last executing test programs:

16.110392867s ago: executing program 2 (id=380):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2404c044)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000840)="924a", 0x2}], 0x1)

15.882636455s ago: executing program 2 (id=384):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22)

15.55097593s ago: executing program 2 (id=389):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0xfff1, 0x1}, {0xfff3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008096}, 0x2400c800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
io_setup(0xbb, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}])

15.207305966s ago: executing program 2 (id=391):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@minixdf}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0)

14.496533254s ago: executing program 2 (id=393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0001002cbd7000fddbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2004e904}, 0x800)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

13.786429292s ago: executing program 2 (id=399):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

13.446269707s ago: executing program 32 (id=399):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

8.727898158s ago: executing program 3 (id=419):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000595000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000ce000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

8.440717945s ago: executing program 3 (id=420):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f00000000c0))

5.304375113s ago: executing program 3 (id=430):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.23280406s ago: executing program 1 (id=433):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

3.980653782s ago: executing program 1 (id=434):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3.719050765s ago: executing program 1 (id=435):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x12}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}], 0x30}, 0x1400c0c0)

3.519302888s ago: executing program 1 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001800010000000000000000000100000a140000000b0a0102"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x800)

3.334031999s ago: executing program 3 (id=438):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='timers\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
pread64(r1, &(0x7f0000000300)=""/4092, 0xffc, 0x37a)

3.214632298s ago: executing program 1 (id=439):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

3.108650676s ago: executing program 0 (id=440):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200681, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
unshare(0x22020600)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

3.057962225s ago: executing program 1 (id=441):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x7, @string={0x7, 0x3, "a6bb61ab80"}}, 0x0, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x80, 0x1, {0x22, 0x810}}}}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f00000000c0)={0x1, "c3"})

2.838697121s ago: executing program 0 (id=442):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

2.439618437s ago: executing program 0 (id=443):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
write$P9_RGETLOCK(r1, 0x0, 0xffffff6a)
pipe2(&(0x7f0000000640)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
tee(r0, r3, 0xfffffffffffffc01, 0x0)
close(r3)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000800)="99", 0x1}], 0x1, 0x1)

2.335235944s ago: executing program 3 (id=444):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080))
mkdir(&(0x7f0000000040)='./file0\x00', 0x28)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

2.222503123s ago: executing program 0 (id=445):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xc801, 0x0, 0x0, 0x0, &(0x7f00000001c0))

1.507976541s ago: executing program 0 (id=446):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==")
rmdir(&(0x7f0000000200)='./file2\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0x200138b0, &(0x7f0000000400)=ANY=[], 0x1, 0x14f6, &(0x7f0000003f80)="$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")
fdatasync(r0)

897.061991ms ago: executing program 4 (id=400):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)

656.341152ms ago: executing program 4 (id=447):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

536.441481ms ago: executing program 4 (id=448):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d", 0x12}, {&(0x7f0000000e80)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1", 0x34}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535", 0x36}], 0x1}}], 0x3, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

436.147827ms ago: executing program 4 (id=449):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
close(0x5)
close(0x4)

280.604384ms ago: executing program 0 (id=450):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=451):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x20}}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000148000/0x2000)=nil)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   57.148224][ T5431] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.163731][ T5431] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts.
syzkaller login: [   80.115709][ T5752] cgroup: Unknown subsys name 'net'
[   80.225615][ T5752] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.900239][ T5752] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.525161][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.533674][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.542174][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.556982][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.569371][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.577756][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.587163][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.594984][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.602718][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.617805][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.625466][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.626127][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.634151][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.642594][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.655288][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.655365][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.671191][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.671575][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.692294][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.700120][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   83.708220][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.721880][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.736472][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   83.744689][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.211011][ T5766] chnl_net:caif_netlink_parms(): no params data found
[   84.312796][ T5765] chnl_net:caif_netlink_parms(): no params data found
[   84.329951][ T5764] chnl_net:caif_netlink_parms(): no params data found
[   84.341421][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   84.552133][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.559683][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.567630][ T5766] bridge_slave_0: entered allmulticast mode
[   84.575210][ T5766] bridge_slave_0: entered promiscuous mode
[   84.594784][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.602149][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.609609][ T5765] bridge_slave_0: entered allmulticast mode
[   84.617504][ T5765] bridge_slave_0: entered promiscuous mode
[   84.634073][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.642619][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.650258][ T5766] bridge_slave_1: entered allmulticast mode
[   84.658215][ T5766] bridge_slave_1: entered promiscuous mode
[   84.674050][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.681322][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.689037][ T5765] bridge_slave_1: entered allmulticast mode
[   84.696203][ T5765] bridge_slave_1: entered promiscuous mode
[   84.703036][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.710393][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.717903][ T5764] bridge_slave_0: entered allmulticast mode
[   84.724920][ T5764] bridge_slave_0: entered promiscuous mode
[   84.744399][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.752085][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.759625][ T5767] bridge_slave_0: entered allmulticast mode
[   84.767258][ T5767] bridge_slave_0: entered promiscuous mode
[   84.785924][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.793224][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.801085][ T5764] bridge_slave_1: entered allmulticast mode
[   84.808501][ T5764] bridge_slave_1: entered promiscuous mode
[   84.835568][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.843645][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.850930][ T5767] bridge_slave_1: entered allmulticast mode
[   84.858472][ T5767] bridge_slave_1: entered promiscuous mode
[   84.879768][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.902983][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.914981][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.928533][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.961106][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.983641][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.028078][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.041690][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.088028][ T5764] team0: Port device team_slave_0 added
[   85.098129][ T5765] team0: Port device team_slave_0 added
[   85.117115][ T5766] team0: Port device team_slave_0 added
[   85.124876][ T5764] team0: Port device team_slave_1 added
[   85.143951][ T5765] team0: Port device team_slave_1 added
[   85.163855][ T5767] team0: Port device team_slave_0 added
[   85.173312][ T5767] team0: Port device team_slave_1 added
[   85.181735][ T5766] team0: Port device team_slave_1 added
[   85.251627][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.259071][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.285209][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.299624][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.306701][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.333383][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.346580][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.353569][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.380007][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.409737][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.417013][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.444806][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.477781][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.484860][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.511713][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.523574][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.530954][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.557031][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.569350][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.576755][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.603026][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.651574][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.658803][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.685224][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.702159][ T5764] hsr_slave_0: entered promiscuous mode
[   85.710635][ T5764] hsr_slave_1: entered promiscuous mode
[   85.717031][ T5780] Bluetooth: hci0: command tx timeout
[   85.780747][ T5766] hsr_slave_0: entered promiscuous mode
[   85.787645][ T5766] hsr_slave_1: entered promiscuous mode
[   85.793944][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.802763][ T5780] Bluetooth: hci1: command tx timeout
[   85.808758][ T5772] Bluetooth: hci3: command tx timeout
[   85.814344][ T5772] Bluetooth: hci2: command tx timeout
[   85.821001][ T5766] Cannot create hsr debugfs directory
[   85.833181][ T5765] hsr_slave_0: entered promiscuous mode
[   85.840884][ T5765] hsr_slave_1: entered promiscuous mode
[   85.847647][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.855234][ T5765] Cannot create hsr debugfs directory
[   85.947368][ T5767] hsr_slave_0: entered promiscuous mode
[   85.953901][ T5767] hsr_slave_1: entered promiscuous mode
[   85.960562][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.968230][ T5767] Cannot create hsr debugfs directory
[   86.354445][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.373547][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.384270][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.395840][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.458958][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.476967][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.491906][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.502367][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.620882][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.632503][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.645236][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.662057][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.751012][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.784944][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.809044][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.815958][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.830910][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.857762][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.919880][ T5765] 8021q: adding VLAN 0 to HW filter on device team0
[   86.949311][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.956861][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.972903][ T5764] 8021q: adding VLAN 0 to HW filter on device team0
[   87.002435][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.009652][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.029392][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.036608][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.052308][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.060130][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.166900][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.265660][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   87.300155][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.307356][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.382658][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.389885][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.502459][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.593406][ T5766] 8021q: adding VLAN 0 to HW filter on device team0
[   87.642363][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.649594][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.692929][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.700162][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.807848][ T5772] Bluetooth: hci0: command tx timeout
[   87.877286][ T5772] Bluetooth: hci2: command tx timeout
[   87.882764][ T5772] Bluetooth: hci1: command tx timeout
[   87.888569][ T5780] Bluetooth: hci3: command tx timeout
[   88.029380][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.152845][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.195912][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.240561][ T5764] veth0_vlan: entered promiscuous mode
[   88.262667][ T5764] veth1_vlan: entered promiscuous mode
[   88.342143][ T5765] veth0_vlan: entered promiscuous mode
[   88.380400][ T5767] veth0_vlan: entered promiscuous mode
[   88.389206][ T5764] veth0_macvtap: entered promiscuous mode
[   88.405005][ T5764] veth1_macvtap: entered promiscuous mode
[   88.423065][ T5765] veth1_vlan: entered promiscuous mode
[   88.451354][ T5767] veth1_vlan: entered promiscuous mode
[   88.464994][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.517768][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.534228][ T5767] veth0_macvtap: entered promiscuous mode
[   88.570230][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.585390][ T5767] veth1_macvtap: entered promiscuous mode
[   88.619077][ T5766] veth0_vlan: entered promiscuous mode
[   88.629096][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.638761][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.648531][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.662779][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.677991][ T5765] veth0_macvtap: entered promiscuous mode
[   88.718284][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.729750][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.741641][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.754694][ T5766] veth1_vlan: entered promiscuous mode
[   88.768993][ T5765] veth1_macvtap: entered promiscuous mode
[   88.795115][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.810631][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.822871][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.867658][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.879977][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.889035][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.898589][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.915543][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.929981][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.940180][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.950818][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.963031][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.975135][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.987383][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.997621][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.008220][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.023305][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.064603][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.088771][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.098572][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.108468][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.109377][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.125368][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.194910][ T5766] veth0_macvtap: entered promiscuous mode
[   89.207027][ T5766] veth1_macvtap: entered promiscuous mode
[   89.253602][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.272548][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.314374][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.329309][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.353480][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.364800][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.374824][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.385327][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.399278][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.411013][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.423779][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.433801][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.444401][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.454579][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.465758][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.478272][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.519143][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.532694][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.541980][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.551186][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.591611][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.628003][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.735154][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.755564][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.781398][ T5831] syz.1.2[5831]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   89.795422][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.818522][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.854435][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.885860][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.895918][ T5772] Bluetooth: hci0: command tx timeout
[   89.924200][ T5831] loop1: detected capacity change from 0 to 4096
[   89.966750][ T5772] Bluetooth: hci1: command tx timeout
[   89.972307][   T51] Bluetooth: hci3: command tx timeout
[   89.978253][ T5780] Bluetooth: hci2: command tx timeout
[   90.112662][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.153652][ T5833] Bluetooth: MGMT ver 1.22
[   90.155954][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.198825][ T5831] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   90.233609][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.250731][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.314836][ T5831] ntfs3: loop1: Failed to load $Extend (-22).
[   90.346398][ T5831] ntfs3: loop1: Failed to initialize $Extend.
[   90.634107][ T5840] loop0: detected capacity change from 0 to 512
[   90.648528][   T28] audit: type=1800 audit(1775932116.599:2): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=33 res=0 errno=0
[   90.707674][ T5840] =======================================================
[   90.707674][ T5840] WARNING: The mand mount option has been deprecated and
[   90.707674][ T5840]          and is ignored by this kernel. Remove the mand
[   90.707674][ T5840]          option from the mount to silence this warning.
[   90.707674][ T5840] =======================================================
[   91.190780][ T5851] loop0: detected capacity change from 0 to 1024
[   91.595247][   T11] hfsplus: b-tree write err: -5, ino 3
[   91.612127][ T5765] hfsplus: node 4:3 still has 2 user(s)!
[   91.778558][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.956469][ T5772] Bluetooth: hci0: command tx timeout
[   92.003253][ T5845] loop2: detected capacity change from 0 to 32768
[   92.052610][ T5772] Bluetooth: hci1: command tx timeout
[   92.059121][ T5780] Bluetooth: hci2: command tx timeout
[   92.064632][   T51] Bluetooth: hci3: command tx timeout
[   92.093810][ T5845] (syz.2.7,5845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.146452][   T27] cfg80211: failed to load regulatory.db
[   92.217540][ T5845] (syz.2.7,5845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.265454][ T5849] loop3: detected capacity change from 0 to 32768
[   92.359294][ T5849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9 (5849)
[   92.427946][ T5845] JBD2: Ignoring recovery information on journal
[   92.526427][ T5849] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.540423][ T5849] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   92.549324][ T5849] BTRFS info (device loop3): turning on async discard
[   92.556265][ T5849] BTRFS info (device loop3): metadata ratio 0
[   92.562387][ T5849] BTRFS info (device loop3): setting nodatasum
[   92.571411][ T5849] BTRFS info (device loop3): using free space tree
[   92.585954][ T5863] loop1: detected capacity change from 0 to 32768
[   92.610731][ T5845] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   92.688462][ T5863] JBD2: Ignoring recovery information on journal
[   92.864699][ T5863] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   92.955612][ T5849] BTRFS info (device loop3): enabling ssd optimizations
[   93.016093][   T28] audit: type=1800 audit(1775932118.959:3): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file1" dev="loop2" ino=16979 res=0 errno=0
[   93.572176][ T5863] syz.1.15 (5863) used greatest stack depth: 18288 bytes left
[   93.750877][   T28] audit: type=1800 audit(1775932119.699:4): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=260 res=0 errno=0
[   93.787090][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[   93.822576][ T5891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20'.
[   93.840872][ T5891] Zero length message leads to an empty skb
[   93.863212][ T5767] ocfs2: Unmounting device (7,2) on (node local)
[   94.069862][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.472941][ T5898] 9pnet: p9_errstr2errno: server reported unknown error õ1
[   94.666645][ T5754] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.869639][ T5909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.894885][ T5905] loop3: detected capacity change from 0 to 8192
[   94.901687][ T5754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.929615][ T5754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.954112][ T5754] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   94.963164][ T5905] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   94.980873][ T5905] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   94.990811][ T5905] REISERFS (device loop3): using ordered data mode
[   94.997583][ T5905] reiserfs: using flush barriers
[   95.005980][ T5905] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   95.024632][ T5905] REISERFS (device loop3): checking transaction log (loop3)
[   95.032777][ T5754] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   95.032831][ T5754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.073680][ T5905] REISERFS (device loop3): Using r5 hash to sort names
[   95.084067][ T5905] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   95.144347][ T5754] usb 2-1: config 0 descriptor??
[   95.654396][ T5754] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[   95.692483][ T5754] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   95.783300][ T5754] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   96.092891][ T5934] loop2: detected capacity change from 0 to 4096
[   96.134005][ T5934] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[   96.286560][ T1144] usb 2-1: USB disconnect, device number 2
[   96.991425][ T5938] loop0: detected capacity change from 0 to 40427
[   97.051539][ T5938] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   97.089194][ T5938] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   97.120347][ T5938] F2FS-fs (loop0): invalid crc value
[   97.506181][ T5938] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   97.513582][ T5938] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   97.656831][   T28] audit: type=1800 audit(1775932123.609:5): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name="file1" dev="loop0" ino=10 res=0 errno=0
[   97.785222][ T5765] syz-executor: attempt to access beyond end of device
[   97.785222][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   97.829739][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   97.848811][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   97.893121][ T5806] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.959476][ T5960] loop3: detected capacity change from 0 to 32768
[   98.026939][ T5960] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.076355][ T5806] usb 2-1: Using ep0 maxpacket: 8
[   98.102100][ T5806] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   98.118905][ T5806] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   98.129120][ T5806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   98.139589][ T5806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   98.150738][ T5806] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.174246][ T5806] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   98.200360][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.240775][ T5982] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   98.255931][ T5960] XFS (loop3): Ending clean mount
[   98.453059][ T5806] usb 2-1: usb_control_msg returned -32
[   98.459644][ T5806] usbtmc 2-1:16.0: can't read capabilities
[   98.493097][ T5960] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[   98.669479][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.964008][ T5989] loop0: detected capacity change from 0 to 4096
[   99.057899][ T5984] loop2: detected capacity change from 0 to 32768
[   99.081148][ T5984] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.55 (5984)
[   99.114362][ T5990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.147233][ T5984] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   99.201440][ T5984] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   99.253037][ T5984] BTRFS info (device loop2): using free space tree
[   99.420520][ T5984] BTRFS info (device loop2): enabling ssd optimizations
[   99.436369][ T5984] BTRFS info (device loop2): auto enabling async discard
[   99.526934][ T5806] usb 2-1: USB disconnect, device number 3
[   99.740956][ T5767] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  100.423411][ T6019] loop2: detected capacity change from 0 to 8192
[  100.491734][ T6019] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  100.517061][ T6019] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  100.531615][ T6019] REISERFS (device loop2): using ordered data mode
[  100.542322][ T6019] reiserfs: using flush barriers
[  100.559599][ T6019] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  100.592229][ T6019] REISERFS (device loop2): checking transaction log (loop2)
[  100.628846][ T6019] REISERFS (device loop2): Using r5 hash to sort names
[  100.666234][ T6029] loop0: detected capacity change from 0 to 512
[  100.686200][ T6019] REISERFS (device loop2): using 3.5.x disk format
[  100.693164][ T6019] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  100.715148][ T6029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.766086][ T6029] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.836899][ T6029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  100.845017][ T6029] System zones: 1-12
[  100.925136][ T6019] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2
[  100.943067][ T6029] EXT4-fs (loop0): 1 truncate cleaned up
[  100.950296][ T6029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.961474][ T6019] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  100.974999][ T6019] REISERFS (device loop2): Remounting filesystem read-only
[  100.982417][ T6019] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  101.066166][ T5806] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.303923][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.329246][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.338401][ T5806] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  101.358939][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.397887][ T5806] usb 2-1: config 0 descriptor??
[  101.474364][ T6040] loop2: detected capacity change from 0 to 512
[  101.525116][ T6040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  101.565439][ T6040] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  101.588334][ T6040] EXT4-fs (loop2): 1 truncate cleaned up
[  101.600309][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.654196][ T5806] usbhid 2-1:0.0: can't add hid device: -71
[  101.674932][ T5806] usbhid: probe of 2-1:0.0 failed with error -71
[  101.753182][ T5806] usb 2-1: USB disconnect, device number 4
[  101.779651][ T6035] loop3: detected capacity change from 0 to 32768
[  101.841093][ T6035] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  101.881346][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.922757][ T6035] XFS (loop3): Ending clean mount
[  102.133450][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.283475][ T6042] loop0: detected capacity change from 0 to 32768
[  102.301941][ T6042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.69 (6042)
[  102.346214][ T5806] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.374161][ T6042] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.405096][ T6042] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  102.423203][ T6042] BTRFS info (device loop0): force clearing of disk cache
[  102.436343][ T6042] BTRFS info (device loop0): metadata ratio 0
[  102.448213][ T6042] BTRFS info (device loop0): enabling ssd optimizations
[  102.468603][ T6042] BTRFS info (device loop0): using spread ssd allocation scheme
[  102.486349][ T6042] BTRFS info (device loop0): using free space tree
[  102.544175][ T6066] loop3: detected capacity change from 0 to 8
[  102.576162][ T5806] usb 2-1: Using ep0 maxpacket: 32
[  102.636400][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.680542][ T6042] BTRFS info (device loop0): auto enabling async discard
[  102.696728][ T5806] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  102.741270][ T6042] BTRFS info (device loop0): rebuilding free space tree
[  102.758717][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.797507][ T5806] usb 2-1: config 0 descriptor??
[  102.823071][ T5806] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  102.866469][ T5806] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  102.929525][ T6066] SQUASHFS error: xz decompression failed, data probably corrupt
[  102.943024][ T6066] SQUASHFS error: Failed to read block 0xa8: -5
[  103.028835][ T6066] SQUASHFS error: xz decompression failed, data probably corrupt
[  103.062435][ T6066] SQUASHFS error: Failed to read block 0xa8: -5
[  103.086992][   T28] audit: type=1800 audit(1775932129.039:6): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.73" name="file0" dev="overlay" ino=3 res=0 errno=0
[  103.283102][ T5766] SQUASHFS error: Unable to read directory block [247:26]
[  103.305390][ T5766] SQUASHFS error: Unable to read directory block [247:26]
[  103.407042][    T9] usb 2-1: USB disconnect, device number 5
[  103.429160][ T5765] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.467506][    T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  103.942346][ T6087] loop3: detected capacity change from 0 to 32768
[  104.739275][ T6098] loop2: detected capacity change from 0 to 32768
[  104.764867][ T6098] (syz.2.81,6098,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  104.790482][ T6098] (syz.2.81,6098,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  104.828682][ T6098] JBD2: Ignoring recovery information on journal
[  104.904057][ T6098] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  104.949564][ T6111] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  105.708577][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  105.727327][ T5767] ocfs2: Unmounting device (7,2) on (node local)
[  105.907964][    T9] usb 4-1: Using ep0 maxpacket: 8
[  105.936603][    T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  105.952447][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.980007][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  106.004181][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  106.024773][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.045326][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  106.104390][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.366200][    T9] usb 4-1: usb_control_msg returned -32
[  106.371863][    T9] usbtmc 4-1:16.0: can't read capabilities
[  106.500443][ T6145] lo speed is unknown, defaulting to 1000
[  106.520798][ T6145] lo speed is unknown, defaulting to 1000
[  106.531798][ T6145] lo speed is unknown, defaulting to 1000
[  106.552885][ T6145] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  106.590252][ T6145] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  106.665823][ T6145] lo speed is unknown, defaulting to 1000
[  106.695606][ T6145] lo speed is unknown, defaulting to 1000
[  106.713539][ T6145] lo speed is unknown, defaulting to 1000
[  106.722212][ T6145] lo speed is unknown, defaulting to 1000
[  108.263673][ T6139] loop1: detected capacity change from 0 to 131072
[  108.287298][ T6139] F2FS-fs (loop1): invalid crc value
[  108.319148][ T6139] F2FS-fs (loop1): Found nat_bits in checkpoint
[  108.386107][ T6139] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  108.493932][ T5754] usb 4-1: USB disconnect, device number 2
[  109.357544][ T1144] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  109.546182][ T1144] usb 4-1: Using ep0 maxpacket: 8
[  109.553477][ T1144] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  109.575781][ T1144] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  109.595910][ T1144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  109.612794][ T1144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  109.622923][ T1144] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.644431][ T1144] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  109.655701][ T1144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.896214][ T1144] usb 4-1: usb_control_msg returned -32
[  109.917538][ T1144] usbtmc 4-1:16.0: can't read capabilities
[  110.060755][ T6212] siw: device registration error -23
[  110.972073][ T5806] usb 4-1: USB disconnect, device number 3
[  111.226135][ T1144] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  111.406135][ T1144] usb 1-1: Using ep0 maxpacket: 8
[  111.418825][ T1144] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  111.436678][ T1144] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  111.446715][ T1144] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  111.456569][ T1144] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  111.467045][ T1144] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.485379][ T1144] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  111.502001][ T1144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.738673][ T1144] usb 1-1: usb_control_msg returned -32
[  111.754553][ T1144] usbtmc 1-1:16.0: can't read capabilities
[  112.071049][ T6248] loop1: detected capacity change from 0 to 32768
[  112.091512][ T6248] (syz.1.133,6248,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  112.105363][ T6248] (syz.1.133,6248,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  112.151878][ T6248] JBD2: Ignoring recovery information on journal
[  112.220726][ T6248] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  112.594360][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[  113.427065][ T6269] loop1: detected capacity change from 0 to 32768
[  113.565079][   T28] audit: type=1800 audit(1775932139.509:7): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.141" name=DC dev="loop1" ino=8 res=0 errno=0
[  114.034757][ T1144] usb 1-1: USB disconnect, device number 2
[  114.153814][ T6293] loop0: detected capacity change from 0 to 64
[  114.389128][ T6296] loop2: detected capacity change from 0 to 512
[  114.478827][ T6296] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  114.596582][ T6296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  114.665801][ T6296] System zones: 1-12
[  114.688451][ T6296] EXT4-fs (loop2): orphan cleanup on readonly fs
[  114.729674][ T6296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.150: bg 0: block 361: padding at end of block bitmap is not set
[  114.812562][ T6296] EXT4-fs (loop2): Remounting filesystem read-only
[  114.822681][ T6299] capability: warning: `syz.0.151' uses 32-bit capabilities (legacy support in use)
[  114.846606][ T6296] EXT4-fs (loop2): 1 truncate cleaned up
[  114.855836][ T6299] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  114.881712][ T6296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  114.912448][ T6299] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  115.116005][    C1] sched: RT throttling activated
[  115.137756][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  115.180884][ T6284] loop3: detected capacity change from 0 to 32768
[  115.242306][ T6284] (syz.3.145,6284,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  115.312081][ T6284] (syz.3.145,6284,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  115.395541][ T6284] JBD2: Ignoring recovery information on journal
[  115.543060][ T6284] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  116.334114][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.343814][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.353004][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.362189][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.371356][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.380567][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.389752][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.398943][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.408096][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.417252][ T6310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  116.636892][ T6291] loop1: detected capacity change from 0 to 262144
[  116.647899][ T6291] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.148 (6291)
[  116.681962][ T6291] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  116.692316][ T6291] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  116.701654][ T6291] BTRFS info (device loop1): using free space tree
[  116.788891][ T6291] BTRFS info (device loop1): enabling ssd optimizations
[  116.796034][ T6291] BTRFS info (device loop1): auto enabling async discard
[  117.079332][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  117.162508][ T5764] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  117.186104][ T5770] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  117.380949][ T5770] usb 3-1: Using ep0 maxpacket: 8
[  117.398887][ T5770] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  117.425378][ T5770] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  117.476194][ T5770] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  117.507691][ T5770] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  117.540317][ T5770] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.597133][ T5770] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  117.611167][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.642670][ T6339] input: syz0 as /devices/virtual/input/input6
[  117.683387][ T6340] binder: 6338:6340 ioctl c0306201 200000000080 returned -14
[  117.729980][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  117.853194][ T5770] usb 3-1: usb_control_msg returned -32
[  117.873083][ T5770] usbtmc 3-1:16.0: can't read capabilities
[  117.942420][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[  117.957046][    T8] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  117.989917][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.998684][    T8] usb 2-1: Product: syz
[  118.003026][    T8] usb 2-1: Manufacturer: syz
[  118.011294][    T8] usb 2-1: SerialNumber: syz
[  118.171019][ T6348] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[  118.868304][ T6352] loop3: detected capacity change from 0 to 32768
[  118.881965][ T6352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.167 (6352)
[  118.953850][ T6352] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.978496][ T6352] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  119.013486][ T6352] BTRFS info (device loop3): force clearing of disk cache
[  119.033659][ T6352] BTRFS info (device loop3): metadata ratio 0
[  119.055750][ T6352] BTRFS info (device loop3): enabling ssd optimizations
[  119.066340][ T6352] BTRFS info (device loop3): using spread ssd allocation scheme
[  119.084354][ T6352] BTRFS info (device loop3): using free space tree
[  119.184761][ T6352] BTRFS info (device loop3): auto enabling async discard
[  119.203041][ T6352] BTRFS info (device loop3): rebuilding free space tree
[  119.256241][    T8] usb 2-1: 1:1: cannot get freq at ep 0x1
[  119.408183][    T8] usb 2-1: USB disconnect, device number 6
[  119.567725][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.650227][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.977741][ T5806] usb 3-1: USB disconnect, device number 2
[  120.043809][ T6383] loop1: detected capacity change from 0 to 4096
[  120.123932][ T6384] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.419619][ T6391] loop0: detected capacity change from 0 to 8
[  120.656404][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  120.667687][ T6391] SQUASHFS error: xz decompression failed, data probably corrupt
[  120.687808][ T6391] SQUASHFS error: Failed to read block 0xa8: -5
[  120.745801][ T6391] SQUASHFS error: xz decompression failed, data probably corrupt
[  120.763320][ T6391] SQUASHFS error: Failed to read block 0xa8: -5
[  120.790810][   T28] audit: type=1800 audit(1775932402.739:8): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.173" name="file0" dev="overlay" ino=3 res=0 errno=0
[  120.921140][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.934809][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.955029][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  120.977188][    T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  120.994277][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.031091][    T8] usb 4-1: config 0 descriptor??
[  121.085181][ T6386] loop2: detected capacity change from 0 to 32768
[  121.181145][ T6386] JBD2: Ignoring recovery information on journal
[  121.388915][ T6386] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  121.488535][    T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[  121.509364][    T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  121.553635][    T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  121.631339][ T5765] SQUASHFS error: Unable to read directory block [247:26]
[  121.663052][ T5765] SQUASHFS error: Unable to read directory block [247:26]
[  121.949544][ T5767] ocfs2: Unmounting device (7,2) on (node local)
[  122.048558][ T5754] usb 4-1: USB disconnect, device number 4
[  122.307189][ T6406] loop0: detected capacity change from 0 to 32768
[  122.884091][ T6411] loop2: detected capacity change from 0 to 8
[  123.092028][ T6411] SQUASHFS error: xz decompression failed, data probably corrupt
[  123.101017][ T6411] SQUASHFS error: Failed to read block 0xa8: -5
[  123.134644][ T6411] SQUASHFS error: xz decompression failed, data probably corrupt
[  123.163900][ T6411] SQUASHFS error: Failed to read block 0xa8: -5
[  123.176320][   T28] audit: type=1800 audit(1775932405.129:9): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.185" name="file0" dev="overlay" ino=3 res=0 errno=0
[  123.333097][ T5767] SQUASHFS error: Unable to read directory block [247:26]
[  123.347674][ T5767] SQUASHFS error: Unable to read directory block [247:26]
[  123.545300][ T6412] loop3: detected capacity change from 0 to 32768
[  123.604638][ T6412] JBD2: Ignoring recovery information on journal
[  123.734563][ T6412] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  124.332128][ T6418] loop1: detected capacity change from 0 to 32768
[  124.380480][ T6418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.179 (6418)
[  124.425882][ T6418] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.445372][ T6418] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  124.459617][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  124.493458][ T6418] BTRFS info (device loop1): force clearing of disk cache
[  124.536190][ T6418] BTRFS info (device loop1): metadata ratio 0
[  124.542347][ T6418] BTRFS info (device loop1): enabling ssd optimizations
[  124.570193][ T6418] BTRFS info (device loop1): using spread ssd allocation scheme
[  124.596914][ T6418] BTRFS info (device loop1): using free space tree
[  124.766306][ T6418] BTRFS info (device loop1): auto enabling async discard
[  124.811303][ T6418] BTRFS info (device loop1): rebuilding free space tree
[  124.932269][ T6427] loop0: detected capacity change from 0 to 32768
[  124.995333][ T6427] (syz.0.177,6427,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  125.041111][ T6427] (syz.0.177,6427,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  125.124782][ T6427] JBD2: Ignoring recovery information on journal
[  125.321398][ T6427] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  125.361378][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.590030][ T6453] loop2: detected capacity change from 0 to 4096
[  125.769353][ T6457] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.900472][ T6459] loop3: detected capacity change from 0 to 128
[  125.939319][ T6459] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  126.071735][   T28] audit: type=1800 audit(1775932408.019:10): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.187" name="bus" dev="loop3" ino=115 res=0 errno=0
[  126.207657][ T6464] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  126.384280][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  126.758227][   T28] audit: type=1800 audit(1775932408.699:11): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.187" name="file1" dev="loop3" ino=94 res=0 errno=0
[  126.838887][ T6474] trusted_key: syz.0.189 sent an empty control message without MSG_MORE.
[  128.195217][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'.
[  128.228411][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.342607][ T6482] loop0: detected capacity change from 0 to 32768
[  128.347971][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.394847][ T6482] JBD2: Ignoring recovery information on journal
[  128.428201][ T6482] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  128.630644][ T6496] loop3: detected capacity change from 0 to 4096
[  128.700361][ T6501] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.863348][ T6482] syz.0.192 (6482) used greatest stack depth: 18120 bytes left
[  128.974661][ T6507] loop1: detected capacity change from 0 to 512
[  129.001337][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  129.088789][ T6507] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.202: inode has both inline data and extents flags
[  129.205749][ T6507] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.202: couldn't read orphan inode 15 (err -117)
[  129.254927][ T6507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.510233][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.000647][  T968] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.190752][  T968] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  130.210214][  T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.239624][  T968] usb 2-1: config 0 descriptor??
[  130.246353][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  130.267100][  T968] cp210x 2-1:0.0: cp210x converter detected
[  130.366919][ T6531] loop2: detected capacity change from 0 to 32768
[  130.397346][ T6531] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  130.416285][ T6531] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.484979][ T6535] loop0: detected capacity change from 0 to 32768
[  130.499875][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.519881][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.530390][    T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  130.572183][ T6531] XFS (loop2): Ending clean mount
[  130.577469][ T6535] JBD2: Ignoring recovery information on journal
[  130.584310][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.614929][    T9] usb 4-1: config 0 descriptor??
[  130.656623][  T968] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  130.697477][  T968] usb 2-1: cp210x converter now attached to ttyUSB0
[  130.740060][ T6535] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  130.901533][  T968] usb 2-1: USB disconnect, device number 7
[  130.918678][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.934511][  T968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  131.038407][  T968] cp210x 2-1:0.0: device disconnected
[  131.088307][    T9] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  131.152144][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input8
[  131.359995][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  131.394709][    T9] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  131.475005][    T9] usb 4-1: USB disconnect, device number 5
[  131.519197][ T6549] loop2: detected capacity change from 0 to 4096
[  131.614472][ T6551] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.684902][ T6550] fido_id[6550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  131.862918][ T6553] lo speed is unknown, defaulting to 1000
[  132.174536][ T6564] loop2: detected capacity change from 0 to 512
[  132.262375][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.281793][ T6568] loop1: detected capacity change from 0 to 16
[  132.413640][ T6568] erofs: (device loop1): mounted with root inode @ nid 36.
[  132.481720][ T6573] loop3: detected capacity change from 0 to 256
[  132.529408][   T51] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000]
[  132.557836][ T6568] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[  132.589318][ T6573] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.646514][ T6573] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  132.703691][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.754245][ T6573] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  132.767950][ T6575] capability: warning: `syz.0.223' uses deprecated v2 capabilities in a way that may be insecure
[  133.002028][ T6581] ip6gre1: entered promiscuous mode
[  133.022475][ T6581] ip6gre1: entered allmulticast mode
[  133.046726][ T6578] loop1: detected capacity change from 0 to 4096
[  133.048194][ T6581] net_ratelimit: 3319 callbacks suppressed
[  133.048242][ T6581] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  133.070482][ T6581] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  133.083134][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  133.090074][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  133.139420][ T3460] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  133.157870][ T3460] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  133.170441][    T9] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  133.296160][ T6581] syz.0.226 (6581) used greatest stack depth: 17800 bytes left
[  133.338615][    T9] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  133.434738][  T968] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  133.970354][ T6579] loop2: detected capacity change from 0 to 32768
[  134.014778][ T6579] JBD2: Ignoring recovery information on journal
[  134.079370][ T6579] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  134.126398][ T5770] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  134.321471][ T6590] loop0: detected capacity change from 0 to 32768
[  134.346596][ T6590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.229 (6590)
[  134.374441][ T5770] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  134.389356][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.406719][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.424140][ T6590] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.434986][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.458672][ T6590] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  134.469190][ T6590] BTRFS info (device loop0): setting nodatasum
[  134.475872][ T6590] BTRFS info (device loop0): force zlib compression, level 3
[  134.486348][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.495292][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.511077][ T6590] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  134.521087][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.528449][ T6590] BTRFS info (device loop0): use lzo compression, level 0
[  134.535916][ T6590] BTRFS info (device loop0): turning on flush-on-commit
[  134.543861][ T6590] BTRFS info (device loop0): enabling auto defrag
[  134.551006][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.561030][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.582074][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.589959][ T6590] BTRFS info (device loop0): max_inline at 4096
[  134.600938][ T6590] BTRFS info (device loop0): using free space tree
[  134.608940][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.619017][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.633666][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.644154][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.653721][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.696393][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.704929][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.720137][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.731759][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.740439][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.773274][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.795786][ T6596] loop1: detected capacity change from 0 to 32768
[  134.835924][ T6596] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.879953][ T6590] BTRFS info (device loop0): enabling ssd optimizations
[  134.888924][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.913267][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  134.922983][ T6596] XFS (loop1): Ending clean mount
[  134.947140][ T5770] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  134.989247][ T5767] ocfs2: Unmounting device (7,2) on (node local)
[  134.996311][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0
[  135.038903][ T5770] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  135.048501][ T5770] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  135.076126][ T5770] usb 4-1: Product: syz
[  135.080368][ T5770] usb 4-1: Manufacturer: syz
[  135.085005][ T5770] usb 4-1: SerialNumber: syz
[  135.166372][ T5770] usb 4-1: config 0 descriptor??
[  135.190983][ T5770] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  135.388704][ T5765] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.412066][ T5764] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  135.505234][    C1] usb 4-1: yurex_control_callback - control failed: -71
[  135.514164][ T1144] usb 4-1: USB disconnect, device number 6
[  135.531245][ T1144] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  135.674477][ T6628] syz.2.234 uses obsolete (PF_INET,SOCK_PACKET)
[  135.725355][ T5759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5759)
[  136.003217][ T6633] loop1: detected capacity change from 0 to 512
[  136.044927][ T6633] EXT4-fs: Ignoring removed oldalloc option
[  136.095929][ T6633] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.236: invalid indirect mapped block 4294967295 (level 1)
[  136.157976][ T6633] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.236: invalid indirect mapped block 4294967295 (level 1)
[  136.199374][ T6633] EXT4-fs (loop1): 2 truncates cleaned up
[  136.243925][ T6633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.481177][ T6644] input: syz0 as /devices/virtual/input/input9
[  136.509330][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.917042][    C0] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  136.990068][ T6647] loop3: detected capacity change from 0 to 32768
[  137.006334][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  137.037106][ T6647] JBD2: Ignoring recovery information on journal
[  137.077448][ T5754] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  137.092290][ T6647] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  137.211354][    T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  137.229322][    T9] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  137.244480][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.256351][    T9] usb 2-1: Product: syz
[  137.262892][    T9] usb 2-1: Manufacturer: syz
[  137.271163][    T9] usb 2-1: SerialNumber: syz
[  137.291679][ T5754] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  137.292373][    T9] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  137.301474][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.328965][ T5754] usb 1-1: Product: syz
[  137.333205][ T5754] usb 1-1: Manufacturer: syz
[  137.340445][ T5754] usb 1-1: SerialNumber: syz
[  137.348125][ T5754] usb 1-1: config 0 descriptor??
[  137.565167][ T5754] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  137.666459][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  137.725155][    T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  137.761177][    T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  137.778408][    T9] usb 2-1: media controller created
[  137.843983][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.123241][    T9] usb 2-1: USB disconnect, device number 8
[  138.151432][ T6661] loop3: detected capacity change from 0 to 512
[  138.173373][ T6661] EXT4-fs: Ignoring removed i_version option
[  138.193529][ T5754] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32
[  138.214738][ T5754] usb 1-1: USB disconnect, device number 3
[  138.238395][ T6661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.358920][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.860305][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  139.065053][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  139.078220][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.088710][    T9] usb 4-1: Product: syz
[  139.092967][    T9] usb 4-1: Manufacturer: syz
[  139.097921][    T9] usb 4-1: SerialNumber: syz
[  139.236403][ T6680] loop1: detected capacity change from 0 to 32768
[  139.262970][ T6680] JBD2: Ignoring recovery information on journal
[  139.276406][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  139.318647][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  139.336302][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  139.387696][ T6680] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  139.476327][    T8] usb 1-1: Using ep0 maxpacket: 16
[  139.484435][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.511386][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.533908][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  139.587041][    T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  139.607446][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.624155][    T8] usb 1-1: config 0 descriptor??
[  139.918491][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[  139.970955][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71
[  140.005189][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  140.029079][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  140.058000][    T8] HID 045e:07da: Invalid code 65791 type 1
[  140.076723][    T8] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input10
[  140.105009][    T9] lan78xx: probe of 4-1:1.0 failed with error -71
[  140.118192][    T8] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  140.175582][    T9] usb 4-1: USB disconnect, device number 7
[  140.331302][    T8] usb 1-1: USB disconnect, device number 4
[  141.015899][ T6708] loop2: detected capacity change from 0 to 4096
[  141.054335][ T6708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.100397][ T6711] loop0: detected capacity change from 0 to 256
[  141.255490][ T6715] loop1: detected capacity change from 0 to 128
[  141.279548][ T6715] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  141.304861][ T6711] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.334817][ T6715] hpfs: filesystem error: improperly stopped
[  141.361207][ T6715] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  141.380481][ T6715] hpfs: You really don't want any checks? You are crazy...
[  141.407663][ T6711] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200)
[  141.420961][ T6715] hpfs: Code page index out of array
[  141.436608][ T6715] hpfs: code page support is disabled
[  141.449281][ T6711] FAT-fs (loop0): Filesystem has been set read-only
[  141.465541][ T6715] hpfs: hpfs_map_4sectors(): unaligned read
[  141.484060][ T6715] hpfs: hpfs_map_4sectors(): unaligned read
[  141.500745][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.515834][ T6715] hpfs: filesystem error: unable to find root dir
[  142.243786][ T6726] team0: entered allmulticast mode
[  142.266215][ T6726] team_slave_0: entered allmulticast mode
[  142.272985][ T6726] team_slave_1: entered allmulticast mode
[  142.286818][ T6726] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  142.808172][ T5770] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  142.980667][ T6724] loop2: detected capacity change from 0 to 40427
[  143.006237][ T5770] usb 1-1: Using ep0 maxpacket: 8
[  143.022744][ T6724] F2FS-fs (loop2): invalid crc value
[  143.033451][ T5770] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  143.054313][ T5770] usb 1-1: config 179 has no interface number 0
[  143.065923][ T6724] F2FS-fs (loop2): Found nat_bits in checkpoint
[  143.095604][ T5770] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  143.136114][ T5770] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  143.164000][ T6720] loop1: detected capacity change from 0 to 32768
[  143.197875][ T5770] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  143.227507][ T6720] JBD2: Ignoring recovery information on journal
[  143.236633][ T5770] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  143.319248][ T5770] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  143.357860][ T6724] F2FS-fs (loop2): Start checkpoint disabled!
[  143.372174][ T6720] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  143.397244][ T5770] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  143.409824][ T6724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  143.460850][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.517020][ T6724] F2FS-fs (loop2): disabling checkpoint not compatible with read-only
[  143.537112][ T6728] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  143.928736][ T5754] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11
[  144.117807][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.169457][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.263590][ T5754] usb 1-1: USB disconnect, device number 5
[  144.269600][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  144.269635][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  144.305804][ T5754] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  144.307351][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[  144.596912][    C0] icmp: detected local route for 172.20.20.17 during ICMP sending, src 0.187.0.0
[  144.980933][ T6738] loop1: detected capacity change from 0 to 1024
[  145.150772][   T12] hfsplus: b-tree write err: -5, ino 3
[  145.255757][ T6738] hfsplus: b-tree write err: -5, ino 3
[  145.285810][ T6738] hfsplus: request for non-existent node 33554434 in B*Tree
[  145.300749][ T6738] hfsplus: request for non-existent node 33554434 in B*Tree
[  145.576086][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  145.584263][ T1140] hfsplus: request for non-existent node 33554434 in B*Tree
[  145.609459][ T1140] hfsplus: request for non-existent node 33554434 in B*Tree
[  145.630055][ T1140] hfsplus: b-tree write err: -5, ino 3
[  145.767835][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.803401][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.820885][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.838848][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.853465][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.913583][    T9] usb 3-1: config 0 descriptor??
[  146.383719][    T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  146.465816][    T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  147.298336][ T6758] loop0: detected capacity change from 0 to 32768
[  147.340375][ T6758] JBD2: Ignoring recovery information on journal
[  147.460233][ T6758] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  147.698788][    C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1
[  148.166875][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  148.641924][    T8] Process accounting resumed
[  148.683554][ T6778] loop3: detected capacity change from 0 to 256
[  148.728685][ T6776] Process accounting resumed
[  148.886894][    T9] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[  148.917923][    T9] usb 3-1: device reset changed ep0 maxpacket size!
[  148.953136][ T6782] netlink: 27 bytes leftover after parsing attributes in process `syz.1.290'.
[  148.963385][  T968] usb 3-1: USB disconnect, device number 3
[  149.146834][  T968] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  149.336220][  T968] usb 3-1: Using ep0 maxpacket: 32
[  149.347460][  T968] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  149.370620][  T968] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  149.380104][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  149.397649][  T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.425113][  T968] usb 3-1: config 0 descriptor??
[  149.457970][  T968] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  149.577954][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.604620][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.627642][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  149.660942][    T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  149.681235][ T5770] usb 3-1: USB disconnect, device number 4
[  149.685814][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.726920][    T8] usb 4-1: config 0 descriptor??
[  149.816702][ T6792] loop0: detected capacity change from 0 to 32768
[  149.863394][ T6792] JBD2: Ignoring recovery information on journal
[  150.010750][ T6792] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  150.023881][ T6794] loop1: detected capacity change from 0 to 40427
[  150.044914][ T6794] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  150.052706][ T6794] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  150.065674][ T6794] F2FS-fs (loop1): invalid crc value
[  150.113691][ T6794] F2FS-fs (loop1): Found nat_bits in checkpoint
[  150.188780][    T8] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  150.225078][ T6794] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  150.234847][ T6794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  150.243945][    T8] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  150.517916][ T5764] syz-executor: attempt to access beyond end of device
[  150.517916][ T5764] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.547110][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  150.703189][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  151.705530][ T6813] loop1: detected capacity change from 0 to 32768
[  151.775075][ T6813] JBD2: Ignoring recovery information on journal
[  151.911398][ T6813] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  152.222361][ T6811] loop0: detected capacity change from 0 to 40427
[  152.240988][ T6811] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  152.249971][ T6811] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  152.281852][ T6811] F2FS-fs (loop0): invalid crc value
[  152.318463][ T6811] F2FS-fs (loop0): Found nat_bits in checkpoint
[  152.350472][    T8] usb 4-1: USB disconnect, device number 8
[  152.458881][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[  152.512065][ T6811] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  152.537328][ T6811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.613425][ T6840] lo speed is unknown, defaulting to 1000
[  153.010306][ T6845] loop2: detected capacity change from 0 to 4096
[  153.067546][ T6845] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  153.198584][ T6845] ntfs3: loop2: Inode r=19 is not in use!
[  153.211935][ T6845] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  153.241545][ T6845] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  153.607138][ T5754] kernel read not supported for file /input/event3 (pid: 5754 comm: kworker/1:3)
[  154.332141][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'.
[  154.417525][ T6878] input: syz1 as /devices/virtual/input/input12
[  154.543427][ T6881] loop2: detected capacity change from 0 to 2048
[  154.604671][ T6881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.681024][ T6876] hsr_slave_1 (unregistering): left promiscuous mode
[  154.699659][ T6884] loop0: detected capacity change from 0 to 764
[  155.370366][ T6906] input: syz0 as /devices/virtual/input/input13
[  155.501574][ T6908] loop8: detected capacity change from 0 to 7
[  155.526081][ T6908]  loop8: [POWERTEC] p1 p2
[  155.541351][ T6908] loop8: p1 start 808464416 is beyond EOD, truncated
[  155.586213][ T6908] loop8: p2 start 926167352 is beyond EOD, truncated
[  155.705119][ T6913] loop1: detected capacity change from 0 to 1024
[  155.998489][ T6913] EXT4-fs: Ignoring removed i_version option
[  156.004617][ T6913] EXT4-fs: inline encryption not supported
[  156.028044][ T6913] EXT4-fs (loop1): Test dummy encryption mode enabled
[  156.079613][ T6913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.103117][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  156.308308][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.320794][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.331278][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  156.344642][    T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  156.355493][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.388068][    T8] usb 4-1: config 0 descriptor??
[  156.595707][ T6941] loop0: detected capacity change from 0 to 512
[  156.625251][ T6941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  156.643882][ T6941] EXT4-fs (loop0): 1 truncate cleaned up
[  156.651665][ T6941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.686518][ T6913] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  156.818987][    T8] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  156.851811][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.872519][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.893335][    T8] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  157.098514][    T8] usb 4-1: USB disconnect, device number 9
[  157.125428][ T6947] fido_id[6947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:047F:FFFF.0007/report_descriptor': No such device
[  157.632256][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[  157.747258][ T6974] netlink: 104 bytes leftover after parsing attributes in process `syz.3.358'.
[  158.169280][ T6989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.304929][ T6984] loop1: detected capacity change from 0 to 8192
[  158.343284][ T6992] loop2: detected capacity change from 0 to 4096
[  158.352582][ T6984] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  158.416470][ T6984] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  158.433876][ T6984] REISERFS (device loop1): using ordered data mode
[  158.454595][ T6984] reiserfs: using flush barriers
[  158.507156][ T6984] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  158.575065][ T6984] REISERFS (device loop1): checking transaction log (loop1)
[  158.850345][ T6984] REISERFS (device loop1): Using tea hash to sort names
[  158.860609][ T6984] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  159.371852][ T7017] loop3: detected capacity change from 0 to 16
[  159.388987][ T7017] erofs: (device loop3): mounted with root inode @ nid 36.
[  159.438368][ T7017] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  160.062283][ T7041] loop3: detected capacity change from 0 to 128
[  160.176146][ T1144] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  160.396125][ T1144] usb 2-1: Using ep0 maxpacket: 32
[  160.412990][ T1144] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  160.437408][ T1144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.445476][ T1144] usb 2-1: Product: syz
[  160.471186][ T1144] usb 2-1: Manufacturer: syz
[  160.475871][ T1144] usb 2-1: SerialNumber: syz
[  160.497195][ T1144] usb 2-1: config 0 descriptor??
[  160.511726][ T1144] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  160.592765][ T7048] loop2: detected capacity change from 0 to 2048
[  160.608769][ T7039] loop0: detected capacity change from 0 to 32768
[  160.635057][ T7039] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  160.660760][ T7048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.802514][ T7048] loop2: detected capacity change from 2048 to 0
[  160.843299][ T7054] syz.2.391: attempt to access beyond end of device
[  160.843299][ T7054] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0
[  160.874756][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  160.896103][ T7054] EXT4-fs error (device loop2): __ext4_find_entry:1685: inode #2: comm syz.2.391: reading directory lblock 0
[  160.953985][ T7054] syz.2.391: attempt to access beyond end of device
[  160.953985][ T7054] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0
[  160.988249][ T7054] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  161.017372][ T7054] EXT4-fs (loop2): I/O error while writing superblock
[  161.128023][ T5767] syz-executor: attempt to access beyond end of device
[  161.128023][ T5767] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0
[  161.231591][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.266708][ T5767] syz-executor: attempt to access beyond end of device
[  161.266708][ T5767] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0
[  161.312936][ T5767] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  161.336057][ T5767] EXT4-fs (loop2): I/O error while writing superblock
[  161.356371][ T7049] kmmpd-loop2: attempt to access beyond end of device
[  161.356371][ T7049] loop2: rw=14337, sector=256, nr_sectors = 4 limit=0
[  161.397434][ T7049] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  161.733018][ T1144] gspca_ov534_9: reg_w failed -71
[  161.767101][ T7069] loop0: detected capacity change from 0 to 512
[  161.821580][ T7069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.877287][ T7069] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.988322][ T7069] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes
[  162.029278][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.130127][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.140734][ T1144] gspca_ov534_9: Unknown sensor 0000
[  162.140831][ T1144] ov534_9: probe of 2-1:0.0 failed with error -22
[  162.155771][ T1144] usb 2-1: USB disconnect, device number 9
[  162.261095][ T7076] loop3: detected capacity change from 0 to 2048
[  162.280616][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.344068][ T7076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.374904][ T7076] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  162.444353][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.465834][ T7080] loop1: detected capacity change from 0 to 1024
[  162.570377][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.627785][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.836430][ T7087] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.892657][   T28] audit: type=1800 audit(1775932444.839:12): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="file1" dev="loop3" ino=15 res=0 errno=0
[  163.297876][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  163.310441][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  163.319306][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  163.329218][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  163.337062][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  163.345606][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  163.984467][ T7093] lo speed is unknown, defaulting to 1000
[  164.665853][ T7093] chnl_net:caif_netlink_parms(): no params data found
[  165.044651][ T7141] xt_hashlimit: size too large, truncated to 1048576
[  165.147173][ T1144] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  165.313381][   T49] hsr_slave_0: left promiscuous mode
[  165.320044][   T49] hsr_slave_1: left promiscuous mode
[  165.336361][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.344104][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.358027][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.365857][ T1144] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  165.366681][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.396849][ T5780] Bluetooth: hci3: command tx timeout
[  165.410653][ T1144] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  165.431186][ T1144] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.441188][ T1144] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  165.454339][ T1144] usb 4-1: config 0 interface 0 has no altsetting 0
[  165.461302][ T1144] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  165.470618][ T1144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.471852][   T49] bridge_slave_1: left allmulticast mode
[  165.501350][ T1144] usb 4-1: config 0 descriptor??
[  165.510976][   T49] bridge_slave_1: left promiscuous mode
[  165.527748][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.561458][   T49] bridge_slave_0: left allmulticast mode
[  165.574141][   T49] bridge_slave_0: left promiscuous mode
[  165.586532][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.678082][   T49] veth1_macvtap: left promiscuous mode
[  165.686645][   T49] veth0_macvtap: left promiscuous mode
[  165.696189][   T49] veth1_vlan: left promiscuous mode
[  165.709094][   T49] veth0_vlan: left promiscuous mode
[  165.940045][ T1144] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0
[  165.966175][ T1144] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0
[  165.973044][ T1144] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0
[  165.986138][ T1144] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0
[  166.006099][ T1144] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0
[  166.046446][ T1144] ryos 0003:1E7D:3138.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0
[  166.166502][ T1144] usb 4-1: USB disconnect, device number 10
[  166.202542][ T7156] fido_id[7156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  166.981527][ T7158] set_capacity_and_notify: 2 callbacks suppressed
[  166.981541][ T7158] loop0: detected capacity change from 0 to 32768
[  167.020891][ T7158] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.068332][ T7158] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  167.084135][ T7158] BTRFS info (device loop0): turning off barriers
[  167.103451][ T7158] BTRFS info (device loop0): setting nodatasum
[  167.125209][ T7158] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  167.169810][ T7158] BTRFS info (device loop0): use zstd compression, level 3
[  167.202535][ T7158] BTRFS info (device loop0): using free space tree
[  167.486076][ T5780] Bluetooth: hci3: command tx timeout
[  167.526712][ T5754] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  167.662441][ T5765] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.766485][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.771499][   T49] team0 (unregistering): Port device team_slave_1 removed
[  167.806706][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.854141][ T5754] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  167.886018][ T5754] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  167.902174][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.953388][ T5754] usb 4-1: config 0 descriptor??
[  168.026982][   T49] team0 (unregistering): Port device team_slave_0 removed
[  168.247083][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.390779][ T5754] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  168.436527][ T5754] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  168.449610][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.203297][   T49] bond0 (unregistering): Released all slaves
[  169.381926][ T5806] lo speed is unknown, defaulting to 1000
[  169.538216][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.545775][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.553413][ T7093] bridge_slave_0: entered allmulticast mode
[  169.566191][ T5780] Bluetooth: hci3: command tx timeout
[  169.585735][ T7093] bridge_slave_0: entered promiscuous mode
[  169.613201][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.653770][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.706877][ T7093] bridge_slave_1: entered allmulticast mode
[  169.714442][ T7093] bridge_slave_1: entered promiscuous mode
[  169.855848][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.898527][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.988045][ T7093] team0: Port device team_slave_0 added
[  169.997112][ T7093] team0: Port device team_slave_1 added
[  170.069163][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.082631][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.116542][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.153846][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.170432][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.231800][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.420701][ T7093] hsr_slave_0: entered promiscuous mode
[  170.441962][ T7093] hsr_slave_1: entered promiscuous mode
[  170.454378][ T7093] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.473173][ T7093] Cannot create hsr debugfs directory
[  170.566429][  T968] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  170.570896][ T5754] usb 4-1: USB disconnect, device number 11
[  170.758570][  T968] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  170.779898][  T968] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  170.825822][  T968] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  170.864995][  T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.003968][ T7093] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  171.030022][ T7093] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  171.050702][ T7093] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  171.071950][ T7093] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  171.116592][  T968] usb 1-1: usb_control_msg returned -32
[  171.122254][  T968] usbtmc 1-1:16.0: can't read capabilities
[  171.322612][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.378352][ T7093] 8021q: adding VLAN 0 to HW filter on device team0
[  171.411009][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.418224][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.452610][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.459826][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.486619][ T7235] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32
[  171.498962][ T1144] usb 1-1: USB disconnect, device number 6
[  171.613259][ T7093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.636148][ T5780] Bluetooth: hci3: command tx timeout
[  172.203645][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.367674][   T28] audit: type=1326 audit(1775932454.309:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.3.438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f887559c819 code=0x0
[  172.974706][ T5806] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  173.155842][ T7093] veth0_vlan: entered promiscuous mode
[  173.179542][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.219016][ T7093] veth1_vlan: entered promiscuous mode
[  173.238833][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.269670][ T5806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  173.310110][ T5806] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.322662][ T7093] veth0_macvtap: entered promiscuous mode
[  173.343778][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.375068][ T7093] veth1_macvtap: entered promiscuous mode
[  173.393612][ T5806] usb 2-1: config 0 descriptor??
[  173.455834][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.504339][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.524642][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.549264][ T7293] loop0: detected capacity change from 0 to 128
[  173.555770][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.578735][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.604805][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.629705][ T7293] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  173.663781][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.696006][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.730790][ T7293] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  173.770109][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.803894][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.846169][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.858917][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  173.871522][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  173.894875][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  173.910979][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  173.920094][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.945692][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  173.965597][ T7093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.984051][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  173.992481][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  174.005272][ T7093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.021598][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  174.029584][ T7093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.040156][ T5806] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  174.047871][ T7093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.067041][ T5806] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  174.091445][ T5765] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  174.115250][ T5806] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  174.358739][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.371277][ T7307] loop0: detected capacity change from 0 to 256
[  174.394840][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.466063][ T7307] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  174.517245][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.537115][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.553540][   T28] audit: type=1800 audit(1775932456.499:14): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.446" name="file1" dev="loop0" ino=1048599 res=0 errno=0
[  174.764045][ T7290] loop3: detected capacity change from 0 to 32768
[  174.827362][ T7290] (syz.3.444,7290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  174.877333][ T7290] (syz.3.444,7290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  174.965301][ T7290] JBD2: Ignoring recovery information on journal
[  175.194081][ T7290] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  175.628191][ T5766] 
[  175.630588][ T5766] ======================================================
[  175.637638][ T5766] WARNING: possible circular locking dependency detected
[  175.644722][ T5766] syzkaller #0 Not tainted
[  175.649171][ T5766] ------------------------------------------------------
[  175.656212][ T5766] syz-executor/5766 is trying to acquire lock:
[  175.662394][ T5766] ffff88805d825f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_evict_inode+0x1d84/0x41e0
[  175.674924][ T5766] 
[  175.674924][ T5766] but task is already holding lock:
[  175.682332][ T5766] ffff88805d8242d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d24/0x41e0
[  175.694669][ T5766] 
[  175.694669][ T5766] which lock already depends on the new lock.
[  175.694669][ T5766] 
[  175.705098][ T5766] 
[  175.705098][ T5766] the existing dependency chain (in reverse order) is:
[  175.714265][ T5766] 
[  175.714265][ T5766] -> #3 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}:
[  175.724681][ T5766]        down_write+0x97/0x200
[  175.729490][ T5766]        ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  175.735864][ T5766]        ocfs2_dio_end_io+0x546/0x1200
[  175.741416][ T5766]        dio_complete+0x254/0x710
[  175.746486][ T5766]        __blockdev_direct_IO+0x2ea8/0x3500
[  175.752428][ T5766]        ocfs2_direct_IO+0x235/0x2a0
[  175.757749][ T5766]        generic_file_direct_write+0x1d4/0x3e0
[  175.763944][ T5766]        __generic_file_write_iter+0x11b/0x230
[  175.770150][ T5766]        ocfs2_file_write_iter+0x167a/0x1e80
[  175.776181][ T5766]        do_iter_write+0x738/0xc30
[  175.781347][ T5766]        iter_file_splice_write+0x6a3/0xcb0
[  175.787288][ T5766]        direct_splice_actor+0xe8/0x130
[  175.792880][ T5766]        splice_direct_to_actor+0x304/0x8c0
[  175.798824][ T5766]        do_splice_direct+0x1d5/0x2f0
[  175.804246][ T5766]        do_sendfile+0x5f2/0xef0
[  175.809231][ T5766]        __se_sys_sendfile64+0x145/0x1a0
[  175.814909][ T5766]        do_syscall_64+0x55/0xa0
[  175.819929][ T5766]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.826408][ T5766] 
[  175.826408][ T5766] -> #2 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  175.835312][ T5766]        down_write+0x97/0x200
[  175.840285][ T5766]        ocfs2_create_local_dquot+0x1a9/0x18f0
[  175.846485][ T5766]        ocfs2_acquire_dquot+0x7f1/0xb10
[  175.852166][ T5766]        dqget+0x77c/0xeb0
[  175.856621][ T5766]        __dquot_initialize+0x3c7/0xcd0
[  175.862219][ T5766]        ocfs2_get_init_inode+0x148/0x1c0
[  175.867985][ T5766]        ocfs2_mknod+0x867/0x2300
[  175.873045][ T5766]        ocfs2_mkdir+0x196/0x430
[  175.878018][ T5766]        vfs_mkdir+0x296/0x440
[  175.882849][ T5766]        do_mkdirat+0x1dc/0x450
[  175.887735][ T5766]        __x64_sys_mkdirat+0x89/0xa0
[  175.893141][ T5766]        do_syscall_64+0x55/0xa0
[  175.898131][ T5766]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.904586][ T5766] 
[  175.904586][ T5766] -> #1 (&dquot->dq_lock){+.+.}-{3:3}:
[  175.912299][ T5766]        __mutex_lock+0x136/0xcc0
[  175.917369][ T5766]        dqget+0x6fc/0xeb0
[  175.921835][ T5766]        __dquot_initialize+0x3c7/0xcd0
[  175.927427][ T5766]        ocfs2_get_init_inode+0x148/0x1c0
[  175.933211][ T5766]        ocfs2_mknod+0x867/0x2300
[  175.938288][ T5766]        ocfs2_mkdir+0x196/0x430
[  175.943268][ T5766]        vfs_mkdir+0x296/0x440
[  175.948073][ T5766]        do_mkdirat+0x1dc/0x450
[  175.952964][ T5766]        __x64_sys_mkdirat+0x89/0xa0
[  175.958286][ T5766]        do_syscall_64+0x55/0xa0
[  175.963261][ T5766]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.969718][ T5766] 
[  175.969718][ T5766] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}:
[  175.980308][ T5766]        __lock_acquire+0x2df1/0x7d40
[  175.985720][ T5766]        lock_acquire+0x19e/0x420
[  175.990791][ T5766]        down_write+0x97/0x200
[  175.995597][ T5766]        ocfs2_evict_inode+0x1d84/0x41e0
[  176.001277][ T5766]        evict+0x4ca/0x8d0
[  176.005733][ T5766]        vfs_rmdir+0x39b/0x4d0
[  176.010542][ T5766]        do_rmdir+0x29f/0x590
[  176.015256][ T5766]        __x64_sys_unlinkat+0xc4/0xe0
[  176.020665][ T5766]        do_syscall_64+0x55/0xa0
[  176.025640][ T5766]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.032105][ T5766] 
[  176.032105][ T5766] other info that might help us debug this:
[  176.032105][ T5766] 
[  176.042368][ T5766] Chain exists of:
[  176.042368][ T5766]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &ocfs2_quota_ip_alloc_sem_key --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]
[  176.042368][ T5766] 
[  176.062251][ T5766]  Possible unsafe locking scenario:
[  176.062251][ T5766] 
[  176.069693][ T1144] libceph: connect (1)[c::]:6789 error -101
[  176.070032][ T1144] libceph: mon0 (1)[c::]:6789 connect error
[  176.075629][ T5766]        CPU0                    CPU1
[  176.075636][ T5766]        ----                    ----
[  176.092326][ T5766]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]);
[  176.099475][ T5766]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  176.107672][ T5766]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]);
[  176.117356][ T5766]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  176.124690][ T5766] 
[  176.124690][ T5766]  *** DEADLOCK ***
[  176.124690][ T5766] 
[  176.132866][ T5766] 4 locks held by syz-executor/5766:
[  176.138186][ T5766]  #0: ffff88805ccf0418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  176.147500][ T5766]  #1: ffff88805da63498 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590
[  176.157679][ T5766]  #2: ffff88807f22cbd0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x107/0x270
[  176.168267][ T5766]  #3: ffff88805d8242d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d24/0x41e0
[  176.181041][ T5766] 
[  176.181041][ T5766] stack backtrace:
[  176.186985][ T5766] CPU: 0 PID: 5766 Comm: syz-executor Not tainted syzkaller #0
[  176.194576][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  176.204682][ T5766] Call Trace:
[  176.208009][ T5766]  <TASK>
[  176.210992][ T5766]  dump_stack_lvl+0x18c/0x250
[  176.215727][ T5766]  ? load_image+0x420/0x420
[  176.220281][ T5766]  ? show_regs_print_info+0x20/0x20
[  176.225541][ T5766]  ? print_circular_bug+0x12b/0x1a0
[  176.230791][ T5766]  check_noncircular+0x2fc/0x400
[  176.235784][ T5766]  ? print_deadlock_bug+0x5d0/0x5d0
[  176.241037][ T5766]  ? lockdep_lock+0xf5/0x230
[  176.245674][ T5766]  ? _find_first_zero_bit+0xd3/0x100
[  176.251026][ T5766]  __lock_acquire+0x2df1/0x7d40
[  176.255933][ T5766]  ? __lock_acquire+0x7d40/0x7d40
[  176.261010][ T5766]  ? verify_lock_unused+0x140/0x140
[  176.266256][ T5766]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  176.271935][ T5766]  ? do_raw_spin_lock+0x11f/0x2c0
[  176.277011][ T5766]  ? mutex_unlock+0x10/0x10
[  176.281582][ T5766]  lock_acquire+0x19e/0x420
[  176.286128][ T5766]  ? ocfs2_evict_inode+0x1d84/0x41e0
[  176.291466][ T5766]  ? ocfs2_get_system_file_inode+0x202/0x850
[  176.297491][ T5766]  ? __might_sleep+0xe0/0xe0
[  176.302127][ T5766]  ? read_lock_is_recursive+0x20/0x20
[  176.307549][ T5766]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  176.313747][ T5766]  ? ocfs2_evict_inode+0x165e/0x41e0
[  176.319085][ T5766]  down_write+0x97/0x200
[  176.323367][ T5766]  ? ocfs2_evict_inode+0x1d84/0x41e0
[  176.328699][ T5766]  ? down_read_killable+0x340/0x340
[  176.333947][ T5766]  ocfs2_evict_inode+0x1d84/0x41e0
[  176.339120][ T5766]  ? ocfs2_sync_blockdev+0x40/0x40
[  176.344297][ T5766]  ? is_bpf_text_address+0x28f/0x2a0
[  176.349719][ T5766]  ? is_bpf_text_address+0x26/0x2a0
[  176.354957][ T5766]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.361072][ T5766]  ? kernel_text_address+0xa0/0xd0
[  176.366229][ T5766]  ? __kernel_text_address+0xd/0x30
[  176.371474][ T5766]  ? unwind_get_return_address+0x91/0xc0
[  176.377153][ T5766]  ? stack_trace_save+0x100/0x100
[  176.382222][ T5766]  ? arch_stack_walk+0x160/0x190
[  176.387210][ T5766]  ? mark_lock+0x94/0x320
[  176.389398][ T1144] libceph: connect (1)[c::]:6789 error -101
[  176.391563][ T5766]  ? __lock_acquire+0x1347/0x7d40
[  176.401447][ T1144] libceph: mon0 (1)[c::]:6789 connect error
[  176.402507][ T5766]  ? print_deadlock_bug+0x5d0/0x5d0
[  176.402563][ T5766]  ? __lock_acquire+0x1347/0x7d40
[  176.418743][ T5766]  ? verify_lock_unused+0x140/0x140
[  176.424006][ T5766]  ? inode_wait_for_writeback+0x1e3/0x230
[  176.429658][ T7331] ceph: No mds server is up or the cluster is laggy
[  176.429756][ T5766]  ? __lock_acquire+0x7d40/0x7d40
[  176.441441][ T5766]  ? do_raw_spin_lock+0x11f/0x2c0
[  176.446531][ T5766]  ? __rwlock_init+0x150/0x150
[  176.451358][ T5766]  ? do_raw_spin_unlock+0x121/0x230
[  176.456606][ T5766]  ? _raw_spin_unlock+0x28/0x40
[  176.461509][ T5766]  ? inode_wait_for_writeback+0x1e3/0x230
[  176.467277][ T5766]  ? evict+0x495/0x8d0
[  176.471389][ T5766]  ? sb_clear_inode_writeback+0x360/0x360
[  176.477167][ T5766]  ? do_raw_spin_lock+0x11f/0x2c0
[  176.482250][ T5766]  ? bit_waitqueue+0x30/0x30
[  176.486889][ T5766]  ? do_raw_spin_unlock+0x121/0x230
[  176.492139][ T5766]  ? ocfs2_sync_blockdev+0x40/0x40
[  176.497310][ T5766]  evict+0x4ca/0x8d0
[  176.501255][ T5766]  ? proc_nr_inodes+0x230/0x230
[  176.506149][ T5766]  ? do_raw_spin_unlock+0x121/0x230
[  176.511405][ T5766]  ? _raw_spin_unlock+0x28/0x40
[  176.516302][ T5766]  ? iput+0x706/0x920
[  176.520326][ T5766]  vfs_rmdir+0x39b/0x4d0
[  176.524616][ T5766]  do_rmdir+0x29f/0x590
[  176.528811][ T5766]  ? __check_object_size+0x506/0xa20
[  176.534137][ T5766]  ? d_delete_notify+0x150/0x150
[  176.539124][ T5766]  ? getname_flags+0x20a/0x500
[  176.543946][ T5766]  __x64_sys_unlinkat+0xc4/0xe0
[  176.548928][ T5766]  do_syscall_64+0x55/0xa0
[  176.553388][ T5766]  ? clear_bhb_loop+0x40/0x90
[  176.558107][ T5766]  ? clear_bhb_loop+0x40/0x90
[  176.562850][ T5766]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.568790][ T5766] RIP: 0033:0x7f887559b937
[  176.573256][ T5766] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.592901][ T5766] RSP: 002b:00007ffd3efd83a8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  176.601356][ T5766] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f887559b937
[  176.609375][ T5766] RDX: 0000000000000200 RSI: 00007ffd3efd9550 RDI: 00000000ffffff9c
[  176.617386][ T5766] RBP: 00007f8875632048 R08: 0000000000008560 R09: 0000000000000001
[  176.625401][ T5766] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd3efd9550
[  176.633418][ T5766] R13: 00007f8875632048 R14: 000000000002ad71 R15: 00007ffd3efdb710
[  176.641470][ T5766]  </TASK>
[  176.653631][  T968] usb 2-1: USB disconnect, device number 10
[  176.770780][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  177.182505][ T7352] loop3: detected capacity change from 0 to 32768
[  177.191150][ T7352] (syz.3.451,7352,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.211055][ T7352] (syz.3.451,7352,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.240828][ T7352] JBD2: Ignoring recovery information on journal
[  177.301753][ T7352] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  177.454915][ T5766] ocfs2: Unmounting device (7,3) on (node local)