last executing test programs:

12.400894955s ago: executing program 3 (id=437):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]})

12.01797017s ago: executing program 3 (id=441):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x10000})
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)

11.694314096s ago: executing program 3 (id=443):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000a80)=@vmx={0x3, 0x0, 0x2080, {0x13000, 0x0, {}, 0x1, 0x7fffffff}, {"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", "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"}})

11.302261629s ago: executing program 3 (id=446):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x10850, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2e5, &(0x7f0000000880)="$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")
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}])

9.995682823s ago: executing program 3 (id=447):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
close(0x3)

9.47382564s ago: executing program 3 (id=449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

7.013098967s ago: executing program 1 (id=455):
r0 = syz_io_uring_setup(0x6d3b, &(0x7f0000000180)={0x0, 0xa7f6, 0x10100, 0x7, 0x3cd}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x780, 0x0, 0xc, 0x0, 0x0)

6.645247045s ago: executing program 1 (id=457):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000040)={[{@nobarrier}, {@discard_async}, {@ref_verify}]}, 0x1, 0x559d, &(0x7f000000ac40)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61)

5.970146333s ago: executing program 2 (id=459):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @delba={0x3, 0x2, {{0x0, 0x1}, 0x12, {0xbd, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846)

5.773485164s ago: executing program 2 (id=460):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100)

5.404402892s ago: executing program 2 (id=461):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94)

5.047723141s ago: executing program 2 (id=463):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getegid()

4.774365597s ago: executing program 1 (id=465):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000007c0)="1ae62a5f9a7748cfc8e385a13947af0ed30ceaf501240337f128d5add4a5b42ffc3ffc722a6c33772f59a476ea378e6a83f8751424b07c52c8823a8102b8186d3624078e682066d9294a716f6359d914dc57471ca4a2e7cdf96aa87781ec8e78e6001c1b9fd00a41a8f13ef63a3a1318b0901caf3162531ac38cf1a9f274c7d0d8603ab629e81af145a190afba4a220df2ce92154d44bf30e3", 0x99}], 0x1}}], 0x1, 0x94)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="100029bd70006ade7673696d0000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001002000060011000080000008000b0001000000080001007063690011000200303031303a30303a31302e30000003000200000008000b000000008006001600060000000500120001000000060011000d000000080000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40440c4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)

4.407947853s ago: executing program 0 (id=466):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xfffeffff, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x81, 0xb}, {0x6002, 0xd000, 0xc, 0x3, 0x3, 0x7, 0x6, 0x5, 0x1, 0x4, 0x2, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xd000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x3, 0x30, 0x46, 0x3}, {0xf000, 0x10000, 0x3, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x6000, 0xf000, 0xd, 0xe, 0x93, 0x40, 0xff, 0x15, 0x7b, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x0, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1bb]})

3.800132291s ago: executing program 1 (id=467):
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000170a018859f822340177a0942cdc01000000000000000000000006ebe5d09fd9a7731ec389ac24f755126bfd514e572052dfc126613030b622d5a68e6c0f278deb71cbfd640f633ff71653eea9726e0fbe9269c138b1299a6e1a01bc8d3165bc71c0a07d26946c5e1c2cdc5f7731533856d6c56afe93f584302342b0d80c386c1b1b1bd371"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000)
syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x230200)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="ee61d15b176da8ea8abe33a2ac1a58bde11db6411b4864916c5ac483163a894aaee52e9e377fc5bab5055d789da66a7a70863f889aad1335f04ee4450038b9778f4d5ec530dd982feea0da048265c0ac677634f7f8a03936495e01ad2391429afd94e82dd69e1e130ee96890732fd2607f206484a26cd5fb3c25cedbf3e614e91913ecc6cb885d6634e642a4663fb173c97df34d038205965db55ba937f12ef8ec0905e1cd0aae11db41a3046e273aeecf2fe24cbdb77f0b7aaf43983b50874a6dd6bf1a1b37c155a4d520a4f14573abd041057b027c698396e651d92fa6"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0xbe55d000)
syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r5, 0x2}}, 0x18)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.756695733s ago: executing program 0 (id=468):
socket$inet6_tcp(0xa, 0x1, 0x0)
chmod(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x57eeb83c9526c7ac)
truncate(&(0x7f0000000340)='./file0\x00', 0x2)
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
lseek(r1, 0x7fffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}})
setpgid(r2, r3)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='z', 0x1}], 0x1)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf25000000000c001600070000000000000008000a00000000000500060004000000060001000400000014001f00ff01000000000000000000000000000105001300020000000c001000030000000000000008001900ac1414bb050005000100000008001700", @ANYRES32=r0, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x40c0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x8000, @mcast1, 0x7ff}, {0xa, 0x4e23, 0x8, @empty, 0x401}, 0x1, {[0x9, 0x7ff, 0x5, 0x200, 0x6, 0x6, 0xa0b70e0, 0x80000001]}}, 0x5c)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x44, 0x5, 0x7, 0x0, {0x9, 0x8000, 0x1c, 0xa, 0x8, 0x9, 0xa939, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb637aab3803380574019b9250dc4500000000000007ff00"}})

3.595005211s ago: executing program 2 (id=469):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, 0x0)

2.805266272s ago: executing program 1 (id=470):
r0 = fanotify_init(0x4, 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
setresuid(0x0, 0xee00, 0x0)
fanotify_mark(r0, 0x2, 0x1028, r1, 0x0)

2.483764678s ago: executing program 0 (id=471):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000008, 0x0, 0x7, 0x3, 0x1, 0x4, 0x5}]})

2.321750546s ago: executing program 1 (id=472):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000480))
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r0, 0x0, 0x0)

1.671161015s ago: executing program 0 (id=473):
shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_emit_ethernet(0x4a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r5 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{}], 0x1, 0x40800)
recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40000041)

460.970213ms ago: executing program 0 (id=474):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x15000000}]]}, 0x38}}, 0x0)

415.506784ms ago: executing program 2 (id=475):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40d}}]})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0})

0s ago: executing program 0 (id=476):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts.
[   81.415917][ T5754] cgroup: Unknown subsys name 'net'
[   81.582928][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.335954][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.040348][ T5767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.050781][ T5767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.064128][ T5767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.076178][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.087515][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.097309][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.106597][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.115130][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.123941][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.153383][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.162324][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.171820][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.180451][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.188830][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.209056][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.219067][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.231685][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.244008][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.252382][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.261594][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.261705][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.276804][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.287948][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.299170][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.766075][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   85.796018][ T5765] chnl_net:caif_netlink_parms(): no params data found
[   85.930642][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   85.991603][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.002710][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.010390][ T5770] bridge_slave_0: entered allmulticast mode
[   86.022712][ T5770] bridge_slave_0: entered promiscuous mode
[   86.080448][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.087815][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.095541][ T5770] bridge_slave_1: entered allmulticast mode
[   86.103267][ T5770] bridge_slave_1: entered promiscuous mode
[   86.138099][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.146248][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.155289][ T5765] bridge_slave_0: entered allmulticast mode
[   86.162364][ T5765] bridge_slave_0: entered promiscuous mode
[   86.180819][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   86.201105][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.208697][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.216804][ T5765] bridge_slave_1: entered allmulticast mode
[   86.224372][ T5765] bridge_slave_1: entered promiscuous mode
[   86.236333][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.257264][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.332211][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.339673][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.347153][ T5773] bridge_slave_0: entered allmulticast mode
[   86.354694][ T5773] bridge_slave_0: entered promiscuous mode
[   86.363049][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.370424][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.380093][ T5773] bridge_slave_1: entered allmulticast mode
[   86.387364][ T5773] bridge_slave_1: entered promiscuous mode
[   86.397238][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.440984][ T5770] team0: Port device team_slave_0 added
[   86.461733][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.492350][ T5770] team0: Port device team_slave_1 added
[   86.535997][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.578158][ T5765] team0: Port device team_slave_0 added
[   86.588247][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.602336][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.610231][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.637171][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.663575][ T5765] team0: Port device team_slave_1 added
[   86.681345][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.688585][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.717709][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.738735][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.746511][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.753983][ T5769] bridge_slave_0: entered allmulticast mode
[   86.761645][ T5769] bridge_slave_0: entered promiscuous mode
[   86.811286][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.818917][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.827057][ T5769] bridge_slave_1: entered allmulticast mode
[   86.835194][ T5769] bridge_slave_1: entered promiscuous mode
[   86.855875][ T5773] team0: Port device team_slave_0 added
[   86.863186][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.872310][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.898984][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.912734][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.920095][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.951345][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.994022][ T5773] team0: Port device team_slave_1 added
[   87.002885][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.041718][ T5770] hsr_slave_0: entered promiscuous mode
[   87.048796][ T5770] hsr_slave_1: entered promiscuous mode
[   87.059987][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.127338][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.134575][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.161683][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.174064][ T5774] Bluetooth: hci2: command tx timeout
[   87.184628][ T5769] team0: Port device team_slave_0 added
[   87.194127][ T5769] team0: Port device team_slave_1 added
[   87.214080][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.221161][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.248040][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.260016][ T5774] Bluetooth: hci3: command tx timeout
[   87.326028][ T5765] hsr_slave_0: entered promiscuous mode
[   87.332863][ T5765] hsr_slave_1: entered promiscuous mode
[   87.340190][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.343767][ T5774] Bluetooth: hci0: command tx timeout
[   87.351530][ T5765] Cannot create hsr debugfs directory
[   87.392146][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.404980][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.433333][ T5774] Bluetooth: hci1: command tx timeout
[   87.442789][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.506637][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.522071][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.554448][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.680224][ T5773] hsr_slave_0: entered promiscuous mode
[   87.692402][ T5773] hsr_slave_1: entered promiscuous mode
[   87.700830][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.712731][ T5773] Cannot create hsr debugfs directory
[   87.916440][ T5769] hsr_slave_0: entered promiscuous mode
[   87.923590][ T5769] hsr_slave_1: entered promiscuous mode
[   87.931509][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.939267][ T5769] Cannot create hsr debugfs directory
[   88.194765][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.235587][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.256029][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.271150][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.361105][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.372049][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.382957][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.397661][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.500412][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.512468][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.535767][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.547963][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.676959][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.689115][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.700726][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.722504][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.733295][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.786417][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   88.837221][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.844866][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.894688][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.902636][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.922196][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.967632][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.043690][ T5765] 8021q: adding VLAN 0 to HW filter on device team0
[   89.060112][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   89.081339][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.088616][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.116116][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.138018][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.145295][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.196011][ T2882] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.203880][ T2882] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.249852][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.257293][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.265553][ T5774] Bluetooth: hci2: command tx timeout
[   89.289634][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.334642][ T5774] Bluetooth: hci3: command tx timeout
[   89.369479][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   89.413765][ T5774] Bluetooth: hci0: command tx timeout
[   89.447470][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.454740][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.494184][ T5774] Bluetooth: hci1: command tx timeout
[   89.506557][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.513819][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.696701][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.750657][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.871361][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.944785][ T5770] veth0_vlan: entered promiscuous mode
[   89.972367][ T5770] veth1_vlan: entered promiscuous mode
[   90.101901][ T5770] veth0_macvtap: entered promiscuous mode
[   90.122142][ T5770] veth1_macvtap: entered promiscuous mode
[   90.178374][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.196085][ T5769] veth0_vlan: entered promiscuous mode
[   90.210367][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.226998][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.249147][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.258984][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.268881][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.277974][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.295791][ T5769] veth1_vlan: entered promiscuous mode
[   90.317687][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.459461][ T5765] veth0_vlan: entered promiscuous mode
[   90.480092][ T5769] veth0_macvtap: entered promiscuous mode
[   90.498651][ T5769] veth1_macvtap: entered promiscuous mode
[   90.547664][ T5765] veth1_vlan: entered promiscuous mode
[   90.572498][ T5773] veth0_vlan: entered promiscuous mode
[   90.595640][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.621890][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.633825][ T5773] veth1_vlan: entered promiscuous mode
[   90.652808][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.668016][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.680542][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.715854][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.728185][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.740115][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.760188][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.768208][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.788904][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.799299][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.810772][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.820219][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.835685][ T5765] veth0_macvtap: entered promiscuous mode
[   90.940149][ T5765] veth1_macvtap: entered promiscuous mode
[   90.960035][ T5773] veth0_macvtap: entered promiscuous mode
[   90.997548][ T5773] veth1_macvtap: entered promiscuous mode
[   91.012093][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.035252][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.046664][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.057496][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.070977][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.159406][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.177138][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.193020][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.204093][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.215922][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.239821][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.251193][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.270003][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.287378][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.323453][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.335300][ T5774] Bluetooth: hci2: command tx timeout
[   91.342147][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.355053][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.367085][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.378315][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.388479][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.399440][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.410100][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.421427][ T5774] Bluetooth: hci3: command tx timeout
[   91.428215][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.440151][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.449234][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.461612][ T5837] syz.3.5[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   91.471493][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.482098][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.494549][ T5774] Bluetooth: hci0: command tx timeout
[   91.502167][ T5837] loop3: detected capacity change from 0 to 512
[   91.507098][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.554243][ T5837] EXT4-fs (loop3): orphan cleanup on readonly fs
[   91.572912][ T5837] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.5: ea_inode file size=4 entry size=6
[   91.593790][ T5774] Bluetooth: hci1: command tx timeout
[   91.599649][ T5837] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   91.618708][ T5837] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #15: comm syz.3.5: corrupted inode contents
[   91.634316][ T5837] EXT4-fs (loop3): Remounting filesystem read-only
[   91.640921][ T5837] EXT4-fs warning (device loop3): ext4_evict_inode:272: xattr delete (err -5)
[   91.651006][ T5837] EXT4-fs (loop3): 1 orphan inode deleted
[   91.659274][ T5837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   91.678624][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.698132][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.713220][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.722133][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.747494][ T5837] overlayfs: failed to get redirect (-5)
[   91.752678][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.761307][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.849449][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.910765][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.946979][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.980661][ T5841] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.029654][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.043327][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.092085][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.120483][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.212191][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.248542][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.288177][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.321809][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.413556][   T23] cfg80211: failed to load regulatory.db
[   93.160360][ T5871] capability: warning: `syz.1.14' uses deprecated v2 capabilities in a way that may be insecure
[   93.220366][ T5874] loop0: detected capacity change from 0 to 1024
[   93.235607][ T5874] EXT4-fs: inline encryption not supported
[   93.284023][ T5874] EXT4-fs: Ignoring removed bh option
[   93.307036][ T5874] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.371155][ T5874] EXT4-fs (loop0): orphan cleanup on readonly fs
[   93.414019][ T5774] Bluetooth: hci2: command tx timeout
[   93.434310][ T5874] EXT4-fs error (device loop0): ext4_quota_enable:7140: comm syz.0.15: inode #2304: comm syz.0.15: iget: illegal inode #
[   93.466748][ T5879] netlink: 'syz.1.18': attribute type 17 has an invalid length.
[   93.474663][ T5879] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   93.483394][ T5879] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   93.499831][ T5774] Bluetooth: hci3: command tx timeout
[   93.539964][ T5874] EXT4-fs (loop0): Remounting filesystem read-only
[   93.572329][ T5883] netlink: 140 bytes leftover after parsing attributes in process `syz.1.19'.
[   93.581779][ T5874] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[   93.598201][ T5774] Bluetooth: hci0: command tx timeout
[   93.624968][ T5874] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   93.653613][ T5774] Bluetooth: hci1: command tx timeout
[   93.686051][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.958965][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.187941][ T5898] loop1: detected capacity change from 0 to 16
[   94.253417][ T5898] erofs: (device loop1): mounted with root inode @ nid 36.
[   94.317454][ T5898] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 36
[   94.471057][ T5902] loop3: detected capacity change from 0 to 4096
[   94.562335][ T5902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   94.658573][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.826601][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.014052][ T5920] netlink: 'syz.2.37': attribute type 10 has an invalid length.
[   95.394565][ T5930] netlink: 'syz.0.41': attribute type 4 has an invalid length.
[   95.402380][ T5930] netlink: 152 bytes leftover after parsing attributes in process `syz.0.41'.
[   95.517026][ T5930] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.805445][ T5919] loop1: detected capacity change from 0 to 32768
[   95.833622][ T5919] =======================================================
[   95.833622][ T5919] WARNING: The mand mount option has been deprecated and
[   95.833622][ T5919]          and is ignored by this kernel. Remove the mand
[   95.833622][ T5919]          option from the mount to silence this warning.
[   95.833622][ T5919] =======================================================
[   96.014546][ T5944] (null): rxe_set_mtu: Set mtu to 4096
[   96.022036][ T5944] lo speed is unknown, defaulting to 1000
[   96.046814][ T5944] lo speed is unknown, defaulting to 1000
[   96.074889][ T5919] (syz.1.35,5919,1):ocfs2_find_slot:468 ERROR: no free slots available!
[   96.090870][ T5944] lo speed is unknown, defaulting to 1000
[   96.093385][ T5919] (syz.1.35,5919,1):ocfs2_mount_volume:1807 ERROR: status = -22
[   96.110826][ T5919] (syz.1.35,5919,1):ocfs2_fill_super:1178 ERROR: status = -22
[   96.236324][ T5919] NILFS (loop1): device size too small
[   96.577644][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.694529][   T27] lo speed is unknown, defaulting to 1000
[   96.701222][ T5944] infiniband syz0: set active
[   96.721839][ T5944] infiniband syz0: added lo
[   96.858803][ T5944] RDS/IB: syz0: added
[   96.908488][ T5944] smc: adding ib device syz0 with port count 1
[   96.938278][ T5944] smc:    ib device syz0 port 1 has pnetid 
[   96.970298][  T965] lo speed is unknown, defaulting to 1000
[   96.999266][ T5944] lo speed is unknown, defaulting to 1000
[   97.280184][ T5970] loop1: detected capacity change from 0 to 1024
[   97.490733][ T5974] erspan1: entered promiscuous mode
[   97.552175][ T5963] loop3: detected capacity change from 0 to 32768
[   97.570019][ T5944] lo speed is unknown, defaulting to 1000
[   97.672109][ T5963] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   97.902547][ T5963] XFS (loop3): Ending clean mount
[   97.975408][ T5963] XFS (loop3): Quotacheck needed: Please wait.
[   98.100570][ T5963] XFS (loop3): Quotacheck: Done.
[   98.137113][ T5944] lo speed is unknown, defaulting to 1000
[   98.371730][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   98.662979][ T5944] lo speed is unknown, defaulting to 1000
[   99.463016][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'.
[   99.492768][ T6010] netlink: 152 bytes leftover after parsing attributes in process `syz.0.74'.
[   99.578787][ T6000] loop2: detected capacity change from 0 to 32768
[   99.679512][ T6000] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.702899][ T6004] loop1: detected capacity change from 0 to 32768
[   99.727552][ T6006] loop3: detected capacity change from 0 to 32768
[   99.763718][ T6006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.68 (6006)
[   99.800690][ T6004] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.818404][ T6006] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.829189][ T6006] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   99.839066][ T6006] BTRFS info (device loop3): force clearing of disk cache
[   99.846634][ T6006] BTRFS info (device loop3): metadata ratio 0
[   99.852773][ T6006] BTRFS info (device loop3): enabling ssd optimizations
[   99.860100][ T6006] BTRFS info (device loop3): using spread ssd allocation scheme
[   99.868540][ T6006] BTRFS info (device loop3): using free space tree
[  100.041576][ T6004] XFS (loop1): Ending clean mount
[  100.050091][ T6000] XFS (loop2): Ending clean mount
[  100.123409][ T6006] BTRFS info (device loop3): auto enabling async discard
[  100.175048][ T6006] BTRFS info (device loop3): rebuilding free space tree
[  100.200077][ T6046] capability: warning: `syz.0.76' uses 32-bit capabilities (legacy support in use)
[  100.341029][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  100.394738][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  100.534443][ T6048] loop0: detected capacity change from 0 to 1024
[  100.641483][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.868625][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.944842][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.470615][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.277068][ T6079] loop1: detected capacity change from 0 to 4096
[  102.287432][ T6069] loop2: detected capacity change from 0 to 32768
[  102.307066][ T6069] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.84 (6069)
[  102.351051][ T6069] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.383935][ T6069] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  102.413766][ T6069] BTRFS info (device loop2): enabling auto defrag
[  102.420358][ T6069] BTRFS info (device loop2): use no compression
[  102.427455][ T5835] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  102.461606][ T6069] BTRFS info (device loop2): max_inline at 4096
[  102.472963][ T6069] BTRFS info (device loop2): using free space tree
[  102.637615][ T6069] BTRFS info (device loop2): enabling ssd optimizations
[  102.646918][ T6069] BTRFS info (device loop2): auto enabling async discard
[  102.647236][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.666727][ T5835] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  102.676477][ T5835] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  102.686172][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.706672][ T5835] usb 4-1: config 0 descriptor??
[  102.725363][   T28] audit: type=1800 audit(1773124646.350:2): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.88" name="file1" dev="loop1" ino=33 res=0 errno=0
[  102.801397][   T28] audit: type=1800 audit(1773124646.430:3): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name="file1" dev="loop2" ino=260 res=0 errno=0
[  102.824081][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.832867][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.063161][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.162876][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  103.163936][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  103.174843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  103.181521][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.423249][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  103.473275][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  103.473488][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.743140][    C1] sched: RT throttling activated
[  106.541358][ T5835] usb 4-1: string descriptor 0 read error: -71
[  106.586736][ T5773] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.632109][ T5835] usb 4-1: USB disconnect, device number 2
[  110.962227][ T6146] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.108'.
[  111.213317][ T5808] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  113.873222][ T5808] usb 4-1: Using ep0 maxpacket: 8
[  113.885535][ T5808] usb 4-1: device descriptor read/all, error -71
[  114.080576][ T6162] tipc: Started in network mode
[  114.116649][ T6162] tipc: Node identity ac14140d, cluster identity 4711
[  114.143709][ T6162] tipc: New replicast peer: 255.255.255.255
[  114.151633][ T6162] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.172952][   T23] tipc: Node number set to 2886997005
[  118.486263][ T6184] veth0_virt_wifi: entered promiscuous mode
[  118.492444][ T6184] macsec1: entered allmulticast mode
[  118.537699][ T6184] veth0_virt_wifi: entered allmulticast mode
[  118.555532][ T6184] veth0_virt_wifi: left allmulticast mode
[  118.570674][ T6184] veth0_virt_wifi: left promiscuous mode
[  118.835961][ T6188] loop3: detected capacity change from 0 to 512
[  118.880474][ T6188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.198762][ T6197] netlink: 6 bytes leftover after parsing attributes in process `syz.1.128'.
[  119.343566][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.134361][ T6200] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[  121.230767][ T6207] loop1: detected capacity change from 0 to 512
[  121.264482][ T6207] EXT4-fs: Ignoring removed orlov option
[  121.309217][ T6207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  121.372646][ T6207] EXT4-fs (loop1): orphan cleanup on readonly fs
[  121.440241][ T6207] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.131: bg 0: block 248: padding at end of block bitmap is not set
[  121.469840][ T6207] Quota error (device loop1): write_blk: dquota write failed
[  121.491455][ T6207] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  121.528317][ T6207] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.131: Failed to acquire dquot type 1
[  121.579989][ T6207] EXT4-fs (loop1): 1 truncate cleaned up
[  121.616678][ T6207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  121.711511][ T6207] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  121.747203][ T6207] EXT4-fs error (device loop1): __ext4_remount:6752: comm syz.1.131: Abort forced by user
[  121.770015][ T6207] EXT4-fs (loop1): Remounting filesystem read-only
[  121.777282][ T6207] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  121.795895][ T6207] ext4 filesystem being remounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.897393][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.483045][ T6246] loop1: detected capacity change from 0 to 512
[  124.513368][ T6246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  124.600949][ T6246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.633401][ T6246] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.690966][ T6251] loop2: detected capacity change from 0 to 1024
[  124.794338][ T6246] EXT4-fs error (device loop1): __ext4_new_inode:1284: comm syz.1.144: failed to insert inode 16: doubly allocated?
[  124.807283][ T6251] hfsplus: b-tree write err: -5, ino 2
[  124.897136][ T2882] hfsplus: b-tree write err: -5, ino 25
[  124.903967][ T2882] hfsplus: b-tree write err: -5, ino 4
[  124.971854][ T6256] block nbd0: not configured, cannot reconfigure
[  125.010972][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.446605][ T6272] loop2: detected capacity change from 0 to 128
[  127.523067][ T6272] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.557128][ T6276] loop0: detected capacity change from 0 to 256
[  127.564914][ T6276] exfat: Deprecated parameter 'utf8'
[  127.593408][ T6272] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  127.612690][ T6276] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  127.703258][   T28] audit: type=1800 audit(1773124671.320:4): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.153" name="file1" dev="loop0" ino=1048592 res=0 errno=0
[  127.791833][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.010089][ T6278] loop0: detected capacity change from 0 to 1024
[  128.025112][ T6280] loop2: detected capacity change from 0 to 16
[  128.065131][ T6280] erofs: (device loop2): mounted with root inode @ nid 36.
[  128.073836][ T6278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.175091][ T6278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.438579][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.883254][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  130.663266][   T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  130.674158][    T8] usb 3-1: Using ep0 maxpacket: 32
[  130.721673][    T8] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[  130.731059][    T8] usb 3-1: config 0 has no interface number 0
[  130.742905][    T8] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.756241][    T8] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.772341][    T8] usb 3-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  130.790490][    T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  130.800142][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.812458][    T8] usb 3-1: config 0 descriptor??
[  130.863533][   T23] usb 4-1: Using ep0 maxpacket: 32
[  130.875670][   T23] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  130.886406][   T23] usb 4-1: config 0 has no interface number 0
[  130.892811][   T23] usb 4-1: config 0 interface 12 has no altsetting 0
[  130.908552][   T23] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  130.918536][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.937883][   T23] usb 4-1: Product: syz
[  130.942137][   T23] usb 4-1: Manufacturer: syz
[  130.951327][   T23] usb 4-1: SerialNumber: syz
[  130.961397][   T23] usb 4-1: config 0 descriptor??
[  131.033445][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  131.233487][ T5810] usb 1-1: Using ep0 maxpacket: 16
[  131.247797][ T5810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  131.266898][ T5810] usb 1-1: config 0 has no interface number 0
[  131.285457][ T5810] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.313677][    T8] logitech-djreceiver 0003:046D:C537.0001: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.2-1/input6
[  131.328280][ T5810] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.344631][ T5810] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  131.370582][ T5810] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  131.383440][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.398446][ T5810] usb 1-1: config 0 descriptor??
[  131.474434][  T965] usb 3-1: USB disconnect, device number 2
[  131.583499][ T6305] fido_id[6305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  131.589087][   T23] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71
[  131.664007][   T23] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  131.671677][   T23] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  131.707275][   T23] f81534: probe of 4-1:0.12 failed with error -71
[  131.737463][   T23] usb 4-1: USB disconnect, device number 5
[  131.847873][ T5810] holtek_mouse 0003:04D9:A072.0002: unknown main item tag 0x2
[  131.868020][ T5810] holtek_mouse 0003:04D9:A072.0002: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.0-1/input1
[  132.053302][ T5810] usb 1-1: USB disconnect, device number 2
[  132.581924][ T6312] loop2: detected capacity change from 0 to 32768
[  132.612273][ T6312] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.166 (6312)
[  132.691237][ T6312] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.723031][ T6312] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  132.732381][ T6312] BTRFS info (device loop2): enabling auto defrag
[  132.744624][ T6312] BTRFS info (device loop2): use no compression
[  132.751589][ T6312] BTRFS info (device loop2): max_inline at 4096
[  132.775339][ T6312] BTRFS info (device loop2): using free space tree
[  132.913274][ T6312] BTRFS info (device loop2): enabling ssd optimizations
[  132.933330][ T6312] BTRFS info (device loop2): auto enabling async discard
[  133.102179][ T5773] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.113405][   T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  133.253822][ T5783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (5783)
[  133.323234][   T27] usb 1-1: Using ep0 maxpacket: 16
[  133.348710][   T27] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  133.357933][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.365010][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  133.383367][   T27] usb 1-1: config 1 has no interface number 0
[  133.389685][   T27] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  133.412677][   T27] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  133.428453][   T27] usb 1-1: config 1 interface 105 has no altsetting 0
[  133.453189][   T27] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  133.462972][   T27] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  133.480768][ T6319] loop3: detected capacity change from 0 to 32768
[  133.487915][   T27] usb 1-1: Product: syz
[  133.492142][   T27] usb 1-1: Manufacturer: syz
[  133.499244][   T27] usb 1-1: SerialNumber: syz
[  133.520970][ T6319] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.168 (6319)
[  133.573696][ T6324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.593487][ T6324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.642096][ T6319] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  133.680284][ T6319] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  133.720659][ T6319] BTRFS info (device loop3): using free space tree
[  136.313557][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  136.315972][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  136.387939][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  136.403941][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  136.483947][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  136.528945][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  136.539819][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  136.551453][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  136.562182][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  136.576495][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  136.586004][ T6324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  136.589857][ T6319] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  136.612493][ T6319] BTRFS error (device loop3): open_ctree failed: -12
[  136.633637][ T6324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  136.890015][   T27] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  136.934639][   T27] aqc111: probe of 1-1:1.105 failed with error -71
[  136.969343][   T27] usb 1-1: USB disconnect, device number 3
[  137.054192][ T6361] Zero length message leads to an empty skb
[  137.357669][ T6363] gretap0: entered promiscuous mode
[  137.383776][ T6363] vlan2: entered promiscuous mode
[  139.614402][ T6372] loop1: detected capacity change from 0 to 4096
[  139.974235][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  140.183367][   T27] usb 4-1: Using ep0 maxpacket: 32
[  140.190838][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.202519][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.222984][   T27] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  140.261728][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.284346][   T27] usb 4-1: config 0 descriptor??
[  140.724459][   T27] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  142.595345][  T965] usb 4-1: USB disconnect, device number 6
[  142.691915][ T6403] fido_id[6403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  143.309025][ T6406] loop1: detected capacity change from 0 to 32768
[  143.378345][ T6406] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  143.405797][ T6406] JBD2: Ignoring recovery information on journal
[  143.667732][ T6406] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  144.074184][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[  144.124557][   T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  145.358050][   T27] usb 1-1: Using ep0 maxpacket: 32
[  145.376874][   T27] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  145.418803][   T27] usb 1-1: config 0 has no interface number 0
[  145.426155][   T27] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  145.452384][   T27] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  145.476385][   T27] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  145.507401][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.537812][   T27] usb 1-1: Product: syz
[  145.542079][   T27] usb 1-1: Manufacturer: syz
[  145.563672][   T27] usb 1-1: SerialNumber: syz
[  145.584899][   T27] usb 1-1: config 0 descriptor??
[  145.982328][ T6419] loop3: detected capacity change from 0 to 32768
[  146.042308][ T6419] JBD2: Ignoring recovery information on journal
[  146.048585][   T27] radio-si470x 1-1:0.35: DeviceID=0x9242 ChipID=0x0000
[  146.063230][   T27] radio-si470x 1-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  146.206760][ T6419] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  146.258151][   T27] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -71
[  146.279272][   T27] radio-si470x 1-1:0.35: si470x_get_scratch: si470x_get_report returned -71
[  146.313975][   T27] radio-si470x: probe of 1-1:0.35 failed with error -5
[  146.333478][   T28] audit: type=1800 audit(1773124689.970:5): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.194" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  146.378641][   T27] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  146.423457][   T27] usb 1-1: USB disconnect, device number 4
[  146.467401][ T6431] tipc: Started in network mode
[  146.495582][ T6431] tipc: Node identity 4246, cluster identity 4711
[  146.502628][ T6431] tipc: Node number set to 16966
[  146.601198][ T5770] ocfs2: Unmounting device (7,3) on (node local)
[  146.635749][ T6433] loop2: detected capacity change from 0 to 256
[  146.715182][ T6426] loop1: detected capacity change from 0 to 32768
[  146.743682][ T6426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.196 (6426)
[  146.794745][ T6426] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.847251][ T6426] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  146.872227][ T6426] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  146.903369][ T6426] BTRFS info (device loop1): force zstd compression, level 3
[  146.910999][ T6426] BTRFS info (device loop1): turning on sync discard
[  146.933485][ T6426] BTRFS info (device loop1): force clearing of disk cache
[  146.940714][ T6426] BTRFS info (device loop1): enabling disk space caching
[  146.973579][ T6426] BTRFS info (device loop1): turning off discard
[  146.980035][ T6426] BTRFS info (device loop1): disk space caching is enabled
[  147.442162][ T6426] BTRFS info (device loop1): enabling ssd optimizations
[  147.628401][ T6426] BTRFS info (device loop1): rebuilding free space tree
[  148.046514][ T6426] BTRFS info (device loop1): disabling free space tree
[  148.088802][ T6426] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  148.150541][ T6426] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.238817][   T28] audit: type=1800 audit(1773124691.870:6): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.196" name="file1" dev="loop1" ino=260 res=0 errno=0
[  148.383572][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.553487][ T5808] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  148.688302][  T965] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  148.780556][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.802127][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.834130][ T5808] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  148.864434][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.904728][ T5808] usb 3-1: config 0 descriptor??
[  148.919023][  T965] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  148.950453][  T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.975873][  T965] usb 4-1: Product: syz
[  148.983316][  T965] usb 4-1: Manufacturer: syz
[  148.988001][  T965] usb 4-1: SerialNumber: syz
[  149.022731][  T965] usb 4-1: config 0 descriptor??
[  149.269570][  T965] usb 4-1: ignoring: probably an ADSL modem
[  149.327790][ T5808] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[  149.373162][ T5808] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[  149.393162][ T5808] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[  149.400480][ T5808] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[  149.438328][ T5808] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[  149.487005][ T5808] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  149.571432][ T5808] usb 3-1: USB disconnect, device number 3
[  149.683592][  T965] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  149.730063][  T965] usb 4-1: USB disconnect, device number 7
[  149.778079][ T6481] fido_id[6481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  150.058309][ T6478] loop0: detected capacity change from 0 to 32768
[  150.093330][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  150.116484][ T6478] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.155327][ T6478] XFS (loop0): Ending clean mount
[  150.266060][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.311589][   T27] usb 2-1: Using ep0 maxpacket: 32
[  150.354152][   T27] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  150.393277][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.401469][   T27] usb 2-1: Product: syz
[  150.443292][   T27] usb 2-1: Manufacturer: syz
[  150.448026][   T27] usb 2-1: SerialNumber: syz
[  150.494955][   T27] usb 2-1: config 0 descriptor??
[  150.516128][   T27] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  150.562221][   T27] dvb-usb: bulk message failed: -22 (4/0)
[  150.580707][   T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  150.623830][   T27] dvb-usb: bulk message failed: -22 (5/0)
[  150.629715][   T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  150.726289][ T6484] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  150.730069][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  150.757437][ T6484] dvb-usb: bulk message failed: -22 (7/0)
[  150.770091][ T6484] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  150.788793][ T6484] ttusb2: i2c transfer failed.
[  150.807129][   T27] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  150.816227][   T27] usb 2-1: media controller created
[  150.888740][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  150.953824][   T27] usb 2-1: selecting invalid altsetting 3
[  150.969393][   T27] ttusb2: set interface to alts=3 failed
[  151.210967][   T27] DVB: Unable to find symbol tda10086_attach()
[  151.234332][   T27] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  151.257273][   T27] dvb-usb: bulk message failed: -22 (4/0)
[  151.271155][   T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  151.291719][   T27] dvb-usb: bulk message failed: -22 (5/0)
[  151.305522][   T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  151.336865][   T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  151.386902][   T27] usb 2-1: USB disconnect, device number 2
[  151.522031][   T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  152.093144][ T5810] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  152.125269][ T6537] loop2: detected capacity change from 0 to 4096
[  152.346378][ T6537] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  152.446168][ T6537] ntfs3: loop2: Failed to load $Extend (-22).
[  152.517477][ T6537] ntfs3: loop2: Failed to initialize $Extend.
[  152.772431][ T6537] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  152.993423][  T965] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  153.025147][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  153.043012][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.052960][ T5810] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  153.062209][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.083291][ T5810] usb 1-1: config 0 descriptor??
[  153.174720][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'.
[  153.199033][  T965] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  153.219009][  T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.237515][  T965] usb 2-1: Product: syz
[  153.241840][  T965] usb 2-1: Manufacturer: syz
[  153.253333][  T965] usb 2-1: SerialNumber: syz
[  153.265088][  T965] usb 2-1: config 0 descriptor??
[  153.503422][  T965] usb 2-1: ignoring: probably an ADSL modem
[  153.529755][ T5810] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0
[  153.559598][ T5810] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0
[  153.577219][ T5810] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0
[  153.588188][ T6550] Bluetooth: MGMT ver 1.22
[  153.594600][ T5810] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0
[  153.612258][ T5810] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0
[  153.629975][ T5810] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0
[  153.654473][ T5810] konepure 0003:1E7D:2DBE.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0
[  153.778083][   T27] usb 1-1: USB disconnect, device number 5
[  153.792899][ T6545] loop3: detected capacity change from 0 to 32768
[  153.841181][ T6551] fido_id[6551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  153.866756][ T6545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.227 (6545)
[  153.906682][ T6545] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.927934][  T965] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  153.949999][ T6545] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  153.969855][  T965] usb 2-1: USB disconnect, device number 3
[  153.986389][ T6545] BTRFS info (device loop3): using free space tree
[  154.122265][ T6545] BTRFS info (device loop3): enabling ssd optimizations
[  154.131273][ T6545] BTRFS info (device loop3): auto enabling async discard
[  154.233312][ T6545] BTRFS info (device loop3): device stats zeroed by syz.3.227 (6545)
[  154.319397][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.447651][ T6553] loop2: detected capacity change from 0 to 32768
[  154.583547][ T6553] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  156.630042][  T965] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  156.652716][ T6553] XFS (loop2): Ending clean mount
[  156.831600][  T965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.866393][  T965] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  156.886434][  T965] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  157.089024][  T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.127254][  T965] usb 1-1: config 0 descriptor??
[  157.179511][ T5773] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  157.917602][  T965] Bluetooth: Can't get state to change to load ram patch err
[  157.970860][  T965] Bluetooth: Loading patch file failed
[  158.008961][  T965] ath3k: probe of 1-1:0.0 failed with error -71
[  158.053045][  T965] usb 1-1: USB disconnect, device number 6
[  158.542068][  T965] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  158.769049][  T965] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  158.799135][  T965] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  158.912109][  T965] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  158.964385][  T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.408760][ T6595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  159.458753][  T965] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  161.567829][   T23] usb 1-1: USB disconnect, device number 7
[  161.692663][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'.
[  162.023834][  T965] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  162.227637][  T965] usb 4-1: Using ep0 maxpacket: 16
[  162.246829][  T965] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  162.273607][  T965] usb 4-1: config 0 has no interface number 0
[  162.283302][  T965] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  162.303203][  T965] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  162.326318][  T965] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  162.343319][  T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.390341][  T965] usb 4-1: Product: syz
[  162.396733][  T965] usb 4-1: Manufacturer: syz
[  162.435260][  T965] usb 4-1: SerialNumber: syz
[  162.464934][  T965] usb 4-1: config 0 descriptor??
[  162.470779][ T6621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  162.493428][ T6621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  162.673349][   T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  162.708947][ T6621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  162.733549][ T6621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  162.873522][   T23] usb 2-1: Using ep0 maxpacket: 32
[  162.911954][   T23] usb 2-1: config index 0 descriptor too short (expected 6701, got 45)
[  162.953129][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.999667][   T23] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.036546][   T23] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.056819][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  163.077020][   T23] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d
[  163.117046][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.142033][   T23] usb 2-1: config 0 descriptor??
[  163.356259][  T965] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  163.423254][  T965] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  163.468506][  T965] asix: probe of 4-1:0.251 failed with error -71
[  163.530205][  T965] usb 4-1: USB disconnect, device number 8
[  163.874722][   T23] logitech 0003:046D:CA03.0006: unknown main item tag 0x0
[  163.882516][   T23] logitech 0003:046D:CA03.0006: unknown main item tag 0x0
[  164.513660][   T23] logitech 0003:046D:CA03.0006: unknown main item tag 0x0
[  164.520929][   T23] logitech 0003:046D:CA03.0006: unknown main item tag 0x0
[  164.543784][   T23] logitech 0003:046D:CA03.0006: unknown main item tag 0x0
[  164.551195][   T23] logitech 0003:046D:CA03.0006: unknown main item tag 0x0
[  164.680882][   T23] logitech 0003:046D:CA03.0006: unknown main item tag 0x0
[  164.753917][   T23] logitech 0003:046D:CA03.0006: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0
[  164.783545][   T23] logitech 0003:046D:CA03.0006: no inputs found
[  164.859480][   T23] usb 2-1: USB disconnect, device number 4
[  166.709708][  T965] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  166.762051][ T6641] fido_id[6641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  166.903189][  T965] usb 4-1: Using ep0 maxpacket: 8
[  166.917655][  T965] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  166.940652][  T965] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  166.966860][  T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.995271][  T965] usb 4-1: Product: syz
[  167.012341][  T965] usb 4-1: Manufacturer: syz
[  167.028844][  T965] usb 4-1: SerialNumber: syz
[  167.052252][  T965] usb 4-1: config 0 descriptor??
[  167.084339][  T965] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  167.119171][  T965] usb 4-1: setting power ON
[  167.153877][  T965] dvb-usb: bulk message failed: -22 (2/0)
[  167.174649][  T965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  167.231701][  T965] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  167.267212][  T965] usb 4-1: media controller created
[  167.304560][ T6640] dvb-usb: bulk message failed: -22 (3/0)
[  167.331526][ T6647] team0 (unregistering): Port device team_slave_0 removed
[  167.378843][  T965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.433680][ T6647] team0 (unregistering): Port device team_slave_1 removed
[  167.442452][  T965] usb 4-1: selecting invalid altsetting 6
[  167.453463][  T965] usb 4-1: digital interface selection failed (-22)
[  167.460150][  T965] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  167.535364][  T965] usb 4-1: setting power OFF
[  167.563048][  T965] dvb-usb: bulk message failed: -22 (2/0)
[  167.563873][  T965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  167.563890][  T965] (NULL device *): no alternate interface
[  167.720454][  T965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  167.741979][  T965] usb 4-1: USB disconnect, device number 9
[  168.313749][ T5808] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  168.537167][ T5808] usb 2-1: config index 0 descriptor too short (expected 45, got 27)
[  168.546162][ T5808] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  168.613603][   T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  168.636724][ T5808] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.00
[  168.647703][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.666207][ T5808] usb 2-1: Product: syz
[  168.673602][ T5808] usb 2-1: Manufacturer: syz
[  168.683047][ T5808] usb 2-1: SerialNumber: syz
[  168.800691][ T6658] loop0: detected capacity change from 0 to 4096
[  168.852969][   T27] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  168.906332][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.964075][   T27] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  168.982065][   T27] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  168.992202][   T27] usb 4-1: Manufacturer: syz
[  169.020007][   T27] usb 4-1: config 0 descriptor??
[  169.234458][   T27] rc_core: IR keymap rc-hauppauge not found
[  169.240493][   T27] Registered IR keymap rc-empty
[  169.314828][   T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  169.335260][ T5808] usb 2-1: USB disconnect, device number 5
[  169.365958][   T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5
[  169.448450][   T27] usb 4-1: USB disconnect, device number 10
[  169.666431][ T6668] loop0: detected capacity change from 0 to 4096
[  169.836614][ T6668] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  169.875424][ T6668] ntfs3: loop0: Failed to load $Extend (-22).
[  169.881692][ T6668] ntfs3: loop0: Failed to initialize $Extend.
[  170.052340][ T5774] Bluetooth: Unexpected continuation frame (len 18)
[  170.094644][ T6668] ntfs3: loop0: ino=1e, "file1" attr_set_size
[  172.808407][ T6679] loop3: detected capacity change from 0 to 32768
[  172.857248][ T6679] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.269 (6679)
[  172.933755][ T6679] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  172.954503][ T6679] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  172.973742][ T6679] BTRFS info (device loop3): using free space tree
[  173.183373][ T6679] BTRFS info (device loop3): enabling ssd optimizations
[  173.190415][ T6679] BTRFS info (device loop3): auto enabling async discard
[  173.359483][ T5770] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  173.400393][ T5774] Bluetooth: Unexpected continuation frame (len 18)
[  173.873239][  T965] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  174.083320][  T965] usb 2-1: Using ep0 maxpacket: 16
[  174.092119][  T965] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  174.112808][  T965] usb 2-1: config 0 has no interface number 0
[  174.133930][  T965] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  174.154381][  T965] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  174.180675][  T965] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  174.193313][  T965] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  174.215241][  T965] usb 2-1: Product: syz
[  174.224715][  T965] usb 2-1: SerialNumber: syz
[  174.249289][  T965] usb 2-1: config 0 descriptor??
[  174.277028][  T965] cm109 2-1:0.8: invalid payload size 0, expected 4
[  174.295681][  T965] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6
[  174.704631][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  174.723354][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  174.731874][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  174.744487][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  174.753184][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  174.760482][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  174.771804][  T965] usb 2-1: USB disconnect, device number 6
[  174.815775][  T965] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  175.264483][ T5810] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  177.175389][ T5810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  177.194795][ T5810] usb 1-1: config 0 has no interface number 0
[  177.202127][ T5810] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  177.232625][ T5810] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  177.248702][ T5810] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  177.258475][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.280911][ T5810] usb 1-1: config 0 descriptor??
[  177.291941][ T6738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  177.328157][ T5810] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  177.531382][  T965] usb 1-1: USB disconnect, device number 8
[  177.537512][    C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  179.421917][ T6751] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  179.873289][  T965] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  180.073512][  T965] usb 1-1: Using ep0 maxpacket: 8
[  180.104913][  T965] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  180.143401][  T965] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  180.173341][  T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.181517][  T965] usb 1-1: Product: syz
[  180.213566][  T965] usb 1-1: Manufacturer: syz
[  180.218795][  T965] usb 1-1: SerialNumber: syz
[  180.247560][  T965] usb 1-1: config 0 descriptor??
[  180.266889][  T965] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  180.293475][  T965] usb 1-1: setting power ON
[  180.298077][  T965] dvb-usb: bulk message failed: -22 (2/0)
[  180.319083][  T965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  180.339785][  T965] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  180.359840][  T965] usb 1-1: media controller created
[  180.435179][  T965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.471601][ T6764] dvb-usb: bulk message failed: -22 (3/0)
[  180.493254][ T6764] dvb-usb: bulk message failed: -22 (33/0)
[  180.509088][  T965] usb 1-1: selecting invalid altsetting 6
[  180.528214][  T965] usb 1-1: digital interface selection failed (-22)
[  180.543465][  T965] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  180.563380][  T965] usb 1-1: setting power OFF
[  180.568066][  T965] dvb-usb: bulk message failed: -22 (2/0)
[  180.575503][  T965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  180.596797][  T965] (NULL device *): no alternate interface
[  180.698514][  T965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  180.759765][  T965] usb 1-1: USB disconnect, device number 9
[  180.874342][ T6770] loop2: detected capacity change from 0 to 32768
[  182.750657][ T6772] loop1: detected capacity change from 0 to 32768
[  182.893557][ T6772] JBD2: Ignoring recovery information on journal
[  182.962803][ T6772] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  183.224405][ T6772] overlayfs: upper fs does not support tmpfile.
[  183.266623][ T6772] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  183.321340][ T6772] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  183.381840][ T6772] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  183.448568][ T6772] OCFS2: File system is now read-only.
[  183.476970][ T6772] (syz.1.291,6772,1):ocfs2_search_chain:1761 ERROR: status = -30
[  183.489130][ T6792] loop2: detected capacity change from 0 to 256
[  183.523195][ T6772] (syz.1.291,6772,1):ocfs2_search_chain:1871 ERROR: status = -30
[  183.531027][ T6772] (syz.1.291,6772,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  183.567850][ T6772] (syz.1.291,6772,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  183.599898][ T6772] (syz.1.291,6772,0):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  183.623209][ T6772] (syz.1.291,6772,0):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  183.638578][ T6792] FAT-fs (loop2): Directory bread(block 64) failed
[  183.645746][ T6772] (syz.1.291,6772,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30
[  183.645836][ T6772] (syz.1.291,6772,0):ocfs2_block_group_alloc:705 ERROR: status = -30
[  183.646305][ T6772] (syz.1.291,6772,0):ocfs2_block_group_alloc:758 ERROR: status = -30
[  183.693286][ T6792] FAT-fs (loop2): Directory bread(block 65) failed
[  183.700022][ T6792] FAT-fs (loop2): Directory bread(block 66) failed
[  183.707017][ T6772] (syz.1.291,6772,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30
[  183.727316][ T6792] FAT-fs (loop2): Directory bread(block 67) failed
[  183.736346][ T6772] (syz.1.291,6772,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[  183.750622][ T6772] (syz.1.291,6772,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[  183.773459][ T6792] FAT-fs (loop2): Directory bread(block 68) failed
[  183.789236][ T6792] FAT-fs (loop2): Directory bread(block 69) failed
[  183.790109][ T6772] (syz.1.291,6772,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[  183.803613][ T6792] FAT-fs (loop2): Directory bread(block 70) failed
[  183.821340][ T6792] FAT-fs (loop2): Directory bread(block 71) failed
[  183.833461][ T5811] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  183.845473][ T6772] (syz.1.291,6772,0):ocfs2_init_xattr_set_ctxt:3280 ERROR: status = -30
[  183.853427][ T6792] FAT-fs (loop2): Directory bread(block 72) failed
[  183.871989][ T6792] FAT-fs (loop2): Directory bread(block 73) failed
[  183.880650][ T6772] (syz.1.291,6772,0):ocfs2_xattr_set:3637 ERROR: status = -30
[  183.903439][ T6772] overlayfs: failed to set xattr on upper
[  183.909452][ T6772] overlayfs: ...falling back to redirect_dir=nofollow.
[  183.933238][ T6772] overlayfs: ...falling back to index=off.
[  183.939156][ T6772] overlayfs: ...falling back to uuid=null.
[  183.986847][ T6772] overlayfs: upper fs missing required features.
[  184.020368][ T5811] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  184.039245][ T5811] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  184.078008][ T5811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  184.103301][ T5811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  184.124190][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[  184.142499][ T5811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  184.175478][ T5811] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  184.193534][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  184.201707][ T5811] usb 1-1: Product: syz
[  184.223968][ T5811] usb 1-1: Manufacturer: syz
[  184.247591][ T5811] cdc_wdm 1-1:1.0: skipping garbage
[  184.252924][ T5811] cdc_wdm 1-1:1.0: skipping garbage
[  184.290468][ T5811] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  184.303200][ T5811] cdc_wdm 1-1:1.0: Unknown control protocol
[  184.469973][ T5811] usb 1-1: USB disconnect, device number 10
[  184.759661][ T6804] loop3: detected capacity change from 0 to 4096
[  184.830441][ T6804] NILFS (loop3): invalid segment: Checksum error in segment payload
[  184.861958][ T6804] NILFS (loop3): trying rollback from an earlier position
[  186.680231][ T6804] NILFS (loop3): recovery complete
[  186.720924][ T6812] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.508586][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.518067][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.747896][ T6834] loop0: detected capacity change from 0 to 512
[  187.760470][ T6834] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  187.799946][ T6834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  187.858897][ T6834] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  187.879124][ T6834] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  187.896008][ T6834] EXT4-fs (loop0): 1 truncate cleaned up
[  187.927817][ T6840] loop1: detected capacity change from 0 to 128
[  187.948038][ T6834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.043342][ T6840] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  188.080441][ T6840] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  188.107046][ T6840] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.321: Block bitmap for bg 0 marked uninitialized
[  188.275969][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.388147][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.494568][ T6853] loop3: detected capacity change from 0 to 64
[  188.576822][ T6853] hfs: unable to locate alternate MDB
[  188.613316][ T6853] hfs: continuing without an alternate MDB
[  189.118699][ T6867] loop3: detected capacity change from 0 to 64
[  189.203377][ T5810] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  189.206686][   T28] audit: type=1800 audit(1773124732.820:7): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.330" name="file1" dev="loop3" ino=21 res=0 errno=0
[  189.287051][ T6867] syz.3.330: attempt to access beyond end of device
[  189.287051][ T6867] loop3: rw=34817, sector=57, nr_sectors = 8 limit=64
[  189.443818][ T5810] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  189.451999][ T5810] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  189.482670][ T5810] usb 2-1: config 0 has no interface number 0
[  189.499281][ T5810] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  189.513239][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.531726][ T5810] usb 2-1: Product: syz
[  189.536775][ T5810] usb 2-1: Manufacturer: syz
[  189.553492][ T5810] usb 2-1: SerialNumber: syz
[  189.561550][ T5810] usb 2-1: config 0 descriptor??
[  189.580967][ T6860] loop0: detected capacity change from 0 to 32768
[  189.644220][ T6860] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  189.657653][ T6860] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  189.760039][ T6860] XFS (loop0): Ending clean mount
[  189.789512][ T6860] XFS (loop0): Quotacheck needed: Please wait.
[  189.817712][ T5808] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  189.839772][ T5808] XFS (loop0): Unmount and run xfs_repair
[  189.853296][ T5808] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  189.861022][ T5808] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  189.875280][ T5808] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  189.887091][ T5808] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  189.900941][ T5808] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  189.921715][ T5808] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  189.938382][ T5808] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  189.949738][ T5808] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.964649][ T5808] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.978505][   T12] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  189.987862][ T5810] usb 2-1: Found UVC 0.00 device syz (046d:0823)
[  190.007575][ T6860] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  190.026404][ T5810] usb 2-1: No valid video chain found.
[  190.087448][   T28] audit: type=1800 audit(1773124733.720:8): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.326" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  190.137276][   T28] audit: type=1800 audit(1773124733.760:9): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.326" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  190.211984][ T5810] usb 2-1: USB disconnect, device number 7
[  190.271013][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.438650][ T6888] loop2: detected capacity change from 0 to 512
[  191.556794][ T6888] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.335: invalid indirect mapped block 256 (level 2)
[  191.669680][ T6888] EXT4-fs (loop2): 2 truncates cleaned up
[  191.685922][ T6888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.049436][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.636228][ T6910] loop3: detected capacity change from 0 to 128
[  194.835103][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.841855][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  195.808915][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'.
[  196.108527][ T6952] loop2: detected capacity change from 0 to 512
[  196.161415][ T6951] loop3: detected capacity change from 0 to 4096
[  196.169676][ T6951] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.214389][ T6951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  196.258398][ T6951] EXT4-fs (loop3): Test dummy encryption mode enabled
[  196.296772][ T6951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.510728][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.663268][ T6540] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  196.883235][ T6540] usb 2-1: Using ep0 maxpacket: 16
[  196.894297][ T6540] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  196.913539][ T6540] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  196.921719][ T6540] usb 2-1: Product: syz
[  196.946558][ T6540] usb 2-1: Manufacturer: syz
[  196.951256][ T6540] usb 2-1: SerialNumber: syz
[  196.980084][ T6540] usb 2-1: config 0 descriptor??
[  197.274883][ T6973] loop0: detected capacity change from 0 to 512
[  197.338799][ T6540] usb 2-1: USB disconnect, device number 8
[  197.373502][ T6973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.478031][ T6973] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.499982][ T6978] netlink: 68 bytes leftover after parsing attributes in process `syz.2.364'.
[  197.589621][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.711841][ T6983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  197.838684][ T6985] loop3: detected capacity change from 0 to 256
[  197.880457][ T6985] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  197.948869][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  197.964292][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  197.977432][ T6987] loop0: detected capacity change from 0 to 4096
[  197.999354][ T6985] exFAT-fs (loop3): Filesystem has been set read-only
[  198.002570][ T6987] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.018764][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 0, err : -5)
[  198.031110][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.037724][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 0, err : -5)
[  198.050434][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.058919][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 1, err : -5)
[  198.069849][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.076307][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 2, err : -5)
[  198.087337][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.095255][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 3, err : -5)
[  198.105711][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.112373][ T6987] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  198.136165][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 4, err : -5)
[  198.150265][ T6987] EXT4-fs (loop0): Test dummy encryption mode enabled
[  198.166951][ T6987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.176228][   T23] usb 3-1: Using ep0 maxpacket: 32
[  198.184826][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.192254][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 5, err : -5)
[  198.202685][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.208925][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 6, err : -5)
[  198.218275][   T23] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  198.220405][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.233427][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 7, err : -5)
[  198.244343][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.250453][ T6985] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ae507e0 iblock : 0, err : -5)
[  198.260655][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.266961][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.271246][   T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  198.275780][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.290560][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.297902][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.304285][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.310377][ T6985] exFAT-fs (loop3): error, broken FAT chain.
[  198.320300][   T28] audit: type=1800 audit(1773124741.950:10): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.368" name="file0" dev="loop3" ino=1048601 res=0 errno=0
[  198.372497][   T23] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  198.403242][   T23] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  198.477804][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  198.515873][   T23] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  198.586618][   T23] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  198.650627][ T6991] loop1: detected capacity change from 0 to 128
[  198.687189][   T23] usb 3-1: Product: syz
[  198.747654][   T23] usb 3-1: Manufacturer: syz
[  198.752339][   T23] usb 3-1: SerialNumber: syz
[  198.830476][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.599059][ T6106] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  200.695038][   T23] usb 3-1: config 0 descriptor??
[  200.743812][   T23] usb 3-1: can't set config #0, error -71
[  200.752342][   T23] usb 3-1: USB disconnect, device number 4
[  203.488888][ T7007] loop1: detected capacity change from 0 to 32768
[  203.607589][ T7007] JBD2: Ignoring recovery information on journal
[  203.689575][ T7009] loop2: detected capacity change from 0 to 32768
[  203.708014][ T7009] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.376 (7009)
[  203.750141][ T7009] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  203.781489][ T7009] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  203.801381][ T7007] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  203.844345][ T7009] BTRFS info (device loop2): turning off barriers
[  203.850877][ T7009] BTRFS info (device loop2): turning on async discard
[  203.904560][ T7009] BTRFS info (device loop2): doing ref verification
[  203.913699][ T7009] BTRFS info (device loop2): using free space tree
[  203.953622][ T7013] loop3: detected capacity change from 0 to 128
[  204.132798][ T7009] BTRFS info (device loop2): enabling ssd optimizations
[  204.246848][ T7007] syz.1.375 (7007) used greatest stack depth: 18768 bytes left
[  204.419862][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[  206.618881][ T7045] syz.0.381[7045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  206.619033][ T7045] syz.0.381[7045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  206.709641][ T5773] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  207.630872][ T7052] loop0: detected capacity change from 0 to 32768
[  207.637583][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  207.720566][ T7052] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.792771][ T7052] XFS (loop0): Ending clean mount
[  207.819151][ T7052] XFS (loop0): Quotacheck needed: Please wait.
[  207.834656][ T5811] usb 3-1: Using ep0 maxpacket: 16
[  207.877087][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.933978][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.953224][ T7052] XFS (loop0): Quotacheck: Done.
[  208.053632][ T5811] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  208.090466][ T5811] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  208.102140][ T5811] usb 3-1: Manufacturer: syz
[  208.121754][ T5811] usb 3-1: config 0 descriptor??
[  208.178324][ T7076] sctp: [Deprecated]: syz.1.390 (pid 7076) Use of int in max_burst socket option.
[  208.178324][ T7076] Use struct sctp_assoc_value instead
[  208.253582][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.414965][ T7078] loop3: detected capacity change from 0 to 128
[  208.934253][ T5811] hid (null): unknown global tag 0xe
[  209.018565][ T5811] creative-sb0540 0003:041E:3100.0007: unknown global tag 0xe
[  209.061376][ T5811] creative-sb0540 0003:041E:3100.0007: item 0 1 1 14 parsing failed
[  209.103440][ T5811] creative-sb0540 0003:041E:3100.0007: parse failed
[  209.128470][ T5811] creative-sb0540: probe of 0003:041E:3100.0007 failed with error -22
[  209.169649][ T7083] loop3: detected capacity change from 0 to 1024
[  209.181012][ T5811] usb 3-1: USB disconnect, device number 5
[  209.225927][ T7083] EXT4-fs: inline encryption not supported
[  209.243291][ T7083] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  209.376138][ T7083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.616443][ T7091] EXT4-fs error (device loop3): mb_free_blocks:1952: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  209.648691][ T7091] EXT4-fs (loop3): Remounting filesystem read-only
[  209.830688][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.102847][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  213.109809][ T5767] Bluetooth: hci3: command 0x0406 tx timeout
[  213.118781][ T5767] Bluetooth: hci0: command 0x0406 tx timeout
[  213.124940][ T5767] Bluetooth: hci1: command 0x0406 tx timeout
[  213.799483][ T7106] loop3: detected capacity change from 0 to 1024
[  214.248643][ T2882] hfsplus: b-tree write err: -5, ino 8
[  214.256361][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'.
[  215.015478][ T7122] loop0: detected capacity change from 0 to 1024
[  215.035793][ T7122] EXT4-fs: inline encryption not supported
[  215.043947][ T7122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  215.063638][ T6540] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  215.145337][ T7122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.246183][ T7126] loop3: detected capacity change from 0 to 4096
[  215.273169][ T6540] usb 2-1: Using ep0 maxpacket: 16
[  215.290447][ T6540] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  215.300554][ T6540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.309491][ T6540] usb 2-1: Product: syz
[  215.313782][ T6540] usb 2-1: Manufacturer: syz
[  215.318864][ T6540] usb 2-1: SerialNumber: syz
[  215.341544][ T7128] EXT4-fs error (device loop0): mb_free_blocks:1952: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  215.414410][ T7128] EXT4-fs (loop0): Remounting filesystem read-only
[  215.467948][ T7130] loop2: detected capacity change from 0 to 1024
[  215.493869][   T28] audit: type=1800 audit(1773124759.130:11): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.406" name="file1" dev="loop3" ino=33 res=0 errno=0
[  215.533364][ T7130] EXT4-fs: Ignoring removed i_version option
[  215.568073][ T7130] EXT4-fs: inline encryption not supported
[  215.594445][ T6540] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  215.606300][ T7130] EXT4-fs (loop2): Test dummy encryption mode enabled
[  215.619142][ T6540] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  215.639286][ T7130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.652364][ T6540] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  215.681631][ T6540] usb 2-1: media controller created
[  215.716359][ T6540] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  215.761253][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.826879][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.965449][ T6540] zl10353_read_register: readreg error (reg=127, ret==-110)
[  216.100089][ T6540] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  216.140626][ T6540] usb 2-1: USB disconnect, device number 9
[  216.211998][ T7140] process 'syz.3.409' launched './file2' with NULL argv: empty string added
[  216.542788][ T7147] can0: slcan on ttyS3.
[  216.542900][ T7150] netlink: 56 bytes leftover after parsing attributes in process `syz.3.413'.
[  216.745757][ T7144] can0 (unregistered): slcan off ttyS3.
[  216.877853][ T7159] loop1: detected capacity change from 0 to 1024
[  216.887209][ T7159] EXT4-fs: Ignoring removed i_version option
[  216.917175][ T7159] EXT4-fs: inline encryption not supported
[  216.956392][ T7159] EXT4-fs (loop1): Test dummy encryption mode enabled
[  217.052089][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.253305][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.397222][ T7172] loop2: detected capacity change from 0 to 2048
[  217.457207][ T7172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.827662][   T27] kernel write not supported for file /cpu/0/msr (pid: 27 comm: kworker/1:1)
[  217.965700][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.026901][ T7167] loop3: detected capacity change from 0 to 32768
[  220.233263][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  220.243951][ T7197] kvm: kvm [7195]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400005
[  220.329077][ T5783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5783)
[  220.444683][   T23] usb 1-1: Using ep0 maxpacket: 16
[  220.460820][   T23] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  220.503224][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.511315][   T23] usb 1-1: Product: syz
[  220.547464][   T23] usb 1-1: Manufacturer: syz
[  220.552246][   T23] usb 1-1: SerialNumber: syz
[  220.826684][   T23] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  220.906529][   T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  220.935230][   T23] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  220.973575][   T23] usb 1-1: media controller created
[  221.022816][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  221.137961][   T23] zl10353_read_register: readreg error (reg=127, ret==-71)
[  221.275481][   T23] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5
[  221.337991][   T23] usb 1-1: USB disconnect, device number 11
[  221.512488][ T7221] loop3: detected capacity change from 0 to 4096
[  222.524504][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.439'.
[  222.563731][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.439'.
[  223.487814][ T7225] loop2: detected capacity change from 0 to 40427
[  223.540609][ T7264] loop3: detected capacity change from 0 to 256
[  223.744479][ T7225] F2FS-fs (loop2): invalid crc value
[  224.259115][ T7264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000701)
[  224.314725][ T7225] F2FS-fs (loop2): Found nat_bits in checkpoint
[  224.326781][ T7248] loop1: detected capacity change from 0 to 40427
[  224.418379][ T7248] F2FS-fs (loop1): invalid crc value
[  224.493436][ T7248] F2FS-fs (loop1): Found nat_bits in checkpoint
[  224.774575][ T7274] loop5: detected capacity change from 0 to 7
[  224.829461][ T7274] Dev loop5: unable to read RDB block 7
[  224.845650][ T7274]  loop5: unable to read partition table
[  224.852019][ T7274] loop5: partition table beyond EOD, truncated
[  224.883678][ T7248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  224.901943][ T7274] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  225.061482][ T7248] syz.1.440: attempt to access beyond end of device
[  225.061482][ T7248] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  225.142468][ T7248] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  225.159432][ T7248] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  226.336687][ T5081] Bluetooth: hci1: hcon ffff8880604d0000 sent 0 < count 137
[  226.542152][ T7279] loop0: detected capacity change from 0 to 32768
[  226.589792][ T7279] JBD2: Ignoring recovery information on journal
[  226.906798][ T7279] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  227.417471][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  227.864045][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  228.929414][ T7302] loop1: detected capacity change from 0 to 32768
[  228.961802][ T7302] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.457 (7302)
[  229.021358][ T7302] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  229.034810][ T7302] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  229.053195][ T7302] BTRFS info (device loop1): turning off barriers
[  229.063655][ T7302] BTRFS info (device loop1): turning on async discard
[  229.073424][ T7302] BTRFS info (device loop1): doing ref verification
[  229.091159][ T7302] BTRFS info (device loop1): using free space tree
[  229.351407][ T7302] BTRFS info (device loop1): enabling ssd optimizations
[  229.860469][ T5769] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  230.634332][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'.
[  231.886222][ T6540] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  232.103279][ T6540] usb 3-1: Using ep0 maxpacket: 8
[  232.128310][ T6540] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  232.142882][ T6540] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  232.163853][ T6540] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  232.234548][ T6540] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  232.284318][ T6540] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  232.329299][ T6540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.620505][ T6540] usb 3-1: GET_CAPABILITIES returned 0
[  232.626718][ T6540] usbtmc 3-1:16.0: can't read capabilities
[  232.877020][ T6540] usb 3-1: USB disconnect, device number 6
[  234.121912][ T7356] loop1: detected capacity change from 0 to 32768
[  234.159224][ T7356] (syz.1.472,7356,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  234.220751][ T7356] (syz.1.472,7356,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  234.343013][ T7356] JBD2: Ignoring recovery information on journal
[  234.525306][ T7356] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  234.563307][ T6540] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  234.785076][ T6540] usb 3-1: Using ep0 maxpacket: 16
[  234.811067][ T6540] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  234.840615][ T7373] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  234.844166][ T6540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.874449][ T6540] usb 3-1: Product: syz
[  234.900320][ T7356] 
[  234.902728][ T7356] ======================================================
[  234.909796][ T7356] WARNING: possible circular locking dependency detected
[  234.916871][ T7356] syzkaller #0 Not tainted
[  234.921410][ T7356] ------------------------------------------------------
[  234.928995][ T7356] syz.1.472/7356 is trying to acquire lock:
[  234.934923][ T7356] ffff88805d3ebff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770
[  234.944386][ T7356] 
[  234.944386][ T7356] but task is already holding lock:
[  234.951903][ T7356] ffff88805cd714e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  234.962324][ T7356] 
[  234.962324][ T7356] which lock already depends on the new lock.
[  234.962324][ T7356] 
[  234.972775][ T7356] 
[  234.972775][ T7356] the existing dependency chain (in reverse order) is:
[  234.981923][ T7356] 
[  234.981923][ T7356] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  234.990483][ T7356]        down_read+0x46/0x2e0
[  234.995261][ T7356]        ocfs2_start_trans+0x3a8/0x6f0
[  235.000929][ T7356]        ocfs2_mknod+0xf1d/0x2300
[  235.005989][ T7356]        ocfs2_create+0x196/0x430
[  235.011058][ T7356]        path_openat+0x12a0/0x3230
[  235.016214][ T7356]        do_filp_open+0x1f5/0x430
[  235.021413][ T7356]        do_sys_openat2+0x134/0x1d0
[  235.026645][ T7356]        __x64_sys_openat+0x139/0x160
[  235.032069][ T7356]        do_syscall_64+0x55/0xa0
[  235.037069][ T7356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.044231][ T7356] 
[  235.044231][ T7356] -> #3 (sb_internal#4){.+.+}-{0:0}:
[  235.051841][ T7356]        ocfs2_start_trans+0x2a9/0x6f0
[  235.057339][ T7356]        ocfs2_mknod+0xf1d/0x2300
[  235.062413][ T7356]        ocfs2_create+0x196/0x430
[  235.067492][ T7356]        path_openat+0x12a0/0x3230
[  235.072772][ T7356]        do_filp_open+0x1f5/0x430
[  235.078197][ T7356]        do_sys_openat2+0x134/0x1d0
[  235.083446][ T7356]        __x64_sys_openat+0x139/0x160
[  235.088859][ T7356]        do_syscall_64+0x55/0xa0
[  235.094206][ T7356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.100694][ T7356] 
[  235.100694][ T7356] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  235.111399][ T7356]        down_write+0x97/0x200
[  235.116317][ T7356]        ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  235.123127][ T7356]        ocfs2_reserve_clusters_with_limit+0x1ba/0xc20
[  235.130230][ T7356]        ocfs2_mknod+0xebb/0x2300
[  235.135727][ T7356]        ocfs2_create+0x196/0x430
[  235.141050][ T7356]        path_openat+0x12a0/0x3230
[  235.146644][ T7356]        do_filp_open+0x1f5/0x430
[  235.152256][ T7356]        do_sys_openat2+0x134/0x1d0
[  235.157581][ T7356]        __x64_sys_openat+0x139/0x160
[  235.163160][ T7356]        do_syscall_64+0x55/0xa0
[  235.168354][ T7356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.174847][ T7356] 
[  235.174847][ T7356] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  235.185690][ T7356]        down_write+0x97/0x200
[  235.191044][ T7356]        ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  235.197532][ T7356]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  235.205924][ T7356]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  235.212684][ T7356]        ocfs2_xattr_set+0xc3f/0x13e0
[  235.218120][ T7356]        __vfs_setxattr+0x431/0x470
[  235.223726][ T7356]        __vfs_setxattr_noperm+0x12d/0x5e0
[  235.229598][ T7356]        vfs_setxattr+0x16b/0x2f0
[  235.234927][ T7356]        ovl_get_workdir+0xc62/0x17c0
[  235.240327][ T7356]        ovl_fill_super+0x13ff/0x3620
[  235.245843][ T7356]        get_tree_nodev+0xb5/0x140
[  235.250998][ T7356]        vfs_get_tree+0x8c/0x280
[  235.255990][ T7356]        do_new_mount+0x24b/0xa40
[  235.261052][ T7356]        __se_sys_mount+0x2e7/0x3d0
[  235.266322][ T7356]        do_syscall_64+0x55/0xa0
[  235.271301][ T7356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.277947][ T7356] 
[  235.277947][ T7356] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  235.285912][ T7356]        __lock_acquire+0x2df1/0x7d40
[  235.291324][ T7356]        lock_acquire+0x19e/0x420
[  235.296478][ T7356]        down_read+0x46/0x2e0
[  235.301231][ T7356]        ocfs2_init_acl+0x30a/0x770
[  235.306472][ T7356]        ocfs2_mknod+0x140f/0x2300
[  235.311624][ T7356]        ocfs2_mkdir+0x196/0x430
[  235.316903][ T7356]        vfs_mkdir+0x296/0x440
[  235.321791][ T7356]        do_mkdirat+0x1dc/0x450
[  235.326670][ T7356]        __x64_sys_mkdirat+0x89/0xa0
[  235.331984][ T7356]        do_syscall_64+0x55/0xa0
[  235.337072][ T7356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.343617][ T7356] 
[  235.343617][ T7356] other info that might help us debug this:
[  235.343617][ T7356] 
[  235.353968][ T7356] Chain exists of:
[  235.353968][ T7356]   &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier
[  235.353968][ T7356] 
[  235.368285][ T7356]  Possible unsafe locking scenario:
[  235.368285][ T7356] 
[  235.376265][ T7356]        CPU0                    CPU1
[  235.381667][ T7356]        ----                    ----
[  235.387151][ T7356]   rlock(&journal->j_trans_barrier);
[  235.392738][ T7356]                                lock(sb_internal#4);
[  235.399729][ T7356]                                lock(&journal->j_trans_barrier);
[  235.407757][ T7356]   rlock(&oi->ip_xattr_sem);
[  235.412492][ T7356] 
[  235.412492][ T7356]  *** DEADLOCK ***
[  235.412492][ T7356] 
[  235.420687][ T7356] 8 locks held by syz.1.472/7356:
[  235.425749][ T7356]  #0: ffff88807c86e418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  235.435478][ T7356]  #1: ffff88805d3ec2d8 (&type->i_mutex_dir_key#12/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480
[  235.446243][ T7356]  #2: ffff88805d2b6d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  235.460057][ T7356]  #3: ffff88805d2b5f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  235.473793][ T7356]  #4: ffff88805aef1818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  235.487854][ T7356]  #5: ffff88807c86e608 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300
[  235.497139][ T7356]  #6: ffff88805cd714e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  235.508077][ T7356]  #7: ffff88805c91e990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0
[  235.517963][ T7356] 
[  235.517963][ T7356] stack backtrace:
[  235.523885][ T7356] CPU: 0 PID: 7356 Comm: syz.1.472 Not tainted syzkaller #0
[  235.531217][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  235.541427][ T7356] Call Trace:
[  235.544763][ T7356]  <TASK>
[  235.547816][ T7356]  dump_stack_lvl+0x18c/0x250
[  235.552551][ T7356]  ? load_image+0x400/0x400
[  235.557092][ T7356]  ? show_regs_print_info+0x20/0x20
[  235.562407][ T7356]  ? print_circular_bug+0x12b/0x1a0
[  235.567690][ T7356]  check_noncircular+0x2fc/0x400
[  235.572696][ T7356]  ? print_deadlock_bug+0x5d0/0x5d0
[  235.577958][ T7356]  ? _find_first_zero_bit+0xd3/0x100
[  235.583411][ T7356]  ? add_lock_to_list+0x191/0x280
[  235.588475][ T7356]  __lock_acquire+0x2df1/0x7d40
[  235.593382][ T7356]  ? verify_lock_unused+0x140/0x140
[  235.598636][ T7356]  ? __ocfs2_journal_access+0x648/0x840
[  235.604223][ T7356]  lock_acquire+0x19e/0x420
[  235.608767][ T7356]  ? ocfs2_init_acl+0x30a/0x770
[  235.613749][ T7356]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  235.619527][ T7356]  ? __might_sleep+0xe0/0xe0
[  235.624178][ T7356]  ? read_lock_is_recursive+0x20/0x20
[  235.629918][ T7356]  ? do_raw_spin_lock+0x11f/0x2c0
[  235.635008][ T7356]  down_read+0x46/0x2e0
[  235.639215][ T7356]  ? ocfs2_init_acl+0x30a/0x770
[  235.644188][ T7356]  ocfs2_init_acl+0x30a/0x770
[  235.649340][ T7356]  ? ocfs2_acl_chmod+0x330/0x330
[  235.654322][ T7356]  ? dquot_alloc_inode+0x8ac/0xa40
[  235.659483][ T7356]  ? ocfs2_journal_access+0x40/0x40
[  235.664714][ T7356]  ? ocfs2_block_signals+0x9b/0xe0
[  235.670045][ T7356]  ? ocfs2_metadata_cache_get_super+0x46/0x90
[  235.676439][ T7356]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  235.682742][ T7356]  ocfs2_mknod+0x140f/0x2300
[  235.687479][ T7356]  ? ocfs2_mkdir+0x430/0x430
[  235.692121][ T7356]  ? verify_lock_unused+0x140/0x140
[  235.697377][ T7356]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  235.703145][ T7356]  ? __lock_acquire+0x7d40/0x7d40
[  235.708204][ T7356]  ? do_raw_spin_lock+0x11f/0x2c0
[  235.713680][ T7356]  ? ocfs2_inode_unlock_tracker+0x270/0x2e0
[  235.719823][ T7356]  ? __lock_acquire+0x7d40/0x7d40
[  235.724890][ T7356]  ? __rwlock_init+0x150/0x150
[  235.729706][ T7356]  ? do_raw_spin_unlock+0x121/0x230
[  235.735178][ T7356]  ? put_pid+0xde/0x120
[  235.739427][ T7356]  ocfs2_mkdir+0x196/0x430
[  235.744725][ T7356]  ? make_kgid+0x660/0x660
[  235.750248][ T7356]  ? apparmor_path_mkdir+0x1b0/0x230
[  235.755607][ T7356]  ? ocfs2_symlink+0x2700/0x2700
[  235.761037][ T7356]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  235.766289][ T7356]  ? inode_permission+0xf3/0x480
[  235.771368][ T7356]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  235.776455][ T7356]  ? security_inode_mkdir+0xb7/0x100
[  235.781800][ T7356]  vfs_mkdir+0x296/0x440
[  235.786098][ T7356]  do_mkdirat+0x1dc/0x450
[  235.790470][ T7356]  ? vfs_mkdir+0x440/0x440
[  235.794924][ T7356]  __x64_sys_mkdirat+0x89/0xa0
[  235.799729][ T7356]  do_syscall_64+0x55/0xa0
[  235.804278][ T7356]  ? clear_bhb_loop+0x40/0x90
[  235.808990][ T7356]  ? clear_bhb_loop+0x40/0x90
[  235.814025][ T7356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.819979][ T7356] RIP: 0033:0x7fd570f9b607
[  235.824638][ T7356] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.844830][ T7356] RSP: 002b:00007fd571eb3e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  235.859207][ T7356] RAX: ffffffffffffffda RBX: 00007fd571eb3ee0 RCX: 00007fd570f9b607
[  235.867920][ T7356] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c
[  235.877273][ T7356] RBP: 0000200000000080 R08: 0000200000000480 R09: 0000000000000000
[  235.886371][ T7356] R10: 0000200000000080 R11: 0000000000000246 R12: 00002000000000c0
[  235.896699][ T7356] R13: 00007fd571eb3ea0 R14: 0000000000000000 R15: 0000000000000000
[  235.905861][ T7356]  </TASK>
[  235.909603][    C0] vkms_vblank_simulate: vblank timer overrun
[  235.932688][ T6540] usb 3-1: Manufacturer: syz
[  235.944547][ T6540] usb 3-1: SerialNumber: syz
[  235.978039][ T6540] usb 3-1: config 0 descriptor??
[  236.174620][ T6540] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  236.250621][ T7373] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  236.330269][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[  236.436839][ T7373] siw: device registration error -19
[  236.608982][ T6540] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  236.829288][ T5808] usb 3-1: USB disconnect, device number 7
[  236.838766][ T5808] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  236.878456][ T5808] visor 3-1:0.0: device disconnected
[  237.700984][ T7281] Set syz1 is full, maxelem 65536 reached