last executing test programs:

7.249552059s ago: executing program 1 (id=268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

6.729073041s ago: executing program 1 (id=270):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x804e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000000069078ac141400ac1e0001000000006d1e5c22d1a8ba98a233edbbe57e98b5d2e1f48e40e8aedadd0ee7a7c616d9eac74f3bda82e5fc8120958ac3ff56e42af9f4ad4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042)
creat(&(0x7f0000000100)='./file1\x00', 0x100)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9})
ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000080)=0x8215)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e"], 0x34}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000300)={0x9, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x14ee8eb3}}}, 0x88)

5.526290488s ago: executing program 1 (id=273):
r0 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x149040, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xe)
close_range(r0, 0xffffffffffffffff, 0x0)

5.465473809s ago: executing program 3 (id=274):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

4.926939541s ago: executing program 1 (id=279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.726289115s ago: executing program 3 (id=281):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x804e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000000069078ac141400ac1e0001000000006d1e5c22d1a8ba98a233edbbe57e98b5d2e1f48e40e8aedadd0ee7a7c616d9eac74f3bda82e5fc8120958ac3ff56e42af9f4ad4e088fc0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042)
creat(&(0x7f0000000100)='./file1\x00', 0x100)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9})
ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000080)=0x8215)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e"], 0x34}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000300)={0x9, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x14ee8eb3}}}, 0x88)

4.473503701s ago: executing program 0 (id=283):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f170400000113"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0)

4.473285921s ago: executing program 1 (id=284):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r1, 0x0, 0x0, 0xfffff, 0x0, 0x0)

4.337392544s ago: executing program 2 (id=285):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b702000000000000850000"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

3.692914868s ago: executing program 0 (id=286):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)

3.565411581s ago: executing program 3 (id=287):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})

3.469547553s ago: executing program 0 (id=288):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@i_version}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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")
timer_create(0x3, 0x0, &(0x7f0000000180))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
readv(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

3.431383324s ago: executing program 2 (id=289):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f000001a540)=[{&(0x7f0000000100)="67108e1744", 0x5}, {&(0x7f000001a240)="00689775", 0x4}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x24044080)

3.259075748s ago: executing program 3 (id=290):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
close_range(r0, 0xffffffffffffffff, 0x0)

3.013566173s ago: executing program 2 (id=291):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104)

2.848980667s ago: executing program 2 (id=292):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x290, 0x24, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x4}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0x2, 0x9, 0x0, 0xe, 0x9, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xf2, 0x7, 0x3a3, 0x2, 0x0, 0x1fa, 0x3ff, 0x5}}, {0xe, 0x2, [0x20a, 0x22d, 0x7f, 0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xff, 0x8, 0x4, 0x2, 0x1, 0x3, 0x3}}, {0xa, 0x2, [0x299a, 0xf7, 0x2000]}}, {{0x1c, 0x1, {0xc, 0x4, 0x100, 0x200, 0x2, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0x8, 0x1]}}, {{0x1c, 0x1, {0x5, 0x4, 0x6, 0x6, 0x0, 0x1, 0x4, 0x3}}, {0xa, 0x2, [0x8001, 0xfa58, 0x9]}}, {{0x1c, 0x1, {0x0, 0xd, 0x5, 0x5ff, 0x1, 0x7, 0x3fe000, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x1, 0x0, 0x7}}, {0x4}}, {{0x1c, 0x1, {0xf5, 0x7, 0xff, 0x2, 0x0, 0x81, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x5, 0x7, 0xfff7, 0x0, 0x1, 0x135a, 0xe635, 0x3}}, {0xa, 0x2, [0x7, 0x453, 0x3b]}}]}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x1, 0x0, 0x2, 0x9, 0x35a, 0x9}}, {0x16, 0x2, [0xfffc, 0x2, 0x7, 0x0, 0x8, 0x6, 0x40, 0x81, 0x2]}}, {{0x1c, 0x1, {0x0, 0x2, 0xd, 0x0, 0x2, 0xbf0, 0xd059, 0x3}}, {0xa, 0x2, [0x6, 0x9, 0x1fd]}}, {{0x1c, 0x1, {0x3, 0x70, 0x4, 0x571c, 0x0, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x5, 0x40, 0xd]}}, {{0x1c, 0x1, {0x4, 0x0, 0x80, 0xe, 0x0, 0xfffffff0, 0x7, 0x7}}, {0x12, 0x2, [0x2, 0x4003, 0x6b4a, 0x87, 0x6178, 0x7, 0xe435]}}, {{0x1c, 0x1, {0x9, 0x4e, 0x6b3, 0x81, 0x1, 0x7fff, 0x7, 0x7}}, {0x12, 0x2, [0x3, 0x57, 0x0, 0x22, 0xae1f, 0xf, 0x29a6]}}, {{0x1c, 0x1, {0x2, 0x1, 0x744, 0x4, 0x0, 0xcc, 0x200}}, {0x4}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000084}, 0x8891)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

2.605199622s ago: executing program 2 (id=293):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r1, 0x2007ffb)
lseek(r0, 0x7ffff3, 0x4)

2.481526555s ago: executing program 0 (id=294):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000105, 0x0, 0xe7d1}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1000000000000058, 0x0, [{0x400000f2, 0x0, 0x3}]})

2.325814388s ago: executing program 1 (id=295):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

2.202472901s ago: executing program 0 (id=296):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x804e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000000069078ac141400ac1e0001000000006d1e5c22d1a8ba98a233edbbe57e98b5d2e1f48e40e8aedadd0ee7a7c616d9eac74f3bda82e5fc8120958ac3ff56e42af9f4ad4e088fc0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042)
creat(&(0x7f0000000100)='./file1\x00', 0x100)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9})
ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000080)=0x8215)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e"], 0x34}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000300)={0x9, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x14ee8eb3}}}, 0x88)

1.089505316s ago: executing program 3 (id=297):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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")
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
r1 = open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1e200}], 0x1, 0x1a00, 0x0, 0x3)

1.040405687s ago: executing program 0 (id=298):
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

415.349251ms ago: executing program 3 (id=299):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000010c0)={0x1, 0x0, [{0x80000001, 0x0, 0x1, 0x6, 0x3d, 0xfffffffe, 0xe}]})

0s ago: executing program 2 (id=300):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x5, 0x28, 0x0, 0xfff9, 0x3fc, 0xfffd, 0x5, 0x4, 0x800, 0x3, 0x100, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts.
[   72.237681][ T5759] cgroup: Unknown subsys name 'net'
[   72.354116][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.149537][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.179698][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.188425][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.189020][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.196197][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.204667][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.211963][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.218678][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.234675][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.242206][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.252268][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.263980][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.273484][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.281487][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.306977][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.315206][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.326492][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.336774][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.347493][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.354630][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.363291][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.371349][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.381389][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.390704][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.399116][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.760723][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   76.893493][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   76.916074][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   76.981284][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.990893][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.998415][ T5772] bridge_slave_0: entered allmulticast mode
[   77.005475][ T5772] bridge_slave_0: entered promiscuous mode
[   77.023811][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.031873][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.039063][ T5772] bridge_slave_1: entered allmulticast mode
[   77.045902][ T5772] bridge_slave_1: entered promiscuous mode
[   77.053277][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   77.139292][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.175543][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.192573][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.199905][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.207359][ T5773] bridge_slave_0: entered allmulticast mode
[   77.214397][ T5773] bridge_slave_0: entered promiscuous mode
[   77.243664][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.251065][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.258665][ T5773] bridge_slave_1: entered allmulticast mode
[   77.265586][ T5773] bridge_slave_1: entered promiscuous mode
[   77.331567][ T5772] team0: Port device team_slave_0 added
[   77.337780][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.344967][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.352955][ T5775] bridge_slave_0: entered allmulticast mode
[   77.359949][ T5775] bridge_slave_0: entered promiscuous mode
[   77.368535][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.375675][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.383536][ T5775] bridge_slave_1: entered allmulticast mode
[   77.390456][ T5775] bridge_slave_1: entered promiscuous mode
[   77.404821][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.417664][ T5772] team0: Port device team_slave_1 added
[   77.454219][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.512639][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.519980][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.546134][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.563256][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.572688][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.582941][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.590372][ T5774] bridge_slave_0: entered allmulticast mode
[   77.598403][ T5774] bridge_slave_0: entered promiscuous mode
[   77.606495][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.613770][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.621029][ T5774] bridge_slave_1: entered allmulticast mode
[   77.628411][ T5774] bridge_slave_1: entered promiscuous mode
[   77.639903][ T5773] team0: Port device team_slave_0 added
[   77.647855][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.654917][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.681452][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.694781][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.743736][ T5773] team0: Port device team_slave_1 added
[   77.775936][ T5775] team0: Port device team_slave_0 added
[   77.797506][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.807758][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.814810][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.841345][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.854508][ T5775] team0: Port device team_slave_1 added
[   77.888891][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.898841][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.905847][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.933132][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.945003][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.954294][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.980980][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.002886][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.009977][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.036133][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.086797][ T5774] team0: Port device team_slave_0 added
[   78.119884][ T5772] hsr_slave_0: entered promiscuous mode
[   78.126694][ T5772] hsr_slave_1: entered promiscuous mode
[   78.135420][ T5774] team0: Port device team_slave_1 added
[   78.183143][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.190242][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.216628][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.229774][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.236908][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.263272][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.309121][ T5775] hsr_slave_0: entered promiscuous mode
[   78.319170][ T5775] hsr_slave_1: entered promiscuous mode
[   78.325562][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.334073][ T5775] Cannot create hsr debugfs directory
[   78.357178][   T51] Bluetooth: hci1: command tx timeout
[   78.363165][ T5780] Bluetooth: hci0: command tx timeout
[   78.372938][ T5773] hsr_slave_0: entered promiscuous mode
[   78.380099][ T5773] hsr_slave_1: entered promiscuous mode
[   78.386307][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.393904][ T5773] Cannot create hsr debugfs directory
[   78.436690][ T5780] Bluetooth: hci3: command tx timeout
[   78.440850][   T51] Bluetooth: hci2: command tx timeout
[   78.523819][ T5774] hsr_slave_0: entered promiscuous mode
[   78.531545][ T5774] hsr_slave_1: entered promiscuous mode
[   78.537970][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.545533][ T5774] Cannot create hsr debugfs directory
[   78.876946][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.889256][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.901778][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.913366][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.983350][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.995084][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.012996][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.023315][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.123255][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.148996][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.160212][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.170093][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.260232][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.269863][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.281619][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.311196][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.353886][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.391480][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.443702][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   79.482474][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.489920][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.517201][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   79.528867][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.536070][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.563538][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.570736][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.613609][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.620795][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.707997][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.719162][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.735569][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.790636][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   79.839316][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.846553][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.865645][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   79.902469][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.909720][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.993564][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.000794][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.039003][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.046198][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.259717][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.351192][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.437241][   T51] Bluetooth: hci0: command tx timeout
[   80.437582][ T5780] Bluetooth: hci1: command tx timeout
[   80.451566][ T5772] veth0_vlan: entered promiscuous mode
[   80.516708][ T5780] Bluetooth: hci2: command tx timeout
[   80.518003][   T51] Bluetooth: hci3: command tx timeout
[   80.541509][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.551190][ T5772] veth1_vlan: entered promiscuous mode
[   80.603046][ T5775] veth0_vlan: entered promiscuous mode
[   80.652807][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.664713][ T5773] veth0_vlan: entered promiscuous mode
[   80.676012][ T5775] veth1_vlan: entered promiscuous mode
[   80.710290][ T5772] veth0_macvtap: entered promiscuous mode
[   80.749487][ T5773] veth1_vlan: entered promiscuous mode
[   80.773529][ T5772] veth1_macvtap: entered promiscuous mode
[   80.798722][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.824829][ T5775] veth0_macvtap: entered promiscuous mode
[   80.839414][ T5775] veth1_macvtap: entered promiscuous mode
[   80.848711][ T5774] veth0_vlan: entered promiscuous mode
[   80.881605][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.892906][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.905580][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.915413][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.929313][ T5773] veth0_macvtap: entered promiscuous mode
[   80.939716][ T5773] veth1_macvtap: entered promiscuous mode
[   80.954516][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.963620][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.973030][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.981851][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.007640][ T5774] veth1_vlan: entered promiscuous mode
[   81.017680][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.029161][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.040907][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.065350][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.078962][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.092465][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.103353][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.114805][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.136961][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.147596][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.159966][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.170943][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.182664][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.193351][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.202307][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.212275][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.221853][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.245086][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.254689][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.263565][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.272437][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.359120][ T5774] veth0_macvtap: entered promiscuous mode
[   81.409294][ T5774] veth1_macvtap: entered promiscuous mode
[   81.442433][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.452019][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.507091][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.515528][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.529447][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.544135][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.554267][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.566369][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.576683][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.587308][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.599063][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.610744][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.621741][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.631837][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.642356][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.652336][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.663216][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.674603][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.713395][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.733720][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.737854][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.749948][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.760235][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.769123][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.793572][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.804436][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.890303][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.902774][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.073861][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.086750][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.109861][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.118207][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.120868][ T5835] syz.1.2[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   82.251017][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.279455][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.402163][ T5835] loop1: detected capacity change from 0 to 8192
[   82.428090][ T5835] =======================================================
[   82.428090][ T5835] WARNING: The mand mount option has been deprecated and
[   82.428090][ T5835]          and is ignored by this kernel. Remove the mand
[   82.428090][ T5835]          option from the mount to silence this warning.
[   82.428090][ T5835] =======================================================
[   82.516782][   T51] Bluetooth: hci1: command tx timeout
[   82.527851][   T51] Bluetooth: hci0: command tx timeout
[   82.596419][   T51] Bluetooth: hci3: command tx timeout
[   82.601895][   T51] Bluetooth: hci2: command tx timeout
[   82.732181][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.940253][ T5872] loop2: detected capacity change from 0 to 4096
[   83.949603][ T5876] loop3: detected capacity change from 0 to 4096
[   84.035786][ T5876] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   84.167052][ T5876] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[   84.334385][   T27] audit: type=1800 audit(1784010513.601:2): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="file1" dev="loop3" ino=30 res=0 errno=0
[   84.381431][ T5876] ntfs3: loop3: ino=1e, "file1" attr_set_size
[   84.478321][ T5878] loop2: detected capacity change from 0 to 512
[   84.596352][   T51] Bluetooth: hci0: command tx timeout
[   84.596853][ T5780] Bluetooth: hci1: command tx timeout
[   84.677182][ T5780] Bluetooth: hci3: command tx timeout
[   84.687180][ T5780] Bluetooth: hci2: command tx timeout
[   84.734337][ T5884] loop0: detected capacity change from 0 to 256
[   84.896756][ T5890] loop2: detected capacity change from 0 to 128
[   84.905992][ T5881] loop1: detected capacity change from 0 to 4096
[   85.058184][ T5881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.213028][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.440457][ T5905] loop0: detected capacity change from 0 to 736
[   85.449802][  T968] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.551158][ T5902] loop2: detected capacity change from 0 to 4096
[   85.645362][ T5902] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[   85.683332][  T968] usb 4-1: Using ep0 maxpacket: 16
[   85.702032][  T968] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.736382][  T968] usb 4-1: config 0 interface 0 has no altsetting 0
[   85.743179][  T968] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   85.782904][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.805272][ T5902] ntfs3: loop2: failed to convert name for inode 1e.
[   85.825690][  T968] usb 4-1: config 0 descriptor??
[   86.340987][  T968] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[   86.350028][ T5901] loop1: detected capacity change from 0 to 32768
[   86.514336][ T5901] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   86.623544][ T5920] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   86.962047][ T5788] usb 4-1: USB disconnect, device number 2
[   87.099827][ T5924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.125111][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[   87.726922][ T5788] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.930049][ T5788] usb 1-1: Using ep0 maxpacket: 8
[   87.950332][ T5788] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.976350][ T5788] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   88.026620][ T5788] usb 1-1: config 0 interface 0 has no altsetting 0
[   88.033320][ T5788] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[   88.059257][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.098498][ T5788] usb 1-1: config 0 descriptor??
[   88.269987][ T5939] can0: slcan on ptm0.
[   88.478691][ T5938] can0 (unregistered): slcan off ptm0.
[   88.497079][ T5945] set_capacity_and_notify: 1 callbacks suppressed
[   88.497096][ T5945] loop9: detected capacity change from 0 to 7
[   88.564318][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x3
[   88.582248][ T5945] Dev loop9: unable to read RDB block 7
[   88.600855][ T5945]  loop9: unable to read partition table
[   88.608920][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x0
[   88.615962][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x0
[   88.647742][ T5945] loop9: partition table beyond EOD, truncated
[   88.654018][ T5945] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[   88.670507][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x0
[   88.694114][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x0
[   88.716374][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x0
[   88.731308][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x0
[   88.769331][ T5788] elecom 0003:056E:00FF.0002: unknown main item tag 0x0
[   88.820689][ T5788] elecom 0003:056E:00FF.0002: hidraw0: USB HID v0.03 Device [HID 056e:00ff] on usb-dummy_hcd.0-1/input0
[   88.841445][ T5932] loop3: detected capacity change from 0 to 32768
[   88.871061][ T5788] usb 1-1: USB disconnect, device number 2
[   89.031150][   T27] audit: type=1800 audit(1784010518.301:3): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.37" name="file1" dev="loop3" ino=4 res=0 errno=0
[   89.203258][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   89.919245][ T5983] loop0: detected capacity change from 0 to 22
[   89.942112][ T5983] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   89.986118][ T5983] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   90.520133][ T5998] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   90.942479][ T5982] loop3: detected capacity change from 0 to 32768
[   91.034340][ T5982] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.097729][ T6016] loop1: detected capacity change from 0 to 1024
[   91.240582][ T5982] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[   91.313086][ T5982] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30
[   91.322177][   T59] hfsplus: b-tree write err: -5, ino 25
[   91.338452][   T59] hfsplus: b-tree write err: -5, ino 4
[   91.344220][   T59] hfsplus: b-tree write err: -5, ino 2
[   91.383638][ T5982] XFS (loop3): Ending clean mount
[   91.785995][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.163436][ T6034] loop1: detected capacity change from 0 to 64
[   92.218105][    T9] cfg80211: failed to load regulatory.db
[   92.298794][ T6034] MINIX-fs: bad superblock or unable to read bitmaps
[   92.649586][ T6039] loop3: detected capacity change from 0 to 128
[   92.722948][ T6030] loop0: detected capacity change from 0 to 32768
[   92.744652][ T6039] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   92.759302][ T6030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.61 (6030)
[   92.852533][ T6039] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.940516][ T6030] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.984395][ T6030] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   93.025069][ T6030] BTRFS info (device loop0): using free space tree
[   93.094267][ T6032] loop2: detected capacity change from 0 to 32768
[   93.203882][ T6032] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   93.311849][ T6030] BTRFS info (device loop0): enabling ssd optimizations
[   93.357496][ T6030] BTRFS info (device loop0): auto enabling async discard
[   93.376898][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   93.419756][ T6032] XFS (loop2): Ending clean mount
[   93.488677][ T6032] XFS (loop2): Quotacheck needed: Please wait.
[   93.709011][ T6032] XFS (loop2): Quotacheck: Done.
[   93.845243][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   93.981829][ T6080] loop3: detected capacity change from 0 to 4096
[   94.124131][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   94.752267][ T6089] loop3: detected capacity change from 0 to 128
[   94.866318][ T6089] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   94.916647][ T6089] hpfs: filesystem error: improperly stopped
[   94.941174][ T6089] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   94.983568][ T6089] hpfs: You really don't want any checks? You are crazy...
[   95.017129][ T6089] hpfs: hpfs_map_sector(): read error
[   95.027186][ T6089] hpfs: code page support is disabled
[   95.033535][ T6089] hpfs: hpfs_map_4sectors(): unaligned read
[   95.066687][ T6089] hpfs: hpfs_map_4sectors(): unaligned read
[   95.086798][ T6089] hpfs: filesystem error: unable to find root dir
[   95.261963][ T6082] loop1: detected capacity change from 0 to 32768
[   95.300410][ T6082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.70 (6082)
[   95.369174][ T6082] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.399554][ T6082] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   95.425820][ T6082] BTRFS info (device loop1): setting nodatasum
[   95.458556][ T6082] BTRFS info (device loop1): force zlib compression, level 3
[   95.466027][ T6082] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[   95.536359][ T6082] BTRFS info (device loop1): use lzo compression, level 0
[   95.543688][ T6082] BTRFS info (device loop1): turning on flush-on-commit
[   95.587518][ T6082] BTRFS info (device loop1): enabling auto defrag
[   95.594933][ T6082] BTRFS info (device loop1): max_inline at 4096
[   95.622161][ T6082] BTRFS info (device loop1): using free space tree
[   95.787259][ T6082] BTRFS info (device loop1): enabling ssd optimizations
[   95.827866][ T6107] loop2: detected capacity change from 0 to 4096
[   96.470979][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.740512][ T6106] loop3: detected capacity change from 0 to 32768
[   96.764305][ T6129] loop2: detected capacity change from 0 to 22
[   96.792432][ T6106] JBD2: Ignoring recovery information on journal
[   96.838194][ T6129] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   96.847159][ T6129] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   96.878356][ T6106] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   97.348966][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[   97.366588][ T6124] loop0: detected capacity change from 0 to 40427
[   97.424713][ T6124] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[   97.456990][ T6124] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   97.492429][ T6124] F2FS-fs (loop0): invalid crc value
[   97.556423][ T6124] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.740962][ T6124] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   97.749344][ T6124] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   97.910932][ T5773] syz-executor: attempt to access beyond end of device
[   97.910932][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.929366][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   97.946717][ T6145] loop3: detected capacity change from 0 to 4096
[   97.976382][ T5833] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.184375][ T5833] usb 2-1: Using ep0 maxpacket: 16
[   98.221998][ T5833] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   98.240743][ T5833] usb 2-1: config 0 has no interface number 0
[   98.261086][ T5833] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.280581][ T5833] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.291628][ T5833] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   98.301179][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.313297][ T5833] usb 2-1: config 0 descriptor??
[   98.372287][ T6147] loop3: detected capacity change from 0 to 1024
[   98.424050][ T6147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.488598][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.824471][ T6156] loop3: detected capacity change from 0 to 256
[   98.881688][ T6156] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   98.961201][ T5833] uclogic 0003:28BD:0071.0003: pen parameters not found
[   98.981907][ T5833] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring
[   99.013374][ T6158] loop0: detected capacity change from 0 to 8192
[   99.061582][ T6158] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   99.119864][ T6158] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   99.143035][ T6158] REISERFS (device loop0): using ordered data mode
[   99.150509][ T6158] reiserfs: using flush barriers
[   99.203539][ T5833] usb 2-1: USB disconnect, device number 2
[   99.234195][ T6158] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   99.281722][ T6158] REISERFS (device loop0): checking transaction log (loop0)
[   99.295883][ T6158] REISERFS (device loop0): Using r5 hash to sort names
[   99.330016][ T6158] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   99.370898][ T6158] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   99.716369][ T5780] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[   99.716406][   T51] Bluetooth: hci4: command 0xfc11 tx timeout
[   99.901695][ T6161] loop3: detected capacity change from 0 to 40427
[   99.923212][ T6165] erspan0: entered promiscuous mode
[   99.936908][ T6161] F2FS-fs (loop3): invalid crc value
[   99.964761][ T6163] loop0: detected capacity change from 0 to 4096
[   99.973174][ T6161] F2FS-fs (loop3): Found nat_bits in checkpoint
[  100.157139][ T6161] F2FS-fs (loop3): Start checkpoint disabled!
[  100.193729][ T6172] loop1: detected capacity change from 0 to 512
[  100.227779][ T6172] EXT4-fs: Ignoring removed oldalloc option
[  100.235199][ T6161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  100.282557][ T6172] EXT4-fs (loop1): Test dummy encryption mode enabled
[  100.399973][ T6172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.502290][ T6172] EXT4-fs (loop1): shut down requested (1)
[  100.634431][ T6179] loop2: detected capacity change from 0 to 1024
[  100.671561][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.777632][   T49] kworker/u4:3: attempt to access beyond end of device
[  100.777632][   T49] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  100.810197][   T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  100.839440][ T6181] loop0: detected capacity change from 0 to 128
[  100.849666][   T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  100.864632][   T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  101.289802][ T6187] loop0: detected capacity change from 0 to 16
[  101.345810][ T6187] erofs: (device loop0): mounted with root inode @ nid 36.
[  101.742985][ T6191] loop0: detected capacity change from 0 to 128
[  101.836588][ T5815] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.853443][ T6185] loop2: detected capacity change from 0 to 32768
[  101.878630][ T6183] loop1: detected capacity change from 0 to 32768
[  101.929329][ T6183] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  101.968196][   T27] audit: type=1800 audit(1784010531.241:4): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=4 res=0 errno=0
[  101.990821][   T27] audit: type=1800 audit(1784010531.261:5): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=4 res=0 errno=0
[  101.992473][ T6185] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  101.992473][ T6185] 
[  102.056333][ T5815] usb 4-1: Using ep0 maxpacket: 16
[  102.064536][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short
[  102.088563][ T5815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.095417][ T6185] ERROR: (device loop2): remounting filesystem as read-only
[  102.123374][ T6185] xtLookup: xtSearch returned -5
[  102.131136][ T5815] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  102.167990][ T5815] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  102.187654][ T6183] XFS (loop1): Ending clean mount
[  102.203243][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.226944][ T5815] usb 4-1: Product: syz
[  102.241698][ T5815] usb 4-1: Manufacturer: syz
[  102.256640][ T5815] usb 4-1: SerialNumber: syz
[  102.262915][ T6185] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  102.262915][ T6185] 
[  102.288602][ T6185] xtLookup: xtSearch returned -5
[  102.326193][ T6185] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  102.326193][ T6185] 
[  102.361346][ T6185] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  102.361346][ T6185] 
[  102.396486][ T6185] xtLookup: xtSearch returned -5
[  102.404329][ T6185] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  102.404329][ T6185] 
[  102.542055][ T5815] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  102.569380][ T5815] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  102.583288][ T5772] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  102.962630][ T5815] usb 4-1: 2:1 : can't get Cluster Descriptor
[  103.321664][   T23] usb 4-1: USB disconnect, device number 3
[  103.345223][ T6201] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  103.404166][ T6201] XFS (loop0): Ending clean mount
[  103.510927][ T5773] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  103.526827][   T42] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.570271][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  103.716436][   T42] usb 3-1: Using ep0 maxpacket: 8
[  103.735053][   T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  103.744520][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.753136][   T42] usb 3-1: Product: syz
[  103.757495][   T42] usb 3-1: Manufacturer: syz
[  103.762277][   T42] usb 3-1: SerialNumber: syz
[  103.777096][   T42] usb 3-1: config 0 descriptor??
[  103.785142][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.809174][   T42] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  103.817501][ T5815] usb 2-1: config 0 has no interfaces?
[  103.823031][ T5815] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  103.838910][   T42] pctv452e: pctv452e_power_ctrl: 1
[  103.838910][   T42] 
[  103.846434][   T42] usb 3-1: selecting invalid altsetting 3
[  103.852445][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.860614][   T42] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  103.860614][   T42] 
[  103.889365][ T5815] usb 2-1: config 0 descriptor??
[  103.894593][   T42] dvb-usb: bulk message failed: -22 (5/0)
[  103.919258][   T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  103.948065][   T42] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  103.963811][   T42] usb 3-1: media controller created
[  103.977869][   T42] dvb-usb: bulk message failed: -22 (8/0)
[  103.983927][   T42] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  104.002353][   T42] dvb-usb: MAC address reading failed.
[  104.073989][   T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  104.131517][ T5833] usb 2-1: USB disconnect, device number 3
[  104.234358][   T42] DVB: Unable to find symbol stb0899_attach()
[  104.241853][   T42] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  104.366317][   T42] rc_core: IR keymap rc-tt-1500 not found
[  104.378996][   T42] Registered IR keymap rc-empty
[  104.393358][   T42] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  104.420575][   T42] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5
[  104.465654][   T42] dvb-usb: schedule remote query interval to 100 msecs.
[  104.483155][   T42] pctv452e: pctv452e_power_ctrl: 0
[  104.483155][   T42] 
[  104.495858][   T42] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  104.529596][   T42] usb 3-1: USB disconnect, device number 2
[  104.755396][   T42] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  105.323542][ T6236] set_capacity_and_notify: 2 callbacks suppressed
[  105.323558][ T6236] loop0: detected capacity change from 0 to 32768
[  105.381342][ T6236] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.115 (6236)
[  105.456014][ T6236] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.476610][ T6236] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  105.485464][ T6236] BTRFS info (device loop0): using free space tree
[  105.554948][ T6239] loop3: detected capacity change from 0 to 32768
[  105.576706][ T6250] loop2: detected capacity change from 0 to 2048
[  105.612380][ T6239] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  105.631742][ T6236] BTRFS info (device loop0): enabling ssd optimizations
[  105.635146][ T6250] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  105.689148][ T6250] UDF-fs: Scanning with blocksize 512 failed
[  105.719143][ T6239] XFS (loop3): Ending clean mount
[  105.719892][ T6250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.736124][ T6236] BTRFS info (device loop0): auto enabling async discard
[  105.983298][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  106.003177][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.443797][ T6280] loop0: detected capacity change from 0 to 1024
[  106.506534][ T6280] EXT4-fs (loop0): filesystem is read-only
[  106.536347][ T6280] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  106.567579][ T6280] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869)
[  106.587710][ T6282] ªªªªªª: renamed from vlan0 (while UP)
[  106.603392][ T6280] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  106.637060][ T6280] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: comm syz.0.123: inode #1: comm syz.0.123: iget: illegal inode #
[  106.686285][ T6280] EXT4-fs (loop0): no journal found
[  106.706914][ T6280] EXT4-fs (loop0): can't get journal size
[  106.756641][ T6280] EXT4-fs error (device loop0): __ext4_fill_super:5517: inode #2: comm syz.0.123: iget: special inode unallocated
[  106.778709][ T6284] loop2: detected capacity change from 0 to 2048
[  106.855723][ T6251] loop1: detected capacity change from 0 to 32768
[  106.902806][ T6280] EXT4-fs (loop0): get root inode failed
[  106.946535][ T6280] EXT4-fs (loop0): mount failed
[  106.984637][ T6251] JBD2: Ignoring recovery information on journal
[  107.050767][ T6292] loop3: detected capacity change from 0 to 4096
[  107.059171][ T6292] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  107.061748][ T6293] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.140502][ T6251] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  107.836689][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  108.219142][ T6313] team0: Device gtp0 is of different type
[  108.388942][ T6316] loop2: detected capacity change from 0 to 4096
[  108.448571][ T6318] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.940541][ T6311] loop0: detected capacity change from 0 to 32768
[  109.010838][ T6326] kvm: kvm [6325]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006d) = 0x6
[  109.013028][ T6311] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  109.052150][ T6311] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.279582][ T6311] XFS (loop0): Ending clean mount
[  109.299126][ T6311] XFS (loop0): Quotacheck needed: Please wait.
[  109.370005][ T6311] XFS (loop0): Quotacheck: Done.
[  109.567195][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.686734][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  109.876760][    T9] usb 3-1: Using ep0 maxpacket: 8
[  109.882709][    T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  109.899229][    T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  109.921098][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.921129][    T9] usb 3-1: Product: syz
[  109.921146][    T9] usb 3-1: Manufacturer: syz
[  109.921162][    T9] usb 3-1: SerialNumber: syz
[  109.927894][    T9] usb 3-1: config 0 descriptor??
[  109.932589][    T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  109.932665][    T9] usb 3-1: setting power ON
[  109.933037][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  109.952102][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  109.954851][    T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  109.954926][    T9] usb 3-1: media controller created
[  110.011246][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.044966][    T9] usb 3-1: selecting invalid altsetting 6
[  110.045017][    T9] usb 3-1: digital interface selection failed (-22)
[  110.045032][    T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  110.053775][    T9] usb 3-1: setting power OFF
[  110.053978][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  110.054041][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  110.054055][    T9] (NULL device *): no alternate interface
[  110.124182][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  110.169363][ T6360] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  110.261009][    T9] usb 3-1: USB disconnect, device number 3
[  111.302125][ T6371] loop2: detected capacity change from 0 to 512
[  111.316227][    C0] sched: RT throttling activated
[  111.386392][ T6371] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  111.557634][ T6371] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.154: bad orphan inode 13
[  111.610634][ T6371] ext4_test_bit(bit=12, block=18) = 1
[  111.643536][ T6363] loop1: detected capacity change from 0 to 131072
[  111.646540][ T6371] is_bad_inode(inode)=0
[  111.660914][ T6363] F2FS-fs (loop1): invalid crc value
[  111.672904][ T6371] NEXT_ORPHAN(inode)=0
[  111.703224][ T6371] max_ino=32
[  111.717061][ T6363] F2FS-fs (loop1): Found nat_bits in checkpoint
[  111.770123][ T6363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  111.796344][ T6371] i_nlink=1
[  111.802503][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  112.015427][ T6369] loop3: detected capacity change from 0 to 32768
[  112.034740][ T6371] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  112.082291][ T6371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.154: bg 0: block 248: padding at end of block bitmap is not set
[  112.091166][ T6367] loop0: detected capacity change from 0 to 32768
[  112.097120][ T6369] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.153 (6369)
[  112.151352][ T6371] Quota error (device loop2): write_blk: dquota write failed
[  112.163626][ T6371] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  112.208443][ T6369] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  112.239675][ T6371] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.154: Failed to acquire dquot type 1
[  112.254356][ T6367] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.275713][ T6369] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  112.309431][ T6383] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  112.364934][ T6369] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  112.441924][ T6369] BTRFS info (device loop3): use zstd compression, level 3
[  112.452231][ T6383] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  112.465076][ T6369] BTRFS info (device loop3): using free space tree
[  112.506552][ T6383] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.154: Failed to acquire dquot type 1
[  112.521405][ T6367] XFS (loop0): Ending clean mount
[  112.632001][ T6369] BTRFS info (device loop3): enabling ssd optimizations
[  112.661954][ T6369] BTRFS info (device loop3): auto enabling async discard
[  112.704862][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  112.727323][   T11] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  112.747232][   T11] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1
[  112.802361][ T5773] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.279181][ T5774] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  113.356937][ T5788] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  113.585136][ T5788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.615051][ T5788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.651183][ T5788] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  113.674159][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.695407][ T5788] usb 3-1: config 0 descriptor??
[  114.099699][ T6418] loop0: detected capacity change from 0 to 4096
[  114.147357][ T5788] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  114.166872][ T5788] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  114.198520][ T5788] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  114.206011][ T5788] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  114.228161][ T5788] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  114.265518][ T5788] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  114.305032][ T6422] loop1: detected capacity change from 0 to 4096
[  114.370373][ T5788] playstation 0003:054C:0DF2.0004: Invalid byte count transferred, expected 20 got 0
[  114.405031][ T6426] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.419398][ T5788] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22
[  114.482711][ T5788] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense
[  114.542425][ T5788] playstation 0003:054C:0DF2.0004: Failed to create dualsense.
[  114.579047][ T5788] playstation: probe of 0003:054C:0DF2.0004 failed with error -22
[  114.642551][ T5788] usb 3-1: USB disconnect, device number 4
[  114.904205][ T6438] loop1: detected capacity change from 0 to 512
[  114.958240][ T6440] loop3: detected capacity change from 0 to 512
[  114.971143][ T6438] EXT4-fs (loop1): Test dummy encryption mode enabled
[  115.011584][ T6438] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.1.165: corrupted xattr block 95: invalid header
[  115.090144][ T6440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  115.122370][ T6438] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  115.126335][ T6440] EXT4-fs (loop3): Test dummy encryption mode enabled
[  115.138508][ T6438] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.165: bg 0: block 7: invalid block bitmap
[  115.161763][ T6438] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  115.172897][ T6438] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #11: comm syz.1.165: corrupted xattr block 95: invalid header
[  115.178545][ T6440] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.200439][ T6438] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  115.210101][ T6438] EXT4-fs (loop1): 1 orphan inode deleted
[  115.220308][ T6438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.441913][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.598599][ T6436] loop0: detected capacity change from 0 to 32768
[  115.662397][ T6436] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.677338][ T6440] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  115.685934][ T6440] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.167: Directory hole found for htree leaf block 0
[  115.702385][ T6440] EXT4-fs (loop3): Remounting filesystem read-only
[  115.741565][ T6449] loop1: detected capacity change from 0 to 1024
[  115.758793][ T5774] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  115.763698][ T6449] EXT4-fs: Ignoring removed bh option
[  115.778791][ T6436] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  115.815703][ T6436] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30
[  115.828664][ T6449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  115.887042][ T6449] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.943001][ T6436] XFS (loop0): Ending clean mount
[  116.079872][ T6449] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.169: lblock 3 mapped to illegal pblock 3 (length 3)
[  116.119025][ T6449] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  116.145463][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  116.189920][ T6449] EXT4-fs (loop1): This should not happen!! Data will be lost
[  116.189920][ T6449] 
[  116.220338][ T6465] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.169: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.343822][ T6465] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.169: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.408287][ T6449] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  116.462737][ T6449] EXT4-fs error (device loop1) in ext4_setattr:5682: Corrupt filesystem
[  116.562072][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  116.940149][ T6446] loop2: detected capacity change from 0 to 40427
[  116.983318][ T6446] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  117.014764][ T6446] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  117.081186][ T6446] F2FS-fs (loop2): invalid crc value
[  117.183689][ T6446] F2FS-fs (loop2): Found nat_bits in checkpoint
[  117.378266][ T6446] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  117.401889][ T6446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  117.811353][ T6467] loop3: detected capacity change from 0 to 131072
[  117.821117][ T6467] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  117.829351][ T6467] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  117.846560][ T6467] F2FS-fs (loop3): invalid crc value
[  117.868952][ T6467] F2FS-fs (loop3): Found nat_bits in checkpoint
[  117.950779][ T6467] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  117.957994][ T6467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  118.073750][ T6469] loop0: detected capacity change from 0 to 32768
[  118.200902][ T6469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.171 (6469)
[  118.344042][ T6469] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.756052][ T6469] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  118.918399][ T6486] xt_CT: No such helper "pptp"
[  119.006539][ T6469] BTRFS info (device loop0): setting nodatasum
[  119.073154][ T6469] BTRFS info (device loop0): force zlib compression, level 3
[  119.143349][ T6469] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  119.216345][ T6469] BTRFS info (device loop0): use lzo compression, level 0
[  119.223555][ T6469] BTRFS info (device loop0): turning on flush-on-commit
[  119.286881][ T6469] BTRFS info (device loop0): enabling auto defrag
[  119.293447][ T6469] BTRFS info (device loop0): max_inline at 4096
[  119.300434][ T6493] loop1: detected capacity change from 0 to 256
[  119.331345][ T6469] BTRFS info (device loop0): force zlib compression, level 3
[  119.388959][ T6469] BTRFS info (device loop0): using free space tree
[  119.576898][ T6469] BTRFS info (device loop0): enabling ssd optimizations
[  119.584014][ T6469] BTRFS info (device loop0): auto enabling async discard
[  119.796732][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.470592][ T6525] syz.1.183 uses obsolete (PF_INET,SOCK_PACKET)
[  120.500031][ T6525] syzkaller1: entered promiscuous mode
[  120.505586][ T6525] syzkaller1: entered allmulticast mode
[  120.910329][ T6518] loop2: detected capacity change from 0 to 32768
[  120.986952][ T6518] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  120.998582][ T6518] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  121.249663][ T6518] XFS (loop2): Ending clean mount
[  121.289609][ T6518] XFS (loop2): Quotacheck needed: Please wait.
[  121.335709][ T6541] loop3: detected capacity change from 0 to 2048
[  121.348513][ T6518] XFS (loop2): Quotacheck: Done.
[  121.429964][ T6541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.486459][ T6541] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.615782][ T5775] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  121.710747][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.890213][ T6527] loop1: detected capacity change from 0 to 32768
[  122.011174][ T6527] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  122.298181][ T6527] syz.1.184 (6527) used greatest stack depth: 17784 bytes left
[  122.391655][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  122.907555][ T6562] kvm: apic: phys broadcast and lowest prio
[  123.204323][ T6570] loop1: detected capacity change from 0 to 512
[  123.239086][ T6570] EXT4-fs (loop1): Test dummy encryption mode enabled
[  123.271769][ T6570] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.195: corrupted in-inode xattr: invalid ea_ino
[  123.280594][ T6555] loop3: detected capacity change from 0 to 32768
[  123.334273][ T6570] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.195: couldn't read orphan inode 15 (err -117)
[  123.397892][ T6570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.117901][ T6575] xt_CT: No such helper "pptp"
[  124.456575][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.500004][ T6568] loop2: detected capacity change from 0 to 32768
[  124.555365][ T6581] loop0: detected capacity change from 0 to 256
[  124.684270][ T6568] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  124.717067][ T6581] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  124.816860][ T6588] syzkaller1: entered promiscuous mode
[  124.826687][ T6588] syzkaller1: entered allmulticast mode
[  124.952716][ T6568] (syz.2.194,6568,0):ocfs2_remove_inode_range:1793 ERROR: status = -22
[  124.965842][ T6590] loop0: detected capacity change from 0 to 128
[  124.970166][ T6568] (syz.2.194,6568,0):__ocfs2_change_file_space:2044 ERROR: status = -22
[  125.158834][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  125.454057][ T6594] loop1: detected capacity change from 0 to 8192
[  125.485782][ T6594] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  125.516915][ T6594] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  125.600133][ T6594] REISERFS (device loop1): using ordered data mode
[  125.629456][ T6594] reiserfs: using flush barriers
[  125.656829][ T6594] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.724427][ T6592] loop3: detected capacity change from 0 to 32768
[  125.729094][ T6594] REISERFS (device loop1): checking transaction log (loop1)
[  125.762279][ T6592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.201 (6592)
[  125.780478][ T6594] REISERFS (device loop1): Using r5 hash to sort names
[  125.803634][ T6598] loop0: detected capacity change from 0 to 8192
[  125.809682][ T6594] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  125.854415][ T6592] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.877236][ T6592] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  125.886824][ T6592] BTRFS info (device loop3): setting nodatasum
[  125.899647][ T6598] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  125.940685][ T6592] BTRFS info (device loop3): force zlib compression, level 3
[  125.992298][ T6592] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  126.004513][ T6598] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  126.042135][ T6592] BTRFS info (device loop3): use lzo compression, level 0
[  126.066577][ T6598] REISERFS (device loop0): using ordered data mode
[  126.073197][ T6598] reiserfs: using flush barriers
[  126.085951][ T6592] BTRFS info (device loop3): turning on flush-on-commit
[  126.129234][ T6592] BTRFS info (device loop3): enabling auto defrag
[  126.139886][ T6598] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.179409][ T6592] BTRFS info (device loop3): max_inline at 4096
[  126.221167][ T6592] BTRFS info (device loop3): using free space tree
[  126.239860][ T6598] REISERFS (device loop0): checking transaction log (loop0)
[  126.282382][ T6598] REISERFS (device loop0): Using r5 hash to sort names
[  126.440462][ T6598] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  126.851442][ T6615] xt_CT: No such helper "pptp"
[  127.189371][ T6592] BTRFS info (device loop3): enabling ssd optimizations
[  128.008592][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.395669][ T6642] loop3: detected capacity change from 0 to 256
[  128.415437][ T6639] loop0: detected capacity change from 0 to 1024
[  128.476436][ T6639] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  128.835117][ T6645] ªªªªªª: renamed from vlan0 (while UP)
[  128.871115][ T6631] loop1: detected capacity change from 0 to 32768
[  128.900265][ T6631] XFS: ikeep mount option is deprecated.
[  129.026124][ T6631] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  129.116476][ T5833] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  129.193609][ T6657] loop0: detected capacity change from 0 to 4096
[  129.194855][ T6631] XFS (loop1): Ending clean mount
[  129.201776][ T6657] EXT4-fs: inline encryption not supported
[  129.268142][ T6657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  129.278728][ T6657] EXT4-fs (loop0): Test dummy encryption mode enabled
[  129.296373][ T6657] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  129.299590][ T5833] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  129.304643][ T6657] System zones: 
[  129.323009][ T5833] usb 4-1: config 0 has no interface number 0
[  129.333397][ T5833] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  129.345046][ T5833] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  129.356115][ T5833] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  129.365387][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.374804][ T6657] 0-5
[  129.377984][ T5833] usb 4-1: config 0 descriptor??
[  129.384096][ T6647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.406024][ T5833] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  129.444177][ T6657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.470396][ T6643] loop2: detected capacity change from 0 to 32768
[  129.490696][ T6643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.212 (6643)
[  129.534601][ T6643] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.581185][ T6643] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  129.636539][ T6643] BTRFS info (device loop2): setting nodatacow, compression disabled
[  129.655956][    C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  129.670832][ T5833] usb 4-1: USB disconnect, device number 4
[  129.671311][ T5772] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  129.682777][ T6643] BTRFS info (device loop2): turning on flush-on-commit
[  129.703792][ T6657] fs-verity: sha512 using implementation "sha512-avx2"
[  129.742184][ T6643] BTRFS info (device loop2): trying to use backup root at mount time
[  129.775078][ T6643] BTRFS info (device loop2): max_inline at 0
[  129.797942][ T6643] BTRFS info (device loop2): using free space tree
[  129.826095][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.925434][   T33] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  129.960648][ T6643] BTRFS error (device loop2): failed to load root extent
[  129.976723][ T6643] BTRFS warning (device loop2): try to load backup roots slot 1
[  129.986111][ T3509] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  130.017645][ T6643] BTRFS warning (device loop2): couldn't read tree root
[  130.024962][ T6643] BTRFS warning (device loop2): try to load backup roots slot 2
[  130.041932][ T3509] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  130.060635][ T6643] BTRFS warning (device loop2): couldn't read tree root
[  130.069537][ T6643] BTRFS warning (device loop2): try to load backup roots slot 3
[  130.087850][ T6643] BTRFS info (device loop2): enabling ssd optimizations
[  130.094870][ T6643] BTRFS info (device loop2): auto enabling async discard
[  130.110847][ T6643] BTRFS info (device loop2): rebuilding free space tree
[  130.159658][ T6643] BTRFS info (device loop2): checking UUID tree
[  130.898875][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.210803][ T6684] xt_CT: No such helper "pptp"
[  131.401698][ T6676] loop0: detected capacity change from 0 to 32768
[  131.609152][ T6676] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  131.839648][ T6700] loop1: detected capacity change from 0 to 1024
[  131.873871][ T6700] EXT4-fs: Ignoring removed bh option
[  131.876499][ T6676] XFS (loop0): Ending clean mount
[  132.423411][ T6702] xt_CT: No such helper "pptp"
[  132.461833][ T6700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.792875][   T27] audit: type=1800 audit(1784010562.051:6): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.216" name="file1" dev="loop1" ino=15 res=0 errno=0
[  132.829792][ T5773] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.020018][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.066574][ T5788] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  133.162855][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.170255][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  133.301979][ T5788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.345029][ T5788] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xC2, skipping
[  133.375573][ T5788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.391988][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.415626][ T5788] usb 4-1: Product: syz
[  133.423953][ T5788] usb 4-1: Manufacturer: syz
[  133.444622][ T5788] usb 4-1: SerialNumber: syz
[  133.500326][ T5788] cdc_mbim 4-1:1.0: skipping garbage
[  133.550534][ T6695] loop2: detected capacity change from 0 to 32768
[  133.602043][ T6695] (syz.2.219,6695,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  133.627764][ T6695] (syz.2.219,6695,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  133.669770][ T6695] JBD2: Ignoring recovery information on journal
[  133.729776][ T6720] loop7: detected capacity change from 0 to 7
[  133.736986][ T6722] loop1: detected capacity change from 0 to 512
[  133.761324][ T6720] Dev loop7: unable to read RDB block 7
[  133.767700][ T6720]  loop7: unable to read partition table
[  133.769791][ T6722] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  133.773593][ T6720] loop7: partition table beyond EOD, 
[  133.791249][ T6709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  133.798697][ T6722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  133.809534][ T6695] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  133.819334][ T6720] truncated
[  133.829150][ T6720] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà0–š
<¨�â·û) failed (rc=-5)
[  133.875634][ T6722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c018, mo2=0082]
[  133.932123][ T6722] EXT4-fs (loop1): 1 truncate cleaned up
[  133.933244][ T5139] Dev loop7: unable to read RDB block 7
[  133.940186][ T6722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.959990][ T5139]  loop7: unable to read partition table
[  133.973031][ T5139] loop7: partition table beyond EOD, truncated
[  134.074519][   T27] audit: type=1800 audit(1784010563.341:7): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="file1" dev="loop2" ino=16978 res=0 errno=0
[  134.196609][ T6722] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  134.290580][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  134.362140][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.419658][ T5788] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  134.459614][ T5788] cdc_mbim 4-1:1.0: bind() failure
[  134.564027][ T5788] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  134.579823][ T5788] cdc_ncm 4-1:1.1: bind() failure
[  134.881035][ T5788] usb 4-1: USB disconnect, device number 5
[  135.094784][ T6731] xt_CT: No such helper "pptp"
[  135.435533][ T6737] loop2: detected capacity change from 0 to 1024
[  135.444273][ T6737] EXT4-fs: Ignoring removed orlov option
[  135.483204][ T6737] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  136.224297][ T6742] xt_CT: No such helper "pptp"
[  136.358408][ T6746] xt_CT: No such helper "pptp"
[  136.511303][ T6737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.725920][ T6755] loop3: detected capacity change from 0 to 512
[  136.809315][ T6755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.812420][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.856587][ T6755] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.024599][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.252231][ T6765] loop3: detected capacity change from 0 to 2048
[  137.308204][ T6765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.356603][   T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  137.536310][   T42] usb 3-1: Using ep0 maxpacket: 32
[  137.552021][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.585893][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.608499][   T42] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  137.641265][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.662293][   T42] usb 3-1: config 0 descriptor??
[  137.748963][ T1100] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  137.786844][ T1100] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 786 with error 28
[  137.824618][ T1100] EXT4-fs (loop3): This should not happen!! Data will be lost
[  137.824618][ T1100] 
[  137.862430][ T1100] EXT4-fs (loop3): Total free blocks count 0
[  137.893072][ T1100] EXT4-fs (loop3): Free/Dirty block details
[  137.914296][ T1100] EXT4-fs (loop3): free_blocks=4096
[  137.934022][ T1100] EXT4-fs (loop3): dirty_blocks=800
[  137.944067][ T1100] EXT4-fs (loop3): Block reservation details
[  137.966564][ T1100] EXT4-fs (loop3): i_reserved_data_blocks=50
[  138.052827][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.184416][   T42] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  138.804870][   T42] usb 3-1: USB disconnect, device number 5
[  139.104213][ T6775] xt_CT: No such helper "pptp"
[  139.568764][ T6781] loop3: detected capacity change from 0 to 512
[  139.633415][ T6781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.646594][ T6781] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  139.683155][ T6787] warning: `syz.2.241' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  139.724099][ T6767] loop1: detected capacity change from 0 to 65536
[  139.743749][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #2: comm syz.3.239: corrupted inode contents
[  139.806722][ T6767] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  139.823274][ T6781] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.239: mark_inode_dirty error
[  139.866103][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #2: comm syz.3.239: corrupted inode contents
[  139.900867][ T6798] Zero length message leads to an empty skb
[  139.913323][ T6767] XFS (loop1): Ending clean mount
[  140.046426][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.205052][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  140.372924][ T6807] loop9: detected capacity change from 0 to 7
[  140.432906][ T6807] Dev loop9: unable to read RDB block 7
[  140.473753][ T6807]  loop9: unable to read partition table
[  140.497235][ T6807] loop9: partition table beyond EOD, truncated
[  140.513713][ T6807] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  141.553293][ T6815] xt_CT: No such helper "pptp"
[  141.861368][ T6823] loop1: detected capacity change from 0 to 512
[  141.919512][ T6823] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  141.994418][ T6823] EXT4-fs (loop1): 1 truncate cleaned up
[  142.061943][ T6823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.091879][ T6800] loop0: detected capacity change from 0 to 40427
[  142.120002][ T6800] F2FS-fs (loop0): invalid crc value
[  142.131139][ T6800] F2FS-fs (loop0): Found nat_bits in checkpoint
[  142.226405][ T5833] psmouse serio2: Failed to reset mouse on : -5
[  142.259809][ T6800] F2FS-fs (loop0): Start checkpoint disabled!
[  142.331685][ T6800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  142.511496][   T33] kworker/u4:2: attempt to access beyond end of device
[  142.511496][   T33] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  142.527198][   T33] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  142.534486][   T33] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  143.119422][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.284915][ T6837] loop0: detected capacity change from 0 to 131072
[  144.295380][ T6837] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  144.303622][ T6837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  144.327161][ T6837] F2FS-fs (loop0): invalid crc value
[  144.377279][ T6837] F2FS-fs (loop0): Found nat_bits in checkpoint
[  144.456760][ T6837] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  144.463921][ T6837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  144.476914][ T5788] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  144.746443][ T5788] usb 4-1: Using ep0 maxpacket: 16
[  144.758584][ T5788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  144.794850][ T5788] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  144.816404][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.848722][ T5788] usb 4-1: config 0 descriptor??
[  145.026362][ T5788] rc_core: IR keymap rc-xbox-dvd not found
[  145.032268][ T5788] Registered IR keymap rc-empty
[  145.049678][ T5788] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  145.102886][ T5788] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7
[  145.174485][    C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  145.198183][ T5788] usb 4-1: USB disconnect, device number 6
[  146.769696][ T6853] xt_CT: No such helper "pptp"
[  147.337843][ T5833] misc userio: Buffer overflowed, userio client isn't keeping up
[  148.391049][ T6873] xt_CT: No such helper "pptp"
[  148.401393][ T5833] input: PS/2 Generic Mouse as /devices/serio2/input/input6
[  148.721482][ T5833] psmouse serio2: Failed to enable mouse on 
[  149.170130][ T6871] loop1: detected capacity change from 0 to 32768
[  149.192341][ T6871] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.261 (6871)
[  149.226345][ T6871] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.249131][ T6871] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  149.271367][ T6871] BTRFS info (device loop1): setting nodatacow, compression disabled
[  149.273449][ T6879] loop3: detected capacity change from 0 to 8192
[  149.292967][ T6871] BTRFS info (device loop1): force clearing of disk cache
[  149.307564][ T6871] BTRFS info (device loop1): turning off barriers
[  149.333279][ T6879] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  149.333338][ T6871] BTRFS info (device loop1): use no compression
[  149.366314][ T6879] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  149.375596][ T6879] REISERFS (device loop3): using ordered data mode
[  149.386938][ T6879] reiserfs: using flush barriers
[  149.423213][ T6879] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  149.461227][ T6871] BTRFS info (device loop1): disabling free space tree
[  149.486615][ T6871] BTRFS info (device loop1): enabling ssd optimizations
[  149.513272][ T6871] BTRFS info (device loop1): using spread ssd allocation scheme
[  149.537439][ T6879] REISERFS (device loop3): checking transaction log (loop3)
[  149.562369][ T6871] BTRFS info (device loop1): not using ssd optimizations
[  149.588928][ T6871] BTRFS info (device loop1): not using spread ssd allocation scheme
[  149.620509][ T6879] REISERFS (device loop3): Using r5 hash to sort names
[  149.639176][ T6879] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  149.862326][ T6869] loop0: detected capacity change from 0 to 40427
[  149.896830][ T6869] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  149.903245][ T6869] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  149.974618][ T6869] F2FS-fs (loop0): invalid crc_offset: 1
[  150.077536][ T6871] BTRFS info (device loop1): rebuilding free space tree
[  150.159594][ T6871] BTRFS info (device loop1): disabling free space tree
[  150.167012][ T6871] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.196517][ T6871] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.281749][ T6871] BTRFS info (device loop1): checking UUID tree
[  150.447881][ T6869] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  150.502370][ T6869] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  151.141044][ T6912] xt_CT: No such helper "pptp"
[  151.484106][ T5772] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.959662][ T5780] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11
[  152.909825][ T6930] xt_CT: No such helper "pptp"
[  153.378887][ T6939] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  153.394835][ T6939] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  153.440817][ T6939] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  153.461252][ T6939] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  153.476645][ T6939] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  153.491827][ T6939] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  153.504850][ T6939] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  153.511830][ T6939] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  153.524390][ T6939] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  153.545582][ T6939] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  153.556645][ T6939] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  153.576828][ T6939] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  153.778215][ T5780] Bluetooth: hci2: unexpected event for opcode 0x2023
[  153.807497][ T6953] syzkaller1: entered promiscuous mode
[  153.813045][ T6953] syzkaller1: entered allmulticast mode
[  154.186820][ T6961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  154.706612][ T5815] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  154.875326][ T6968] xt_CT: No such helper "pptp"
[  154.932314][ T6972] loop2: detected capacity change from 0 to 7
[  154.966967][ T6972] Dev loop2: unable to read RDB block 7
[  155.011674][ T6972]  loop2: unable to read partition table
[  155.040630][ T6972] loop2: partition table beyond EOD, truncated
[  155.076700][ T6972] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  155.097135][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  155.136449][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  155.196268][ T5815] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.247894][ T5815] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  155.276443][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  155.282007][ T6978] loop0: detected capacity change from 0 to 512
[  155.284570][ T5815] usb 2-1: Product: syz
[  155.293987][ T6978] EXT4-fs: Ignoring removed i_version option
[  155.306974][ T6978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  155.335138][ T5815] usb 2-1: Manufacturer: syz
[  155.345442][ T5815] usb 2-1: SerialNumber: syz
[  155.351687][ T6978] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  155.382532][ T6978] EXT4-fs (loop0): 1 truncate cleaned up
[  155.393576][ T6978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.396525][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout
[  155.477069][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout
[  155.556485][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout
[  155.569990][ T5815] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  155.672728][ T6991] loop2: detected capacity change from 0 to 512
[  155.682752][ T6991] EXT4-fs (loop2): invalid journal inode
[  155.697920][ T6991] EXT4-fs (loop2): can't get journal size
[  155.708884][ T6991] EXT4-fs (loop2): 1 truncate cleaned up
[  155.722643][ T6991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.776298][   T42] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  155.786507][ T5815] usb 2-1: USB disconnect, device number 4
[  155.809303][ T5815] usblp0: removed
[  155.834045][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.987975][   T42] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  155.997088][   T42] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  156.007427][   T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  156.017447][   T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  156.029657][   T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  156.043642][   T42] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  156.054897][   T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  156.068680][   T42] usb 4-1: Product: syz
[  156.073132][   T42] usb 4-1: Manufacturer: syz
[  156.101088][   T42] cdc_wdm 4-1:1.0: skipping garbage
[  156.109290][   T42] cdc_wdm 4-1:1.0: skipping garbage
[  156.114180][   T27] audit: type=1326 audit(1784010585.381:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.0.288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f119de59 code=0x7fc00000
[  156.152340][   T42] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  156.163501][   T42] cdc_wdm 4-1:1.0: Unknown control protocol
[  156.164703][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.548210][   T42] usb 4-1: USB disconnect, device number 7
[  157.405860][ T7006] xt_CT: No such helper "pptp"
[  157.485008][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout
[  157.556774][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout
[  157.636451][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout
[  157.762127][ T7012] loop3: detected capacity change from 0 to 512
[  157.798506][ T5780] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  157.808464][ T5780] Bluetooth: hci2: Injecting HCI hardware error event
[  157.819752][   T51] Bluetooth: hci2: hardware error 0x00
[  157.861672][ T7012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.890537][ T6997] loop2: detected capacity change from 0 to 40427
[  157.896487][ T7012] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.907711][ T6997] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  157.915566][ T6997] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  157.928026][ T6997] F2FS-fs (loop2): invalid crc value
[  157.953429][ T6997] F2FS-fs (loop2): Found nat_bits in checkpoint
[  157.970030][ T7002] loop1: detected capacity change from 0 to 32768
[  158.079839][ T7002] JBD2: Ignoring recovery information on journal
[  158.110775][   T27] audit: type=1800 audit(1784010587.371:9): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name="file2" dev="loop3" ino=16 res=0 errno=0
[  158.220432][ T6997] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  158.246327][ T6997] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  158.277205][ T7002] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  158.311885][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.474895][   T27] audit: type=1800 audit(1784010587.741:10): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.293" name="bus" dev="loop2" ino=455 res=0 errno=0
[  158.678716][ T7002] overlayfs: upper fs does not support tmpfile.
[  158.714402][ T7002] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  158.725023][ T3485] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  158.735384][ T7002] 
[  158.736404][ T3485] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  158.737749][ T7002] ======================================================
[  158.737758][ T7002] WARNING: possible circular locking dependency detected
[  158.760686][ T7002] syzkaller #0 Not tainted
[  158.765137][ T7002] ------------------------------------------------------
[  158.772175][ T7002] syz.1.295/7002 is trying to acquire lock:
[  158.778177][ T7002] ffff88805bc8ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  158.791551][ T7002] 
[  158.791551][ T7002] but task is already holding lock:
[  158.798936][ T7002] ffff88805bc0dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0
[  158.808475][ T7002] 
[  158.808475][ T7002] which lock already depends on the new lock.
[  158.808475][ T7002] 
[  158.818997][ T7002] 
[  158.818997][ T7002] the existing dependency chain (in reverse order) is:
[  158.828044][ T7002] 
[  158.828044][ T7002] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  158.835897][ T7002]        down_read+0x46/0x2e0
[  158.840599][ T7002]        ocfs2_init_acl+0x30a/0x770
[  158.845809][ T7002]        ocfs2_mknod+0x1427/0x2310
[  158.850930][ T7002]        ocfs2_create+0x196/0x430
[  158.855969][ T7002]        path_openat+0x1705/0x3270
[  158.861086][ T7002]        do_filp_open+0x1f2/0x430
[  158.866118][ T7002]        do_sys_openat2+0x134/0x1d0
[  158.871331][ T7002]        __x64_sys_openat+0x139/0x160
[  158.876724][ T7002]        do_syscall_64+0x55/0xb0
[  158.881691][ T7002]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.888150][ T7002] 
[  158.888150][ T7002] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  158.896677][ T7002]        down_read+0x46/0x2e0
[  158.901360][ T7002]        ocfs2_start_trans+0x3a8/0x6f0
[  158.906833][ T7002]        ocfs2_mknod+0xf33/0x2310
[  158.911888][ T7002]        ocfs2_create+0x196/0x430
[  158.916930][ T7002]        path_openat+0x1705/0x3270
[  158.922133][ T7002]        do_filp_open+0x1f2/0x430
[  158.927172][ T7002]        do_sys_openat2+0x134/0x1d0
[  158.932382][ T7002]        __x64_sys_openat+0x139/0x160
[  158.937766][ T7002]        do_syscall_64+0x55/0xb0
[  158.942718][ T7002]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.949146][ T7002] 
[  158.949146][ T7002] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  158.956635][ T7002]        ocfs2_start_trans+0x2a9/0x6f0
[  158.962191][ T7002]        ocfs2_mknod+0xf33/0x2310
[  158.967217][ T7002]        ocfs2_create+0x196/0x430
[  158.972267][ T7002]        path_openat+0x1705/0x3270
[  158.977383][ T7002]        do_filp_open+0x1f2/0x430
[  158.982412][ T7002]        do_sys_openat2+0x134/0x1d0
[  158.987620][ T7002]        __x64_sys_openat+0x139/0x160
[  158.992999][ T7002]        do_syscall_64+0x55/0xb0
[  158.997952][ T7002]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.004384][ T7002] 
[  159.004384][ T7002] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  159.014914][ T7002]        down_write+0x97/0x200
[  159.019773][ T7002]        ocfs2_reserve_local_alloc_bits+0x120/0x2620
[  159.026465][ T7002]        ocfs2_reserve_clusters_with_limit+0x1ba/0xc20
[  159.033324][ T7002]        ocfs2_mknod+0xed1/0x2310
[  159.038352][ T7002]        ocfs2_create+0x196/0x430
[  159.043390][ T7002]        path_openat+0x1705/0x3270
[  159.048503][ T7002]        do_filp_open+0x1f2/0x430
[  159.053533][ T7002]        do_sys_openat2+0x134/0x1d0
[  159.058744][ T7002]        __x64_sys_openat+0x139/0x160
[  159.064124][ T7002]        do_syscall_64+0x55/0xb0
[  159.069072][ T7002]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.075496][ T7002] 
[  159.075496][ T7002] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  159.086105][ T7002]        __lock_acquire+0x37ef/0x7d80
[  159.091491][ T7002]        lock_acquire+0x19e/0x420
[  159.096522][ T7002]        down_write+0x97/0x200
[  159.101292][ T7002]        ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  159.107715][ T7002]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  159.114574][ T7002]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  159.120740][ T7002]        ocfs2_xattr_set+0xc75/0x13a0
[  159.126117][ T7002]        __vfs_setxattr+0x437/0x470
[  159.131327][ T7002]        __vfs_setxattr_noperm+0x12a/0x5e0
[  159.137238][ T7002]        vfs_setxattr+0x16b/0x2f0
[  159.142271][ T7002]        ovl_get_workdir+0xc17/0x1770
[  159.147651][ T7002]        ovl_fill_super+0x1436/0x3750
[  159.153028][ T7002]        get_tree_nodev+0xb5/0x140
[  159.158143][ T7002]        vfs_get_tree+0x8c/0x280
[  159.163087][ T7002]        do_new_mount+0x24a/0xa40
[  159.168118][ T7002]        __se_sys_mount+0x2e7/0x3d0
[  159.173321][ T7002]        do_syscall_64+0x55/0xb0
[  159.178272][ T7002]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.184700][ T7002] 
[  159.184700][ T7002] other info that might help us debug this:
[  159.184700][ T7002] 
[  159.194941][ T7002] Chain exists of:
[  159.194941][ T7002]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  159.194941][ T7002] 
[  159.211907][ T7002]  Possible unsafe locking scenario:
[  159.211907][ T7002] 
[  159.219359][ T7002]        CPU0                    CPU1
[  159.224727][ T7002]        ----                    ----
[  159.230096][ T7002]   lock(&oi->ip_xattr_sem);
[  159.234695][ T7002]                                lock(&journal->j_trans_barrier);
[  159.242510][ T7002]                                lock(&oi->ip_xattr_sem);
[  159.249625][ T7002]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  159.256921][ T7002] 
[  159.256921][ T7002]  *** DEADLOCK ***
[  159.256921][ T7002] 
[  159.265074][ T7002] 4 locks held by syz.1.295/7002:
[  159.270099][ T7002]  #0: ffff8880241e00e0 (&type->s_umount_key#92/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x910
[  159.280222][ T7002]  #1: ffff88807dbae418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  159.289562][ T7002]  #2: ffff88805bc0df58 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_setxattr+0x144/0x2f0
[  159.300112][ T7002]  #3: ffff88805bc0dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0
[  159.310151][ T7002] 
[  159.310151][ T7002] stack backtrace:
[  159.316091][ T7002] CPU: 1 PID: 7002 Comm: syz.1.295 Not tainted syzkaller #0
[  159.323380][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  159.333442][ T7002] Call Trace:
[  159.336730][ T7002]  <TASK>
[  159.339669][ T7002]  dump_stack_lvl+0x18c/0x250
[  159.344630][ T7002]  ? load_image+0x420/0x420
[  159.349144][ T7002]  ? show_regs_print_info+0x20/0x20
[  159.354384][ T7002]  ? print_circular_bug+0x12b/0x1a0
[  159.359622][ T7002]  check_noncircular+0x2fc/0x400
[  159.364591][ T7002]  ? print_deadlock_bug+0x5d0/0x5d0
[  159.369804][ T7002]  ? lockdep_lock+0xf5/0x230
[  159.374406][ T7002]  ? _find_first_zero_bit+0xd6/0x100
[  159.379708][ T7002]  __lock_acquire+0x37ef/0x7d80
[  159.384570][ T7002]  ? verify_lock_unused+0x140/0x140
[  159.389791][ T7002]  ? __lock_acquire+0x7d80/0x7d80
[  159.394825][ T7002]  ? verify_lock_unused+0x140/0x140
[  159.400035][ T7002]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  159.405698][ T7002]  ? do_raw_spin_lock+0x11f/0x2b0
[  159.410736][ T7002]  ? mutex_unlock+0x10/0x10
[  159.415273][ T7002]  lock_acquire+0x19e/0x420
[  159.419911][ T7002]  ? ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  159.426007][ T7002]  ? ocfs2_get_system_file_inode+0x1f1/0x820
[  159.432012][ T7002]  ? __might_sleep+0xe0/0xe0
[  159.436637][ T7002]  ? read_lock_is_recursive+0x20/0x20
[  159.442020][ T7002]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  159.448230][ T7002]  ? verify_lock_unused+0x140/0x140
[  159.453552][ T7002]  ? check_noncircular+0x18a/0x400
[  159.458674][ T7002]  down_write+0x97/0x200
[  159.462927][ T7002]  ? ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  159.469010][ T7002]  ? down_read_killable+0x340/0x340
[  159.474220][ T7002]  ? deref_stack_reg+0x1ab/0x230
[  159.479196][ T7002]  ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  159.485146][ T7002]  ? mark_lock+0x94/0x320
[  159.489532][ T7002]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  159.495530][ T7002]  ? __lock_acquire+0x7d80/0x7d80
[  159.500656][ T7002]  ? lock_chain_count+0x20/0x20
[  159.505730][ T7002]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  159.511668][ T7002]  ? lockdep_hardirqs_on+0x98/0x150
[  159.516892][ T7002]  ? ocfs2_block_group_search+0x470/0x470
[  159.522626][ T7002]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  159.528532][ T7002]  ? _raw_spin_unlock+0x40/0x40
[  159.533399][ T7002]  ? stack_trace_save+0xaa/0x100
[  159.538350][ T7002]  ? stack_trace_snprint+0xf0/0xf0
[  159.543499][ T7002]  ? __stack_depot_save+0x575/0x660
[  159.548822][ T7002]  ? kasan_set_track+0x5f/0x70
[  159.553609][ T7002]  ? kasan_set_track+0x4e/0x70
[  159.558387][ T7002]  ? __kasan_kmalloc+0x8f/0xa0
[  159.563170][ T7002]  ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0
[  159.569713][ T7002]  ? ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  159.575533][ T7002]  ? ocfs2_xattr_set+0xc75/0x13a0
[  159.580569][ T7002]  ? __vfs_setxattr+0x437/0x470
[  159.585430][ T7002]  ? __vfs_setxattr_noperm+0x12a/0x5e0
[  159.590905][ T7002]  ? vfs_setxattr+0x16b/0x2f0
[  159.595655][ T7002]  ? ovl_get_workdir+0xc17/0x1770
[  159.600690][ T7002]  ? ovl_fill_super+0x1436/0x3750
[  159.605733][ T7002]  ? get_tree_nodev+0xb5/0x140
[  159.610507][ T7002]  ? vfs_get_tree+0x8c/0x280
[  159.615105][ T7002]  ? do_new_mount+0x24a/0xa40
[  159.619794][ T7002]  ? __se_sys_mount+0x2e7/0x3d0
[  159.624662][ T7002]  ? do_syscall_64+0x55/0xb0
[  159.629319][ T7002]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.635421][ T7002]  ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  159.641777][ T7002]  ? ocfs2_init_steal_slots+0x160/0x160
[  159.647338][ T7002]  ? ocfs2_xattr_block_set+0x2dc0/0x2dc0
[  159.653008][ T7002]  ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  159.658675][ T7002]  ? _raw_spin_unlock+0x28/0x40
[  159.663556][ T7002]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  159.669637][ T7002]  ? ocfs2_truncate_log_needs_flush+0x130/0x310
[  159.675894][ T7002]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  159.681798][ T7002]  ? down_write+0x16e/0x200
[  159.686357][ T7002]  ? down_read_killable+0x340/0x340
[  159.691575][ T7002]  ? up_write+0x1be/0x410
[  159.695932][ T7002]  ocfs2_xattr_set+0xc75/0x13a0
[  159.700817][ T7002]  ? __ocfs2_xattr_set_handle+0xf30/0xf30
[  159.706598][ T7002]  ? verify_lock_unused+0x140/0x140
[  159.711821][ T7002]  ? llist_add_batch+0x10f/0x1f0
[  159.716791][ T7002]  ? aa_get_newest_label+0xfd/0x5c0
[  159.722004][ T7002]  ? end_current_label_crit_section+0x170/0x170
[  159.728275][ T7002]  ? posix_xattr_acl+0x93/0xb0
[  159.733053][ T7002]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  159.738525][ T7002]  __vfs_setxattr+0x437/0x470
[  159.743305][ T7002]  __vfs_setxattr_noperm+0x12a/0x5e0
[  159.748608][ T7002]  vfs_setxattr+0x16b/0x2f0
[  159.753135][ T7002]  ? xattr_permission+0x460/0x460
[  159.758259][ T7002]  ? up_write+0x1be/0x410
[  159.762639][ T7002]  ovl_get_workdir+0xc17/0x1770
[  159.767678][ T7002]  ? ovl_fill_super+0x3750/0x3750
[  159.772720][ T7002]  ? __lock_acquire+0x7d80/0x7d80
[  159.777760][ T7002]  ? _raw_spin_unlock+0x28/0x40
[  159.782623][ T7002]  ? ovl_inuse_trylock+0xbd/0xd0
[  159.787585][ T7002]  ovl_fill_super+0x1436/0x3750
[  159.792448][ T7002]  ? lock_chain_count+0x20/0x20
[  159.797313][ T7002]  ? ida_alloc_range+0x7d0/0x860
[  159.802266][ T7002]  ? virtio_fs_zero_page_range+0x140/0x140
[  159.808084][ T7002]  ? sget_fc+0x7f5/0x8d0
[  159.812335][ T7002]  ? __lock_acquire+0x7d80/0x7d80
[  159.817369][ T7002]  ? down_write+0x16e/0x200
[  159.821887][ T7002]  ? sget_fc+0x7f5/0x8d0
[  159.826135][ T7002]  ? kill_litter_super+0xb0/0xb0
[  159.831083][ T7002]  ? virtio_fs_zero_page_range+0x140/0x140
[  159.836898][ T7002]  get_tree_nodev+0xb5/0x140
[  159.841500][ T7002]  vfs_get_tree+0x8c/0x280
[  159.846067][ T7002]  do_new_mount+0x24a/0xa40
[  159.850583][ T7002]  __se_sys_mount+0x2e7/0x3d0
[  159.855277][ T7002]  ? __x64_sys_mount+0xc0/0xc0
[  159.860052][ T7002]  ? lockdep_hardirqs_on+0x98/0x150
[  159.865266][ T7002]  ? __x64_sys_mount+0x20/0xc0
[  159.870079][ T7002]  do_syscall_64+0x55/0xb0
[  159.874508][ T7002]  ? clear_bhb_loop+0x40/0x90
[  159.879193][ T7002]  ? clear_bhb_loop+0x40/0x90
[  159.883877][ T7002]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.889788][ T7002] RIP: 0033:0x7f42f0d9de59
[  159.894335][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.913956][ T7002] RSP: 002b:00007f42f1d21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  159.922380][ T7002] RAX: ffffffffffffffda RBX: 00007f42f1025fa0 RCX: 00007f42f0d9de59
[  159.930362][ T7002] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  159.938342][ T7002] RBP: 00007f42f0e33e6f R08: 0000200000000680 R09: 0000000000000000
[  159.946333][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.954309][ T7002] R13: 00007f42f1026038 R14: 00007f42f1025fa0 R15: 00007ffcb3806b58
[  159.962298][ T7002]  </TASK>
[  159.985801][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout
[  159.996540][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout
[  160.002731][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout
[  160.009444][   T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  160.059968][ T7002] overlayfs: upper fs missing required features.
[  160.131830][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  160.496304][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  160.709400][ T5833] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.720999][ T5833] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  160.733205][ T5833] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  160.742445][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.750610][ T5833] usb 3-1: Product: syz
[  160.754782][ T5833] usb 3-1: Manufacturer: syz
[  160.759461][ T5833] usb 3-1: SerialNumber: syz
[  160.769670][ T5833] cdc_mbim 3-1:1.0: skipping garbage
[  160.970942][ T7031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  161.583249][ T7031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  161.590907][ T5833] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  161.599054][ T5833] cdc_mbim 3-1:1.0: setting rx_max = 2048
[  161.792254][ T5833] cdc_mbim 3-1:1.0: setting tx_max = 32
[  161.799620][ T5833] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  161.808361][ T5833] wwan wwan0: port wwan0mbim0 attached
[  161.817524][ T5833] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 1a:b3:7b:b9:19:f3
[  161.832443][ T5833] usb 3-1: USB disconnect, device number 6
[  161.839453][ T5833] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  161.918398][ T5833] wwan wwan0: port wwan0mbim0 disconnected