempt to access beyond end of device
[  141.133673][ T4279] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.211602][ T4316] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  141.305658][ T5463] UFO tlock:0xffffc900028ba0d8
[  141.363389][ T5489] MetaData crosses page boundary!!
[  141.379335][ T5489] lblock = 6300000010, size  = -820051968
[  141.475599][ T5489] CPU: 1 PID: 5489 Comm: syz.2.351 Not tainted syzkaller #0
[  141.482991][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  141.493127][ T5489] Call Trace:
[  141.496454][ T5489]  <TASK>
[  141.499524][ T5489]  dump_stack_lvl+0x188/0x24e
[  141.504272][ T5489]  ? __wake_up_bit+0x210/0x210
[  141.509111][ T5489]  ? show_regs_print_info+0x12/0x12
[  141.514372][ T5489]  ? load_image+0x400/0x400
[  141.518945][ T5489]  __get_metapage+0xaa8/0xfa0
[  141.523687][ T5489]  dtSearch+0x5d5/0x2050
[  141.528011][ T5489]  jfs_lookup+0x1ad/0x420
[  141.532500][ T5489]  ? jfs_get_parent+0xa0/0xa0
[  141.537271][ T5489]  ? __rwlock_init+0x140/0x140
[  141.542108][ T5489]  ? _raw_spin_unlock+0x24/0x40
[  141.547099][ T5489]  ? d_alloc+0x1e7/0x250
[  141.551394][ T5489]  lookup_one_qstr_excl+0x10e/0x240
[  141.556650][ T5489]  do_renameat2+0x4bf/0xce0
[  141.561258][ T5489]  ? __lock_acquire+0x7d10/0x7d10
[  141.566372][ T5489]  ? fsnotify_move+0x4e0/0x4e0
[  141.571199][ T5489]  ? __check_object_size+0x500/0xa40
[  141.576557][ T5489]  ? strncpy_from_user+0x1e3/0x350
[  141.581739][ T5489]  ? getname_flags+0x206/0x500
[  141.586552][ T5489]  __x64_sys_rename+0x82/0x90
[  141.591280][ T5489]  do_syscall_64+0x4c/0xa0
[  141.595757][ T5489]  ? clear_bhb_loop+0x60/0xb0
[  141.600492][ T5489]  ? clear_bhb_loop+0x60/0xb0
[  141.605229][ T5489]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.611178][ T5489] RIP: 0033:0x7fced379c819
[  141.615675][ T5489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.635327][ T5489] RSP: 002b:00007fced45fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  141.643799][ T5489] RAX: ffffffffffffffda RBX: 00007fced3a16090 RCX: 00007fced379c819
[  141.651828][ T5489] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000280
[  141.659851][ T5489] RBP: 00007fced3832c91 R08: 0000000000000000 R09: 0000000000000000
[  141.667909][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.675931][ T5489] R13: 00007fced3a16128 R14: 00007fced3a16090 R15: 00007ffef8927a98
[  141.683986][ T5489]  </TASK>
[  141.923487][ T4315] usb 6-1: USB disconnect, device number 4
[  142.021376][ T5489] bread failed!
[  142.025410][ T5489] jfs_lookup: dtSearch returned -5
[  142.511624][ T4316] usb 6-1: Service connection timeout for: 256
[  142.517934][ T4316] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  142.573456][ T4316] ath9k_htc: Failed to initialize the device
[  142.582317][ T4315] usb 6-1: ath9k_htc: USB layer deinitialized
[  142.733814][ T5492] loop3: detected capacity change from 0 to 32768
[  143.009171][ T5492] XFS (loop3): Mounting V5 Filesystem
[  143.193069][ T5492] XFS (loop3): Ending clean mount
[  143.235705][ T5492] XFS (loop3): Quotacheck needed: Please wait.
[  143.352257][ T5492] XFS (loop3): Quotacheck: Done.
[  143.376790][   T26] audit: type=1800 audit(1776080141.460:43): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="file2" dev="loop3" ino=9287 res=0 errno=0
[  143.669637][ T4268] XFS (loop3): Unmounting Filesystem
[  143.743599][ T5551] loop4: detected capacity change from 0 to 64
[  144.340666][ T5563] loop2: detected capacity change from 0 to 1024
[  144.387193][ T5560] loop0: detected capacity change from 0 to 4096
[  144.456775][ T5560] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  144.686283][   T51] hfsplus: b-tree write err: -5, ino 25
[  144.718656][   T51] hfsplus: b-tree write err: -5, ino 4
[  144.739647][   T51] hfsplus: b-tree write err: -5, ino 2
[  144.959464][ T4279] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  145.032235][ T4279] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  145.053225][ T4279] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  145.167446][ T5581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'.
[  145.760712][ T5604] sp0: Synchronizing with TNC
[  145.944945][ T5612] loop5: detected capacity change from 0 to 64
[  146.578199][ T5628] netlink: 'syz.2.404': attribute type 1 has an invalid length.
[  146.628374][ T5628] nbd: error processing sock list
[  147.690491][ T5624] loop5: detected capacity change from 0 to 32768
[  147.789787][ T5624] JBD2: Ignoring recovery information on journal
[  147.963800][ T5664] loop2: detected capacity change from 0 to 4096
[  148.027783][ T5664] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  148.046444][ T5624] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  148.175538][ T5664] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  148.417937][   T51] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  148.452395][ T4274] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  148.471543][ T4274] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  148.478601][ T4274] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  148.513232][ T4525] ocfs2: Unmounting device (7,5) on (node local)
[  148.554044][   T11] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  148.565884][ T4274] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[  148.674826][ T5659] loop3: detected capacity change from 0 to 32768
[  148.829207][ T5659] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  148.945228][ T5653] loop4: detected capacity change from 0 to 32768
[  148.956036][ T5681] loop2: detected capacity change from 0 to 4096
[  149.152888][ T5681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  149.273344][ T4268] ocfs2: Unmounting device (7,3) on (node local)
[  149.369897][ T5681] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.421: reserved inode found cleared - inode=1
[  149.827870][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  150.127233][ T5709] loop3: detected capacity change from 0 to 256
[  150.375500][ T5717] loop0: detected capacity change from 0 to 512
[  150.503268][ T5689] loop5: detected capacity change from 0 to 32768
[  150.517167][ T5717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  150.580548][ T5717] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.924884][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  151.037491][ T5730] loop2: detected capacity change from 0 to 512
[  151.122943][ T5730] EXT4-fs: Ignoring removed nobh option
[  151.165717][ T5731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[  151.205425][ T5730] EXT4-fs (loop2): Test dummy encryption mode enabled
[  151.233473][ T5731] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  151.253237][ T5730] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 1: comm syz.2.435: invalid block
[  151.296857][ T5737] loop0: detected capacity change from 0 to 512
[  151.473452][ T5737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  151.521539][ T5737] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.550405][ T5745] loop3: detected capacity change from 0 to 256
[  151.558532][ T5745] exfat: Deprecated parameter 'namecase'
[  151.564698][ T5745] exfat: Deprecated parameter 'utf8'
[  151.576672][ T5745] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  151.642670][ T5730] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.435: couldn't read orphan inode 11 (err -117)
[  151.705700][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  151.760870][ T5730] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  152.028683][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  152.251387][ T5122] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  152.259863][ T5762] Bluetooth: MGMT ver 1.22
[  152.441229][ T5122] usb 1-1: Using ep0 maxpacket: 8
[  152.450644][ T5122] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  152.490334][ T5122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  152.519298][ T5122] usb 1-1: Product: syz
[  152.529526][ T5122] usb 1-1: Manufacturer: syz
[  152.580832][ T5122] usb 1-1: SerialNumber: syz
[  152.608381][ T5122] usb 1-1: config 0 descriptor??
[  152.654941][ T5122] gspca_main: sq905-2.14.0 probing 2770:9120
[  153.254684][ T5122] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  153.291282][ T5122] sq905: probe of 1-1:0.0 failed with error -71
[  153.319494][ T5122] usb 1-1: USB disconnect, device number 4
[  153.327358][ T5796] loop5: detected capacity change from 0 to 1024
[  153.350283][ T5796] EXT4-fs: Ignoring removed bh option
[  153.482970][ T5796] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  153.593249][ T5811] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  153.792857][ T4525] EXT4-fs (loop5): unmounting filesystem.
[  154.531415][ T5122] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  154.621454][ T5123] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  154.733784][ T5122] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  154.761994][ T5122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.799362][ T5122] usb 5-1: config 0 descriptor??
[  154.813330][ T5123] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  154.835609][ T5123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.853610][ T5122] cp210x 5-1:0.0: cp210x converter detected
[  154.892619][ T5123] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  154.911257][ T5123] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  154.939830][ T5123] usb 6-1: Manufacturer: syz
[  154.952052][ T5123] usb 6-1: config 0 descriptor??
[  155.128342][ T5861] netlink: 'syz.2.481': attribute type 5 has an invalid length.
[  155.277736][ T5122] usb 5-1: cp210x converter now attached to ttyUSB0
[  155.361280][ T5123] rc_core: IR keymap rc-hauppauge not found
[  155.367274][ T5123] Registered IR keymap rc-empty
[  155.396848][ T5123] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  155.431766][ T5123] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6
[  155.476962][ T4494] usb 5-1: USB disconnect, device number 5
[  155.501749][ T4494] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  155.547031][ T5870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'.
[  155.575615][ T4494] cp210x 5-1:0.0: device disconnected
[  155.604794][    C1] igorplugusb 6-1:0.0: receive overflow, at least 32 lost
[  155.817108][ T5123] usb 6-1: USB disconnect, device number 5
[  155.951707][ T4316] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  155.979816][ T5880] loop2: detected capacity change from 0 to 4096
[  156.051196][ T5880] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  156.141311][ T4316] usb 4-1: Using ep0 maxpacket: 16
[  156.148820][ T4316] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  156.160447][ T5880] ntfs3: loop2: Failed to load $Extend.
[  156.185405][ T4316] usb 4-1: config 0 has no interface number 0
[  156.216916][ T4316] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11
[  156.282424][ T4316] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024
[  156.319671][ T4316] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  156.376793][ T4316] usb 4-1: config 0 has no interface number 0
[  156.411728][ T4316] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11
[  156.481243][ T4316] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024
[  156.533168][ T4316] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  156.575076][ T5896] loop5: detected capacity change from 0 to 16
[  156.581469][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.581501][ T4316] usb 4-1: Product: syz
[  156.581520][ T4316] usb 4-1: Manufacturer: syz
[  156.581537][ T4316] usb 4-1: SerialNumber: syz
[  156.610339][ T4316] usb 4-1: config 0 descriptor??
[  156.697931][ T5899] netlink: 'syz.2.495': attribute type 9 has an invalid length.
[  156.781087][ T5896] erofs: (device loop5): mounted with root inode @ nid 36.
[  156.826462][   T26] audit: type=1800 audit(1776080154.910:44): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.494" name="file1" dev="loop5" ino=86 res=0 errno=0
[  156.839700][ T5896] syz.5.494: attempt to access beyond end of device
[  156.839700][ T5896] loop5: rw=0, sector=1342177272, nr_sectors = 16 limit=16
[  156.886779][ T5128] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  156.894459][ T4316] usb 4-1: USB disconnect, device number 4
[  157.101566][ T5128] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  157.123177][ T5128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.138888][ T5128] usb 1-1: Product: syz
[  157.147200][ T5128] usb 1-1: Manufacturer: syz
[  157.154637][ T5128] usb 1-1: SerialNumber: syz
[  157.164783][ T5128] usb 1-1: config 0 descriptor??
[  157.205256][ T5128] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  157.240591][ T5128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  157.265949][ T5128] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  157.278102][ T5128] usb 1-1: media controller created
[  157.284797][ T4410] udevd[4410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.329501][ T5128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.413466][ T5908] loop2: detected capacity change from 0 to 16
[  157.454088][ T5908] erofs: (device loop2): mounted with root inode @ nid 36.
[  157.570163][ T5122] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  157.581876][ T5908] erofs: (device loop2): z_erofs_readahead: readahead error at page 340 @ nid 36
[  157.619378][ T5911] sp0: Synchronizing with TNC
[  157.624760][ T5908] syz.2.499: attempt to access beyond end of device
[  157.624760][ T5908] loop2: rw=524288, sector=22873858832, nr_sectors = 16 limit=16
[  157.650676][ T5128] DVB: Unable to find symbol mt352_attach()
[  157.687941][ T5908] syz.2.499: attempt to access beyond end of device
[  157.687941][ T5908] loop2: rw=524288, sector=22873858840, nr_sectors = 16 limit=16
[  157.720593][ T5901] loop4: detected capacity change from 0 to 32768
[  157.727348][ T5908] syz.2.499: attempt to access beyond end of device
[  157.727348][ T5908] loop2: rw=524288, sector=14519143264, nr_sectors = 16 limit=16
[  157.753638][ T5901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.496 (5901)
[  157.767504][ T5908] syz.2.499: attempt to access beyond end of device
[  157.767504][ T5908] loop2: rw=524288, sector=14519143272, nr_sectors = 16 limit=16
[  157.784557][ T5908] syz.2.499: attempt to access beyond end of device
[  157.784557][ T5908] loop2: rw=524288, sector=63675288, nr_sectors = 16 limit=16
[  157.784608][ T5901] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.792324][ T5122] usb 6-1: Using ep0 maxpacket: 16
[  157.821319][ T5901] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  157.846554][ T5908] syz.2.499: attempt to access beyond end of device
[  157.846554][ T5908] loop2: rw=524288, sector=63675296, nr_sectors = 16 limit=16
[  157.863602][ T5901] BTRFS info (device loop4): setting nodatasum
[  157.869856][ T5901] BTRFS info (device loop4): force zlib compression, level 3
[  157.877622][ T5122] usb 6-1: unable to get BOS descriptor or descriptor too short
[  157.890104][ T5128] DVB: Unable to find symbol nxt6000_attach()
[  157.890216][ T5908] syz.2.499: attempt to access beyond end of device
[  157.890216][ T5908] loop2: rw=524288, sector=16240345096, nr_sectors = 16 limit=16
[  157.901233][ T5128] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  157.933692][ T5901] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  157.950963][ T5122] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.970769][ T5122] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.970894][ T5901] BTRFS info (device loop4): use lzo compression, level 0
[  157.990309][ T5128] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  158.012180][ T5122] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  158.019336][ T5908] syz.2.499: attempt to access beyond end of device
[  158.019336][ T5908] loop2: rw=524288, sector=16240345104, nr_sectors = 16 limit=16
[  158.025602][ T5122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.051515][ T5128] dvb-usb: schedule remote query interval to 1000 msecs.
[  158.059835][ T5901] BTRFS info (device loop4): turning on flush-on-commit
[  158.077653][ T5908] syz.2.499: attempt to access beyond end of device
[  158.077653][ T5908] loop2: rw=524288, sector=16438238104, nr_sectors = 16 limit=16
[  158.078782][ T5128] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  158.125101][ T5122] usb 6-1: Product: syz
[  158.129396][ T5122] usb 6-1: Manufacturer: syz
[  158.134259][ T5901] BTRFS info (device loop4): enabling auto defrag
[  158.140941][ T5901] BTRFS info (device loop4): max_inline at 4096
[  158.164893][ T5122] usb 6-1: SerialNumber: syz
[  158.176447][ T5128] dvb-usb: bulk message failed: -22 (7/0)
[  158.198151][ T5128] dvb-usb: bulk message failed: -22 (7/0)
[  158.207066][ T5901] BTRFS info (device loop4): using free space tree
[  158.216694][ T5915] loop0: detected capacity change from 0 to 256
[  158.241883][ T5128] usb 1-1: USB disconnect, device number 5
[  158.315306][ T5915] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  158.401829][ T5128] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  158.433377][ T5122] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  158.448942][ T5917] loop3: detected capacity change from 0 to 4096
[  158.482466][ T5917] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  158.496345][   T26] audit: type=1800 audit(1776080156.580:45): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=1048644 res=0 errno=0
[  158.506576][ T5122] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  158.606169][ T5901] BTRFS info (device loop4): enabling ssd optimizations
[  158.811619][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.912359][ T5122] usb 6-1: USB disconnect, device number 6
[  159.674264][ T5955] loop5: detected capacity change from 0 to 2048
[  159.685271][ T5957] loop0: detected capacity change from 0 to 64
[  159.713358][ T5955] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  159.762283][ T5959] tipc: Started in network mode
[  159.767257][ T5959] tipc: Node identity , cluster identity 4711
[  159.777968][ T5957] hfs: request for non-existent node 1280 in B*Tree
[  159.808878][ T5955] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  159.829546][ T5957] hfs: request for non-existent node 1280 in B*Tree
[  159.875601][ T5955] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  159.911081][ T5961] loop4: detected capacity change from 0 to 16
[  159.915041][ T5955] UDF-fs: Scanning with blocksize 512 failed
[  159.962920][ T5961] erofs: (device loop4): mounted with root inode @ nid 36.
[  159.996589][ T5955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.026843][ T4561] hfs: request for non-existent node 1280 in B*Tree
[  160.042748][ T4275] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[  160.047586][ T4561] hfs: request for non-existent node 1280 in B*Tree
[  160.071691][ T5961] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[  160.134182][   T26] audit: type=1800 audit(1776080158.220:46): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.512" name="file2" dev="loop4" ino=89 res=0 errno=0
[  160.242439][   T26] audit: type=1800 audit(1776080158.260:47): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.509" name="file1" dev="loop5" ino=838 res=0 errno=0
[  160.800854][ T5976] loop4: detected capacity change from 0 to 4096
[  160.872286][ T5953] loop3: detected capacity change from 0 to 32768
[  160.947305][ T5976] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  161.001027][ T5953] XFS (loop3): Mounting V5 Filesystem
[  161.014487][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.521'.
[  161.148904][ T5953] XFS (loop3): Ending clean mount
[  161.226457][ T5953] XFS (loop3): Quotacheck needed: Please wait.
[  161.349680][ T5953] XFS (loop3): Quotacheck: Done.
[  161.502144][ T6000] nbd: socks must be embedded in a SOCK_ITEM attr
[  161.605015][ T4268] XFS (loop3): Unmounting Filesystem
[  162.225568][ T6019] loop0: detected capacity change from 0 to 512
[  162.239843][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'.
[  162.312449][ T6019] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  162.360597][ T6019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  162.402057][ T6019] EXT4-fs (loop0): SIPHASH is not a valid default hash value
[  162.811575][ T6035] netlink: 'syz.4.542': attribute type 27 has an invalid length.
[  163.084736][ T6042] loop4: detected capacity change from 0 to 256
[  163.124766][ T6017] loop5: detected capacity change from 0 to 32768
[  163.178879][ T6043] loop2: detected capacity change from 0 to 2048
[  163.199931][ T6042] FAT-fs (loop4): Directory bread(block 64) failed
[  163.229020][ T6042] FAT-fs (loop4): Directory bread(block 65) failed
[  163.236439][ T6017] XFS (loop5): Mounting V5 Filesystem
[  163.280113][ T6043] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  163.291442][ T6042] FAT-fs (loop4): Directory bread(block 66) failed
[  163.323603][ T6043] NILFS (loop2): mounting unchecked fs
[  163.338446][ T6042] FAT-fs (loop4): Directory bread(block 67) failed
[  163.383038][ T6042] FAT-fs (loop4): Directory bread(block 68) failed
[  163.420679][ T6042] FAT-fs (loop4): Directory bread(block 69) failed
[  163.437426][ T6017] XFS (loop5): Ending clean mount
[  163.444373][ T6043] NILFS (loop2): recovery complete
[  163.463750][ T6042] FAT-fs (loop4): Directory bread(block 70) failed
[  163.470383][ T6042] FAT-fs (loop4): Directory bread(block 71) failed
[  163.490279][ T6056] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.538749][ T6042] FAT-fs (loop4): Directory bread(block 72) failed
[  163.566747][ T6042] FAT-fs (loop4): Directory bread(block 73) failed
[  163.722877][ T4525] XFS (loop5): Unmounting Filesystem
[  164.168526][ T6065] tipc: Started in network mode
[  164.197247][ T6065] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  164.245648][ T6037] loop3: detected capacity change from 0 to 32768
[  164.251758][ T6065] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  164.295805][ T6037] XFS: attr2 mount option is deprecated.
[  164.477200][ T6037] XFS (loop3): Mounting V5 Filesystem
[  164.734771][ T6037] XFS (loop3): Ending clean mount
[  164.764888][ T6037] XFS (loop3): Quotacheck needed: Please wait.
[  164.904607][ T6037] XFS (loop3): Quotacheck: Done.
[  165.066853][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'.
[  165.086031][ T4268] XFS (loop3): Unmounting Filesystem
[  165.131533][ T5128] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  165.140554][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'.
[  165.313179][ T5128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.351301][ T5128] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  165.360509][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.374847][ T5946] tipc: Node number set to 10136234
[  165.432092][ T5128] usb 3-1: config 0 descriptor??
[  165.466037][   T26] audit: type=1326 audit(1776080163.550:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  165.589524][   T26] audit: type=1326 audit(1776080163.600:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  165.640339][   T26] audit: type=1326 audit(1776080163.600:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  165.688254][   T26] audit: type=1326 audit(1776080163.610:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  165.711061][   T26] audit: type=1326 audit(1776080163.610:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  165.742709][   T26] audit: type=1326 audit(1776080163.610:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dfd9c819 code=0x7ffc0000
[  165.892756][ T5128] ath6kl: Unsupported hardware version: 0x0
[  165.902942][ T5128] ath6kl: Failed to init ath6kl core: -22
[  165.973525][ T5128] ath6kl_usb: probe of 3-1:0.0 failed with error -22
[  166.104733][ T5122] usb 3-1: USB disconnect, device number 3
[  166.112963][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  166.226495][ T6103] loop0: detected capacity change from 0 to 32768
[  166.254137][ T6103] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.567 (6103)
[  166.294838][ T6103] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.321439][ T4316] usb 4-1: Using ep0 maxpacket: 8
[  166.328822][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.350912][ T6103] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  166.361723][ T4316] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  166.382597][ T6103] BTRFS info (device loop0): using free space tree
[  166.399556][ T4316] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  166.425221][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.436933][ T4316] usb 4-1: config 0 descriptor??
[  166.585739][ T6103] BTRFS info (device loop0): enabling ssd optimizations
[  166.661643][ T4279] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.756853][ T6140] loop2: detected capacity change from 0 to 256
[  166.765205][ T6140] exfat: Deprecated parameter 'utf8'
[  166.812175][ T6114] loop5: detected capacity change from 0 to 32768
[  166.852467][ T6114] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.570 (6114)
[  166.867462][ T4316] petalynx 0003:18B1:0037.0002: unknown main item tag 0xe
[  166.903631][ T6140] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d)
[  166.916400][ T4316] petalynx 0003:18B1:0037.0002: item fetching failed at offset 37/41
[  166.975065][ T4316] petalynx 0003:18B1:0037.0002: parse failed
[  166.995142][ T6142] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  167.015749][ T4316] petalynx: probe of 0003:18B1:0037.0002 failed with error -22
[  167.070391][ T4316] usb 4-1: USB disconnect, device number 5
[  167.155191][ T6114] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.203692][ T6114] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  167.246258][ T6114] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  167.305796][ T6114] BTRFS info (device loop5): use zstd compression, level 3
[  167.326503][ T6114] BTRFS info (device loop5): using free space tree
[  167.706307][ T6114] BTRFS info (device loop5): enabling ssd optimizations
[  167.737574][ T6171] loop2: detected capacity change from 0 to 512
[  167.776377][ T6171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  167.840571][   T26] audit: type=1800 audit(1776080165.920:54): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.570" name="file1" dev="loop5" ino=260 res=0 errno=0
[  167.886146][ T6171] EXT4-fs (loop2): 1 orphan inode deleted
[  167.975059][ T6171] EXT4-fs (loop2): 1 truncate cleaned up
[  167.983868][ T6171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  168.004103][ T6175] loop4: detected capacity change from 0 to 1024
[  168.042890][ T4525] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  168.060456][ T6171] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  168.158900][   T26] audit: type=1800 audit(1776080166.240:55): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.581" name="bus" dev="loop4" ino=2 res=0 errno=0
[  168.188434][ T6181] loop0: detected capacity change from 0 to 512
[  168.430847][ T6181] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.583: inode #1: comm syz.0.583: iget: illegal inode #
[  168.470037][ T4598] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop5 scanned by udevd (4598)
[  168.588473][ T6181] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.583: error while reading EA inode 1 err=-117
[  168.661752][ T6181] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  168.692093][ T6181] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.583: inode #1: comm syz.0.583: iget: illegal inode #
[  168.751678][ T6181] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.583: error while reading EA inode 1 err=-117
[  168.802455][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  168.848593][ T6181] EXT4-fs (loop0): 1 orphan inode deleted
[  168.895022][ T6181] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  169.010005][ T6193] netlink: 19 bytes leftover after parsing attributes in process `syz.4.588'.
[  169.129360][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  169.435474][ T6202] loop2: detected capacity change from 0 to 512
[  169.450836][ T6203] loop5: detected capacity change from 0 to 24
[  169.487202][ T6203] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  169.508710][ T6202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  169.518004][ T6203] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  169.697776][ T6206] mkiss: ax0: crc mode is auto.
[  169.715636][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  170.501088][ T6208] loop5: detected capacity change from 0 to 32768
[  170.581898][ T6208] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  170.668237][ T6208] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  170.863640][ T4525] ocfs2: Unmounting device (7,5) on (node local)
[  171.439710][ T6249] loop3: detected capacity change from 0 to 1024
[  171.474482][ T6249] EXT4-fs: Ignoring removed orlov option
[  171.585504][ T6249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  171.662644][ T6254] netlink: 31 bytes leftover after parsing attributes in process `syz.5.613'.
[  171.693849][ T6234] loop2: detected capacity change from 0 to 32768
[  171.826691][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  172.169707][ T6263] loop4: detected capacity change from 0 to 2048
[  172.221316][ T6268] sch_fq: defrate 4294967295 ignored.
[  172.537928][ T6263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  172.551628][ T6263] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.782553][ T6288] loop5: detected capacity change from 0 to 64
[  172.830061][ T6288] hfs: unable to locate alternate MDB
[  172.854270][ T6288] hfs: continuing without an alternate MDB
[  172.908402][   T26] audit: type=1800 audit(1776080170.990:56): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.626" name="file1" dev="loop5" ino=21 res=0 errno=0
[  173.066296][ T4561] hfs: new node 0 already hashed?
[  173.102383][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  173.102985][ T4561] ------------[ cut here ]------------
[  173.113856][ T4561] WARNING: CPU: 1 PID: 4561 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400
[  173.123402][ T4561] Modules linked in:
[  173.127444][ T4561] CPU: 1 PID: 4561 Comm: kworker/u4:8 Not tainted syzkaller #0
[  173.135269][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  173.145423][ T4561] Workqueue: writeback wb_workfn (flush-7:5)
[  173.151536][ T4561] RIP: 0010:hfs_bnode_create+0x37a/0x400
[  173.157252][ T4561] Code: ac a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 00 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[  173.177123][ T4561] RSP: 0018:ffffc9000474ee80 EFLAGS: 00010246
[  173.183347][ T4561] RAX: 000000000000001f RBX: ffff8880569820e0 RCX: 2ee5f030479ea700
[  173.191634][ T4561] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  173.199678][ T4561] RBP: 0000000000000000 R08: ffffc9000474eb87 R09: 1ffff920008e9d70
[  173.207745][ T4561] R10: dffffc0000000000 R11: fffff520008e9d71 R12: 0000000000000000
[  173.215885][ T4561] R13: ffff888056982000 R14: ffff88802ebcf700 R15: dffffc0000000000
[  173.224048][ T4561] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  173.233172][ T4561] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.239817][ T4561] CR2: 00007f82d5dec000 CR3: 000000007be86000 CR4: 00000000003506e0
[  173.247920][ T4561] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  173.255988][ T4561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  173.264161][ T4561] Call Trace:
[  173.267495][ T4561]  <TASK>
[  173.270478][ T4561]  hfs_bmap_alloc+0x53d/0x5d0
[  173.275296][ T4561]  ? hfs_bmap_reserve+0x420/0x420
[  173.280489][ T4561]  hfs_btree_inc_height+0xfd/0xac0
[  173.285744][ T4561]  ? hfs_brec_insert+0x6f6/0xbd0
[  173.290771][ T4561]  ? hfs_brec_insert+0xbd0/0xbd0
[  173.295841][ T4561]  ? do_raw_spin_unlock+0x11d/0x230
[  173.301156][ T4561]  hfs_brec_insert+0x744/0xbd0
[  173.306012][ T4561]  ? hfs_brec_keylen+0x350/0x350
[  173.311026][ T4561]  __hfs_ext_write_extent+0x2a1/0x470
[  173.316538][ T4561]  hfs_ext_write_extent+0x17b/0x200
[  173.321878][ T4561]  ? verify_lock_unused+0x140/0x140
[  173.327177][ T4561]  ? hfs_ext_keycmp+0x310/0x310
[  173.332175][ T4561]  ? writeback_sb_inodes+0x46b/0x1850
[  173.337628][ T4561]  hfs_write_inode+0xd8/0xa20
[  173.342406][ T4561]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  173.347849][ T4561]  ? __writeback_single_inode+0x4ae/0x1160
[  173.353801][ T4561]  ? __lock_acquire+0x7d10/0x7d10
[  173.358898][ T4561]  ? do_raw_spin_lock+0x128/0x2f0
[  173.364121][ T4561]  ? __rwlock_init+0x140/0x140
[  173.369127][ T4561]  __writeback_single_inode+0x75b/0x1160
[  173.374899][ T4561]  writeback_sb_inodes+0xb30/0x1850
[  173.380202][ T4561]  ? queue_io+0x5a0/0x5a0
[  173.384685][ T4561]  ? rcu_is_watching+0x11/0xa0
[  173.389531][ T4561]  wb_writeback+0x482/0xd50
[  173.394176][ T4561]  ? percpu_ref_tryget+0x250/0x250
[  173.399356][ T4561]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  173.405439][ T4561]  ? _raw_spin_unlock_irq+0x1f/0x40
[  173.410702][ T4561]  wb_workfn+0x423/0xee0
[  173.415118][ T4561]  ? inode_wait_for_writeback+0x220/0x220
[  173.420920][ T4561]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  173.427011][ T4561]  ? read_lock_is_recursive+0x10/0x10
[  173.432486][ T4561]  ? _raw_spin_unlock_irq+0x1f/0x40
[  173.437789][ T4561]  ? process_one_work+0x7b0/0x1160
[  173.443000][ T4561]  process_one_work+0x8a2/0x1160
[  173.448014][ T4561]  ? worker_detach_from_pool+0x240/0x240
[  173.453758][ T4561]  ? _raw_spin_lock_irq+0xb7/0xf0
[  173.458880][ T4561]  ? _raw_spin_lock_irqsave+0x100/0x100
[  173.464534][ T4561]  ? kthread_data+0x4b/0xc0
[  173.469121][ T4561]  worker_thread+0xaa2/0x1270
[  173.473922][ T4561]  ? __kthread_parkme+0x162/0x1c0
[  173.479024][ T4561]  kthread+0x29d/0x330
[  173.483215][ T4561]  ? worker_clr_flags+0x1a0/0x1a0
[  173.488302][ T4561]  ? kthread_blkcg+0xd0/0xd0
[  173.493000][ T4561]  ret_from_fork+0x1f/0x30
[  173.497498][ T4561]  </TASK>
[  173.500566][ T4561] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  173.507889][ T4561] CPU: 1 PID: 4561 Comm: kworker/u4:8 Not tainted syzkaller #0
[  173.515484][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  173.525579][ T4561] Workqueue: writeback wb_workfn (flush-7:5)
[  173.531622][ T4561] Call Trace:
[  173.534937][ T4561]  <TASK>
[  173.537895][ T4561]  dump_stack_lvl+0x188/0x24e
[  173.542616][ T4561]  ? memcpy+0x3c/0x60
[  173.546631][ T4561]  ? show_regs_print_info+0x12/0x12
[  173.551867][ T4561]  ? load_image+0x400/0x400
[  173.556410][ T4561]  panic+0x2e5/0x730
[  173.560330][ T4561]  ? bpf_jit_dump+0xd0/0xd0
[  173.564958][ T4561]  ? ret_from_fork+0x1f/0x30
[  173.569632][ T4561]  __warn+0x2f8/0x4f0
[  173.573642][ T4561]  ? hfs_bnode_create+0x37a/0x400
[  173.578718][ T4561]  ? hfs_bnode_create+0x37a/0x400
[  173.583781][ T4561]  report_bug+0x2ba/0x4f0
[  173.588151][ T4561]  ? hfs_bnode_create+0x37a/0x400
[  173.593213][ T4561]  handle_bug+0x3a/0x70
[  173.597413][ T4561]  exc_invalid_op+0x16/0x40
[  173.601959][ T4561]  asm_exc_invalid_op+0x16/0x20
[  173.606927][ T4561] RIP: 0010:hfs_bnode_create+0x37a/0x400
[  173.612612][ T4561] Code: ac a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 00 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[  173.632286][ T4561] RSP: 0018:ffffc9000474ee80 EFLAGS: 00010246
[  173.638392][ T4561] RAX: 000000000000001f RBX: ffff8880569820e0 RCX: 2ee5f030479ea700
[  173.646403][ T4561] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  173.654397][ T4561] RBP: 0000000000000000 R08: ffffc9000474eb87 R09: 1ffff920008e9d70
[  173.662396][ T4561] R10: dffffc0000000000 R11: fffff520008e9d71 R12: 0000000000000000
[  173.670418][ T4561] R13: ffff888056982000 R14: ffff88802ebcf700 R15: dffffc0000000000
[  173.678446][ T4561]  hfs_bmap_alloc+0x53d/0x5d0
[  173.683196][ T4561]  ? hfs_bmap_reserve+0x420/0x420
[  173.688268][ T4561]  hfs_btree_inc_height+0xfd/0xac0
[  173.693428][ T4561]  ? hfs_brec_insert+0x6f6/0xbd0
[  173.698405][ T4561]  ? hfs_brec_insert+0xbd0/0xbd0
[  173.703383][ T4561]  ? do_raw_spin_unlock+0x11d/0x230
[  173.708612][ T4561]  hfs_brec_insert+0x744/0xbd0
[  173.713427][ T4561]  ? hfs_brec_keylen+0x350/0x350
[  173.718407][ T4561]  __hfs_ext_write_extent+0x2a1/0x470
[  173.723834][ T4561]  hfs_ext_write_extent+0x17b/0x200
[  173.729155][ T4561]  ? verify_lock_unused+0x140/0x140
[  173.734388][ T4561]  ? hfs_ext_keycmp+0x310/0x310
[  173.739273][ T4561]  ? writeback_sb_inodes+0x46b/0x1850
[  173.744686][ T4561]  hfs_write_inode+0xd8/0xa20
[  173.749417][ T4561]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  173.754848][ T4561]  ? __writeback_single_inode+0x4ae/0x1160
[  173.760870][ T4561]  ? __lock_acquire+0x7d10/0x7d10
[  173.765991][ T4561]  ? do_raw_spin_lock+0x128/0x2f0
[  173.771072][ T4561]  ? __rwlock_init+0x140/0x140
[  173.775920][ T4561]  __writeback_single_inode+0x75b/0x1160
[  173.781954][ T4561]  writeback_sb_inodes+0xb30/0x1850
[  173.787306][ T4561]  ? queue_io+0x5a0/0x5a0
[  173.791693][ T4561]  ? rcu_is_watching+0x11/0xa0
[  173.796510][ T4561]  wb_writeback+0x482/0xd50
[  173.801069][ T4561]  ? percpu_ref_tryget+0x250/0x250
[  173.806227][ T4561]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  173.812252][ T4561]  ? _raw_spin_unlock_irq+0x1f/0x40
[  173.817484][ T4561]  wb_workfn+0x423/0xee0
[  173.821949][ T4561]  ? inode_wait_for_writeback+0x220/0x220
[  173.827724][ T4561]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  173.833747][ T4561]  ? read_lock_is_recursive+0x10/0x10
[  173.839163][ T4561]  ? _raw_spin_unlock_irq+0x1f/0x40
[  173.844398][ T4561]  ? process_one_work+0x7b0/0x1160
[  173.849550][ T4561]  process_one_work+0x8a2/0x1160
[  173.854533][ T4561]  ? worker_detach_from_pool+0x240/0x240
[  173.860224][ T4561]  ? _raw_spin_lock_irq+0xb7/0xf0
[  173.865390][ T4561]  ? _raw_spin_lock_irqsave+0x100/0x100
[  173.871082][ T4561]  ? kthread_data+0x4b/0xc0
[  173.875827][ T4561]  worker_thread+0xaa2/0x1270
[  173.880801][ T4561]  ? __kthread_parkme+0x162/0x1c0
[  173.885955][ T4561]  kthread+0x29d/0x330
[  173.890144][ T4561]  ? worker_clr_flags+0x1a0/0x1a0
[  173.895202][ T4561]  ? kthread_blkcg+0xd0/0xd0
[  173.899821][ T4561]  ret_from_fork+0x1f/0x30
[  173.904310][ T4561]  </TASK>
[  173.907920][ T4561] Kernel Offset: disabled
[  173.912398][ T4561] Rebooting in 86400 seconds..