last executing test programs:

3.21531762s ago: executing program 0 (id=295):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)

2.844040784s ago: executing program 0 (id=297):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a00010000000000000000000a0080", @ANYRES16], 0x38}}, 0x0)

2.601291327s ago: executing program 0 (id=300):
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000039c7a5407d3588770d810000000109021200010000000109041d280008"], 0x0)
fchmod(0xffffffffffffffff, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.576426528s ago: executing program 3 (id=301):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = inotify_init1(0x800)
ppoll(&(0x7f0000000200)=[{r0, 0x1002c}], 0x1, &(0x7f0000000240), 0x0, 0x0)

2.41731716s ago: executing program 3 (id=302):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
close(r0)

2.176534402s ago: executing program 3 (id=303):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

1.946838536s ago: executing program 3 (id=306):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000201}}}}}}, 0x0)

1.689781628s ago: executing program 3 (id=309):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)

1.447698642s ago: executing program 3 (id=312):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

1.193156595s ago: executing program 1 (id=315):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = mq_open(&(0x7f0000000880)='.\xdf{\x00', 0x40, 0xc0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0)

1.133710866s ago: executing program 2 (id=316):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)

1.028392677s ago: executing program 1 (id=317):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0})

985.035457ms ago: executing program 2 (id=318):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x100c000, &(0x7f0000000040)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)

869.265959ms ago: executing program 1 (id=319):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]})
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
chown(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xee01)

864.068969ms ago: executing program 0 (id=320):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

694.533511ms ago: executing program 1 (id=321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)

655.117371ms ago: executing program 2 (id=322):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)

524.797093ms ago: executing program 0 (id=323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a98000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800c0001007061796c6f6164004c00028008000440000000ad08000240000000020800034000000086080001400000001508000440000000ef08000840000000000800084000000001080001400000001708000840000000000900020073797a3200000000090007"], 0xc0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

458.816704ms ago: executing program 2 (id=324):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)

387.936615ms ago: executing program 1 (id=325):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000000c0)="ea3d8100", 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x8100, r1}, 0x14)

249.574816ms ago: executing program 2 (id=326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4367aaf786d498e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

213.893767ms ago: executing program 0 (id=327):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

9.517879ms ago: executing program 2 (id=328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)

0s ago: executing program 1 (id=329):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004801800030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts.
[   75.664141][ T5758] cgroup: Unknown subsys name 'net'
[   75.798694][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.492846][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.031326][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.043686][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.052210][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.059818][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.068710][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.077038][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.085639][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.101980][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.110166][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.118731][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.126784][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   79.132609][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.135177][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.146029][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.148300][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   79.164951][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.172572][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.180035][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.190073][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.197640][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   79.205666][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.214426][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.224858][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   79.233137][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.650366][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   79.705949][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   79.751133][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   79.847080][ T5771] chnl_net:caif_netlink_parms(): no params data found
[   79.870431][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.878279][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.885863][ T5769] bridge_slave_0: entered allmulticast mode
[   79.892776][ T5769] bridge_slave_0: entered promiscuous mode
[   79.902322][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.909571][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.917241][ T5769] bridge_slave_1: entered allmulticast mode
[   79.924518][ T5769] bridge_slave_1: entered promiscuous mode
[   80.016343][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.023835][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.031217][ T5772] bridge_slave_0: entered allmulticast mode
[   80.038375][ T5772] bridge_slave_0: entered promiscuous mode
[   80.048735][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.063004][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.104277][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.111662][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.118917][ T5772] bridge_slave_1: entered allmulticast mode
[   80.126040][ T5772] bridge_slave_1: entered promiscuous mode
[   80.149187][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.156580][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.163964][ T5770] bridge_slave_0: entered allmulticast mode
[   80.171233][ T5770] bridge_slave_0: entered promiscuous mode
[   80.182603][ T5769] team0: Port device team_slave_0 added
[   80.196160][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.205620][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.215681][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.223155][ T5770] bridge_slave_1: entered allmulticast mode
[   80.229979][ T5770] bridge_slave_1: entered promiscuous mode
[   80.248813][ T5769] team0: Port device team_slave_1 added
[   80.271570][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.314857][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.357482][ T5772] team0: Port device team_slave_0 added
[   80.365232][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.372471][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.399514][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.413557][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.420547][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.446986][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.460145][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.469928][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.477515][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.484856][ T5771] bridge_slave_0: entered allmulticast mode
[   80.492547][ T5771] bridge_slave_0: entered promiscuous mode
[   80.500481][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.508275][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.515719][ T5771] bridge_slave_1: entered allmulticast mode
[   80.522602][ T5771] bridge_slave_1: entered promiscuous mode
[   80.534143][ T5772] team0: Port device team_slave_1 added
[   80.599971][ T5770] team0: Port device team_slave_0 added
[   80.637785][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.648532][ T5770] team0: Port device team_slave_1 added
[   80.656773][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.665813][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.692277][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.719934][ T5769] hsr_slave_0: entered promiscuous mode
[   80.726620][ T5769] hsr_slave_1: entered promiscuous mode
[   80.736108][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.769826][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.777872][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.804182][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.848023][ T5771] team0: Port device team_slave_0 added
[   80.877625][ T5771] team0: Port device team_slave_1 added
[   80.884278][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.894046][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.920723][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.954315][ T5772] hsr_slave_0: entered promiscuous mode
[   80.960704][ T5772] hsr_slave_1: entered promiscuous mode
[   80.967497][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.976022][ T5772] Cannot create hsr debugfs directory
[   80.995789][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.002958][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.029423][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.104649][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.113127][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.139796][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.153957][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.161334][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.187465][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.222297][ T5783] Bluetooth: hci3: command tx timeout
[   81.222312][ T5778] Bluetooth: hci0: command tx timeout
[   81.266606][ T5770] hsr_slave_0: entered promiscuous mode
[   81.273773][ T5770] hsr_slave_1: entered promiscuous mode
[   81.280117][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.288066][ T5770] Cannot create hsr debugfs directory
[   81.301206][ T5783] Bluetooth: hci1: command tx timeout
[   81.301279][ T5778] Bluetooth: hci2: command tx timeout
[   81.417887][ T5771] hsr_slave_0: entered promiscuous mode
[   81.424260][ T5771] hsr_slave_1: entered promiscuous mode
[   81.430523][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.438447][ T5771] Cannot create hsr debugfs directory
[   81.672660][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.690705][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.704534][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.747905][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.820684][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.847341][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.860704][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.880325][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.974965][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.005212][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.017963][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.040144][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.108152][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.131993][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.143379][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.157283][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.189583][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.239641][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   82.258813][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.266225][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.307460][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.314629][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.386056][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.397281][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.427292][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   82.466517][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   82.480144][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.487303][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.499696][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.506945][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.578989][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.586251][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.598592][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.605922][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.635029][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.714975][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   82.753459][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.760758][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.829929][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.837988][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.028797][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.183854][ T5769] veth0_vlan: entered promiscuous mode
[   83.207879][ T5769] veth1_vlan: entered promiscuous mode
[   83.227262][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.302200][ T5778] Bluetooth: hci3: command tx timeout
[   83.302512][ T5783] Bluetooth: hci0: command tx timeout
[   83.379397][ T5769] veth0_macvtap: entered promiscuous mode
[   83.385629][ T5783] Bluetooth: hci1: command tx timeout
[   83.391700][ T5778] Bluetooth: hci2: command tx timeout
[   83.425603][ T5769] veth1_macvtap: entered promiscuous mode
[   83.458585][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.485606][ T5772] veth0_vlan: entered promiscuous mode
[   83.500880][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.518295][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.539747][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.553876][ T5772] veth1_vlan: entered promiscuous mode
[   83.575506][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.584859][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.594186][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.602957][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.729331][ T5770] veth0_vlan: entered promiscuous mode
[   83.752634][ T5771] veth0_vlan: entered promiscuous mode
[   83.775094][ T5770] veth1_vlan: entered promiscuous mode
[   83.789790][ T5772] veth0_macvtap: entered promiscuous mode
[   83.820067][ T5772] veth1_macvtap: entered promiscuous mode
[   83.860833][ T5771] veth1_vlan: entered promiscuous mode
[   83.887541][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.909419][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.938848][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.951926][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.965255][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.001865][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.009783][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.020163][ T5771] veth0_macvtap: entered promiscuous mode
[   84.034099][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.044997][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.056189][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.070649][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.086475][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.095582][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.109339][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.125856][ T5770] veth0_macvtap: entered promiscuous mode
[   84.143931][ T5771] veth1_macvtap: entered promiscuous mode
[   84.203649][ T5770] veth1_macvtap: entered promiscuous mode
[   84.224187][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.244533][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.255579][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.267746][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.279594][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.315938][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.335844][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.349105][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.359813][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.373449][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.415626][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.432636][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.458909][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.468659][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.489095][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.503268][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.514240][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.525340][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.548599][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.564625][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.576476][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.602107][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.617316][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.654240][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.675290][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.691224][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.716261][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.742209][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.754024][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.766288][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.810064][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.821450][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.830305][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.850177][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.858191][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.869057][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.023803][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.032204][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.162991][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.172982][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.237910][ T5848] syz.1.9[5848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   85.268500][ T5848] loop1: detected capacity change from 0 to 256
[   85.276670][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.285260][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.322249][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.364110][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.381129][ T5778] Bluetooth: hci0: command tx timeout
[   85.392007][ T5778] Bluetooth: hci3: command tx timeout
[   85.461808][ T5778] Bluetooth: hci2: command tx timeout
[   85.462062][ T5783] Bluetooth: hci1: command tx timeout
[   85.502699][ T5848] FAT-fs (loop1): Directory bread(block 64) failed
[   85.509633][ T5848] FAT-fs (loop1): Directory bread(block 65) failed
[   85.559674][ T5848] FAT-fs (loop1): Directory bread(block 66) failed
[   85.587477][ T5848] FAT-fs (loop1): Directory bread(block 67) failed
[   85.623040][ T5848] FAT-fs (loop1): Directory bread(block 68) failed
[   85.629743][ T5848] FAT-fs (loop1): Directory bread(block 69) failed
[   85.671308][ T5848] FAT-fs (loop1): Directory bread(block 70) failed
[   85.677931][ T5848] FAT-fs (loop1): Directory bread(block 71) failed
[   85.721910][ T5848] FAT-fs (loop1): Directory bread(block 72) failed
[   85.728533][ T5848] FAT-fs (loop1): Directory bread(block 73) failed
[   85.740247][ T5855] loop3: detected capacity change from 0 to 1024
[   85.749610][ T5855] EXT4-fs: Ignoring removed bh option
[   85.808603][ T5857] usb usb8: usbfs: process 5857 (syz.2.11) did not claim interface 0 before use
[   85.853070][ T5855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.123817][ T5855] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.4: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   86.165350][ T5855] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   86.287549][ T5870] loop2: detected capacity change from 0 to 2048
[   86.397396][ T5873] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.431476][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.886018][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   86.910497][ T5887] loop0: detected capacity change from 0 to 128
[   87.165986][ T5892] loop1: detected capacity change from 0 to 256
[   87.324422][   T28] audit: type=1800 audit(1778161187.566:2): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.24" name="file1" dev="loop1" ino=1048597 res=0 errno=0
[   87.375489][ T5892] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[   87.389121][ T5896] xt_CT: You must specify a L4 protocol and not use inversions on it
[   87.406923][ T5892] FAT-fs (loop1): Filesystem has been set read-only
[   87.462288][ T5783] Bluetooth: hci3: command tx timeout
[   87.462300][ T5778] Bluetooth: hci0: command tx timeout
[   87.541923][ T5783] Bluetooth: hci1: command tx timeout
[   87.551226][ T5783] Bluetooth: hci2: command tx timeout
[   87.655984][ T5902] capability: warning: `syz.1.28' uses 32-bit capabilities (legacy support in use)
[   87.949434][ T5880] loop3: detected capacity change from 0 to 32768
[   88.003082][ T5880] =======================================================
[   88.003082][ T5880] WARNING: The mand mount option has been deprecated and
[   88.003082][ T5880]          and is ignored by this kernel. Remove the mand
[   88.003082][ T5880]          option from the mount to silence this warning.
[   88.003082][ T5880] =======================================================
[   88.098720][ T5911] loop0: detected capacity change from 0 to 64
[   88.157312][ T5916] process 'syz.1.35' launched '/dev/fd/3' with NULL argv: empty string added
[   88.208733][ T5880] JBD2: Ignoring recovery information on journal
[   88.246027][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.488675][ T5880] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   89.002698][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[   89.190251][ T5935] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   89.517658][ T5940] team_slave_0: entered promiscuous mode
[   89.523746][ T5940] team_slave_1: entered promiscuous mode
[   89.561356][ T5940] macsec1: entered promiscuous mode
[   89.566638][ T5940] team0: entered promiscuous mode
[   89.600702][ T5940] team0: Device macsec1 is already an upper device of the team interface
[   89.624045][ T5940] team0: left promiscuous mode
[   89.641931][ T5940] team_slave_0: left promiscuous mode
[   89.647457][ T5940] team_slave_1: left promiscuous mode
[   89.755833][ T5944] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[   89.837725][ T5926] loop0: detected capacity change from 0 to 40427
[   89.901962][ T5926] F2FS-fs (loop0): invalid crc value
[   89.943047][ T5926] F2FS-fs (loop0): Found nat_bits in checkpoint
[   89.971648][ T5947] loop1: detected capacity change from 0 to 64
[   90.120173][ T5926] F2FS-fs (loop0): Start checkpoint disabled!
[   90.200064][ T5926] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   90.326538][ T5936] loop2: detected capacity change from 0 to 32768
[   90.400690][ T5936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.44 (5936)
[   90.506757][ T5936] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.550493][ T5936] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   90.580412][ T5936] BTRFS info (device loop2): setting nodatasum
[   90.618515][ T5936] BTRFS info (device loop2): force zlib compression, level 3
[   90.641526][ T5936] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[   90.669542][ T5958] loop1: detected capacity change from 0 to 256
[   90.681427][ T5936] BTRFS info (device loop2): use lzo compression, level 0
[   90.688717][ T5936] BTRFS info (device loop2): turning on flush-on-commit
[   90.702278][ T5958] exfat: Deprecated parameter 'utf8'
[   90.707780][ T5958] exfat: Deprecated parameter 'namecase'
[   90.731137][ T5958] exfat: Deprecated parameter 'namecase'
[   90.739624][ T5936] BTRFS info (device loop2): enabling auto defrag
[   90.751110][ T5936] BTRFS info (device loop2): max_inline at 4096
[   90.794340][ T5936] BTRFS info (device loop2): using free space tree
[   90.823795][ T1004] kworker/u4:6: attempt to access beyond end of device
[   90.823795][ T1004] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   90.829235][ T5958] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[   90.843482][ T1004] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   90.859970][ T1004] kworker/u4:6: attempt to access beyond end of device
[   90.859970][ T1004] loop0: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[   90.877630][ T1004] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   91.096735][ T5936] BTRFS info (device loop2): enabling ssd optimizations
[   91.715452][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.932386][ T5992] loop0: detected capacity change from 0 to 256
[   92.158380][ T5992] FAT-fs (loop0): Directory bread(block 64) failed
[   92.203433][   T27] cfg80211: failed to load regulatory.db
[   92.207855][ T5992] FAT-fs (loop0): Directory bread(block 65) failed
[   92.261682][ T5992] FAT-fs (loop0): Directory bread(block 66) failed
[   92.268296][ T5992] FAT-fs (loop0): Directory bread(block 67) failed
[   92.321405][ T5992] FAT-fs (loop0): Directory bread(block 68) failed
[   92.347866][ T5992] FAT-fs (loop0): Directory bread(block 69) failed
[   92.371308][ T5992] FAT-fs (loop0): Directory bread(block 70) failed
[   92.377916][ T5992] FAT-fs (loop0): Directory bread(block 71) failed
[   92.431835][ T5992] FAT-fs (loop0): Directory bread(block 72) failed
[   92.438507][ T5992] FAT-fs (loop0): Directory bread(block 73) failed
[   92.525340][ T6006] loop2: detected capacity change from 0 to 512
[   92.583807][ T6006] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.642175][ T6008] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure
[   92.816158][ T6006] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.68: corrupted inode contents
[   92.863740][ T6006] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #16: comm syz.2.68: mark_inode_dirty error
[   92.923037][ T6006] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.68: corrupted inode contents
[   92.950272][ T6006] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.68: mark_inode_dirty error
[   92.995414][ T6006] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.68: corrupted inode contents
[   93.042153][ T6006] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   93.056623][ T6006] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #16: comm syz.2.68: corrupted inode contents
[   93.070747][ T6006] EXT4-fs error (device loop2): ext4_truncate:4301: inode #16: comm syz.2.68: mark_inode_dirty error
[   93.088972][ T6006] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   93.107083][ T6006] EXT4-fs (loop2): 1 truncate cleaned up
[   93.117616][ T6006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.145914][ T6006] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.147016][ T1004] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   93.196375][ T1004] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1
[   93.285405][   T28] audit: type=1800 audit(1778161193.536:3): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.68" name="file2" dev="loop2" ino=16 res=0 errno=0
[   93.339739][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.788018][ T6042] Bluetooth: MGMT ver 1.22
[   94.070771][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.091131][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.098617][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.144720][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.156649][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.164700][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.173747][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.181891][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.189672][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.203663][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.212972][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.220418][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.228743][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.245197][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.259157][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.271759][  T787] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   94.275476][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.287240][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.302350][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.320051][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.327700][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.345614][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.356579][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.368155][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.377340][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.389800][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.398988][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.410540][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.419448][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.434138][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.458533][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.469380][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.485749][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.486256][  T787] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   94.498499][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.509357][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.519516][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.531227][  T787] usb 2-1: config 0 has no interface number 0
[   94.544455][  T787] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[   94.545473][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.554099][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.588673][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.596323][  T787] usb 2-1: Product: syz
[   94.596345][  T787] usb 2-1: Manufacturer: syz
[   94.596361][  T787] usb 2-1: SerialNumber: syz
[   94.614416][  T787] usb 2-1: config 0 descriptor??
[   94.617452][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.624744][ T6049] loop0: detected capacity change from 0 to 32768
[   94.628645][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.654134][  T787] usb 2-1: selecting invalid altsetting 1
[   94.685713][  T787] dvb_ttusb_budget: ttusb_init_controller: error
[   94.700557][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.701594][  T787] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   94.717792][ T6049] (syz.0.86,6049,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.728429][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.736282][ T6060] loop3: detected capacity change from 0 to 1024
[   94.749698][ T6049] (syz.0.86,6049,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.768382][ T6060] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   94.770007][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.815445][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.831207][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.838869][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.846839][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.857069][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.865864][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.873867][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.917424][ T6049] JBD2: Ignoring recovery information on journal
[   94.923322][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   94.929851][  T787] DVB: Unable to find symbol stv0299_attach()
[   94.966742][ T6060] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.92: lblock 2 mapped to illegal pblock 2 (length 1)
[   94.993127][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.010369][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.012796][  T787] DVB: Unable to find symbol tda8083_attach()
[   95.029031][ T6049] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   95.039825][  T787] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[   95.039835][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.039866][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.054215][ T6060] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   95.089266][  T787] usb 2-1: USB disconnect, device number 2
[   95.100797][ T6060] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.92: lblock 0 mapped to illegal pblock 48 (length 1)
[   95.112142][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.177491][ T6060] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   95.195967][ T6060] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.92: Failed to acquire dquot type 0
[   95.196539][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.240730][ T6060] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem
[   95.256269][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.273170][ T6060] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.92: mark_inode_dirty error
[   95.278700][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.296219][ T6060] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   95.299966][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.315974][ T6060] EXT4-fs (loop3): 1 orphan inode deleted
[   95.323969][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.327093][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.344838][ T1079] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   95.363623][ T1079] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   95.372436][ T1079] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0
[   95.387301][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.395133][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.427803][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.442767][ T6060] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.92: Invalid inode table block 1 in block_group 0
[   95.448056][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.488280][ T6060] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem
[   95.504332][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.516498][ T6060] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.92: mark_inode_dirty error
[   95.522258][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.549704][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.557769][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.576284][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.586042][   T49] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm kworker/u4:3: Invalid inode table block 1 in block_group 0
[   95.593670][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.617428][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.620165][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.627353][ T4817] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   95.636839][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[   95.656313][ T4817] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   95.662058][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.666415][ T4817] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 0
[   95.694413][ T5771] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[   95.721566][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.729048][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.747985][ T5771] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem
[   95.751098][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.811516][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.818984][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.840682][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.849878][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.857655][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.871383][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.891676][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.914847][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.931136][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.938770][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.951111][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.961432][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   95.968926][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.007006][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.023193][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.030726][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.038409][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.045963][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.058144][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.078606][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.094828][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.102809][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.110471][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.120462][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.133488][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.141451][ T5830] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   96.162293][ T5830] hid-generic 0000:0000:0004.0001: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[   96.193888][  T787] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   96.369376][ T6084] loop2: detected capacity change from 0 to 256
[   96.377176][ T6084] exfat: Deprecated parameter 'namecase'
[   96.400731][ T6084] exfat: Deprecated parameter 'namecase'
[   96.436280][  T787] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   96.462321][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.490074][  T787] usb 4-1: Product: syz
[   96.505275][  T787] usb 4-1: Manufacturer: syz
[   96.512693][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   96.516236][ T6084] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9b7485c9, utbl_chksum : 0xe619d30d)
[   96.544773][  T787] usb 4-1: SerialNumber: syz
[   96.560834][  T787] usb 4-1: config 0 descriptor??
[   96.620598][  T787] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   97.030730][ T6098] comedi comedi3: c6xdigio: I/O port conflict (0xcf7,3)
[   97.239287][  T787] gspca_stk1135: reg_w 0x3 err -71
[   97.259073][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.275783][  T787] gspca_stk1135: Sensor write failed
[   97.281240][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.289314][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.300917][  T787] gspca_stk1135: Sensor write failed
[   97.325253][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.331865][  T787] gspca_stk1135: Sensor read failed
[   97.337219][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.350201][  T787] gspca_stk1135: Sensor read failed
[   97.356854][  T787] gspca_stk1135: Detected sensor type unknown (0x0)
[   97.369670][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.378426][  T787] gspca_stk1135: Sensor read failed
[   97.388911][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.395417][  T787] gspca_stk1135: Sensor read failed
[   97.400756][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.414388][  T787] gspca_stk1135: Sensor write failed
[   97.419265][ T6104] loop1: detected capacity change from 0 to 8192
[   97.419812][  T787] gspca_stk1135: serial bus timeout: status=0x00
[   97.453882][ T6104] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   97.461129][   T23] usb 3-1: Using ep0 maxpacket: 32
[   97.483240][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[   97.488391][  T787] gspca_stk1135: Sensor write failed
[   97.499478][ T6104] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   97.510533][ T6104] REISERFS (device loop1): using journaled data mode
[   97.518907][ T6104] reiserfs: using flush barriers
[   97.519083][  T787] stk1135: probe of 4-1:0.0 failed with error -71
[   97.534056][   T23] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[   97.543998][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.552102][   T23] usb 3-1: Product: syz
[   97.556415][   T23] usb 3-1: Manufacturer: syz
[   97.558292][ T6104] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   97.566412][   T23] usb 3-1: SerialNumber: syz
[   97.587270][  T787] usb 4-1: USB disconnect, device number 2
[   97.596068][   T23] usb 3-1: config 0 descriptor??
[   97.607670][ T6100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   97.623828][ T6104] REISERFS (device loop1): checking transaction log (loop1)
[   97.640624][   T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[   97.661984][ T6104] REISERFS (device loop1): Using r5 hash to sort names
[   97.813899][ T6102] loop0: detected capacity change from 0 to 32768
[   97.850245][ T6102] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.108 (6102)
[   97.936479][ T6104] reiserfs: enabling write barrier flush mode
[   97.946736][ T6102] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.987016][ T6102] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   98.017174][ T6102] BTRFS info (device loop0): setting nodatasum
[   98.041170][ T6102] BTRFS info (device loop0): force zlib compression, level 3
[   98.048676][ T6102] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   98.059647][ T6104] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   98.076233][ T6102] BTRFS info (device loop0): use lzo compression, level 0
[   98.083961][ T6102] BTRFS info (device loop0): turning on flush-on-commit
[   98.091959][ T6102] BTRFS info (device loop0): enabling auto defrag
[   98.098631][ T6102] BTRFS info (device loop0): max_inline at 4096
[   98.111657][ T6102] BTRFS info (device loop0): using free space tree
[   98.126832][ T6104] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   98.175098][ T5776] usb 3-1: USB disconnect, device number 2
[   98.306605][ T6102] BTRFS info (device loop0): enabling ssd optimizations
[   98.419681][ T6126] loop3: detected capacity change from 0 to 8192
[   98.495641][ T6126] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   98.564627][ T6126] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   98.598213][ T6126] REISERFS (device loop3): using ordered data mode
[   98.641061][ T6126] reiserfs: using flush barriers
[   98.682771][ T6126] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   98.742624][ T6126] REISERFS (device loop3): checking transaction log (loop3)
[   98.786544][ T6126] REISERFS (device loop3): Using r5 hash to sort names
[   98.797151][ T5770] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.801491][ T6126] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   98.978279][ T6132] can0: slcan on ttyprintk.
[   99.224994][ T6126] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "dax=never"
[   99.381819][ T6131] can0 (unregistered): slcan off ttyprintk.
[  100.062628][ T6157] trusted_key: encrypted_key: hex blob is missing
[  100.071275][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.282643][ T5776] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  100.305051][ T5776] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  100.323677][ T6138] loop2: detected capacity change from 0 to 32768
[  100.341292][ T5776] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  100.371388][ T6138] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.115 (6138)
[  100.377953][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  100.420076][ T6138] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  100.439061][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  100.450641][ T6138] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  100.457316][ T6167] loop1: detected capacity change from 0 to 2048
[  100.488834][ T5776] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  100.499025][ T6138] BTRFS info (device loop2): using free space tree
[  100.531075][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  100.562023][ T6167] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  100.565035][ T5776] usb 1-1: Product: syz
[  100.591115][ T5776] usb 1-1: Manufacturer: syz
[  100.609958][ T5776] cdc_wdm 1-1:1.0: skipping garbage
[  100.630733][ T5776] cdc_wdm 1-1:1.0: skipping garbage
[  100.636666][ T6167] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  100.663422][ T5776] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  100.665680][ T6167] UDF-fs: Scanning with blocksize 512 failed
[  100.718163][ T6167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.733330][ T5776] cdc_wdm 1-1:1.0: Unknown control protocol
[  100.775690][ T6138] BTRFS info (device loop2): enabling ssd optimizations
[  100.791175][ T6138] BTRFS info (device loop2): auto enabling async discard
[  101.042191][ T5829] usb 1-1: USB disconnect, device number 2
[  101.179398][ T5772] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  101.211293][ T6196] sch_fq: defrate 2 ignored.
[  101.573587][ T6204] loop1: detected capacity change from 0 to 512
[  101.742628][ T6204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.872194][ T6204] fs-verity (loop1, inode 15): Unknown hash algorithm number: 3
[  101.880436][   T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  101.983905][ T6219] loop3: detected capacity change from 0 to 64
[  102.052574][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.108194][   T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  102.130545][   T23] usb 3-1: config 0 has no interface number 0
[  102.169042][   T23] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  102.211057][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.225843][ T6223] loop0: detected capacity change from 0 to 512
[  102.231428][   T23] usb 3-1: Product: syz
[  102.236538][   T23] usb 3-1: Manufacturer: syz
[  102.257147][   T23] usb 3-1: SerialNumber: syz
[  102.286706][   T23] usb 3-1: config 0 descriptor??
[  102.313027][   T23] usb 3-1: selecting invalid altsetting 1
[  102.318949][   T23] dvb_ttusb_budget: ttusb_init_controller: error
[  102.369246][   T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  102.388632][ T6223] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  102.411986][ T6223] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  102.449434][ T6223] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.136: Failed to acquire dquot type 1
[  102.498156][   T23] DVB: Unable to find symbol stv0299_attach()
[  102.520476][ T6223] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  102.571561][ T6223] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  102.611999][ T6223] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.136: Failed to acquire dquot type 1
[  102.635248][   T23] DVB: Unable to find symbol tda8083_attach()
[  102.644862][ T6223] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.136: bg 0: block 248: padding at end of block bitmap is not set
[  102.660323][   T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  102.673031][   T23] usb 3-1: USB disconnect, device number 3
[  102.680855][ T6223] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  102.700483][ T6223] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  102.718234][ T6223] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  102.739390][ T6223] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.136: Failed to acquire dquot type 1
[  102.793606][ T6223] EXT4-fs (loop0): 1 orphan inode deleted
[  102.810428][ T6223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.837629][ T6223] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.004907][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.082432][ T6237] loop3: detected capacity change from 0 to 32768
[  103.341201][ T6243] netlink: 'syz.2.141': attribute type 10 has an invalid length.
[  103.414699][ T6243] team0: Port device netdevsim0 added
[  103.472048][ T6243] netlink: 'syz.2.141': attribute type 10 has an invalid length.
[  103.559522][ T6243] team0: Port device netdevsim0 removed
[  103.575452][ T6243] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  103.834680][ T6256] netlink: 332 bytes leftover after parsing attributes in process `syz.2.148'.
[  103.850598][ T6256] netlink: 'syz.2.148': attribute type 9 has an invalid length.
[  103.867196][ T6256] netlink: 108 bytes leftover after parsing attributes in process `syz.2.148'.
[  103.878004][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.148'.
[  104.131438][ T5829] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  104.321187][ T5829] usb 1-1: Using ep0 maxpacket: 32
[  104.328927][ T5829] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  104.347488][ T5829] usb 1-1: config 0 has no interface number 0
[  104.366123][ T5829] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  104.406047][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.417994][ T6273] tipc: Enabling of bearer <kb:w> rejected, media not registered
[  104.421031][ T5829] usb 1-1: Product: syz
[  104.445151][ T5829] usb 1-1: Manufacturer: syz
[  104.449824][ T5829] usb 1-1: SerialNumber: syz
[  104.465955][ T5829] usb 1-1: config 0 descriptor??
[  104.490524][ T5829] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  104.516049][ T5829] usb 1-1: selecting invalid altsetting 1
[  104.532749][ T5829] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  104.567469][ T5829] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  104.611574][ T5829] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  104.630800][ T5829] usb 1-1: media controller created
[  104.684265][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  105.009729][ T6267] loop1: detected capacity change from 0 to 32768
[  105.060518][ T6267] JBD2: Ignoring recovery information on journal
[  105.172888][ T6267] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  105.307308][ T6282] loop2: detected capacity change from 0 to 32768
[  105.328007][ T6282] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.160 (6282)
[  105.352013][ T6267] (syz.1.154,6267,1):ocfs2_verify_group_and_input:426 ERROR: input chain exceeds the limit.
[  105.365047][ T6267] (syz.1.154,6267,1):ocfs2_group_add:507 ERROR: status = -22
[  105.378766][ T6282] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.393546][ T6282] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  105.403074][ T6282] BTRFS info (device loop2): enabling auto defrag
[  105.409666][ T6282] BTRFS info (device loop2): use no compression
[  105.416760][ T6282] BTRFS info (device loop2): force clearing of disk cache
[  105.424284][ T6282] BTRFS info (device loop2): max_inline at 4096
[  105.430818][ T6282] BTRFS info (device loop2): disabling free space tree
[  105.483562][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[  105.677097][ T6282] BTRFS info (device loop2): enabling ssd optimizations
[  105.694798][ T6282] BTRFS info (device loop2): auto enabling async discard
[  105.735612][ T6282] BTRFS info (device loop2): rebuilding free space tree
[  105.766651][ T6303] netlink: 'syz.3.162': attribute type 7 has an invalid length.
[  105.785055][ T6303] netlink: 'syz.3.162': attribute type 8 has an invalid length.
[  105.787929][ T6259] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  105.802431][ T6302] netlink: 'syz.3.162': attribute type 7 has an invalid length.
[  105.841883][ T6282] BTRFS info (device loop2): disabling free space tree
[  105.848919][ T6282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  105.860140][ T6302] netlink: 'syz.3.162': attribute type 8 has an invalid length.
[  105.872784][ T6282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  105.892271][ T5829] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  105.899610][ T5829] zl10353_read_register: readreg error (reg=127, ret==-71)
[  105.933541][ T5829] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  106.083890][ T5829] usb 1-1: USB disconnect, device number 3
[  106.372134][ T5772] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.484947][ T6313] loop1: detected capacity change from 0 to 4096
[  106.538865][ T6313] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  106.771679][ T6313] ntfs3: loop1: ino=5, "/" directory corrupted
[  107.320318][ T6333] loop0: detected capacity change from 0 to 2368
[  107.423971][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  108.182680][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  108.390984][    C0] sched: RT throttling activated
[  108.393767][ T5830] usb 2-1: Using ep0 maxpacket: 32
[  108.424611][ T5830] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.443757][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0
[  108.463721][ T5830] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  108.529097][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.613209][ T5830] usb 2-1: config 0 descriptor??
[  108.690538][ T6336] loop2: detected capacity change from 0 to 131072
[  108.873045][ T6336] F2FS-fs (loop2): Test dummy encryption mode enabled
[  108.884608][ T6336] F2FS-fs (loop2): invalid crc value
[  108.913404][ T6336] F2FS-fs (loop2): Found nat_bits in checkpoint
[  108.966088][ T6336] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  108.975619][ T6336] F2FS-fs (loop2): Failed to read root inode
[  109.088439][ T5830] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0
[  109.124995][ T5830] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0
[  109.141529][ T5830] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0
[  109.159281][ T5830] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0
[  109.179550][ T5830] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0
[  109.211454][ T5830] dragonrise 0003:0079:0011.0002: unbalanced collection at end of report description
[  109.213034][ T6346] loop0: detected capacity change from 0 to 32768
[  109.242561][ T5830] dragonrise 0003:0079:0011.0002: parse failed
[  109.248961][ T5830] dragonrise: probe of 0003:0079:0011.0002 failed with error -22
[  109.281424][ T5830] usb 2-1: USB disconnect, device number 3
[  109.295364][ T6346] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.182 (6346)
[  109.366213][ T6346] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  109.402161][ T6346] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  109.429133][ T6346] BTRFS info (device loop0): setting nodatasum
[  109.446173][ T6346] BTRFS info (device loop0): using free space tree
[  109.701312][ T6346] BTRFS info (device loop0): enabling ssd optimizations
[  109.718738][ T6346] BTRFS info (device loop0): auto enabling async discard
[  109.901229][   T28] audit: type=1800 audit(1778161210.146:4): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.182" name="file0" dev="loop0" ino=258 res=0 errno=0
[  110.076141][ T5770] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  110.178953][ T6386] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  111.032401][ T6362] loop3: detected capacity change from 0 to 40427
[  111.070503][ T6362] F2FS-fs (loop3): invalid crc value
[  111.085730][ T6362] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.170220][ T6362] F2FS-fs (loop3): Start checkpoint disabled!
[  111.188063][ T6362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  111.599622][ T1004] kworker/u4:6: attempt to access beyond end of device
[  111.599622][ T1004] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.624303][ T1004] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  111.750347][ T6405] loop2: detected capacity change from 0 to 512
[  111.754110][ T6396] loop0: detected capacity change from 0 to 40427
[  111.771663][ T6406] netlink: 52 bytes leftover after parsing attributes in process `syz.1.201'.
[  111.780829][ T6406] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'.
[  111.804984][ T6396] F2FS-fs (loop0): invalid crc value
[  111.815630][ T6405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002]
[  111.831376][ T6405] System zones: 1-20
[  111.857023][ T6396] F2FS-fs (loop0): Found nat_bits in checkpoint
[  111.914026][ T6405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.126323][ T6396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  112.135005][ T6414] loop1: detected capacity change from 0 to 1024
[  112.145675][ T6405] EXT4-fs: Cannot change journaled quota options when quota turned on
[  112.278530][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.295232][ T6414] hfsplus: bad catalog entry type
[  112.442144][ T4817] hfsplus: b-tree write err: -5, ino 25
[  112.448325][ T4817] hfsplus: b-tree write err: -5, ino 4
[  112.477550][ T4817] hfsplus: b-tree write err: -5, ino 2
[  112.478146][ T5770] syz-executor: attempt to access beyond end of device
[  112.478146][ T5770] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.528759][ T6420] loop3: detected capacity change from 0 to 2048
[  112.553244][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  112.598209][ T6420] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  112.624155][ T6420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.051087][ T6432] netlink: 80 bytes leftover after parsing attributes in process `syz.2.210'.
[  113.064806][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'.
[  113.153767][ T6434] loop3: detected capacity change from 0 to 1024
[  113.225156][ T6434] hfsplus: bad catalog entry type
[  113.521943][ T6442] loop3: detected capacity change from 0 to 1024
[  113.960625][ T6450] loop2: detected capacity change from 0 to 8192
[  113.999586][ T6450] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  114.025005][ T6450] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  114.050734][ T6450] REISERFS (device loop2): using ordered data mode
[  114.058331][ T6450] reiserfs: using flush barriers
[  114.075428][ T6450] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  114.099079][ T6450] REISERFS (device loop2): checking transaction log (loop2)
[  114.221127][ T6450] REISERFS (device loop2): Using r5 hash to sort names
[  114.229008][ T6450] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  114.381809][ T6465] loop1: detected capacity change from 0 to 128
[  114.426957][ T6465] VFS: Found a Xenix FS (block size = 512) on device loop1
[  114.687555][ T5769] sysv_free_block: trying to free block not in datazone
[  114.732432][ T5769] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  114.808099][ T6477] loop3: detected capacity change from 0 to 256
[  114.927430][ T6477] FAT-fs (loop3): Directory bread(block 64) failed
[  114.956553][ T6477] FAT-fs (loop3): Directory bread(block 65) failed
[  114.991300][ T6477] FAT-fs (loop3): Directory bread(block 66) failed
[  115.002825][ T6477] FAT-fs (loop3): Directory bread(block 67) failed
[  115.009560][ T6477] FAT-fs (loop3): Directory bread(block 68) failed
[  115.046032][ T6477] FAT-fs (loop3): Directory bread(block 69) failed
[  115.053919][ T6477] FAT-fs (loop3): Directory bread(block 70) failed
[  115.060620][ T6477] FAT-fs (loop3): Directory bread(block 71) failed
[  115.070854][ T6477] FAT-fs (loop3): Directory bread(block 72) failed
[  115.089556][ T6477] FAT-fs (loop3): Directory bread(block 73) failed
[  115.306471][ T6490] loop2: detected capacity change from 0 to 512
[  115.329927][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[  115.349592][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[  115.399716][ T6490] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.237: EA inode hash validation failed
[  115.472522][ T6490] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.237: corrupted inode contents
[  115.534327][ T6497] loop0: detected capacity change from 0 to 1024
[  115.581081][ T6490] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #15: comm syz.2.237: mark_inode_dirty error
[  115.625561][ T6490] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.237: corrupted inode contents
[  115.652700][ T6490] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2998: inode #15: comm syz.2.237: mark_inode_dirty error
[  115.653496][ T6497] hfsplus: found bad thread record in catalog
[  115.695331][ T6490] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.237: mark inode dirty (error -117)
[  115.700307][ T6497] hfsplus: catalog searching failed
[  115.759424][ T6499] sp0: Synchronizing with TNC
[  115.765331][ T6490] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  115.805631][ T6490] EXT4-fs (loop2): 1 orphan inode deleted
[  115.829537][ T6498] [U] è
[  115.834015][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.947831][ T1079] hfsplus: b-tree write err: -5, ino 4
[  115.987244][ T1079] hfsplus: b-tree write err: -5, ino 2
[  116.040786][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.430846][ T6495] loop1: detected capacity change from 0 to 40427
[  116.451458][ T6495] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  116.473743][ T6495] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  116.547518][ T6495] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.640851][ T6517] loop2: detected capacity change from 0 to 512
[  116.693040][ T6517] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  116.781188][ T6495] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  116.788814][ T6495] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  117.058208][ T5769] syz-executor: attempt to access beyond end of device
[  117.058208][ T5769] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.087890][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  117.301950][ T6503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.244 (6503)
[  117.365124][ T6503] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.415885][ T6503] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  117.454850][ T6503] BTRFS info (device loop3): doing ref verification
[  117.471600][ T6503] BTRFS info (device loop3): force clearing of disk cache
[  117.503773][ T6503] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  117.540169][ T6503] BTRFS info (device loop3): use zstd compression, level 3
[  117.573451][ T6503] BTRFS info (device loop3): turning off barriers
[  117.579977][ T6503] BTRFS info (device loop3): enabling auto defrag
[  117.618343][ T6503] BTRFS info (device loop3): max_inline at 4096
[  117.636911][ T6503] BTRFS info (device loop3): turning on sync discard
[  117.657851][ T6503] BTRFS info (device loop3): using free space tree
[  117.802228][ T6547] mmap: syz.2.250 (6547) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  117.839023][ T6503] BTRFS info (device loop3): enabling ssd optimizations
[  117.861747][ T6503] BTRFS info (device loop3): rebuilding free space tree
[  117.945527][ T6503] BTRFS info (device loop3): checking UUID tree
[  118.045351][ T6553] set_capacity_and_notify: 1 callbacks suppressed
[  118.045369][ T6553] loop0: detected capacity change from 0 to 512
[  118.137082][ T6553] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #11: comm syz.0.256: unexpected EA_INODE flag
[  118.204905][ T6553] EXT4-fs (loop0): Remounting filesystem read-only
[  118.213300][ T6553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.384295][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.405780][ T5771] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.796229][ T6572] loop3: detected capacity change from 0 to 512
[  118.914628][ T6572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.933074][ T6572] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.249385][ T6586] loop1: detected capacity change from 0 to 256
[  119.341783][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.539303][ T6593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  119.827494][ T6596] loop1: detected capacity change from 0 to 4096
[  120.003322][ T5776] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  120.214019][ T5776] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  120.241198][ T5776] usb 4-1: config 0 has no interface number 0
[  120.263837][ T5776] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  120.303370][ T5776] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  120.319363][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.329050][ T5776] usb 4-1: Product: syz
[  120.334723][ T5776] usb 4-1: Manufacturer: syz
[  120.339563][ T5776] usb 4-1: SerialNumber: syz
[  120.378912][ T5776] usb 4-1: config 0 descriptor??
[  120.407762][ T5776] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  120.670362][ T6602] loop2: detected capacity change from 0 to 32768
[  120.743647][ T5776] usb 4-1: USB disconnect, device number 3
[  120.758841][ T6604] loop0: detected capacity change from 0 to 32768
[  120.773694][ T6602] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.779451][ T5776] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  120.930212][ T6602] XFS (loop2): Ending clean mount
[  120.978900][ T6602] XFS (loop2): Quotacheck needed: Please wait.
[  121.132226][ T6602] XFS (loop2): Quotacheck: Done.
[  121.281362][   T28] audit: type=1800 audit(1778161221.526:5): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.275" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  121.398092][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.423083][ T6623] loop0: detected capacity change from 0 to 256
[  121.443837][ T6623] exfat: Deprecated parameter 'utf8'
[  121.449348][ T6623] exfat: Deprecated parameter 'namecase'
[  121.538479][ T6623] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  121.894603][ T6631] loop1: detected capacity change from 0 to 1024
[  122.057103][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.074320][ T6635] loop3: detected capacity change from 0 to 4096
[  122.148876][ T6635] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  122.402740][ T6635] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  122.419552][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.459924][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'.
[  122.470131][ T6643] netlink: 'syz.2.289': attribute type 5 has an invalid length.
[  122.549739][ T6644] loop0: detected capacity change from 0 to 2048
[  122.578854][ T6635] overlayfs: upper fs does not support tmpfile.
[  122.645296][ T6635] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  122.675959][ T6646] EXT4-fs: Ignoring removed orlov option
[  122.682744][ T6635] overlayfs: failed to get uuid (/file0, err=0); falling back to uuid=null.
[  122.738837][ T6644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.756966][ T6635] ntfs3: loop3: ino=1b, "file0" failed to parse mft record
[  122.758445][ T6646] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  122.786600][ T6635] ntfs3: loop3: ino=1b, "file0" attr_set_size
[  122.806251][ T6635] overlayfs: failed to verify origin (/, ino=5, err=-2)
[  122.856355][ T6635] overlayfs: failed to verify upper root origin
[  122.893119][ T6646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.955548][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.987276][ T5771] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22.
[  123.003501][ T6654] erofs: (device loop2): mounted with root inode @ nid 36.
[  123.102128][   T28] audit: type=1800 audit(1778161223.346:6): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.293" name="file1" dev="loop2" ino=86 res=0 errno=0
[  123.255801][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.727764][ T6666] set_capacity_and_notify: 2 callbacks suppressed
[  123.727780][ T6666] loop1: detected capacity change from 0 to 4096
[  123.961222][ T5776] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.168773][ T5776] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[  124.188197][ T5776] usb 1-1: config 0 has no interface number 0
[  124.210821][ T5776] usb 1-1: config 0 interface 29 has no altsetting 0
[  124.236968][ T5776] usb 1-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d
[  124.259859][ T6679] netlink: 'syz.1.304': attribute type 10 has an invalid length.
[  124.268633][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.278133][ T6679] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  124.293639][ T6679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.317674][ T5776] usb 1-1: config 0 descriptor??
[  124.325830][ T5776] usb-storage 1-1:0.29: USB Mass Storage device detected
[  124.365472][ T5776] usb-storage 1-1:0.29: Quirks match for vid 357d pid 7788: 4800000
[  124.677135][ T6693] loop2: detected capacity change from 0 to 64
[  124.854689][ T5829] usb 1-1: USB disconnect, device number 4
[  125.254787][ T6708] loop2: detected capacity change from 0 to 1024
[  125.334938][ T6708] hfsplus: extend alloc file! (16384,256,150995124)
[  125.361112][ T6708] hfsplus: failed to extend attributes file
[  125.602142][ T6715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.321'.
[  125.641152][ T6715] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[  125.729502][ T6696] loop3: detected capacity change from 0 to 32768
[  125.797204][ T6696] JBD2: Ignoring recovery information on journal
[  126.002854][ T6728] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  126.011070][ T6696] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  126.194919][ T6696] 
[  126.197331][ T6696] ======================================================
[  126.204381][ T6696] WARNING: possible circular locking dependency detected
[  126.211713][ T6696] syzkaller #0 Not tainted
[  126.216161][ T6696] ------------------------------------------------------
[  126.223208][ T6696] syz.3.312/6696 is trying to acquire lock:
[  126.229221][ T6696] ffff888078b83f60 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340
[  126.239907][ T6696] 
[  126.239907][ T6696] but task is already holding lock:
[  126.242498][ T6735] netlink: 'syz.1.329': attribute type 3 has an invalid length.
[  126.247366][ T6696] ffff888078b83ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340
[  126.265863][ T6696] 
[  126.265863][ T6696] which lock already depends on the new lock.
[  126.265863][ T6696] 
[  126.276294][ T6696] 
[  126.276294][ T6696] the existing dependency chain (in reverse order) is:
[  126.285426][ T6696] 
[  126.285426][ T6696] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  126.293475][ T6696]        down_read+0x46/0x2e0
[  126.298289][ T6696]        ocfs2_init_acl+0x30a/0x770
[  126.303530][ T6696]        ocfs2_mknod+0x140f/0x2300
[  126.308683][ T6696]        ocfs2_create+0x196/0x430
[  126.313752][ T6696]        path_openat+0x12a0/0x3230
[  126.318908][ T6696]        do_filp_open+0x1f5/0x430
[  126.323982][ T6696]        do_sys_openat2+0x134/0x1d0
[  126.329318][ T6696]        __x64_sys_creat+0x90/0xb0
[  126.334569][ T6696]        do_syscall_64+0x55/0xa0
[  126.339548][ T6696]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.346000][ T6696] 
[  126.346000][ T6696] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  126.354568][ T6696]        down_read+0x46/0x2e0
[  126.359289][ T6696]        ocfs2_start_trans+0x3a8/0x6f0
[  126.364799][ T6696]        ocfs2_shutdown_local_alloc+0x1fc/0xaa0
[  126.371084][ T6696]        ocfs2_dismount_volume+0x1e5/0x8a0
[  126.376925][ T6696]        generic_shutdown_super+0x134/0x2b0
[  126.382831][ T6696]        kill_block_super+0x44/0x90
[  126.388038][ T6696]        deactivate_locked_super+0x97/0x100
[  126.393983][ T6696]        cleanup_mnt+0x43b/0x4d0
[  126.398917][ T6696]        task_work_run+0x1d4/0x260
[  126.404029][ T6696]        exit_to_user_mode_loop+0xe6/0x110
[  126.409864][ T6696]        exit_to_user_mode_prepare+0xee/0x180
[  126.415967][ T6696]        syscall_exit_to_user_mode+0x1a/0x50
[  126.422050][ T6696]        do_syscall_64+0x61/0xa0
[  126.426987][ T6696]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.433503][ T6696] 
[  126.433503][ T6696] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  126.440985][ T6696]        ocfs2_start_trans+0x2a9/0x6f0
[  126.446463][ T6696]        ocfs2_truncate_file+0x631/0x1440
[  126.452241][ T6696]        ocfs2_setattr+0x158d/0x1bc0
[  126.457542][ T6696]        notify_change+0xb0d/0xe10
[  126.462655][ T6696]        do_truncate+0x1b0/0x240
[  126.467587][ T6696]        path_openat+0x2a32/0x3230
[  126.472697][ T6696]        do_filp_open+0x1f5/0x430
[  126.477713][ T6696]        do_sys_openat2+0x134/0x1d0
[  126.482941][ T6696]        __x64_sys_openat+0x139/0x160
[  126.488312][ T6696]        do_syscall_64+0x55/0xa0
[  126.493266][ T6696]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.499716][ T6696] 
[  126.499716][ T6696] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}:
[  126.507636][ T6696]        __lock_acquire+0x2df1/0x7d40
[  126.513041][ T6696]        lock_acquire+0x19e/0x420
[  126.518200][ T6696]        down_write+0x97/0x200
[  126.523016][ T6696]        ocfs2_try_remove_refcount_tree+0xb7/0x340
[  126.529577][ T6696]        ocfs2_truncate_file+0xde5/0x1440
[  126.535356][ T6696]        ocfs2_setattr+0x158d/0x1bc0
[  126.540840][ T6696]        notify_change+0xb0d/0xe10
[  126.545992][ T6696]        do_truncate+0x1b0/0x240
[  126.551035][ T6696]        path_openat+0x2a32/0x3230
[  126.556162][ T6696]        do_filp_open+0x1f5/0x430
[  126.561201][ T6696]        do_sys_openat2+0x134/0x1d0
[  126.566416][ T6696]        __x64_sys_openat+0x139/0x160
[  126.571875][ T6696]        do_syscall_64+0x55/0xa0
[  126.576816][ T6696]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.583242][ T6696] 
[  126.583242][ T6696] other info that might help us debug this:
[  126.583242][ T6696] 
[  126.593477][ T6696] Chain exists of:
[  126.593477][ T6696]   &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  126.593477][ T6696] 
[  126.607962][ T6696]  Possible unsafe locking scenario:
[  126.607962][ T6696] 
[  126.615405][ T6696]        CPU0                    CPU1
[  126.620792][ T6696]        ----                    ----
[  126.626173][ T6696]   lock(&oi->ip_xattr_sem);
[  126.630792][ T6696]                                lock(&journal->j_trans_barrier);
[  126.638596][ T6696]                                lock(&oi->ip_xattr_sem);
[  126.645706][ T6696]   lock(&oi->ip_alloc_sem);
[  126.650395][ T6696] 
[  126.650395][ T6696]  *** DEADLOCK ***
[  126.650395][ T6696] 
[  126.658638][ T6696] 3 locks held by syz.3.312/6696:
[  126.663675][ T6696]  #0: ffff888058d2e418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  126.673115][ T6696]  #1: ffff888078b842d8 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: do_truncate+0x19c/0x240
[  126.683469][ T6696]  #2: ffff888078b83ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340
[  126.694514][ T6696] 
[  126.694514][ T6696] stack backtrace:
[  126.700445][ T6696] CPU: 0 PID: 6696 Comm: syz.3.312 Not tainted syzkaller #0
[  126.707723][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  126.717870][ T6696] Call Trace:
[  126.721147][ T6696]  <TASK>
[  126.724082][ T6696]  dump_stack_lvl+0x18c/0x250
[  126.728768][ T6696]  ? load_image+0x420/0x420
[  126.733271][ T6696]  ? show_regs_print_info+0x20/0x20
[  126.738491][ T6696]  ? print_circular_bug+0x12b/0x1a0
[  126.743692][ T6696]  check_noncircular+0x2fc/0x400
[  126.748659][ T6696]  ? print_deadlock_bug+0x5d0/0x5d0
[  126.754044][ T6696]  ? lockdep_lock+0xf5/0x230
[  126.758655][ T6696]  ? lockdep_unlock+0x146/0x2e0
[  126.763510][ T6696]  ? _find_first_zero_bit+0xd3/0x100
[  126.768847][ T6696]  __lock_acquire+0x2df1/0x7d40
[  126.773719][ T6696]  ? verify_lock_unused+0x140/0x140
[  126.778925][ T6696]  lock_acquire+0x19e/0x420
[  126.783466][ T6696]  ? ocfs2_try_remove_refcount_tree+0xb7/0x340
[  126.789645][ T6696]  ? __might_sleep+0xe0/0xe0
[  126.794264][ T6696]  ? read_lock_is_recursive+0x20/0x20
[  126.799741][ T6696]  down_write+0x97/0x200
[  126.804029][ T6696]  ? ocfs2_try_remove_refcount_tree+0xb7/0x340
[  126.810211][ T6696]  ? down_read_killable+0x340/0x340
[  126.815529][ T6696]  ? ocfs2_truncate_file+0xd0b/0x1440
[  126.820927][ T6696]  ? __lock_acquire+0x7d40/0x7d40
[  126.826423][ T6696]  ocfs2_try_remove_refcount_tree+0xb7/0x340
[  126.832436][ T6696]  ? ocfs2_remove_refcount_tree+0xe50/0xe50
[  126.838352][ T6696]  ? up_write+0x1c3/0x410
[  126.842783][ T6696]  ocfs2_truncate_file+0xde5/0x1440
[  126.848040][ T6696]  ? ocfs2_simple_size_update+0x4a0/0x4a0
[  126.854010][ T6696]  ? do_raw_spin_unlock+0x121/0x230
[  126.859318][ T6696]  ? _raw_spin_unlock+0x28/0x40
[  126.864180][ T6696]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  126.869924][ T6696]  ? ocfs2_inode_lock_atime+0x530/0x530
[  126.875497][ T6696]  ? ocfs2_rw_lock+0x138/0x250
[  126.880266][ T6696]  ? dquot_initialize+0x20/0x20
[  126.885220][ T6696]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  126.891431][ T6696]  ? setattr_prepare+0x1e6/0xac0
[  126.896401][ T6696]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  126.903013][ T6696]  ocfs2_setattr+0x158d/0x1bc0
[  126.907817][ T6696]  ? ocfs2_extend_allocation+0x1840/0x1840
[  126.913658][ T6696]  ? ktime_get_coarse_real_ts64+0x3a/0x120
[  126.919483][ T6696]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  126.925747][ T6696]  ? ktime_get_coarse_real_ts64+0x110/0x120
[  126.931676][ T6696]  ? current_time+0x195/0x280
[  126.936363][ T6696]  ? inode_set_ctime_current+0x2e0/0x2e0
[  126.942012][ T6696]  ? evm_inode_setattr+0x94/0x6a0
[  126.947094][ T6696]  ? bpf_lsm_inode_setattr+0x9/0x10
[  126.952293][ T6696]  ? try_break_deleg+0x79/0x120
[  126.957162][ T6696]  ? ocfs2_extend_allocation+0x1840/0x1840
[  126.963086][ T6696]  notify_change+0xb0d/0xe10
[  126.967753][ T6696]  do_truncate+0x1b0/0x240
[  126.973081][ T6696]  ? put_page_bootmem+0x2c0/0x2c0
[  126.978229][ T6696]  ? apparmor_file_truncate+0x24a/0x2e0
[  126.983832][ T6696]  ? ima_bprm_check+0x200/0x200
[  126.988709][ T6696]  path_openat+0x2a32/0x3230
[  126.993322][ T6696]  ? verify_lock_unused+0x140/0x140
[  126.998622][ T6696]  ? do_filp_open+0x430/0x430
[  127.003405][ T6696]  ? __virt_addr_valid+0x18c/0x540
[  127.008554][ T6696]  do_filp_open+0x1f5/0x430
[  127.013160][ T6696]  ? vfs_tmpfile+0x490/0x490
[  127.017757][ T6696]  ? _raw_spin_unlock+0x28/0x40
[  127.022636][ T6696]  ? alloc_fd+0x58f/0x630
[  127.026990][ T6696]  do_sys_openat2+0x134/0x1d0
[  127.031700][ T6696]  ? do_sys_open+0xe0/0xe0
[  127.036117][ T6696]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  127.042099][ T6696]  ? lock_chain_count+0x20/0x20
[  127.046954][ T6696]  __x64_sys_openat+0x139/0x160
[  127.051824][ T6696]  do_syscall_64+0x55/0xa0
[  127.056253][ T6696]  ? clear_bhb_loop+0x40/0x90
[  127.060954][ T6696]  ? clear_bhb_loop+0x40/0x90
[  127.065665][ T6696]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  127.071585][ T6696] RIP: 0033:0x7fa86fd9cdd9
[  127.076039][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.095847][ T6696] RSP: 002b:00007fa870bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  127.104280][ T6696] RAX: ffffffffffffffda RBX: 00007fa870015fa0 RCX: 00007fa86fd9cdd9
[  127.112273][ T6696] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c
[  127.120254][ T6696] RBP: 00007fa86fe32d69 R08: 0000000000000000 R09: 0000000000000000
[  127.128317][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.136382][ T6696] R13: 00007fa870016038 R14: 00007fa870015fa0 R15: 00007ffd64b71468
[  127.144365][ T6696]  </TASK>
[  127.240626][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[  133.143811][ T1290] ieee802154 phy0 wpan0: encryption failed: -22