last executing test programs:

1m31.934275255s ago: executing program 2 (id=192):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42)
read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020)

1m31.863726113s ago: executing program 2 (id=194):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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")
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x400, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc8)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

1m28.801067027s ago: executing program 2 (id=210):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1084008, &(0x7f0000000180)={[{@nodecompose}, {@nodecompose}]}, 0x3, 0x6a8, &(0x7f00000011c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r4)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a80)={0x4}, 0x8)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@type={'type', 0x3d, "883b7f38"}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {}, {@uid}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "85f19471"}}, {@barrier}, {@creator={'creator', 0x3d, "65fe04c2"}}, {@umask={'umask', 0x3d, 0x8f}}, {}, {@force}, {@uid}, {@creator={'creator', 0x3d, "0100"}}, {@force}, {@nobarrier}]}, 0x1, 0x6f8, &(0x7f0000000ac0)="$eJzs3UtoHOcdAPD/rFYrrQuOnPiRlkCWGNJSUVuyUFr1UreUokMoIT30vNhyLLyWg6QU2ZRG6ePeQ049pQfdQg8lhR4N7bkhtOSqY6CQS06CHlRmdmY1u9qXbEmW299PzMw332u++c/OzD4QE8D/reXZqD6OJJZn39xK13d3FloTOwtTeXErImoRUYmotheRrEVaOtHp4utpZp5OBm3nw9Wltz//aveL9lo1n7L6lWHt+qgdztrOp2jkI2v0bTk5oMdPejff1d+tgf2NK+ns4c2IuJovI/7wVL3CU9s/ZLtT9vG/snl75T99mx/lvAXOqKR8Ry+ZiTgXEdMR2V0/8qtD5XRHN9Q/n6TR9vGPAwAAAE5W/ehNXtiLvdiK8ycxHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhflT//P8mnSpFuRFI8/7+W50WePoNGPwjxs6n28vHJDwYAAAAAAAAATtyre7EXW3G+WN9Pst/8Xyv9xv+1eC82YiXW41psRTM2YzPWYz4iZkod1baam5vr81nLiItDWt6IT/u0vDF4jDePeZ8BAAAAAAAA4IybHlF+b/Jw3q9j+eD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAuSiIn2IpsuFumZqFQjYjoiamm97YhPi/RzIumX+fj0xwEAAABPZbp7NZkeo80L78debMX5Yn0/yT7zX84+L0/He7EWm7Eam9GKlbidf4ZOP/VXdncWWrs7C/fT6XC/P/zySEPPeoz2dw/lLUdnyy9nNepxJ1aznGtxK5LYz1TyXl7e3VlIl/f7j+uDdEzJD3JDRjNRSt9OZ1c+ydK/7/4WoXqkXXxClYElM1npZCcic/nY0hYXigj0j8TIo1MduqX5qHS++bk4fEv9Y/7B8K2f66nV95ubZ6I3Ejei0jlCl4dHIuKbf/n453dba/fu3tmYPTu71Nf7I2v0RmKhFIkrpSjU//p8R2K0uSwSlzrry/GT+FnMxpdTb8V6rMYvohmbsdIoypv56zmdzwx/zXx2rrz21qiRpOdko7h+dX01W4ypEV1jikb8OEs147XsmJ6P1UjiQUSsxBvZ342Y71wNDo7wpTHO+soYV9qSq9/KFp0wRX1w3T+N1+VxSUN5oXNf6L7mzmRl5ZyDKL3YN0rFvW78+1FJ9Rt5Iu3hN0PvD6etNxLzpUi8NOj10g7pH/fT+UZr7d763ea7Y27v9XyZnke/O1N3ifQIvxjT+c5dyOZJdk7NZWUvde6w3fGq5b+4tFUOlV3qtGufqT+NB3G760z9bizGYixltS9ntScP3bHSsiudnrqv4WlZ+k6r2rl6lN9vPYhW+/0QAGfbuW+fq9X/Xf9H/aP6b+t3629O/2jqe1Ov1GLy75Pfr85NvF55JflzfBS/Ovj8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLmNh4/uNVutlfX+iUr/omR4q2Zrv3iQWP86cSgnyR+VM2I8aSLZePhof0Sd3kT05Ezlwxuz+Ukmiqc1jq7cOMFhJNu9x2t69LEonvKU5wzbi+RQwNPGTzzmYssHOZNn4FD2JhrH12Hxgi2fREd+9da7j1e7aCIi+p4yw00cw8UHeKaub95/9/rGw0ffWb3ffGflnZW1ycXFpbmlxTcWrt9Zba3MteelBqfy8FvgNJTfTnTUIuLV0W2HPKgVAAAAAAAAAAAAOEGn8b8Qz3ofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOfb8mxUH0cS83PX5tL13Z2FVjoV6YOa1YioRETyy4jkbxE3oz3FTKm7ZNB2Plxdevvzr3a/OOirWtSvRGwPbDee7XyKRkRM5Mvj6u/W6P5qB8mpPsVJJzJpwK4WgYNn7b8BAAD//3Lh6lg=")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, 0x0)

1m25.233485589s ago: executing program 2 (id=222):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c6869643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001f80)="$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")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000001c00)={0x0, 0x1619})

1m24.417259283s ago: executing program 2 (id=227):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x43, &(0x7f0000000180), 0x0, 0x559e, &(0x7f0000005680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80c00, 0x0)
mkdirat(r0, 0x0, 0x0)
r1 = open$dir(&(0x7f0000001a40)='./file0\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x0)

1m23.254509028s ago: executing program 2 (id=232):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0})

1m21.292440445s ago: executing program 32 (id=232):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001cc0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0})

57.872920562s ago: executing program 1 (id=301):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = inotify_init()
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1)

55.588266965s ago: executing program 1 (id=306):
r0 = socket(0x10, 0x80002, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r6 = openat$dsp(0xffffff9c, &(0x7f0000000240), 0x40, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d08, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x5c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x48, 0x1, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team0\x00'})
socket$key(0xf, 0x3, 0x2)
r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0)

50.824186296s ago: executing program 1 (id=318):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000200))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000dc0)="d0b4163e96457321d877d01ac22c", 0xe, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r2, 0x1, 0x70, 0x6, @broadcast}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010000000000000000", @ANYRES32=r2], 0x20}}, 0x0)

50.403710904s ago: executing program 1 (id=321):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

49.104068955s ago: executing program 1 (id=326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x2, 0x3, 0x6)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r4)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(r3, 0xffffffffffffffff, 0x0)

48.082242533s ago: executing program 1 (id=328):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])

47.318169301s ago: executing program 33 (id=328):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])

5.495804545s ago: executing program 0 (id=509):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x11000, 0xfde, 0x10, 0x0, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x818, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

5.003697102s ago: executing program 5 (id=517):
socket(0x1, 0x803, 0x4000001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2})
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
ioperm(0x0, 0xab4b, 0x21000000007)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201fffc)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)

4.102538136s ago: executing program 0 (id=521):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

3.260460083s ago: executing program 5 (id=522):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xa, 0x8}, 0x10)

3.086401023s ago: executing program 0 (id=525):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61)

2.994459424s ago: executing program 5 (id=526):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

2.994332414s ago: executing program 6 (id=527):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000140000000073b4c01fc15ca8dd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d0a9575c54d3635d0bfe4f1c7021f"], 0x1, 0x176, &(0x7f0000000440)="$eJzskbtOAkEYhc8sw83CaGJFA4lGsVB2FzXGRkvsfQAJrEhcvLAkCqFYYwyFhbH0CXgNE19AC0OsrSmItVkzlx1nn8H5ij3znznzz2VPg6sgC+BnNmzgAJwU5vFOCCiAIhHe1BL6JPVD6qMQvMncofTvpBaC/uCs7vtet7RXwmLCAPDNPWUF+7cWprzVZDZssMExgCiKIuY1ARaHnkl9Ur5RnClQYIlfIlIZlmDFGoBKr3NZCfqDjXan3vJa3rnrVnfsLdvedisnbd+zxZdoW8irgOk6APZeeW0+DeBeZuaQhGhHk/NEX5vR3rC8nFxrIa/GcQ+CF7U2i/h/AUdYRQ7AdUj+3InoQsGvVANBShYO1c4nUjk+sdm48JsjEJB42RhU9XC+kFaFqxfV3TA+6kjqitSa1LH2jIxiJmlQ3uFBVuUwPmLXYcGbeq/XdYCMGLnKcxdCaI3Yrs9W8nKvFgwGg8FgMBgMBoPhv/MbAAD//1UIdO8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c000000010000000000000000000000000000009da9af2da9cec239be75d88b19125f436796d2ed93c986656e38c4f2c40bfabef84d40c1c02c2843915f78df93ff2d009dd0"], 0x0)

2.950122929s ago: executing program 4 (id=528):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.903449794s ago: executing program 3 (id=529):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r0, 0x781, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800000, &(0x7f0000000280), 0x1, 0x79d, &(0x7f00000007c0)="$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")
utimes(&(0x7f0000000280)='./file0\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$bt_hci(r1, 0x84, 0x1b, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc1485544, &(0x7f0000000040))

2.865245969s ago: executing program 0 (id=530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000580)=ANY=[], 0x1, 0x1d0, &(0x7f0000000700)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2.792341787s ago: executing program 5 (id=531):
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42)
read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020)

2.791791437s ago: executing program 4 (id=532):
socket$kcm(0x11, 0x200000000000007, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x101, 0x0, 0x7fffffff, 0x7760, 0x9, 0x67, 0xffffffff}, 0x1c)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000e00), 0x12)
bind$x25(r2, &(0x7f0000000080), 0x12)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r4, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000700)={'bond0\x00'})

2.562545564s ago: executing program 6 (id=533):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc850)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.923170127s ago: executing program 6 (id=534):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000001c0)=0x4000001)
ioctl$SNDCTL_TMR_START(r0, 0x5402)

1.837928997s ago: executing program 0 (id=535):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47f9, 0x1, 0xc, 0x0, 0x0)

1.754620597s ago: executing program 3 (id=536):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

1.72324908s ago: executing program 5 (id=537):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x3bb)

1.674913096s ago: executing program 4 (id=538):
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
close(r0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1.450520892s ago: executing program 6 (id=539):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000300)=""/273, 0x111)

1.369420212s ago: executing program 5 (id=540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61)

1.335760406s ago: executing program 3 (id=541):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

1.202461681s ago: executing program 4 (id=542):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1, 0x2d7, &(0x7f0000000a00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)

1.066966057s ago: executing program 6 (id=543):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = inotify_init()
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

894.235816ms ago: executing program 3 (id=544):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10408}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0)
r2 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x0, &(0x7f00000030c0))
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
pipe(&(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000080))
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8918, &(0x7f0000000000)={'geneve0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x8, 0x7fffffff00000, 0x80})

893.697397ms ago: executing program 0 (id=545):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$ttys(0xc, 0x2, 0x0)
socket(0x11, 0x80a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYBLOB="05"], 0x0)
fcntl$lock(r0, 0x26, 0x0)

746.434314ms ago: executing program 4 (id=546):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000080)=ANY=[@ANYBLOB='anchor=0\x00000000000000000001,\x00'], 0x1, 0xc77, &(0x7f0000000200)="$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")

676.661652ms ago: executing program 6 (id=547):
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42)
read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020)

93.463909ms ago: executing program 3 (id=548):
syz_emit_ethernet(0xb5, &(0x7f00000003c0)=ANY=[], 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='rtc_alarm_irq_enable\x00', r2}, 0x10)
ioctl$RTC_SET_TIME(r1, 0x7001, 0x0)

2.43057ms ago: executing program 4 (id=549):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x16a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9", 0x9a}, {&(0x7f0000000180)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a0", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {&(0x7f0000000a00)="91f863dc974c0b31640ea56f5f2219e02b867338a4451b988393b9364939b45ee08a130e785e56198dbd0b4eed94352b188d74078f545ed6f7a9860324bf3f63326549b3f6dd96ebd6c43870644a554bf8ee7b9409ca7f4a01aafd53907fb1477d67bb5d06ee9a00256d651d8496", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a7", 0x9}], 0x1}}], 0x3, 0xc0)

0s ago: executing program 3 (id=550):
pipe2$9p(&(0x7f0000000200), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x1000000, @broadcast}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

eady
[   58.948448][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.956695][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.965635][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.989651][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.998113][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.007028][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.016562][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.027388][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.051709][ T4244] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.069810][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.082378][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.094762][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.102142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.112650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.122334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.133087][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.150369][ T4256] device veth0_macvtap entered promiscuous mode
[   59.162208][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.174333][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.186264][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.195714][ T4254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.211502][ T4254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.221101][ T4254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.236331][ T4254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.247576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.260705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.272171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.281480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.292508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.311271][ T4256] device veth1_macvtap entered promiscuous mode
[   59.321680][ T4248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.331981][ T4248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.341082][ T4248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.353676][ T4248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.380089][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.392141][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.402559][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.413792][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.426227][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.453719][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.469909][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.486163][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.496911][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.507288][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.518221][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.530870][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.552672][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.562168][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.580195][ T4256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.591078][ T4256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.600329][ T4256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.610522][ T4256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.639031][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.648907][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.680985][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.690242][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.741635][ T4244] device veth0_vlan entered promiscuous mode
[   59.775323][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.791115][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.800036][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.808280][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.819756][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.829088][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.862282][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.863354][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.870362][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.887579][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.888953][ T4252] device veth0_vlan entered promiscuous mode
[   59.919532][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.926947][ T4257] Bluetooth: hci1: command tx timeout
[   59.926983][ T4257] Bluetooth: hci3: command tx timeout
[   59.933515][ T4251] Bluetooth: hci0: command tx timeout
[   59.946994][ T4244] device veth1_vlan entered promiscuous mode
[   59.968245][ T4252] device veth1_vlan entered promiscuous mode
[   59.980242][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.990540][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.004182][ T4251] Bluetooth: hci2: command tx timeout
[   60.009622][ T4251] Bluetooth: hci4: command tx timeout
[   60.015142][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.026444][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.034745][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.043103][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.051100][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.090492][ T4244] device veth0_macvtap entered promiscuous mode
[   60.103782][ T4244] device veth1_macvtap entered promiscuous mode
[   60.113219][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.121502][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.160896][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.162586][ T4252] device veth0_macvtap entered promiscuous mode
[   60.171236][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.179300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.192212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.200961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.209233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.218396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.227439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.236590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.244878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.253344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.280822][ T4252] device veth1_macvtap entered promiscuous mode
[   60.288137][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.296367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.303140][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.311659][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.320031][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.334529][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.351337][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.361253][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.376963][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.386850][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.397327][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.410066][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.430874][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.444690][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.455426][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.466014][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.480878][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.492658][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.503102][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.513690][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.525244][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.532653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.541050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.549725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.558543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.569220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.578768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.597801][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.613780][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.624135][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.634886][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.645500][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.656421][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.668023][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.679765][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.699076][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.709273][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.720279][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.733208][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.744072][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.764713][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.776261][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.790014][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.820756][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.847858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.857902][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.869225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.895941][ T4244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.967046][ T4244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.002589][ T4244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.014911][ T4244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.036619][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.050922][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.061270][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.075706][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.862274][ T4251] Bluetooth: hci4: command tx timeout
[   63.017686][ T4334] sch_tbf: peakrate 7 is lower than or equals to rate 62733 !
[   63.035246][ T4257] Bluetooth: hci0: command tx timeout
[   63.040782][ T4257] Bluetooth: hci3: command tx timeout
[   63.042046][ T4251] Bluetooth: hci1: command tx timeout
[   63.046677][ T4258] Bluetooth: hci2: command tx timeout
[   63.370237][ T4341] Zero length message leads to an empty skb
[   63.479365][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.496062][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.499901][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.539501][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.550003][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.561914][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.565409][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.572943][ T4293] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   63.582995][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.593974][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.600544][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.657080][ T4354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'.
[   63.668337][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.679423][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.728813][ T4356] loop3: detected capacity change from 0 to 512
[   63.788844][ T4356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   63.875582][ T4356] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   63.884964][ T4356] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.953179][ T4293] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.969627][ T4293] usb 3-1: config 0 has no interfaces?
[   65.120897][ T4254] EXT4-fs (loop3): unmounting filesystem.
[   65.193954][ T4293] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   65.203532][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.211556][ T4293] usb 3-1: Product: syz
[   65.223372][ T4293] usb 3-1: Manufacturer: syz
[   65.228005][ T4293] usb 3-1: SerialNumber: syz
[   65.250204][ T4293] usb 3-1: config 0 descriptor??
[   65.353623][ T4385] tmpfs: Bad value for 'mpol'
[   65.368101][ T4368] device vlan2 entered promiscuous mode
[   65.557996][ T4293] usb 3-1: USB disconnect, device number 2
[   66.787943][ T4392] sch_tbf: peakrate 7 is lower than or equals to rate 62733 !
[   66.842758][    C0] sched: RT throttling activated
[   66.849892][ T4397] loop3: detected capacity change from 0 to 512
[   67.040086][ T4397] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   67.083654][ T4397] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[   67.099357][ T4397] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended
[   67.368921][ T4397] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   67.493266][ T4397] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.19: corrupted in-inode xattr
[   67.664362][ T4397] EXT4-fs (loop3): Remounting filesystem read-only
[   67.667669][ T4405] netlink: 'syz.2.22': attribute type 21 has an invalid length.
[   67.670990][ T4397] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.19: couldn't read orphan inode 15 (err -117)
[   67.762964][ T4405] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   67.784046][ T4397] EXT4-fs (loop3): Remounting filesystem read-only
[   67.798588][ T4397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   68.096788][ T4254] EXT4-fs (loop3): unmounting filesystem.
[   68.533622][ T4420] sctp: [Deprecated]: syz.2.22 (pid 4420) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.533622][ T4420] Use struct sctp_sack_info instead
[   69.410723][ T4437] loop3: detected capacity change from 0 to 16
[   69.447645][ T4437] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   69.475371][ T4437] cramfs: empty filesystem
[   69.939077][ T4447] sch_tbf: peakrate 7 is lower than or equals to rate 62733 !
[   70.569674][ T4421] loop0: detected capacity change from 0 to 40427
[   70.715930][ T4421] F2FS-fs (loop0): invalid crc value
[   70.781097][ T4421] F2FS-fs (loop0): Found nat_bits in checkpoint
[   70.895858][ T4287] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   70.931612][ T4421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   71.183374][ T4287] usb 4-1: Using ep0 maxpacket: 8
[   71.294389][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[   71.302189][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[   71.316823][ T4287] usb 4-1: config 0 has an invalid interface number: 33 but max is 1
[   71.441181][ T4287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.685320][ T4287] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[   71.696257][ T4287] usb 4-1: config 0 has no interface number 0
[   71.711459][ T4244] syz-executor: attempt to access beyond end of device
[   71.711459][ T4244] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   71.712840][ T4287] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[   71.932919][ T4287] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[   71.934282][ T4339] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   71.963701][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.981999][ T4287] usb 4-1: Product: syz
[   71.986343][ T4287] usb 4-1: Manufacturer: syz
[   71.990957][ T4287] usb 4-1: SerialNumber: syz
[   72.009334][ T4287] usb 4-1: config 0 descriptor??
[   72.066613][ T4287] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[   72.213995][ T4339] usb 3-1: Using ep0 maxpacket: 32
[   72.287655][ T2303] pvrusb2: Invalid write control endpoint
[   72.312579][ T2303] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[   72.335711][ T2303] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[   72.365040][ T4339] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   72.382978][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.400632][ T4339] usb 3-1: config 0 descriptor??
[   72.455601][ T4339] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   73.079349][ T4486] sch_tbf: peakrate 7 is lower than or equals to rate 62733 !
[   73.193660][ T4339] gspca_vc032x: reg_w err -71
[   73.199097][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.348064][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.413224][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.676397][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.694728][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.708929][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.761949][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.795159][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.800551][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.811215][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   73.827951][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.839096][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.849328][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.859226][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.867001][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.872420][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.881298][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.888545][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.895065][ T4339] gspca_vc032x: I2c Bus Busy Wait 00
[   73.903482][ T4339] gspca_vc032x: Unknown sensor...
[   73.908589][ T4339] vc032x: probe of 3-1:0.0 failed with error -22
[   73.927817][ T4339] usb 3-1: USB disconnect, device number 3
[   74.033047][  T128] usb 4-1: USB disconnect, device number 2
[   74.102961][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   74.286613][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.386988][ T4499] tmpfs: Unknown parameter 'usrquota'
[   74.392782][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.405699][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.415473][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.425026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.439963][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.452560][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.463045][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.474598][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.963071][ T4501] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   75.352821][   T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   75.602863][   T14] usb 3-1: Using ep0 maxpacket: 8
[   75.645733][ T4504] overlayfs: failed to resolve './file1': -2
[   75.665695][ T4504] loop3: detected capacity change from 0 to 256
[   75.723018][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.738383][ T4504] FAT-fs (loop3): bogus number of directory entries (4)
[   75.747629][   T14] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[   75.783351][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.783375][ T4504] FAT-fs (loop3): Can't find a valid FAT filesystem
[   75.815324][   T14] usb 3-1: config 0 descriptor??
[   75.834036][ T4531] loop0: detected capacity change from 0 to 128
[   75.874372][   T14] usb 3-1: bad CDC descriptors
[   75.888808][   T14] usb 3-1: bad CDC descriptors
[   76.753966][    T7] cfg80211: failed to load regulatory.db
[   76.823127][ T4506] loop2: detected capacity change from 0 to 1024
[   77.231664][ T4506] hfsplus: failed to load root directory
[   77.482867][ T4288] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   77.528820][ T4321] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   79.251490][ T4286] usb 3-1: USB disconnect, device number 4
[   79.307202][ T4288] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   79.317825][ T4288] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   79.331845][ T4288] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   79.341235][ T4288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.612868][ T4288] usb 5-1: usb_control_msg returned -32
[   79.619073][ T4288] usbtmc 5-1:16.0: can't read capabilities
[   79.709233][ T4600] usb usb8: usbfs: process 4600 (syz.2.59) did not claim interface 0 before use
[   80.505638][ T4286] usb 5-1: USB disconnect, device number 2
[   81.834751][ T4613] tmpfs: Unknown parameter 'usrquota'
[   82.192702][ T4620] tmpfs: Bad value for 'huge'
[   83.701628][ T4642] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   84.628370][ T4656] loop2: detected capacity change from 0 to 512
[   84.661788][ T4656] =======================================================
[   84.661788][ T4656] WARNING: The mand mount option has been deprecated and
[   84.661788][ T4656]          and is ignored by this kernel. Remove the mand
[   84.661788][ T4656]          option from the mount to silence this warning.
[   84.661788][ T4656] =======================================================
[   84.742832][ T4656] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.80: iget: bogus i_mode (0)
[   84.764688][ T4656] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.80: couldn't read orphan inode 17 (err -117)
[   84.781859][ T4377] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   84.790582][ T4662] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   84.797397][ T4662] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   84.810506][ T4656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   84.885932][ T4656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.80: bg 0: block 7: invalid block bitmap
[   84.968839][ T4664] loop4: detected capacity change from 0 to 2048
[   84.992917][ T4248] EXT4-fs (loop2): unmounting filesystem.
[   84.992925][ T4377] usb 2-1: device descriptor read/64, error -71
[   85.051416][ T4664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   85.417189][ T4675] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   85.433491][ T4675] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   85.446159][ T4675] EXT4-fs (loop4): This should not happen!! Data will be lost
[   85.446159][ T4675] 
[   85.456547][ T4675] EXT4-fs (loop4): Total free blocks count 0
[   85.462591][ T4675] EXT4-fs (loop4): Free/Dirty block details
[   85.468785][ T4675] EXT4-fs (loop4): free_blocks=2415919104
[   85.474664][ T4675] EXT4-fs (loop4): dirty_blocks=64
[   85.479842][ T4675] EXT4-fs (loop4): Block reservation details
[   85.485923][ T4675] EXT4-fs (loop4): i_reserved_data_blocks=4
[   85.521541][ T4377] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   85.733180][ T4377] usb 2-1: device descriptor read/64, error -71
[   85.853179][ T4377] usb usb2-port1: attempt power cycle
[   85.930701][ T4376] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   85.962442][ T4674] loop3: detected capacity change from 0 to 8192
[   87.350622][ T4685] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   88.478131][ T4685] loop0: detected capacity change from 0 to 256
[   89.559571][ T4377] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   89.592970][ T4251] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   89.601571][ T4251] Bluetooth: hci2: Injecting HCI hardware error event
[   89.612986][ T4257] Bluetooth: hci2: hardware error 0x00
[   89.655869][ T4685] FAT-fs (loop0): bogus number of directory entries (4)
[   89.665053][ T4685] FAT-fs (loop0): Can't find a valid FAT filesystem
[   89.812103][ T4695] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   89.818684][ T4695] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   89.873968][ T4377] usb 2-1: device not accepting address 4, error -71
[   90.192039][ T4707] loop2: detected capacity change from 0 to 512
[   90.203068][ T4286] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   90.628203][ T4707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   90.643909][ T4707] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.812861][ T4286] usb 5-1: Using ep0 maxpacket: 8
[   91.112209][ T4248] EXT4-fs (loop2): unmounting filesystem.
[   91.163017][ T4286] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   91.172095][ T4286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.210674][ T4286] usb 5-1: Product: syz
[   91.220791][ T4286] usb 5-1: Manufacturer: syz
[   91.226002][ T4286] usb 5-1: SerialNumber: syz
[   91.253691][ T4286] usb 5-1: config 0 descriptor??
[   91.454660][ T4286] gspca_main: se401-2.14.0 probing 047d:5003
[   91.723084][ T4257] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   92.043469][ T4286] gspca_se401: Wrong descriptor type
[   92.251171][ T4286] usb 5-1: USB disconnect, device number 3
[   92.385087][ T4730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.102'.
[   92.408477][ T4730] bridge0: port 3(vlan2) entered blocking state
[   92.462896][ T4730] bridge0: port 3(vlan2) entered disabled state
[   92.628642][ T4732] loop3: detected capacity change from 0 to 16
[   92.639948][ T4732] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[   92.652437][ T4732] erofs: (device loop3): mounted with root inode @ nid 36.
[   92.664392][ T4732] syz.3.103: attempt to access beyond end of device
[   92.664392][ T4732] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[   92.680144][ T4732] syz.3.103: attempt to access beyond end of device
[   92.680144][ T4732] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[   92.764420][ T4734] loop2: detected capacity change from 0 to 256
[   92.933796][ T4736] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   92.940256][ T4736] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   92.964715][ T4738] loop4: detected capacity change from 0 to 64
[   93.445643][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'.
[   93.628692][ T4751] process 'syz.3.111' launched './file1' with NULL argv: empty string added
[   94.284818][ T4752] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   94.632652][ T4769] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   94.639144][ T4769] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   94.658287][ T4766] loop0: detected capacity change from 0 to 2048
[   94.869987][ T4776] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   94.933589][ T4776] loop2: detected capacity change from 0 to 256
[   94.961736][ T4776] FAT-fs (loop2): bogus number of directory entries (4)
[   94.969215][ T4776] FAT-fs (loop2): Can't find a valid FAT filesystem
[   95.205374][ T4766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   95.468265][ T4781] loop3: detected capacity change from 0 to 1024
[   95.476584][ T4781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   95.617582][ T4781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f00cc01c, mo2=0002]
[   95.635042][ T4781] System zones: 0-1, 3-36
[   95.735281][ T4786] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   95.750585][ T4786] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   95.763570][ T4786] EXT4-fs (loop0): This should not happen!! Data will be lost
[   95.763570][ T4786] 
[   95.773316][ T4786] EXT4-fs (loop0): Total free blocks count 0
[   95.779359][ T4786] EXT4-fs (loop0): Free/Dirty block details
[   95.785369][ T4786] EXT4-fs (loop0): free_blocks=2415919104
[   95.791156][ T4786] EXT4-fs (loop0): dirty_blocks=64
[   95.796351][ T4786] EXT4-fs (loop0): Block reservation details
[   95.802409][ T4786] EXT4-fs (loop0): i_reserved_data_blocks=4
[   96.000388][ T4781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   96.256108][   T46] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   96.931189][ T4254] EXT4-fs (loop3): unmounting filesystem.
[   97.071561][ T4802] loop2: detected capacity change from 0 to 512
[   97.098515][ T4802] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   97.255727][ T4802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[   97.269249][ T4802] EXT4-fs (loop2): orphan cleanup on readonly fs
[   97.286299][ T4802] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.123: bg 0: block 361: padding at end of block bitmap is not set
[   97.305785][ T4802] EXT4-fs (loop2): Remounting filesystem read-only
[   97.312402][ T4802] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   97.322835][ T4802] EXT4-fs (loop2): Remounting filesystem read-only
[   97.329409][ T4802] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.123: attempt to clear invalid blocks 33619980 len 1
[   97.353461][ T4802] EXT4-fs (loop2): Remounting filesystem read-only
[   97.362994][ T4802] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.123: invalid indirect mapped block 1811939328 (level 0)
[   97.378535][ T4802] EXT4-fs (loop2): Remounting filesystem read-only
[   97.385396][ T4802] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.123: invalid indirect mapped block 2185560079 (level 1)
[   97.401177][ T4802] EXT4-fs (loop2): Remounting filesystem read-only
[   97.409570][ T4802] EXT4-fs (loop2): 1 truncate cleaned up
[   97.415448][ T4802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   97.524052][ T4801] loop4: detected capacity change from 0 to 1764
[   97.713847][ T4248] EXT4-fs (loop2): unmounting filesystem.
[   97.942934][ T4293] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   98.382897][ T4293] usb 2-1: Using ep0 maxpacket: 16
[   98.583469][ T4293] usb 2-1: config 230 has an invalid interface number: 115 but max is 0
[   98.649951][ T4293] usb 2-1: config 230 has no interface number 0
[   98.788573][ T4817] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   98.827927][ T4293] usb 2-1: config 230 interface 115 has no altsetting 0
[   99.013020][ T4293] usb 2-1: New USB device found, idVendor=0403, idProduct=fb59, bcdDevice=ad.05
[   99.032352][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.082001][ T4826] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   99.088505][ T4826] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   99.088561][ T4293] usb 2-1: Product: syz
[   99.128870][ T4293] usb 2-1: Manufacturer: syz
[   99.143449][ T4293] usb 2-1: SerialNumber: syz
[   99.167156][ T4828] loop0: detected capacity change from 0 to 64
[   99.244979][ T4828] hfs: get root inode failed
[   99.493981][ T4293] ftdi_sio 2-1:230.115: FTDI USB Serial Device converter detected
[   99.513208][ T4293] ftdi_sio ttyUSB0: unknown device type: 0xad05
[   99.526329][ T4293] usb 2-1: USB disconnect, device number 6
[   99.539833][ T4293] ftdi_sio 2-1:230.115: device disconnected
[  100.253710][ T4839] loop4: detected capacity change from 0 to 1024
[  104.035725][ T4839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.175869][ T4836] program syz.4.132 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.186045][ T4836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  104.289332][ T4841] loop2: detected capacity change from 0 to 2048
[  105.093780][ T4841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  106.719535][ T4863] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  106.889594][ T4248] EXT4-fs (loop2): unmounting filesystem.
[  107.039035][ T4870] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  107.045525][ T4870] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  107.066634][ T4872] loop2: detected capacity change from 0 to 1024
[  107.131554][ T4872] hfsplus: extend alloc file! (8192,8,110)
[  107.249636][ T4872] netlink: 232 bytes leftover after parsing attributes in process `syz.2.139'.
[  107.321411][ T4872] netlink: 72 bytes leftover after parsing attributes in process `syz.2.139'.
[  107.485610][ T4878] loop1: detected capacity change from 0 to 2048
[  107.604818][ T4878] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  107.650525][ T4878] UDF-fs: Scanning with blocksize 512 failed
[  107.685200][ T4878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.928678][ T4892] loop3: detected capacity change from 0 to 2048
[  108.951877][ T4892] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  108.995094][ T4892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.014980][ T4895] loop1: detected capacity change from 0 to 512
[  109.024714][ T4890] loop4: detected capacity change from 0 to 1024
[  109.041461][ T4895] EXT4-fs: Ignoring removed orlov option
[  109.068207][ T4895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c028, mo2=0002]
[  109.178168][ T4890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  109.197348][ T4895] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  109.232845][ T4895] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  109.270033][ T4895] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.148: Corrupt directory, running e2fsck is recommended
[  109.404502][ T4890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  110.033127][ T4901] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  110.865312][ T4895] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  110.884059][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  110.920300][ T4912] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  110.926837][ T4912] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  110.943409][ T4895] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.148: corrupted in-inode xattr
[  110.993273][ T4895] EXT4-fs (loop1): Remounting filesystem read-only
[  111.000560][ T4895] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.148: couldn't read orphan inode 15 (err -117)
[  111.045127][ T4914] loop4: detected capacity change from 0 to 512
[  111.052394][ T4895] EXT4-fs (loop1): Remounting filesystem read-only
[  111.067872][ T4895] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  111.129469][ T4914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  111.161250][ T4914] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.354101][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  111.605113][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  112.353845][ T4941] loop4: detected capacity change from 0 to 2048
[  112.483752][ T4941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  112.512523][ T4949] loop3: detected capacity change from 0 to 64
[  112.750351][ T4950] overlayfs: failed to resolve './file0': -2
[  113.696953][ T4952] loop1: detected capacity change from 0 to 256
[  113.740587][ T4952] FAT-fs (loop1): bogus number of directory entries (4)
[  113.747748][ T4952] FAT-fs (loop1): Can't find a valid FAT filesystem
[  114.355037][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  114.545827][ T4956] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  114.552275][ T4956] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  115.347176][ T4973] loop1: detected capacity change from 0 to 16
[  115.354826][ T4973] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  115.366810][ T4973] erofs: (device loop1): mounted with root inode @ nid 36.
[  115.377128][ T4973] syz.1.171: attempt to access beyond end of device
[  115.377128][ T4973] loop1: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  115.391521][ T4973] syz.1.171: attempt to access beyond end of device
[  115.391521][ T4973] loop1: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  116.302258][ T4984] loop1: detected capacity change from 0 to 2048
[  116.447533][ T4984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  116.467154][ T4991] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  116.473628][ T4991] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  116.804817][ T4997] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  116.820394][ T4997] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  116.832994][ T4997] EXT4-fs (loop1): This should not happen!! Data will be lost
[  116.832994][ T4997] 
[  116.842794][ T4997] EXT4-fs (loop1): Total free blocks count 0
[  116.848826][ T4997] EXT4-fs (loop1): Free/Dirty block details
[  116.854854][ T4997] EXT4-fs (loop1): free_blocks=2415919104
[  116.860666][ T4997] EXT4-fs (loop1): dirty_blocks=64
[  116.865899][ T4997] EXT4-fs (loop1): Block reservation details
[  116.871945][ T4997] EXT4-fs (loop1): i_reserved_data_blocks=4
[  117.248639][ T4297] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  117.581653][ T5006] loop4: detected capacity change from 0 to 16
[  117.602327][ T5006] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  117.614060][ T5006] erofs: (device loop4): mounted with root inode @ nid 36.
[  117.624236][ T5006] syz.4.184: attempt to access beyond end of device
[  117.624236][ T5006] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  117.639737][ T5006] syz.4.184: attempt to access beyond end of device
[  117.639737][ T5006] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  117.721023][ T4999] loop0: detected capacity change from 0 to 8192
[  117.753868][ T5012] loop1: detected capacity change from 0 to 512
[  117.768525][ T5012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  117.787052][ T5012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.831678][ T5012] EXT4-fs (loop1): 1 truncate cleaned up
[  117.846935][ T5012] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  118.871572][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  118.911047][ T5025] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  118.917571][ T5025] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  119.047048][ T5031] loop2: detected capacity change from 0 to 2048
[  119.130032][ T5031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  120.172605][ T5040] sch_tbf: peakrate 7 is lower than or equals to rate 62733 !
[  120.520564][ T5046] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  120.536653][ T5046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  120.549108][ T5046] EXT4-fs (loop2): This should not happen!! Data will be lost
[  120.549108][ T5046] 
[  120.558822][ T5046] EXT4-fs (loop2): Total free blocks count 0
[  120.566536][ T5046] EXT4-fs (loop2): Free/Dirty block details
[  120.572460][ T5046] EXT4-fs (loop2): free_blocks=2415919104
[  120.578965][ T5046] EXT4-fs (loop2): dirty_blocks=64
[  120.584168][ T5046] EXT4-fs (loop2): Block reservation details
[  120.590167][ T5046] EXT4-fs (loop2): i_reserved_data_blocks=4
[  120.641652][ T5049] syzkaller0: mtu less than device minimum
[  120.938382][ T5053] loop4: detected capacity change from 0 to 16
[  120.949487][ T5053] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  120.961382][ T5053] erofs: (device loop4): mounted with root inode @ nid 36.
[  120.970788][ T5053] syz.4.198: attempt to access beyond end of device
[  120.970788][ T5053] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  120.985172][ T5053] syz.4.198: attempt to access beyond end of device
[  120.985172][ T5053] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  121.179918][ T5056] loop1: detected capacity change from 0 to 4096
[  121.189756][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.200'.
[  121.226060][ T5056] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  121.716829][ T5071] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  121.723334][ T5071] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  121.969156][ T4297] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  122.131445][ T5078] tipc: Started in network mode
[  122.138999][ T5078] tipc: Node identity ac1414aa, cluster identity 4711
[  122.149982][ T5078] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  122.160210][ T5078] tipc: Enabled bearer <udp:s>, priority 10
[  122.284834][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  122.394732][ T5083] loop4: detected capacity change from 0 to 16
[  122.652561][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  122.937001][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  122.944772][ T5083] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  122.960383][ T5083] erofs: (device loop4): mounted with root inode @ nid 36.
[  122.999786][ T5081] syz.4.211: attempt to access beyond end of device
[  122.999786][ T5081] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  123.014516][ T5081] syz.4.211: attempt to access beyond end of device
[  123.014516][ T5081] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  123.216911][ T4290] tipc: Node number set to 2886997162
[  123.336970][ T5085] loop2: detected capacity change from 0 to 1024
[  123.352889][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  123.500734][ T5093] loop4: detected capacity change from 0 to 512
[  123.593516][ T5093] EXT4-fs: Ignoring removed i_version option
[  123.622852][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  123.686308][ T5093] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.801297][ T5099] loop2: detected capacity change from 0 to 1024
[  124.848297][ T5069] loop1: detected capacity change from 0 to 32768
[  125.013770][ T5069] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.205 (5069)
[  125.066710][ T5103] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  125.189495][ T5093] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.215: bad orphan inode 1
[  125.211792][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  125.277261][ T5099] hfsplus: failed to load root directory
[  125.351904][ T5069] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.376798][ T5069] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  125.406350][ T5069] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  125.428607][ T5069] BTRFS info (device loop1): use zstd compression, level 3
[  125.435660][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  125.554009][ T5069] BTRFS info (device loop1): using free space tree
[  125.689111][ T5122] loop2: detected capacity change from 0 to 1024
[  125.751533][ T5122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.829687][ T5069] BTRFS error (device loop1): open_ctree failed
[  125.917095][ T5139] loop4: detected capacity change from 0 to 16
[  125.945422][ T5139] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  125.956616][ T5139] erofs: (device loop4): mounted with root inode @ nid 36.
[  125.966303][ T5139] syz.4.223: attempt to access beyond end of device
[  125.966303][ T5139] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  125.981700][ T5139] syz.4.223: attempt to access beyond end of device
[  125.981700][ T5139] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  126.323656][    C1] net_ratelimit: 2 callbacks suppressed
[  126.323672][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  126.625897][ T4248] UDF-fs: error (device loop2): udf_read_inode: (ino 840) failed !bh
[  126.701102][ T4248] UDF-fs: error (device loop2): udf_read_inode: (ino 840) failed !bh
[  127.173935][ T5148] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  127.180410][ T5148] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  127.363239][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  127.421147][ T4248] syz-executor (4248) used greatest stack depth: 19800 bytes left
[  129.066881][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  129.432397][ T4556] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.700689][ T5168] loop0: detected capacity change from 0 to 4096
[  129.718001][ T5172] loop3: detected capacity change from 0 to 16
[  129.733409][ T5172] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  129.744399][ T5172] erofs: (device loop3): mounted with root inode @ nid 36.
[  129.754172][ T5172] syz.3.237: attempt to access beyond end of device
[  129.754172][ T5172] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  129.768548][ T5172] syz.3.237: attempt to access beyond end of device
[  129.768548][ T5172] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  129.819649][ T4556] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.859099][ T5168] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  130.022314][ T4556] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.092886][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  130.241025][ T4556] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.857272][ T4251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.876729][ T4251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.892388][ T4251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.948850][ T4245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.950015][ T5186] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  130.962301][ T5186] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  131.039571][ T4251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  131.063073][ T4251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.132892][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  131.346848][ T5196] loop0: detected capacity change from 0 to 1024
[  131.397499][ T5196] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.640168][ T5196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.162845][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  132.549017][ T5191] loop1: detected capacity change from 0 to 32768
[  132.896650][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  132.905661][ T2303] pvrusb2: request_firmware fatal error with code=-110
[  132.912552][ T2303] pvrusb2: Failure uploading firmware1
[  132.951872][ T5191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.244 (5191)
[  132.999395][ T2303] pvrusb2: Device initialization was not successful.
[  133.034381][ T2303] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  133.088450][ T2303] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  133.128067][ T4257] Bluetooth: hci1: command tx timeout
[  133.136672][  T128] pvrusb2: Device being rendered inoperable
[  133.202868][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  133.230410][ T4244] EXT4-fs (loop0): unmounting filesystem.
[  133.236359][ T5191] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.303062][ T5191] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  133.312020][ T5191] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  133.364270][ T5191] BTRFS info (device loop1): use zstd compression, level 3
[  133.397222][ T5191] BTRFS info (device loop1): using free space tree
[  133.622004][ T5204] loop3: detected capacity change from 0 to 32768
[  133.642949][ T5204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.247 (5204)
[  133.653710][ T5134] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  133.667939][ T5182] chnl_net:caif_netlink_parms(): no params data found
[  133.678160][ T5191] BTRFS info (device loop1): enabling ssd optimizations
[  133.688874][ T5204] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.724839][ T5204] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  133.761852][ T5204] BTRFS info (device loop3): using free space tree
[  133.872787][ T5134] usb 1-1: device descriptor read/64, error -71
[  133.957382][ T5204] BTRFS info (device loop3): enabling ssd optimizations
[  134.091408][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.123000][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.142875][ T5134] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  134.173772][ T5182] device bridge_slave_0 entered promiscuous mode
[  134.194578][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.212676][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.222402][ T5182] device bridge_slave_1 entered promiscuous mode
[  134.242845][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.342327][ T4256] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.363502][ T4254] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.374088][   T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  134.381674][ T5134] usb 1-1: device descriptor read/64, error -71
[  134.504252][ T5134] usb usb1-port1: attempt power cycle
[  134.632867][   T41] usb 5-1: Using ep0 maxpacket: 16
[  134.773126][   T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.890456][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.923842][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.933516][ T5134] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  134.983524][   T41] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  135.000531][ T5291] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  135.008020][ T5291] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  135.015497][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.024341][   T41] usb 5-1: Product: syz
[  135.028699][   T41] usb 5-1: Manufacturer: syz
[  135.034487][   T41] usb 5-1: SerialNumber: syz
[  135.050703][   T41] usb 5-1: config 0 descriptor??
[  135.056059][ T5134] usb 1-1: device descriptor read/8, error -71
[  135.098148][ T5182] team0: Port device team_slave_0 added
[  135.158487][ T5182] team0: Port device team_slave_1 added
[  135.174874][   T41] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  135.213641][ T4251] Bluetooth: hci1: command tx timeout
[  135.282866][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  135.514340][ T4336] usb 5-1: Failed to submit usb control message: -71
[  135.584246][ T4336] usb 5-1: unable to send the bmi data to the device: -71
[  135.693331][ T4336] usb 5-1: unable to get target info from device
[  135.793791][ T4336] usb 5-1: could not get target info (-71)
[  135.809033][   T41] usb 5-1: USB disconnect, device number 4
[  135.871091][ T4336] usb 5-1: could not probe fw (-71)
[  135.897534][ T5134] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  135.993171][ T5134] usb 1-1: device descriptor read/8, error -71
[  136.116693][ T5134] usb usb1-port1: unable to enumerate USB device
[  136.193260][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.200480][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.226421][    C0] vkms_vblank_simulate: vblank timer overrun
[  136.371798][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.630656][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.693877][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.838858][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  136.945818][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.114725][ T4556] device hsr_slave_0 left promiscuous mode
[  137.126060][ T4556] device hsr_slave_1 left promiscuous mode
[  137.220073][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.282886][ T4257] Bluetooth: hci1: command tx timeout
[  137.329886][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.550797][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.708464][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.822121][ T4556] device bridge_slave_1 left promiscuous mode
[  137.830494][ T4556] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.842844][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  137.855386][ T4556] device bridge_slave_0 left promiscuous mode
[  137.861687][ T4556] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.921050][ T4556] device veth1_macvtap left promiscuous mode
[  137.939354][ T4556] device veth0_macvtap left promiscuous mode
[  137.967038][ T4556] device veth1_vlan left promiscuous mode
[  137.988176][ T4556] device veth0_vlan left promiscuous mode
[  138.032826][ T5287] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  138.060072][ T5338] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  138.066555][ T5338] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  138.361026][ T5287] usb 1-1: Using ep0 maxpacket: 16
[  139.809076][ T4257] Bluetooth: hci1: command tx timeout
[  139.827881][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  139.922505][ T5345] tmpfs: Unknown parameter 'usrquota'
[  139.963529][ T5287] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  139.972277][ T5287] usb 1-1: config 0 has no interface number 0
[  139.979162][ T5287] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  140.193082][ T5287] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  140.211328][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.237839][ T5287] usb 1-1: Product: syz
[  140.251084][ T5287] usb 1-1: Manufacturer: syz
[  140.256336][ T5287] usb 1-1: SerialNumber: syz
[  140.269030][ T5287] usb 1-1: config 0 descriptor??
[  140.882998][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  141.604627][ T5287] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input8
[  141.812229][ T4556] team0 (unregistering): Port device team_slave_1 removed
[  141.852405][ T5136] usb 1-1: USB disconnect, device number 6
[  141.887420][ T4556] team0 (unregistering): Port device team_slave_0 removed
[  141.922921][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  141.951507][ T4556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.997603][ T4556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.605381][ T4556] bond0 (unregistering): Released all slaves
[  142.970175][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  142.999589][ T5182] device hsr_slave_0 entered promiscuous mode
[  143.178664][ T5182] device hsr_slave_1 entered promiscuous mode
[  144.471890][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  144.598948][ T5362] loop0: detected capacity change from 0 to 32768
[  144.620284][ T5378] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  144.626780][ T5378] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  144.637315][ T5362] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.270 (5362)
[  144.718094][ T5362] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  144.738706][ T5362] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  144.758087][ T5362] BTRFS info (device loop0): enabling auto defrag
[  144.784764][ T5362] BTRFS info (device loop0): doing ref verification
[  144.820533][ T5362] BTRFS info (device loop0): force clearing of disk cache
[  144.842786][ T5136] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  144.874425][ T5362] BTRFS info (device loop0): disabling free space tree
[  145.065058][ T5182] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  145.096266][ T5182] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  145.103144][ T5136] usb 5-1: Using ep0 maxpacket: 16
[  145.263864][ T5182] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  145.282051][ T5182] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  145.522958][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.562798][ T5417] tmpfs: Unknown parameter 'usrquota'
[  145.577460][ T5136] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  145.630964][ T5136] usb 5-1: config 0 has no interface number 0
[  145.833595][ T5136] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  145.865830][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.919667][ T5136] usb 5-1: Product: syz
[  145.959467][ T5136] usb 5-1: Manufacturer: syz
[  146.169412][ T5136] usb 5-1: SerialNumber: syz
[  146.187407][ T5136] usb 5-1: config 0 descriptor??
[  146.241511][ T5136] i2c-tiny-usb 5-1:0.39: version 70.6d found at bus 005 address 005
[  146.374535][ T5362] BTRFS error (device loop0): open_ctree failed
[  146.444693][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.502563][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.562879][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  146.634462][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.677337][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.708973][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.721969][ T5182] 8021q: adding VLAN 0 to HW filter on device team0
[  146.786715][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  146.803048][ T5136]  (null): failure reading functionality
[  146.833080][ T5136] i2c i2c-1: failure reading functionality
[  146.841049][ T5434] loop0: detected capacity change from 0 to 512
[  146.852418][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.865351][ T5136] i2c i2c-1: connected i2c-tiny-usb device
[  146.894059][ T5136] usb 5-1: USB disconnect, device number 5
[  146.902656][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.909897][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.946110][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.973120][ T4346] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  147.051784][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.112220][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.142444][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.149671][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.268524][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.368306][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.385306][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.602852][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  147.807644][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  148.104652][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  148.142001][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  148.292421][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  148.334631][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.345367][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.000708][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  149.303160][ T5461] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  149.309621][ T5461] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  149.421153][ T5182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.445418][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.459719][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.846181][   T26] audit: type=1326 audit(1730280894.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  149.848402][ T5476] loop0: detected capacity change from 0 to 1024
[  149.945157][   T26] audit: type=1326 audit(1730280894.030:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  149.984397][ T5476] EXT4-fs (loop0): INFO: recovery required on readonly filesystem
[  150.002865][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  150.014636][ T5476] EXT4-fs (loop0): write access will be enabled during recovery
[  150.022321][ T5476] EXT4-fs (loop0): barriers disabled
[  150.038131][   T26] audit: type=1326 audit(1730280894.070:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  150.083364][ T5476] JBD2: no valid journal superblock found
[  150.089138][ T5476] EXT4-fs (loop0): error loading journal
[  150.114359][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.121834][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.141009][   T26] audit: type=1326 audit(1730280894.070:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  150.150554][ T5482] loop3: detected capacity change from 0 to 2048
[  150.177482][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.230176][ T5484] loop4: detected capacity change from 0 to 2048
[  150.261831][   T26] audit: type=1326 audit(1730280894.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  150.309338][   T26] audit: type=1326 audit(1730280894.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  150.335132][ T5482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  150.343440][   T26] audit: type=1326 audit(1730280894.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  150.415780][ T5484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  150.480943][   T26] audit: type=1326 audit(1730280894.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d957e719 code=0x7ffc0000
[  150.801547][ T5503] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  150.816919][ T5503] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  150.829498][ T5503] EXT4-fs (loop4): This should not happen!! Data will be lost
[  150.829498][ T5503] 
[  150.839280][ T5503] EXT4-fs (loop4): Total free blocks count 0
[  150.845358][ T5503] EXT4-fs (loop4): Free/Dirty block details
[  150.851318][ T5503] EXT4-fs (loop4): free_blocks=2415919104
[  150.857166][ T5503] EXT4-fs (loop4): dirty_blocks=64
[  150.862337][ T5503] EXT4-fs (loop4): Block reservation details
[  150.868415][ T5503] EXT4-fs (loop4): i_reserved_data_blocks=4
[  151.042864][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  151.178547][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  151.264155][   T46] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  151.432103][ T5514] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  151.438620][ T5514] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  152.710867][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  153.048833][ T5528] loop0: detected capacity change from 0 to 512
[  153.099155][ T5528] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  153.157055][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  153.167545][ T5528] EXT4-fs (loop0): 1 truncate cleaned up
[  153.190958][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  153.191445][ T5528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  153.404711][ T5182] device veth0_vlan entered promiscuous mode
[  153.418709][ T5182] device veth1_vlan entered promiscuous mode
[  154.999749][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  155.103124][ T5182] device veth0_macvtap entered promiscuous mode
[  155.116599][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.191802][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.197271][ T4244] EXT4-fs (loop0): unmounting filesystem.
[  155.221773][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  155.271971][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  155.297221][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  155.321801][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  155.351970][ T5182] device veth1_macvtap entered promiscuous mode
[  155.369217][ T5547] loop3: detected capacity change from 0 to 2048
[  155.373528][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  155.393930][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  155.418864][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  155.458023][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.469124][ T4289] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  155.481425][ T5547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.533932][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.543874][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.554414][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.564696][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.575206][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.585085][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.597486][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.609772][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.617682][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  155.677628][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  155.712895][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.742806][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.752662][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.775068][ T4289] usb 5-1: Using ep0 maxpacket: 32
[  155.792752][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.802600][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.842747][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.852619][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.892748][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.912832][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.922994][ T4289] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  155.942550][ T4289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.947561][ T5182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.972817][ T5182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.994734][ T4289] usb 5-1: config 0 descriptor??
[  155.999800][ T5182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.008674][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.040708][ T5182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.054783][ T4289] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  156.061011][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  156.078916][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  156.204373][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  156.260655][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.290704][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.361872][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  156.367827][ T5562] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  156.375571][ T5562] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  156.391100][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.414356][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.446769][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  156.483550][ T4289] gspca_vc032x: reg_w err -71
[  156.488355][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.508598][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.525041][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.563900][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.597527][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.631654][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.659257][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.678607][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.698080][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.703999][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.709308][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.737870][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.751700][ T5567] loop3: detected capacity change from 0 to 2048
[  156.789181][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  156.841992][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  157.042945][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  157.344729][ T5567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  157.581345][ T4251] Bluetooth: hci1: command tx timeout
[  157.587557][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  157.592946][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  157.598243][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  157.603584][ T4289] gspca_vc032x: I2c Bus Busy Wait 00
[  157.608873][ T4289] gspca_vc032x: Unknown sensor...
[  157.614004][ T4289] vc032x: probe of 5-1:0.0 failed with error -22
[  157.860744][ T5582] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  157.875662][ T5582] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  157.888072][ T5582] EXT4-fs (loop3): This should not happen!! Data will be lost
[  157.888072][ T5582] 
[  157.897764][ T5582] EXT4-fs (loop3): Total free blocks count 0
[  157.903803][ T5582] EXT4-fs (loop3): Free/Dirty block details
[  157.909741][ T5582] EXT4-fs (loop3): free_blocks=2415919104
[  157.915633][ T5582] EXT4-fs (loop3): dirty_blocks=64
[  157.920799][ T5582] EXT4-fs (loop3): Block reservation details
[  157.927232][ T5582] EXT4-fs (loop3): i_reserved_data_blocks=4
[  158.082902][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  158.746983][ T4289] usb 5-1: USB disconnect, device number 6
[  159.042543][    T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  159.092544][ T5593] loop4: detected capacity change from 0 to 2048
[  159.122860][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.152385][ T5595] loop5: detected capacity change from 0 to 512
[  159.162841][ T5280] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  159.185203][ T5595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  159.200877][ T5593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  159.321329][ T5595] EXT4-fs (loop5): 1 truncate cleaned up
[  159.345862][ T5595] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  159.793008][ T5280] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.893109][ T5280] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.162826][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.183458][ T5280] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  160.192535][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  160.215430][ T5610] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  160.221938][ T5610] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  160.237958][ T5612] loop3: detected capacity change from 0 to 1764
[  160.282154][ T5280] usb 1-1: SerialNumber: syz
[  160.282152][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  160.497727][ T5617] loop4: detected capacity change from 0 to 1024
[  160.504843][ T5618] loop1: detected capacity change from 0 to 512
[  160.539646][ T5617] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  160.566743][ T5618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  160.570863][ T5280] usb 1-1: 0:2 : does not exist
[  160.608182][ T5280] usb 1-1: unit 5 not found!
[  160.629331][ T5618] EXT4-fs (loop1): 1 truncate cleaned up
[  160.673268][ T5617] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  160.692808][ T5618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  160.759042][ T5280] usb 1-1: USB disconnect, device number 7
[  161.249575][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  161.819523][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  161.986650][ T5633] loop0: detected capacity change from 0 to 128
[  162.322932][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  162.479104][ T5633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  162.491516][   T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.546350][ T5633] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  162.794774][   T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.200364][   T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.362906][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  163.592151][   T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.631714][ T4244] EXT4-fs (loop0): unmounting filesystem.
[  163.707742][ T5646] loop4: detected capacity change from 0 to 1024
[  163.746403][ T5646] EXT4-fs: Ignoring removed nomblk_io_submit option
[  163.782294][ T5646] journal_path: Lookup failure for './bus'
[  163.795522][ T5650] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  163.801999][ T5650] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  163.812564][ T5646] EXT4-fs: error: could not find journal device path
[  164.236326][ T5182] EXT4-fs (loop5): unmounting filesystem.
[  164.402841][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.073880][ T4257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.086467][ T4257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.095205][ T4257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.106020][ T4257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.114753][ T4257] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  165.122597][ T4257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  165.442844][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  166.471054][ T4288] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  166.482835][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  166.547913][ T5664] loop3: detected capacity change from 0 to 32768
[  166.561409][ T5664] XFS: ikeep mount option is deprecated.
[  166.567624][ T5664] XFS: noikeep mount option is deprecated.
[  166.619930][ T5664] XFS (loop3): Mounting V5 Filesystem
[  166.933374][ T4288] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.126869][ T4288] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.204260][ T4257] Bluetooth: hci4: command tx timeout
[  167.499598][ T5664] XFS (loop3): Ending clean mount
[  167.505193][ T4288] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  167.520766][ T4288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  167.529226][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.548945][ T5664] XFS (loop3): Quotacheck needed: Please wait.
[  167.555274][ T4288] usb 5-1: SerialNumber: syz
[  167.760408][ T5664] XFS (loop3): Quotacheck: Done.
[  167.911306][ T4288] usb 5-1: 0:2 : does not exist
[  167.947490][ T4288] usb 5-1: unit 5 not found!
[  168.110263][ T4288] usb 5-1: USB disconnect, device number 7
[  168.375675][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.381662][ T4254] XFS (loop3): Unmounting Filesystem
[  168.430800][ T5705] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  168.437292][ T5705] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  168.488134][ T5707] loop5: detected capacity change from 0 to 128
[  168.563356][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  168.573913][ T5709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.344'.
[  168.835530][ T5661] chnl_net:caif_netlink_parms(): no params data found
[  168.933886][ T5715] loop0: detected capacity change from 0 to 1024
[  168.941265][ T5715] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.951498][ T5715] journal_path: Lookup failure for './bus'
[  168.959450][ T5715] EXT4-fs: error: could not find journal device path
[  168.997065][ T4585] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  169.312853][ T4257] Bluetooth: hci4: command tx timeout
[  169.453143][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.468892][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.486292][ T5661] device bridge_slave_0 entered promiscuous mode
[  169.501311][   T75] device hsr_slave_0 left promiscuous mode
[  169.544456][   T75] device hsr_slave_1 left promiscuous mode
[  169.593332][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.602844][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  169.659052][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.710188][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.734191][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.331506][   T75] device bridge_slave_1 left promiscuous mode
[  170.393287][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.497570][   T75] device bridge_slave_0 left promiscuous mode
[  170.540953][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.607735][ T5752] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  170.614223][ T5752] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  170.642827][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  170.678727][   T75] device veth1_macvtap left promiscuous mode
[  170.708859][   T75] device veth0_macvtap left promiscuous mode
[  170.717214][   T75] device veth1_vlan left promiscuous mode
[  170.729530][   T75] device veth0_vlan left promiscuous mode
[  170.777184][ T5757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.356'.
[  170.899433][ T5761] loop3: detected capacity change from 0 to 128
[  171.092920][ T5136] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  171.133867][ T5765] loop5: detected capacity change from 0 to 1024
[  171.149951][ T5765] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.156939][ T5765] journal_path: Lookup failure for './bus'
[  171.186995][ T5765] EXT4-fs: error: could not find journal device path
[  171.445308][ T4251] Bluetooth: hci4: command tx timeout
[  171.682855][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.105505][ T5770] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  172.202106][ T5136] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.213170][ T5136] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.433029][ T5136] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  172.442223][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  172.451136][ T5136] usb 5-1: SerialNumber: syz
[  172.722869][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.923361][ T5136] usb 5-1: 0:2 : does not exist
[  172.956582][ T5136] usb 5-1: unit 5 not found!
[  173.147848][ T5136] usb 5-1: USB disconnect, device number 8
[  173.180489][   T75] team0 (unregistering): Port device team_slave_1 removed
[  173.236214][   T75] team0 (unregistering): Port device team_slave_0 removed
[  173.277830][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.320643][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.522861][ T4251] Bluetooth: hci4: command tx timeout
[  173.728503][   T75] bond0 (unregistering): Released all slaves
[  173.762831][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  173.827080][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.834923][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.851247][ T5661] device bridge_slave_1 entered promiscuous mode
[  174.446042][ T5802] loop0: detected capacity change from 0 to 8
[  174.458301][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.506315][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.597322][ T5805] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  174.743529][ T5661] team0: Port device team_slave_0 added
[  174.802832][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.189945][ T5661] team0: Port device team_slave_1 added
[  175.484221][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.501442][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.541191][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.583985][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.590971][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.783649][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.842849][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.978486][ T5661] device hsr_slave_0 entered promiscuous mode
[  176.060074][ T5661] device hsr_slave_1 entered promiscuous mode
[  176.094690][ T5661] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.128112][ T5661] Cannot create hsr debugfs directory
[  176.129226][ T5824] loop3: detected capacity change from 0 to 2048
[  176.214965][ T5824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  176.342281][ T5661] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  176.357999][ T5661] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  176.378599][ T5661] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  176.411488][ T5661] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  176.704393][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.743325][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.752531][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.804002][ T5661] 8021q: adding VLAN 0 to HW filter on device team0
[  176.882259][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.883273][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  177.051568][ T5837] loop4: detected capacity change from 0 to 1764
[  177.132523][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.418233][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.425433][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.633436][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.649832][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  177.746879][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.778840][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.814900][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.823363][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.841076][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  177.863886][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.907421][ T5843] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  177.913906][ T5843] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  177.923259][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  177.938694][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.948613][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.992834][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.015734][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.073951][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.082574][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.098161][ T5136] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  178.109075][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.144279][ T5661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.183608][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.199114][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.224360][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.473010][ T5136] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  178.501281][ T5136] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  178.603025][ T5136] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  178.628730][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.631875][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  178.645319][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.665888][ T5136] usb 4-1: SerialNumber: syz
[  178.680679][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.962835][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  179.192653][ T5875] loop0: detected capacity change from 0 to 32768
[  179.225518][ T5136] usb 4-1: 0:2 : does not exist
[  179.231697][ T5136] usb 4-1: unit 5 not found!
[  179.295624][ T5136] usb 4-1: USB disconnect, device number 3
[  179.361994][ T5875] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  179.487812][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.716480][ T5875] syz.0.382 (5875) used greatest stack depth: 19352 bytes left
[  179.920582][ T4244] ocfs2: Unmounting device (7,0) on (node local)
[  179.941046][ T5896] loop3: detected capacity change from 0 to 2048
[  180.002876][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  180.092286][ T5896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  180.102051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.136725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.206429][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.231549][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.266692][ T5661] device veth0_vlan entered promiscuous mode
[  180.289836][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.334566][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.376925][ T5661] device veth1_vlan entered promiscuous mode
[  180.477219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.499803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.522508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.550910][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.587773][ T5661] device veth0_macvtap entered promiscuous mode
[  180.612345][ T5661] device veth1_macvtap entered promiscuous mode
[  180.614469][ T4286] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  180.662954][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.683766][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.705600][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.762733][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.779129][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.791891][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.807652][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.839260][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.874012][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  180.880886][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.888743][ T4258] Bluetooth: hci3: command 0x0406 tx timeout
[  180.894907][ T4258] Bluetooth: hci0: command 0x0406 tx timeout
[  180.932340][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.961297][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.971460][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.982099][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.992057][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.003249][ T4286] usb 1-1: Using ep0 maxpacket: 8
[  181.013388][ T5922] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  181.021946][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.032466][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.043252][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  181.051249][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.064986][ T5922] loop4: detected capacity change from 0 to 256
[  181.075020][ T5922] FAT-fs (loop4): bogus number of directory entries (4)
[  181.081989][ T5922] FAT-fs (loop4): Can't find a valid FAT filesystem
[  181.093193][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.143087][ T4286] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  181.144749][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.163130][ T4286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.166575][ T5924] loop3: detected capacity change from 0 to 512
[  181.173475][ T4286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.193693][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.210143][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.232792][ T4286] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  181.233577][ T5924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.247996][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.272826][ T4286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  181.274527][ T5924] EXT4-fs (loop3): 1 truncate cleaned up
[  181.293204][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.295060][ T5924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  181.302287][ T4286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.354529][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.379262][ T5661] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.422244][ T5661] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.446059][ T4286] usbtmc 1-1:16.0: bulk endpoints not found
[  181.474493][ T5661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.492824][ T5661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.082865][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  182.306360][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  182.353491][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.382239][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.441461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.460784][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.480594][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.518895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.768192][ T5276] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  182.806408][ T4288] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  183.052779][ T4288] usb 5-1: Using ep0 maxpacket: 16
[  183.122876][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  183.194015][ T4288] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  183.423895][ T4288] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  183.507583][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.541279][ T4288] usb 5-1: Product: syz
[  183.561200][ T4288] usb 5-1: Manufacturer: syz
[  183.581481][ T4288] usb 5-1: SerialNumber: syz
[  183.645393][ T4288] usb 5-1: config 0 descriptor??
[  183.665807][ T4339] usb 1-1: USB disconnect, device number 8
[  183.858004][ T5276] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.890465][ T5276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  184.043026][ T5276] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  184.070286][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  184.098933][ T5276] usb 4-1: SerialNumber: syz
[  184.135569][ T5960] loop0: detected capacity change from 0 to 8
[  184.162826][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  184.385211][ T5276] usb 4-1: 0:2 : does not exist
[  184.390159][ T5276] usb 4-1: unit 5 not found!
[  185.571536][ T5973] tmpfs: Unknown parameter 'usrquota'
[  185.591897][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  185.802844][ T4288] usb 5-1: USB disconnect, device number 9
[  185.998318][ T5276] usb 4-1: USB disconnect, device number 4
[  186.320269][ T5980] loop4: detected capacity change from 0 to 32768
[  186.387612][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.439025][ T5980] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  186.563391][ T5993] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  186.577373][ T5993] loop3: detected capacity change from 0 to 256
[  186.590877][ T5993] FAT-fs (loop3): bogus number of directory entries (4)
[  186.598031][ T5993] FAT-fs (loop3): Can't find a valid FAT filesystem
[  186.642890][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  186.667158][ T4252] ocfs2: Unmounting device (7,4) on (node local)
[  186.675146][ T5994] loop6: detected capacity change from 0 to 256
[  186.734720][ T5994] exfat: Deprecated parameter 'namecase'
[  186.776981][ T5994] exfat: Deprecated parameter 'utf8'
[  186.847193][ T5994] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  187.001749][ T5994] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  187.413081][ T4286] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  187.652855][ T4286] usb 1-1: Using ep0 maxpacket: 8
[  187.682829][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  187.773027][ T4286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  187.793143][ T4286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  187.816024][ T6023] loop3: detected capacity change from 0 to 16
[  187.825282][ T6023] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  187.852100][ T4286] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  187.865860][ T4288] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  187.881086][ T6023] erofs: (device loop3): mounted with root inode @ nid 36.
[  187.896258][ T4286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  187.923420][ T4286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.930504][ T6023] syz.3.409: attempt to access beyond end of device
[  187.930504][ T6023] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  187.993811][ T4286] usbtmc 1-1:16.0: bulk endpoints not found
[  188.031689][ T6025] syz.3.409: attempt to access beyond end of device
[  188.031689][ T6025] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  188.218863][ T6031] loop6: detected capacity change from 0 to 512
[  188.243353][ T4288] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.272857][ T4288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.287675][ T6031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  188.358060][ T6031] EXT4-fs (loop6): 1 truncate cleaned up
[  188.365068][ T6031] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  188.372998][ T4288] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  188.382584][ T4288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  188.390718][ T4288] usb 6-1: SerialNumber: syz
[  188.685191][ T4288] usb 6-1: 0:2 : does not exist
[  188.690182][ T4288] usb 6-1: unit 5 not found!
[  188.722893][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  189.323387][ T5661] EXT4-fs (loop6): unmounting filesystem.
[  189.326461][ T4288] usb 6-1: USB disconnect, device number 2
[  189.475702][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.762830][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  190.117430][ T5136] usb 1-1: USB disconnect, device number 9
[  190.376283][ T6062] input: syz0 as /devices/virtual/input/input12
[  190.802894][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  191.697923][ T6095] tmpfs: Unknown parameter 'usrquota'
[  191.801709][ T6093] loop3: detected capacity change from 0 to 512
[  191.842813][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  191.916453][ T6093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  192.252933][ T5136] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  192.341832][ T6101] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  192.441560][ T6093] EXT4-fs (loop3): 1 truncate cleaned up
[  192.455986][ T6093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  192.695669][ T5136] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.883234][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  193.285423][ T5136] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.299790][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  193.307094][ T4257] Bluetooth: hci4: Malformed Event: 0x13
[  193.508333][ T5136] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  193.517952][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  193.536087][ T5136] usb 1-1: SerialNumber: syz
[  193.922846][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  193.948148][ T5136] usb 1-1: 0:2 : does not exist
[  193.956339][ T5136] usb 1-1: unit 5 not found!
[  194.015345][ T5136] usb 1-1: USB disconnect, device number 10
[  194.093452][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.174036][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  194.962849][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  195.058872][ T4257] Bluetooth: hci0: unexpected event for opcode 0x2019
[  195.202934][ T5276] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  195.472977][ T5276] usb 7-1: Using ep0 maxpacket: 8
[  195.518101][ T6160] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  195.532377][ T6160] loop3: detected capacity change from 0 to 256
[  195.551411][ T6160] FAT-fs (loop3): bogus number of directory entries (4)
[  195.558536][ T6160] FAT-fs (loop3): Can't find a valid FAT filesystem
[  195.875413][ T6159] loop4: detected capacity change from 0 to 32768
[  195.887461][ T4346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  195.911441][ T6159] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  195.984361][ T6163] loop0: detected capacity change from 0 to 512
[  195.993975][ T6163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  196.003025][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  196.020597][ T6163] EXT4-fs (loop0): 1 truncate cleaned up
[  196.032857][ T5276] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  196.049269][ T5276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.055696][ T4252] ocfs2: Unmounting device (7,4) on (node local)
[  196.058017][ T5276] usb 7-1: Product: syz
[  196.068304][ T5276] usb 7-1: Manufacturer: syz
[  196.073309][ T5276] usb 7-1: SerialNumber: syz
[  196.123159][ T6163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  196.162580][ T5276] usb 7-1: config 0 descriptor??
[  196.204597][ T5276] gspca_main: se401-2.14.0 probing 047d:5003
[  196.748435][ T6178] loop4: detected capacity change from 0 to 2048
[  196.883122][ T4244] EXT4-fs (loop0): unmounting filesystem.
[  196.908042][ T5276] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13
[  197.011681][ T5276] usb 7-1: USB disconnect, device number 2
[  197.043048][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  197.587068][ T6194] loop0: detected capacity change from 0 to 2048
[  197.594382][ T6199] loop6: detected capacity change from 0 to 8
[  197.716263][ T6194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  198.041588][ T6194] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  198.056852][ T6194] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  198.069271][ T6194] EXT4-fs (loop0): This should not happen!! Data will be lost
[  198.069271][ T6194] 
[  198.079007][ T6194] EXT4-fs (loop0): Total free blocks count 0
[  198.082825][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  198.085378][ T6194] EXT4-fs (loop0): Free/Dirty block details
[  198.098958][ T6194] EXT4-fs (loop0): free_blocks=2415919104
[  198.104743][ T6194] EXT4-fs (loop0): dirty_blocks=64
[  198.109895][ T6194] EXT4-fs (loop0): Block reservation details
[  198.115958][ T6194] EXT4-fs (loop0): i_reserved_data_blocks=4
[  198.430262][ T6217] loop6: detected capacity change from 0 to 32768
[  198.521078][ T6217] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  198.573219][ T5661] ocfs2: Unmounting device (7,6) on (node local)
[  198.895549][ T4572] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  198.977986][ T6240] loop4: detected capacity change from 0 to 8
[  199.122980][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  199.494567][ T6253] loop0: detected capacity change from 0 to 512
[  199.558131][ T6253] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  199.775687][ T6253] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  199.873052][ T6253] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  200.123898][ T6253] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  200.162822][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  200.183688][ T6253] System zones: 0-2, 18-18, 34-34
[  200.253608][ T6266] fuse: Bad value for 'fd'
[  200.279352][ T6253] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  200.660651][ T6253] EXT4-fs (loop0): 1 truncate cleaned up
[  200.759884][ T6253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  200.836841][   T26] audit: type=1800 audit(1730280945.020:10): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="file1" dev="loop0" ino=15 res=0 errno=0
[  201.103975][   T26] audit: type=1800 audit(1730280945.240:11): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="file2" dev="loop0" ino=16 res=0 errno=0
[  201.124240][    C1] vkms_vblank_simulate: vblank timer overrun
[  201.126235][ T6275] loop3: detected capacity change from 0 to 32768
[  201.192833][ T6275] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  201.204134][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  201.415573][ T4244] EXT4-fs (loop0): unmounting filesystem.
[  201.438729][ T4254] ocfs2: Unmounting device (7,3) on (node local)
[  201.537561][ T6292] loop5: detected capacity change from 0 to 8
[  201.729885][ T6294] loop0: detected capacity change from 0 to 2048
[  201.866716][ T6294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  202.205949][ T6313] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  202.220967][ T6313] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  202.233407][ T6313] EXT4-fs (loop0): This should not happen!! Data will be lost
[  202.233407][ T6313] 
[  202.243230][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  202.250409][ T6313] EXT4-fs (loop0): Total free blocks count 0
[  202.256668][ T6313] EXT4-fs (loop0): Free/Dirty block details
[  202.262586][ T6313] EXT4-fs (loop0): free_blocks=2415919104
[  202.268372][ T6313] EXT4-fs (loop0): dirty_blocks=64
[  202.273638][ T6313] EXT4-fs (loop0): Block reservation details
[  202.279635][ T6313] EXT4-fs (loop0): i_reserved_data_blocks=4
[  202.518738][   T46] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  202.559624][ T6317] loop6: detected capacity change from 0 to 2048
[  202.577565][ T6317] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  202.650657][ T6325] loop4: detected capacity change from 0 to 16
[  202.683131][ T6325] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  202.783161][ T6325] erofs: (device loop4): mounted with root inode @ nid 36.
[  202.827669][ T6328] loop0: detected capacity change from 0 to 128
[  202.857316][ T6325] syz.4.480: attempt to access beyond end of device
[  202.857316][ T6325] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  202.913304][ T6328] VFS: Found a Xenix FS (block size = 1024) on device loop0
[  202.937266][ T6328] syz.0.486: attempt to access beyond end of device
[  202.937266][ T6328] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128
[  202.968671][ T6330] loop5: detected capacity change from 0 to 2048
[  203.000724][ T6328] Buffer I/O error on dev loop0, logical block 3245768, async page read
[  203.038567][ T6334] syz.0.486: attempt to access beyond end of device
[  203.038567][ T6334] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128
[  203.060482][ T6335] syz.4.480: attempt to access beyond end of device
[  203.060482][ T6335] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  203.079266][ T6334] Buffer I/O error on dev loop0, logical block 3245768, async page read
[  203.156176][ T6330] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  203.261338][ T6333] loop3: detected capacity change from 0 to 32768
[  203.279306][ T6333] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.282838][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  203.313821][ T4244] sysv_free_block: flc_count > flc_size
[  203.359005][ T5182] EXT4-fs (loop5): unmounting filesystem.
[  203.366117][ T4254] ocfs2: Unmounting device (7,3) on (node local)
[  203.384302][ T4244] sysv_free_block: flc_count > flc_size
[  203.389922][ T4244] sysv_free_block: flc_count > flc_size
[  203.409096][ T5661] EXT4-fs (loop6): unmounting filesystem.
[  203.467959][ T4244] sysv_free_block: flc_count > flc_size
[  203.505276][ T4244] sysv_free_block: flc_count > flc_size
[  203.510870][ T4244] sysv_free_block: flc_count > flc_size
[  203.559751][ T4244] sysv_free_block: flc_count > flc_size
[  203.578993][ T4244] sysv_free_block: flc_count > flc_size
[  203.602891][ T4244] sysv_free_block: flc_count > flc_size
[  203.608541][ T4244] sysv_free_block: flc_count > flc_size
[  203.635960][ T4244] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  203.740688][ T6351] loop5: detected capacity change from 0 to 128
[  203.783369][ T6354] loop6: detected capacity change from 0 to 256
[  203.917496][ T6358] syz.3.490 uses obsolete (PF_INET,SOCK_PACKET)
[  204.088996][ T6364] netlink: 'syz.5.496': attribute type 3 has an invalid length.
[  204.322877][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  204.881377][   T26] audit: type=1326 audit(1730280949.060:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa17e719 code=0x7ffc0000
[  205.006027][   T26] audit: type=1326 audit(1730280949.070:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd4aa17e719 code=0x7ffc0000
[  205.113197][   T26] audit: type=1326 audit(1730280949.070:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa17e719 code=0x7ffc0000
[  205.270077][ T6401] loop6: detected capacity change from 0 to 128
[  205.362823][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  205.882331][ T6424] loop6: detected capacity change from 0 to 16
[  205.956086][ T6424] erofs: (device loop6): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  205.969931][ T6424] erofs: (device loop6): mounted with root inode @ nid 36.
[  205.994196][ T6424] syz.6.513: attempt to access beyond end of device
[  205.994196][ T6424] loop6: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  206.014514][ T6424] syz.6.513: attempt to access beyond end of device
[  206.014514][ T6424] loop6: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  206.402834][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  207.442821][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  207.670772][ T6447] loop4: detected capacity change from 0 to 128
[  207.855376][ T6455] loop6: detected capacity change from 0 to 8
[  207.939753][   T26] audit: type=1326 audit(1730280952.120:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa17e719 code=0x7ffc0000
[  208.018512][   T26] audit: type=1326 audit(1730280952.150:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa17e719 code=0x7ffc0000
[  208.054383][ T6460] loop3: detected capacity change from 0 to 2048
[  208.076038][   T26] audit: type=1326 audit(1730280952.160:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd4aa17e719 code=0x7ffc0000
[  208.171020][   T26] audit: type=1326 audit(1730280952.160:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4aa17e753 code=0x7ffc0000
[  208.199075][   T26] audit: type=1326 audit(1730280952.180:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd4aa17d1ff code=0x7ffc0000
[  208.234708][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  208.309660][ T6475] loop0: detected capacity change from 0 to 16
[  208.323046][ T6475] erofs: (device loop0): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  208.335153][ T6475] erofs: (device loop0): mounted with root inode @ nid 36.
[  208.360104][ T6475] syz.0.530: attempt to access beyond end of device
[  208.360104][ T6475] loop0: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  208.378476][ T6475] syz.0.530: attempt to access beyond end of device
[  208.378476][ T6475] loop0: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  208.482841][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  208.589997][   T26] audit: type=1326 audit(1730280952.230:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd4aa17e7a7 code=0x7ffc0000
[  208.960713][   T26] audit: type=1326 audit(1730280952.230:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4aa17d0b0 code=0x7ffc0000
[  208.995880][   T26] audit: type=1326 audit(1730280952.230:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4aa17e31b code=0x7ffc0000
[  209.034414][   T26] audit: type=1326 audit(1730280952.240:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4aa17d3aa code=0x7ffc0000
[  209.065004][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  209.256041][ T6489] loop4: detected capacity change from 0 to 128
[  209.280851][   T26] audit: type=1326 audit(1730280952.240:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6459 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4aa17d3aa code=0x7ffc0000
[  209.523371][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  209.542466][ T6496] loop4: detected capacity change from 0 to 128
[  209.632935][ T4346] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.127668][ T6516] loop4: detected capacity change from 0 to 2048
[  210.159426][ T6516] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  210.217982][ T6516] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  210.238154][ T6516] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  210.288294][ T6516] UDF-fs: Scanning with blocksize 512 failed
[  210.294754][ T4288] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  210.367666][ T6516] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  210.392915][ T6516] UDF-fs: Scanning with blocksize 1024 failed
[  210.404102][ T6516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  210.418907][ T6516] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  210.440661][ T6516] UDF-fs: Scanning with blocksize 2048 failed
[  210.461400][ T6516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  210.483062][ T4288] usb 1-1: device descriptor read/64, error -71
[  210.490611][ T6516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  210.506670][ T6516] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  210.527323][ T6516] UDF-fs: Scanning with blocksize 4096 failed
[  210.548245][ T6516] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  210.562815][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  210.742083][ T6498] loop5: detected capacity change from 0 to 32768
[  210.774020][ T4288] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  210.821983][ T6498] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  210.877235][ T6498] 
[  210.879606][ T6498] ======================================================
[  210.886636][ T6498] WARNING: possible circular locking dependency detected
[  210.893666][ T6498] 6.1.114-syzkaller #0 Not tainted
[  210.898789][ T6498] ------------------------------------------------------
[  210.905815][ T6498] syz.5.540/6498 is trying to acquire lock:
[  210.911721][ T6498] ffff88802b0f9488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a1/0x7b0
[  210.922742][ T6498] 
[  210.922742][ T6498] but task is already holding lock:
[  210.930125][ T6498] ffff888058b28660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cd/0x390
[  210.940776][ T6498] 
[  210.940776][ T6498] which lock already depends on the new lock.
[  210.940776][ T6498] 
[  210.951600][ T6498] 
[  210.951600][ T6498] the existing dependency chain (in reverse order) is:
[  210.960635][ T6498] 
[  210.960635][ T6498] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  210.963233][ T4288] usb 1-1: device descriptor read/64, error -71
[  210.969421][ T6498]        lock_acquire+0x1f8/0x5a0
[  210.969453][ T6498]        down_read+0xad/0xa30
[  210.969470][ T6498]        ocfs2_read_virt_blocks+0x2dc/0xab0
[  210.991266][ T6498]        ocfs2_find_entry+0x436/0x28c0
[  210.996745][ T6498]        ocfs2_find_files_on_disk+0x10d/0x3a0
[  211.002843][ T6498]        ocfs2_lookup_ino_from_name+0xad/0x1e0
[  211.009019][ T6498]        ocfs2_get_system_file_inode+0x314/0x7b0
[  211.015462][ T6498]        ocfs2_init_global_system_inodes+0x328/0x720
[  211.022351][ T6498]        ocfs2_fill_super+0x2f82/0x5730
[  211.027920][ T6498]        mount_bdev+0x2c9/0x3f0
[  211.032807][ T6498]        legacy_get_tree+0xeb/0x180
[  211.038020][ T6498]        vfs_get_tree+0x88/0x270
[  211.042962][ T6498]        do_new_mount+0x2ba/0xb40
[  211.047983][ T6498]        __se_sys_mount+0x2d5/0x3c0
[  211.053200][ T6498]        do_syscall_64+0x3b/0xb0
[  211.058130][ T6498]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  211.064536][ T6498] 
[  211.064536][ T6498] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}:
[  211.072878][ T6498]        validate_chain+0x1661/0x5950
[  211.078240][ T6498]        __lock_acquire+0x125b/0x1f80
[  211.083606][ T6498]        lock_acquire+0x1f8/0x5a0
[  211.088622][ T6498]        __mutex_lock+0x132/0xd80
[  211.093645][ T6498]        ocfs2_get_system_file_inode+0x1a1/0x7b0
[  211.099966][ T6498]        ocfs2_reserve_local_alloc_bits+0xfe/0x29d0
[  211.106550][ T6498]        ocfs2_reserve_clusters_with_limit+0x1b4/0xb50
[  211.113395][ T6498]        ocfs2_convert_inline_data_to_extents+0x299/0x17f0
[  211.120586][ T6498]        ocfs2_write_begin_nolock+0x1ca8/0x4e40
[  211.126835][ T6498]        ocfs2_write_begin+0x201/0x390
[  211.132288][ T6498]        generic_perform_write+0x2fc/0x5e0
[  211.138084][ T6498]        __generic_file_write_iter+0x176/0x400
[  211.144223][ T6498]        ocfs2_file_write_iter+0x17c6/0x2020
[  211.150222][ T6498]        vfs_write+0x857/0xbc0
[  211.154991][ T6498]        __x64_sys_pwrite64+0x1a6/0x230
[  211.160529][ T6498]        do_syscall_64+0x3b/0xb0
[  211.165455][ T6498]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  211.171859][ T6498] 
[  211.171859][ T6498] other info that might help us debug this:
[  211.171859][ T6498] 
[  211.182075][ T6498]  Possible unsafe locking scenario:
[  211.182075][ T6498] 
[  211.189508][ T6498]        CPU0                    CPU1
[  211.194869][ T6498]        ----                    ----
[  211.200217][ T6498]   lock(&ocfs2_file_ip_alloc_sem_key);
[  211.205759][ T6498]                                lock(&osb->system_file_mutex);
[  211.213378][ T6498]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  211.221433][ T6498]   lock(&osb->system_file_mutex);
[  211.226534][ T6498] 
[  211.226534][ T6498]  *** DEADLOCK ***
[  211.226534][ T6498] 
[  211.234659][ T6498] 3 locks held by syz.5.540/6498:
[  211.239670][ T6498]  #0: ffff888028958460 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  211.248632][ T6498]  #1: ffff888058b289c8 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x476/0x2020
[  211.259943][ T6498]  #2: ffff888058b28660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cd/0x390
[  211.270902][ T6498] 
[  211.270902][ T6498] stack backtrace:
[  211.276788][ T6498] CPU: 0 PID: 6498 Comm: syz.5.540 Not tainted 6.1.114-syzkaller #0
[  211.284757][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  211.294799][ T6498] Call Trace:
[  211.298070][ T6498]  <TASK>
[  211.300990][ T6498]  dump_stack_lvl+0x1e3/0x2cb
[  211.305663][ T6498]  ? nf_tcp_handle_invalid+0x642/0x642
[  211.311132][ T6498]  ? print_circular_bug+0x12b/0x1a0
[  211.316323][ T6498]  check_noncircular+0x2fa/0x3b0
[  211.321248][ T6498]  ? add_chain_block+0x850/0x850
[  211.326174][ T6498]  ? lockdep_lock+0x11f/0x2a0
[  211.330855][ T6498]  ? _find_first_zero_bit+0xd0/0x100
[  211.336133][ T6498]  validate_chain+0x1661/0x5950
[  211.340979][ T6498]  ? reacquire_held_locks+0x660/0x660
[  211.346352][ T6498]  ? validate_chain+0x112/0x5950
[  211.351280][ T6498]  ? rcu_is_watching+0x11/0xb0
[  211.356047][ T6498]  ? lock_release+0xd6/0xa20
[  211.360629][ T6498]  ? read_lock_is_recursive+0x10/0x10
[  211.366010][ T6498]  ? deref_stack_reg+0x17c/0x210
[  211.370939][ T6498]  ? check_path+0x40/0x40
[  211.375256][ T6498]  ? unwind_next_frame+0x1a3f/0x2220
[  211.380530][ T6498]  ? deref_stack_reg+0x17c/0x210
[  211.385456][ T6498]  ? mark_lock+0x9a/0x340
[  211.389778][ T6498]  __lock_acquire+0x125b/0x1f80
[  211.394643][ T6498]  lock_acquire+0x1f8/0x5a0
[  211.399136][ T6498]  ? ocfs2_get_system_file_inode+0x1a1/0x7b0
[  211.405110][ T6498]  ? read_lock_is_recursive+0x10/0x10
[  211.410476][ T6498]  ? __might_sleep+0xb0/0xb0
[  211.415062][ T6498]  __mutex_lock+0x132/0xd80
[  211.419553][ T6498]  ? ocfs2_get_system_file_inode+0x1a1/0x7b0
[  211.425533][ T6498]  ? ocfs2_get_system_file_inode+0x144/0x7b0
[  211.431505][ T6498]  ? ocfs2_get_system_file_inode+0x1a1/0x7b0
[  211.437474][ T6498]  ? __lock_acquire+0x1f80/0x1f80
[  211.442493][ T6498]  ? mutex_lock_nested+0x10/0x10
[  211.447419][ T6498]  ? do_raw_spin_unlock+0x137/0x8a0
[  211.452607][ T6498]  ocfs2_get_system_file_inode+0x1a1/0x7b0
[  211.458412][ T6498]  ? ocfs2_fast_symlink_read_folio+0x560/0x560
[  211.464559][ T6498]  ? reacquire_held_locks+0x660/0x660
[  211.469939][ T6498]  ? kernel_text_address+0x9f/0xd0
[  211.475042][ T6498]  ? __kernel_text_address+0x9/0x40
[  211.480232][ T6498]  ? unwind_get_return_address+0x49/0x80
[  211.485852][ T6498]  ? arch_stack_walk+0xf3/0x140
[  211.490693][ T6498]  ocfs2_reserve_local_alloc_bits+0xfe/0x29d0
[  211.496763][ T6498]  ? stack_trace_save+0x113/0x1c0
[  211.501786][ T6498]  ? mark_lock+0x9a/0x340
[  211.506120][ T6498]  ? __lock_acquire+0x125b/0x1f80
[  211.511136][ T6498]  ? ocfs2_complete_local_alloc_recovery+0x620/0x620
[  211.517810][ T6498]  ? ocfs2_alloc_should_use_local+0x162/0x380
[  211.523869][ T6498]  ? __lock_acquire+0x1f80/0x1f80
[  211.528882][ T6498]  ? do_raw_spin_lock+0x14a/0x370
[  211.533896][ T6498]  ? do_raw_spin_unlock+0x137/0x8a0
[  211.539085][ T6498]  ? ocfs2_alloc_should_use_local+0x162/0x380
[  211.545146][ T6498]  ocfs2_reserve_clusters_with_limit+0x1b4/0xb50
[  211.551470][ T6498]  ? ocfs2_reserve_clusters+0x30/0x30
[  211.556832][ T6498]  ? kernel_text_address+0x9f/0xd0
[  211.561936][ T6498]  ? __kernel_text_address+0x9/0x40
[  211.567141][ T6498]  ? unwind_get_return_address+0x49/0x80
[  211.572762][ T6498]  ? arch_stack_walk+0xf3/0x140
[  211.577622][ T6498]  ocfs2_convert_inline_data_to_extents+0x299/0x17f0
[  211.584291][ T6498]  ? __stack_depot_save+0x36/0x470
[  211.589395][ T6498]  ? ocfs2_set_inode_data_inline+0x310/0x310
[  211.595383][ T6498]  ? ocfs2_write_begin+0x201/0x390
[  211.600504][ T6498]  ? __generic_file_write_iter+0x176/0x400
[  211.606322][ T6498]  ? vfs_write+0x857/0xbc0
[  211.610737][ T6498]  ? do_syscall_64+0x3b/0xb0
[  211.615332][ T6498]  ocfs2_write_begin_nolock+0x1ca8/0x4e40
[  211.621063][ T6498]  ? ocfs2_size_fits_inline_data+0x90/0x90
[  211.626863][ T6498]  ? ocfs2_inode_lock_full_nested+0x177/0x1bf0
[  211.633011][ T6498]  ? ocfs2_read_inode_block+0x148/0x1d0
[  211.638579][ T6498]  ? read_lock_is_recursive+0x10/0x10
[  211.644002][ T6498]  ? rwsem_write_trylock+0x166/0x210
[  211.649307][ T6498]  ? print_irqtrace_events+0x210/0x210
[  211.654761][ T6498]  ? clear_nonspinnable+0x60/0x60
[  211.659780][ T6498]  ? ktime_get_coarse_real_ts64+0x36/0x120
[  211.665582][ T6498]  ? lockdep_hardirqs_on+0x94/0x130
[  211.670778][ T6498]  ocfs2_write_begin+0x201/0x390
[  211.675715][ T6498]  ? ocfs2_readahead+0x1a0/0x1a0
[  211.680643][ T6498]  ? ktime_get_coarse_real_ts64+0x107/0x120
[  211.686530][ T6498]  ? fault_in_iov_iter_readable+0xdb/0x270
[  211.692327][ T6498]  generic_perform_write+0x2fc/0x5e0
[  211.697609][ T6498]  ? generic_file_direct_write+0x460/0x460
[  211.703404][ T6498]  ? __file_remove_privs+0x640/0x640
[  211.708682][ T6498]  ? do_raw_spin_unlock+0x137/0x8a0
[  211.713870][ T6498]  __generic_file_write_iter+0x176/0x400
[  211.719493][ T6498]  ? ocfs2_inode_unlock+0x122/0x150
[  211.724697][ T6498]  ocfs2_file_write_iter+0x17c6/0x2020
[  211.730154][ T6498]  ? ocfs2_file_read_iter+0xc30/0xc30
[  211.735517][ T6498]  ? read_lock_is_recursive+0x10/0x10
[  211.740889][ T6498]  ? rcu_read_lock_any_held+0xb3/0x160
[  211.746340][ T6498]  ? rcu_read_lock_bh_held+0x110/0x110
[  211.751788][ T6498]  ? end_current_label_crit_section+0x147/0x170
[  211.758030][ T6498]  vfs_write+0x857/0xbc0
[  211.762268][ T6498]  ? file_end_write+0x250/0x250
[  211.767136][ T6498]  ? __fget_files+0x28/0x4a0
[  211.771717][ T6498]  ? __fget_files+0x435/0x4a0
[  211.776384][ T6498]  ? __fdget+0x182/0x210
[  211.780617][ T6498]  __x64_sys_pwrite64+0x1a6/0x230
[  211.785631][ T6498]  ? ksys_pwrite64+0x1d0/0x1d0
[  211.790388][ T6498]  ? syscall_enter_from_user_mode+0x2e/0x230
[  211.796361][ T6498]  ? lockdep_hardirqs_on+0x94/0x130
[  211.801549][ T6498]  ? syscall_enter_from_user_mode+0x2e/0x230
[  211.807524][ T6498]  do_syscall_64+0x3b/0xb0
[  211.811929][ T6498]  ? clear_bhb_loop+0x45/0xa0
[  211.816611][ T6498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  211.822495][ T6498] RIP: 0033:0x7f3c1097e719
[  211.826914][ T6498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.846525][ T6498] RSP: 002b:00007f3c1185b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  211.854957][ T6498] RAX: ffffffffffffffda RBX: 00007f3c10b35f80 RCX: 00007f3c1097e719
[  211.862936][ T6498] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004
[  211.870905][ T6498] RBP: 00007f3c109f132e R08: 0000000000000000 R09: 0000000000000000
[  211.878866][ T6498] R10: 0000000008080c61 R11: 0000000000000246 R12: 0000000000000000
[  211.886831][ T6498] R13: 0000000000000000 R14: 00007f3c10b35f80 R15: 00007fffbb5e01a8
[  211.894800][ T6498]  </TASK>
[  211.898915][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  211.917609][ T4288] usb usb1-port1: attempt power cycle
[  211.917801][ T6537] Cannot find add_set index 0 as target
[  212.005298][ T5182] ocfs2: Unmounting device (7,5) on (node local)
[  212.342882][ T4288] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  212.432929][ T4288] usb 1-1: device descriptor read/8, error -71
[  212.702769][ T4288] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  212.792933][ T4288] usb 1-1: device descriptor read/8, error -71
[  212.912979][ T4288] usb usb1-port1: unable to enumerate USB device
[  212.962978][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  214.003212][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  215.042954][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  216.093160][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  217.132887][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  218.162977][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  219.202990][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  220.242994][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available