last executing test programs:

14.965575801s ago: executing program 1 (id=2927):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x40, 0x0, 0x1, 0xffffff84, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0)

14.720724332s ago: executing program 1 (id=2929):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r0, 0xffffffffffffffff, 0x0)

14.475664313s ago: executing program 1 (id=2930):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0)

14.291651485s ago: executing program 1 (id=2932):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)

12.641472686s ago: executing program 1 (id=2942):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="0100"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884)

12.289834788s ago: executing program 1 (id=2950):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xfdfdffff, &(0x7f0000002540)="93"})

12.02990744s ago: executing program 32 (id=2950):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xfdfdffff, &(0x7f0000002540)="93"})

8.409115734s ago: executing program 3 (id=2974):
r0 = semget$private(0x0, 0x3, 0x8)
semop(r0, 0x0, 0x0)
r1 = semget$private(0x0, 0x4, 0x20)
semop(r1, &(0x7f0000000300)=[{0x2, 0x9, 0x1000}], 0x1)
semop(0x0, &(0x7f00000003c0)=[{0x3, 0x200, 0x1800}], 0x1)

8.240908425s ago: executing program 3 (id=2975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x1300)

8.192625435s ago: executing program 3 (id=2976):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x0, 0xa, 0x4, 0x8, 0x40, 0x11}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8d)

8.060439956s ago: executing program 3 (id=2977):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@gid}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@gid}, {@errors_continue}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@dmask}]}, 0x4, 0x1531, &(0x7f0000000380)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

7.669110818s ago: executing program 3 (id=2978):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x54, &(0x7f0000000000), 0x1, 0x97a6, &(0x7f000001c700)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
setreuid(0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
gettid()
readv(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

7.42851815s ago: executing program 3 (id=2979):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})
chdir(&(0x7f00000003c0)='./bus\x00')
symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)

7.139385822s ago: executing program 33 (id=2979):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})
chdir(&(0x7f00000003c0)='./bus\x00')
symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)

4.763885518s ago: executing program 2 (id=2986):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="0100"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884)

4.143124742s ago: executing program 2 (id=2989):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.283064111s ago: executing program 0 (id=2997):
r0 = semget$private(0x0, 0x3, 0x8)
semop(r0, &(0x7f0000000000), 0x0)
r1 = semget$private(0x0, 0x4, 0x20)
semop(r1, &(0x7f0000000300)=[{0x2, 0x9, 0x1000}], 0x1)
semop(0x0, &(0x7f00000003c0)=[{0x3, 0x200, 0x1800}], 0x1)

1.053351052s ago: executing program 0 (id=2998):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)

1.010234023s ago: executing program 2 (id=2999):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000cc0)={0xa33})

879.541104ms ago: executing program 0 (id=3000):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000180)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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")
r0 = open(0x0, 0x0, 0x0)
getdents(r0, &(0x7f0000000600)=""/192, 0xc0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)

810.544814ms ago: executing program 2 (id=3001):
capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0)

581.488876ms ago: executing program 2 (id=3002):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)

556.824826ms ago: executing program 0 (id=3003):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x40020)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa08"], 0x48}}, 0x4)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

262.019518ms ago: executing program 2 (id=3004):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r1}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000854)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000540)={'rti800\x00', [0x109, 0x2, 0x86d, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x4005, 0x6, 0x1, 0x1138fce9, 0x6, 0xdfffffa7, 0x2000001, 0x15, 0x65c, 0x3ff, 0x10004, 0x800, 0x2, 0x9, 0x6, 0x4, 0x9, 0x5, 0x5, 0x5]})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0xee01, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="000000000000000787d03b161c0000366c61c8177d78b116dd0b822248", 0x1d, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1fc}}, 0x0)
ioctl$COMEDI_CANCEL(r3, 0x6407)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000)
r9 = syz_usb_connect(0x5, 0x0, 0x0, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r9, 0x0, 0x0)

193.274018ms ago: executing program 0 (id=3005):
r0 = semget$private(0x0, 0x3, 0x8)
semop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}], 0x1)
r1 = semget$private(0x0, 0x4, 0x20)
semop(r1, 0x0, 0x0)
semop(0x0, &(0x7f00000003c0)=[{0x3, 0x200, 0x1800}], 0x1)

85.670729ms ago: executing program 0 (id=3006):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = gettid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
splice(r0, 0x0, r4, 0x0, 0x6, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x5760, 0x0)

0s ago: executing program 4 (id=2951):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})

kernel console output (not intermixed with test programs):

0x108: -5
[  565.494639][T13447] SQUASHFS error: Unable to read metadata cache entry [106]
[  565.509149][T13447] SQUASHFS error: Unable to read inode 0x11f
[  565.571074][ T3470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.844476][T13432] chnl_net:caif_netlink_parms(): no params data found
[  566.434625][T13432] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.476921][T13432] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.518001][T13432] bridge_slave_0: entered allmulticast mode
[  566.552350][T13432] bridge_slave_0: entered promiscuous mode
[  566.726721][T13432] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.755257][T13493] Invalid ELF header type: 3 != 1
[  566.776345][T13432] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.797026][T13432] bridge_slave_1: entered allmulticast mode
[  566.807963][T13432] bridge_slave_1: entered promiscuous mode
[  566.897067][ T5800] Bluetooth: hci2: command tx timeout
[  567.014543][T13432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.025169][T13503] veth1_macvtap: left promiscuous mode
[  567.031752][T13503] macsec0: entered promiscuous mode
[  567.038196][T13503] macsec0: entered allmulticast mode
[  567.065965][T13432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.118155][T13503] Bluetooth: MGMT ver 1.22
[  567.150474][T13507] veth1_macvtap: entered promiscuous mode
[  567.159142][T13507] veth1_macvtap: entered allmulticast mode
[  567.176981][T13507] macsec0: left promiscuous mode
[  567.197153][T13507] macsec0: left allmulticast mode
[  567.216070][T13507] veth1_macvtap: left allmulticast mode
[  567.527302][T13432] team0: Port device team_slave_0 added
[  567.651024][T13432] team0: Port device team_slave_1 added
[  567.712160][T13520] team_slave_0: entered promiscuous mode
[  567.718607][T13520] team_slave_1: entered promiscuous mode
[  567.724575][T13520] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  567.732646][T13520] batadv1: entered promiscuous mode
[  567.738739][T13520] batadv2: entered promiscuous mode
[  567.778768][T13520] macsec1: entered promiscuous mode
[  567.784090][T13520] team0: entered promiscuous mode
[  567.839651][T13520] macsec1: entered allmulticast mode
[  567.856881][T13525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'.
[  567.868092][T13520] team0: entered allmulticast mode
[  567.877570][T13520] team_slave_0: entered allmulticast mode
[  567.899088][T13520] team_slave_1: entered allmulticast mode
[  567.918837][T13520] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  567.926799][T13525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'.
[  567.946620][T13520] batadv1: entered allmulticast mode
[  567.952170][T13520] batadv2: entered allmulticast mode
[  567.969442][T13520] team0: Device macsec1 is already an upper device of the team interface
[  568.007638][T13520] team0: left allmulticast mode
[  568.012553][T13520] team_slave_0: left allmulticast mode
[  568.056812][T13520] team_slave_1: left allmulticast mode
[  568.076318][T13520] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  568.114680][T13520] batadv1: left allmulticast mode
[  568.145159][T13520] batadv2: left allmulticast mode
[  568.179115][T13520] team0: left promiscuous mode
[  568.199252][T13520] team_slave_0: left promiscuous mode
[  568.204775][T13520] team_slave_1: left promiscuous mode
[  568.210453][T13520] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  568.217736][T13520] batadv1: left promiscuous mode
[  568.222855][T13520] batadv2: left promiscuous mode
[  568.240087][T13533] loop3: detected capacity change from 0 to 32768
[  568.248723][T13533] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2475 (13533)
[  568.274478][T13533] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  568.284773][T13533] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  568.293556][T13533] BTRFS info (device loop3): turning on flush-on-commit
[  568.300653][T13533] BTRFS info (device loop3): max_inline at 0
[  568.306736][T13533] BTRFS info (device loop3): enabling disk space caching
[  568.313795][T13533] BTRFS info (device loop3): setting nodatasum
[  568.320063][T13533] BTRFS info (device loop3): turning off barriers
[  568.326574][T13533] BTRFS info (device loop3): disabling tree log
[  568.332853][T13533] BTRFS info (device loop3): enabling ssd optimizations
[  568.341112][T13533] BTRFS info (device loop3): force clearing of disk cache
[  568.348351][T13533] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  568.357889][T13533] BTRFS info (device loop3): use zstd compression, level 3
[  568.365171][T13533] BTRFS info (device loop3): max_inline at 0
[  568.371276][T13533] BTRFS info (device loop3): disk space caching is enabled
[  568.519114][T13533] BTRFS info (device loop3): rebuilding free space tree
[  568.533683][T13533] BTRFS info (device loop3): disabling free space tree
[  568.540739][T13533] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  568.551054][T13533] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  568.556784][    T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  568.571100][T13533] BTRFS info (device loop3): checking UUID tree
[  568.798832][    T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  568.820051][    T8] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  568.838659][    T8] usb 3-1: Product: syz
[  568.843312][    T8] usb 3-1: SerialNumber: syz
[  568.898468][T13432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.905475][T13432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.949234][    T8] usb 3-1: config 0 descriptor??
[  568.977924][ T5800] Bluetooth: hci2: command tx timeout
[  569.031272][T13432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.136690][ T5800] Bluetooth: hci0: command tx timeout
[  569.206372][T13432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.219908][    T8] usb 3-1: USB disconnect, device number 5
[  569.244121][T13432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.333528][T13432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.475312][T12590] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  569.870246][T13432] hsr_slave_0: entered promiscuous mode
[  569.927430][T13432] hsr_slave_1: entered promiscuous mode
[  569.947779][T13432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  569.996571][T13432] Cannot create hsr debugfs directory
[  570.007661][T13580] Invalid ELF header type: 3 != 1
[  570.336678][T13377] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  570.381532][T13591] loop2: detected capacity change from 0 to 512
[  570.420934][T13591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  570.451485][ T3470] hsr_slave_0: left promiscuous mode
[  570.469324][T13591] EXT4-fs (loop2): 1 truncate cleaned up
[  570.477924][T13591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  570.493004][ T3470] hsr_slave_1: left promiscuous mode
[  570.502829][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.516729][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  570.533436][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  570.547078][T13377] usb 4-1: Using ep0 maxpacket: 32
[  570.554803][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  570.557001][T13377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.587541][T13377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  570.608483][T13377] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  570.626611][T13377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.627757][ T3470] bridge_slave_1: left allmulticast mode
[  570.646279][T13377] usb 4-1: config 0 descriptor??
[  570.663773][T13377] hub 4-1:0.0: USB hub found
[  570.696816][ T3470] bridge_slave_1: left promiscuous mode
[  570.708734][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.720558][T13077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.731720][ T3470] bridge_slave_0: left allmulticast mode
[  570.738644][ T3470] bridge_slave_0: left promiscuous mode
[  570.750842][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.867160][T13377] hub 4-1:0.0: 1 port detected
[  570.888567][ T3470] veth1_macvtap: left promiscuous mode
[  570.894171][ T3470] veth0_macvtap: left promiscuous mode
[  570.908967][ T3470] veth1_vlan: left promiscuous mode
[  570.917184][ T3470] veth0_vlan: left promiscuous mode
[  571.056785][ T5800] Bluetooth: hci2: command tx timeout
[  571.174117][ T3470] team0 (unregistering): Port device batadv5 removed
[  571.204482][ T3470] bond7 (unregistering): (slave bridge7): Releasing active interface
[  571.272187][ T3470] bond7 (unregistering): Released all slaves
[  571.333782][ T3470] bond6 (unregistering): (slave bridge6): Releasing active interface
[  571.395943][ T3470] bond6 (unregistering): Released all slaves
[  571.451183][ T3470] team0 (unregistering): Port device batadv4 removed
[  571.491426][T13377] hub 4-1:0.0: activate --> -90
[  571.531351][ T3470] bond5 (unregistering): Released all slaves
[  571.569104][ T3470] bond4 (unregistering): (slave bridge4): Releasing active interface
[  571.631057][ T3470] bond4 (unregistering): Released all slaves
[  571.682234][ T3470] team0 (unregistering): Port device batadv3 removed
[  571.743682][ T3470] team0 (unregistering): Port device batadv2 removed
[  571.801072][ T3470] bond3 (unregistering): (slave bridge3): Releasing active interface
[  571.893186][    T8] usb 4-1: USB disconnect, device number 9
[  572.165353][ T3470] bond3 (unregistering): Released all slaves
[  572.187042][T13377] usb 4-1-port1: config error
[  572.242880][ T3470] bond2 (unregistering): (slave bridge2): Releasing active interface
[  572.623625][T13624] Invalid ELF header type: 3 != 1
[  572.812832][ T3470] bond2 (unregistering): Released all slaves
[  572.932895][ T3470] team0 (unregistering): Port device batadv1 removed
[  573.037287][ T3470] bond1 (unregistering): (slave bridge1): Releasing active interface
[  573.104306][ T3470] bond1 (unregistering): Released all slaves
[  573.136755][ T5800] Bluetooth: hci2: command tx timeout
[  573.752199][ T3470] team0 (unregistering): Port device team_slave_1 removed
[  573.883488][ T3470] team0 (unregistering): Port device team_slave_0 removed
[  573.976218][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  574.084973][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.768443][ T3470] bond0 (unregistering): Released all slaves
[  575.097106][T13653] loop2: detected capacity change from 0 to 512
[  575.137716][T13653] =======================================================
[  575.137716][T13653] WARNING: The mand mount option has been deprecated and
[  575.137716][T13653]          and is ignored by this kernel. Remove the mand
[  575.137716][T13653]          option from the mount to silence this warning.
[  575.137716][T13653] =======================================================
[  575.172655][    C1] vkms_vblank_simulate: vblank timer overrun
[  575.254039][T13653] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  575.344405][T13653] EXT4-fs (loop2): 1 truncate cleaned up
[  575.377949][T13653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.486010][T13653] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #2: block 13: comm syz.2.2506: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  575.590010][T13653] EXT4-fs (loop2): Remounting filesystem read-only
[  575.929531][T13077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.007480][T13675] loop3: detected capacity change from 0 to 32768
[  576.080333][T13675] 
[  576.080333][T13675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  576.080333][T13675] 
[  576.200432][T12590] 
[  576.200432][T12590]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  576.200432][T12590] 
[  576.245610][T12590] 
[  576.245610][T12590]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  576.245610][T12590] 
[  576.515368][T13682] loop2: detected capacity change from 0 to 40427
[  576.564435][T13682] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff
[  576.573694][T13684] Invalid ELF header type: 3 != 1
[  576.930654][T13432] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  576.981177][T13432] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  577.044172][T13432] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  577.106744][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  577.126177][T13693] loop2: detected capacity change from 0 to 64
[  577.162518][T13432] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  577.296860][ T5857] usb 4-1: Using ep0 maxpacket: 32
[  577.303895][ T5857] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  577.336761][ T5857] usb 4-1: config 0 has no interface number 0
[  577.355237][ T5857] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  577.382224][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.404944][ T5857] usb 4-1: Product: syz
[  577.413925][ T5857] usb 4-1: Manufacturer: syz
[  577.442929][ T3470] IPVS: stop unused estimator thread 0...
[  577.451842][ T5857] usb 4-1: SerialNumber: syz
[  577.502320][ T5857] usb 4-1: config 0 descriptor??
[  577.543790][T13432] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.547316][ T5857] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  577.592039][T13706] loop2: detected capacity change from 0 to 64
[  577.639786][T13432] 8021q: adding VLAN 0 to HW filter on device team0
[  577.699318][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.706531][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.755030][ T5857] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  577.770397][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.777600][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.829285][ T5857] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  578.020076][T13432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  578.154371][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  578.163276][ T5857] usb 4-1: USB disconnect, device number 10
[  578.207839][ T5857] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  578.257160][ T5857] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  578.287009][ T5857] quatech2 4-1:0.51: device disconnected
[  578.481205][T13727] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2521'.
[  578.723926][T13432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.233048][T13432] veth0_vlan: entered promiscuous mode
[  579.273760][T13432] veth1_vlan: entered promiscuous mode
[  579.354107][T13432] veth0_macvtap: entered promiscuous mode
[  579.377380][T13377] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  579.392340][T13432] veth1_macvtap: entered promiscuous mode
[  579.443916][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  579.454823][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.466060][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  579.480128][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.496224][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  579.515266][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.537707][T13432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  579.591034][T13377] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  579.640741][T13377] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  579.658796][T13377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.668524][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.670188][T13377] usb 4-1: config 0 descriptor??
[  579.694414][T13377] pwc: Askey VC010 type 2 USB webcam detected.
[  579.730786][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.761412][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.794069][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.804872][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.816334][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.843719][T13432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.873231][T13432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.902597][T13432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.931148][T13432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.972425][T13432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.100515][T13377] pwc: recv_control_msg error -32 req 02 val 2b00
[  580.126389][T13377] pwc: recv_control_msg error -32 req 02 val 2700
[  580.153336][T13377] pwc: recv_control_msg error -32 req 02 val 2c00
[  580.172460][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.189727][T13377] pwc: recv_control_msg error -32 req 04 val 1000
[  580.199539][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.210947][T13377] pwc: recv_control_msg error -32 req 04 val 1300
[  580.235255][T13377] pwc: recv_control_msg error -32 req 04 val 1400
[  580.252703][T13562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.264043][T13377] pwc: recv_control_msg error -32 req 02 val 2000
[  580.274438][T13562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.288535][T13377] pwc: recv_control_msg error -32 req 02 val 2100
[  580.306042][T13377] pwc: recv_control_msg error -32 req 04 val 1500
[  580.513999][T13756] loop0: detected capacity change from 0 to 1024
[  580.522298][T13377] pwc: recv_control_msg error -71 req 02 val 2400
[  580.540993][T13377] pwc: recv_control_msg error -71 req 02 val 2600
[  580.555060][T13377] pwc: recv_control_msg error -71 req 02 val 2900
[  580.574013][T13377] pwc: recv_control_msg error -71 req 02 val 2800
[  580.585800][T13377] pwc: recv_control_msg error -71 req 04 val 1100
[  580.605593][T13377] pwc: recv_control_msg error -71 req 04 val 1200
[  580.629394][T13377] pwc: Registered as video103.
[  580.664662][T13377] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  580.735234][T13377] usb 4-1: USB disconnect, device number 11
[  581.152792][T13762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2529'.
[  581.423776][T13768] comedi comedi4: bad chanlist[0]=0x04100003 chan=3 range length=2
[  581.727358][T13769] loop0: detected capacity change from 0 to 32768
[  581.754616][T13769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2531 (13769)
[  581.788177][T13769] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  581.798611][T13769] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  581.807428][T13769] BTRFS info (device loop0): turning on flush-on-commit
[  581.814439][T13769] BTRFS info (device loop0): max_inline at 0
[  581.820538][T13769] BTRFS info (device loop0): enabling disk space caching
[  581.827710][T13769] BTRFS info (device loop0): setting nodatasum
[  581.833899][T13769] BTRFS info (device loop0): turning off barriers
[  581.840505][T13769] BTRFS info (device loop0): disabling tree log
[  581.846845][T13769] BTRFS info (device loop0): enabling ssd optimizations
[  581.853810][T13769] BTRFS info (device loop0): force clearing of disk cache
[  581.861581][T13769] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  581.871088][T13769] BTRFS info (device loop0): use zstd compression, level 3
[  581.878450][T13769] BTRFS info (device loop0): max_inline at 0
[  581.884481][T13769] BTRFS info (device loop0): disk space caching is enabled
[  582.052005][T12591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  582.066360][T12591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  582.074691][T12591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  582.083044][T12591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  582.092572][T12591] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  582.105691][T12591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  582.119676][T13769] BTRFS info (device loop0): rebuilding free space tree
[  582.140253][T13769] BTRFS info (device loop0): disabling free space tree
[  582.147242][T13769] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  582.156963][T13769] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  582.171309][T13769] BTRFS info (device loop0): checking UUID tree
[  582.811074][T13797] loop2: detected capacity change from 0 to 4096
[  583.118862][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  583.118877][   T28] audit: type=1800 audit(1761792355.971:163): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2535" name="file1" dev="loop2" ino=0 res=0 errno=0
[  583.275302][T13778] chnl_net:caif_netlink_parms(): no params data found
[  583.666787][T13432] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  583.710803][T13778] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.730428][T13778] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.741822][T13778] bridge_slave_0: entered allmulticast mode
[  583.749603][T13778] bridge_slave_0: entered promiscuous mode
[  583.760380][T13778] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.788536][T13778] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.827337][T13778] bridge_slave_1: entered allmulticast mode
[  583.834619][T13778] bridge_slave_1: entered promiscuous mode
[  583.909880][T13311] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  583.990190][T13778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.021960][T13778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.102389][T13311] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  584.120421][T13311] usb 4-1: config 0 has no interface number 0
[  584.136576][T13311] usb 4-1: config 0 interface 41 has no altsetting 0
[  584.154353][T13311] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  584.172146][T13311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.186619][T13818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2539'.
[  584.203602][T13311] usb 4-1: Product: syz
[  584.218898][T13311] usb 4-1: Manufacturer: syz
[  584.226004][T13778] team0: Port device team_slave_0 added
[  584.236703][T13311] usb 4-1: SerialNumber: syz
[  584.256199][T13778] team0: Port device team_slave_1 added
[  584.263438][T13311] usb 4-1: config 0 descriptor??
[  584.273619][T12591] Bluetooth: hci3: command tx timeout
[  584.365850][T13778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.375296][T13778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.402062][T13778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.428790][T13778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.451346][T13778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.486734][T13778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.579024][T13778] hsr_slave_0: entered promiscuous mode
[  584.594896][T13778] hsr_slave_1: entered promiscuous mode
[  584.607111][T13778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  584.614916][T13778] Cannot create hsr debugfs directory
[  584.643429][T13830] loop2: detected capacity change from 0 to 1024
[  584.904429][T13778] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.071594][T13778] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.141806][T13311] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  585.263881][T13778] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.364170][T13842] loop0: detected capacity change from 0 to 1024
[  585.403283][T13311] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  585.423052][T13311] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  585.455196][T13842] EXT4-fs: inline encryption not supported
[  585.489499][T13778] team0: Port device netdevsim0 removed
[  585.515146][T13311] CoreChips: probe of 4-1:0.41 failed with error -71
[  585.533253][T13842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  585.557924][T13778] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.596133][T13311] usb 4-1: USB disconnect, device number 12
[  585.629648][T13842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.750406][T13432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.003606][T13778] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  586.025686][T13778] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  586.087134][T13850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2548'.
[  586.128621][T13778] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  586.148595][T13778] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  586.316171][T13778] 8021q: adding VLAN 0 to HW filter on device bond0
[  586.338742][T12591] Bluetooth: hci3: command tx timeout
[  586.360728][T13778] 8021q: adding VLAN 0 to HW filter on device team0
[  586.383671][T13562] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.390889][T13562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  586.413301][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.420544][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.833078][T13778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.843040][T13879] syz_tun: entered allmulticast mode
[  586.880286][T13879] dvmrp1: entered allmulticast mode
[  586.899123][T13877] syz_tun: left allmulticast mode
[  586.941845][T13778] veth0_vlan: entered promiscuous mode
[  586.957993][T13778] veth1_vlan: entered promiscuous mode
[  587.008849][T13778] veth0_macvtap: entered promiscuous mode
[  587.036121][T13778] veth1_macvtap: entered promiscuous mode
[  587.081414][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.105613][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.125096][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.148137][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.151283][T13882] loop0: detected capacity change from 0 to 4096
[  587.175935][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.192584][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.211338][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.227864][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.257683][T13778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.269938][T13885] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  587.304370][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.353761][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.377449][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.404183][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.428495][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.446836][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.455727][T13882] tmpfs: Unknown parameter 'usrquota@'
[  587.457413][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.473769][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.485789][T13778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.532487][T13778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.545609][T13778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.554552][T13778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.563974][T13778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.734376][T13890] netlink: 'syz.3.2558': attribute type 1 has an invalid length.
[  587.844774][T13895] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  587.865561][T13895] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  587.905038][T13890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2558'.
[  587.921099][T13890] 8021q: adding VLAN 0 to HW filter on device bond1
[  587.940445][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.964350][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.023977][T13890] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  588.094053][T13890] macvlan2: entered promiscuous mode
[  588.113090][T13890] macvlan2: entered allmulticast mode
[  588.121189][T13890] bond1: entered promiscuous mode
[  588.129914][T13890] bridge1: entered promiscuous mode
[  588.135928][T13890] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  588.150692][T13890] bond1: left promiscuous mode
[  588.158690][T13890] bridge1: left promiscuous mode
[  588.216184][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.228108][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.416785][T12591] Bluetooth: hci3: command tx timeout
[  588.845482][T13910] loop3: detected capacity change from 0 to 32768
[  588.855326][T13910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2564 (13910)
[  588.873856][T13910] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  588.884187][T13910] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  588.893664][T13910] BTRFS info (device loop3): turning on flush-on-commit
[  588.901077][T13910] BTRFS info (device loop3): max_inline at 0
[  588.907151][T13910] BTRFS info (device loop3): enabling disk space caching
[  588.914208][T13910] BTRFS info (device loop3): setting nodatasum
[  588.920448][T13910] BTRFS info (device loop3): turning off barriers
[  588.928227][T13910] BTRFS info (device loop3): disabling tree log
[  588.934525][T13910] BTRFS info (device loop3): enabling ssd optimizations
[  588.941591][T13910] BTRFS info (device loop3): force clearing of disk cache
[  588.948799][T13910] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  588.958356][T13910] BTRFS info (device loop3): use zstd compression, level 3
[  588.965644][T13910] BTRFS info (device loop3): max_inline at 0
[  588.966658][T13311] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  588.971706][T13910] BTRFS info (device loop3): disk space caching is enabled
[  589.111364][T13910] BTRFS info (device loop3): rebuilding free space tree
[  589.133705][T13910] BTRFS info (device loop3): disabling free space tree
[  589.140894][T13910] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  589.150923][T13910] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  589.178420][T13910] BTRFS info (device loop3): checking UUID tree
[  589.197118][T13311] usb 1-1: Using ep0 maxpacket: 16
[  589.274136][T13311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.303984][T13311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.339694][T13311] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  589.391080][T13311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.441905][T13311] usb 1-1: config 0 descriptor??
[  589.583397][T13941] loop1: detected capacity change from 0 to 512
[  589.614083][T13941] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  589.631795][T13943] loop2: detected capacity change from 0 to 256
[  589.662074][T13943] exfat: Unknown parameter 'c6xdigio'
[  589.719592][T13941] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  589.763717][T13941] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2568: bg 0: block 248: padding at end of block bitmap is not set
[  589.842226][T13941] Quota error (device loop1): write_blk: dquota write failed
[  589.871637][T13941] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  589.872787][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2570'.
[  589.885720][T13941] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2568: Failed to acquire dquot type 1
[  589.943131][T13941] EXT4-fs (loop1): 1 truncate cleaned up
[  589.966224][T12590] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  589.977937][T13311] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[  589.978343][T13941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  590.064267][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2570'.
[  590.117991][T13311] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71).
[  590.193352][T13311] usb 1-1: USB disconnect, device number 14
[  590.230995][T13950] fido_id[13950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  590.277449][T13778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  590.497267][T12591] Bluetooth: hci3: command tx timeout
[  590.548382][T13957] Invalid ELF header type: 3 != 1
[  591.021039][T13962] loop2: detected capacity change from 0 to 32768
[  591.058200][T13962] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  591.113904][T13962] XFS (loop2): Ending clean mount
[  591.144913][T13962] XFS (loop2): Quotacheck needed: Please wait.
[  591.216194][T13962] XFS (loop2): Quotacheck: Done.
[  591.294347][T13077] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  591.578070][T13980] loop3: detected capacity change from 0 to 32768
[  591.592764][T13980] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2577 (13980)
[  591.620883][T13980] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  591.631629][T13980] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  591.640433][T13980] BTRFS info (device loop3): turning on flush-on-commit
[  591.647563][T13980] BTRFS info (device loop3): max_inline at 0
[  591.653578][T13980] BTRFS info (device loop3): enabling disk space caching
[  591.660767][T13980] BTRFS info (device loop3): setting nodatasum
[  591.667076][T13980] BTRFS info (device loop3): turning off barriers
[  591.673524][T13980] BTRFS info (device loop3): disabling tree log
[  591.679907][T13980] BTRFS info (device loop3): enabling ssd optimizations
[  591.687399][T13980] BTRFS info (device loop3): force clearing of disk cache
[  591.694548][T13980] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  591.704505][T13980] BTRFS info (device loop3): use zstd compression, level 3
[  591.711880][T13980] BTRFS info (device loop3): max_inline at 0
[  591.717978][T13980] BTRFS info (device loop3): disk space caching is enabled
[  591.762229][T13980] BTRFS info (device loop3): rebuilding free space tree
[  591.787457][T13980] BTRFS info (device loop3): disabling free space tree
[  591.794915][T13980] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  591.804706][T13980] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  591.821375][T13980] BTRFS info (device loop3): checking UUID tree
[  592.036629][ T5832] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  592.278876][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.309131][ T5832] usb 2-1: config 0 has no interfaces?
[  592.325480][ T5832] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  592.332714][T12590] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  592.354789][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.363556][ T5832] usb 2-1: Product: syz
[  592.368637][ T5832] usb 2-1: Manufacturer: syz
[  592.373252][ T5832] usb 2-1: SerialNumber: syz
[  592.380807][ T5832] usb 2-1: config 0 descriptor??
[  592.508628][T13311] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  592.525588][T14011] Invalid ELF header type: 3 != 1
[  592.611532][ T5832] usb 2-1: USB disconnect, device number 15
[  592.741749][T13311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  592.763130][T13311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  592.799758][T13311] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  592.822844][T13311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.846039][T13311] usb 1-1: Product: syz
[  592.866602][T13311] usb 1-1: Manufacturer: syz
[  592.871258][T13311] usb 1-1: SerialNumber: syz
[  592.898911][T13311] usb 1-1: config 0 descriptor??
[  592.916897][T14008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  592.946802][T14008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  593.190331][T14008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  593.223305][T14008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  593.644646][T13311] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  594.002744][T14042] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2590'.
[  594.265047][T13311] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  594.320621][T13311] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 12:de:2a:64:00:ce
[  594.387558][T13311] usb 1-1: USB disconnect, device number 15
[  594.396748][T14045] loop2: detected capacity change from 0 to 32768
[  594.405690][T14045] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2591 (14045)
[  594.429990][T13311] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[  594.447032][T14045] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  594.459021][T14045] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  594.467809][T14045] BTRFS info (device loop2): turning on flush-on-commit
[  594.474822][T14045] BTRFS info (device loop2): max_inline at 0
[  594.480908][T14045] BTRFS info (device loop2): enabling disk space caching
[  594.487995][T14045] BTRFS info (device loop2): setting nodatasum
[  594.494183][T14045] BTRFS info (device loop2): turning off barriers
[  594.500741][T14045] BTRFS info (device loop2): disabling tree log
[  594.507179][T14045] BTRFS info (device loop2): enabling ssd optimizations
[  594.514160][T14045] BTRFS info (device loop2): force clearing of disk cache
[  594.521396][T14045] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  594.530887][T14045] BTRFS info (device loop2): use zstd compression, level 3
[  594.538523][T14045] BTRFS info (device loop2): max_inline at 0
[  594.544544][T14045] BTRFS info (device loop2): disk space caching is enabled
[  594.661252][T14057] loop3: detected capacity change from 0 to 512
[  594.686105][T14045] BTRFS info (device loop2): rebuilding free space tree
[  594.708615][T14045] BTRFS info (device loop2): disabling free space tree
[  594.709859][T14066] loop1: detected capacity change from 0 to 47
[  594.716046][T14045] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  594.732631][T14045] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  594.750251][T14045] BTRFS info (device loop2): checking UUID tree
[  594.757009][T14057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  594.937546][T14057] EXT4-fs (loop3): 1 truncate cleaned up
[  594.961897][T14057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.292568][T13377] IPVS: starting estimator thread 0...
[  595.386551][T14083] IPVS: using max 22 ests per chain, 52800 per kthread
[  595.637197][T13077] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  595.656621][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2600'.
[  595.659477][T12590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.775108][T14092] Invalid ELF header type: 3 != 1
[  595.914035][T14094] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2603'.
[  596.140362][T14100] loop1: detected capacity change from 0 to 47
[  596.487295][T13311] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  596.594681][T14111] loop1: detected capacity change from 0 to 4096
[  596.684763][T14114] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  596.697839][   T12] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  596.710378][T13311] usb 1-1: Using ep0 maxpacket: 16
[  596.724049][T13311] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  596.758914][   T28] audit: type=1800 audit(1761792369.601:164): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2610" name="file1" dev="loop1" ino=15 res=0 errno=0
[  596.781958][T13311] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.821654][T13311] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  596.853077][T13311] usb 1-1: config 0 interface 0 has no altsetting 0
[  596.888631][T13311] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  596.926278][T13311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.956051][   T28] audit: type=1800 audit(1761792369.801:165): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2610" name="file1" dev="loop1" ino=15 res=0 errno=0
[  596.982159][T13311] usb 1-1: config 0 descriptor??
[  597.067427][T14115] syz.1.2610 (14115) used greatest stack depth: 20240 bytes left
[  597.439701][T13311] waltop 0003:172F:0501.0002: unknown main item tag 0x0
[  597.482068][T13311] waltop 0003:172F:0501.0002: unknown main item tag 0x0
[  597.500737][T13311] waltop 0003:172F:0501.0002: unknown main item tag 0x0
[  597.509660][T13311] waltop 0003:172F:0501.0002: unknown main item tag 0x0
[  597.516968][T13311] waltop 0003:172F:0501.0002: unknown main item tag 0x0
[  597.524717][T13311] waltop 0003:172F:0501.0002: unknown main item tag 0x0
[  597.543686][T13311] waltop 0003:172F:0501.0002: unknown main item tag 0x0
[  597.584178][T13311] waltop 0003:172F:0501.0002: hidraw0: USB HID v0.09 Device [HID 172f:0501] on usb-dummy_hcd.0-1/input0
[  597.640596][T14125] Invalid ELF header type: 3 != 1
[  597.667302][T13311] usb 1-1: USB disconnect, device number 16
[  597.814460][T14126] fido_id[14126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  598.324256][T14132] loop1: detected capacity change from 0 to 32768
[  599.115930][T14134] loop2: detected capacity change from 0 to 47
[  599.966290][T14146] loop3: detected capacity change from 0 to 32768
[  599.975545][T14146] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2622 (14146)
[  599.992869][T14146] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  600.003149][T14146] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  600.011959][T14146] BTRFS info (device loop3): turning on flush-on-commit
[  600.019153][T14146] BTRFS info (device loop3): max_inline at 0
[  600.025176][T14146] BTRFS info (device loop3): enabling disk space caching
[  600.032301][T14146] BTRFS info (device loop3): setting nodatasum
[  600.038528][T14146] BTRFS info (device loop3): turning off barriers
[  600.044974][T14146] BTRFS info (device loop3): disabling tree log
[  600.051332][T14146] BTRFS info (device loop3): enabling ssd optimizations
[  600.058392][T14146] BTRFS info (device loop3): force clearing of disk cache
[  600.065636][T14146] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  600.078780][T14146] BTRFS info (device loop3): use zstd compression, level 3
[  600.087428][T14146] BTRFS info (device loop3): max_inline at 0
[  600.095669][T14146] BTRFS info (device loop3): disk space caching is enabled
[  600.150699][T14146] BTRFS info (device loop3): rebuilding free space tree
[  600.164159][T14146] BTRFS info (device loop3): disabling free space tree
[  600.171312][T14146] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  600.183659][T14146] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  600.199264][T14146] BTRFS info (device loop3): checking UUID tree
[  600.366673][ T5905] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  600.597107][ T5905] usb 2-1: Using ep0 maxpacket: 32
[  600.608502][ T5905] usb 2-1: config 0 has an invalid interface number: 151 but max is 0
[  600.636671][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.696694][ T5905] usb 2-1: config 0 has no interface number 0
[  600.703289][ T5905] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  600.721556][T12590] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  600.773790][ T5905] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  600.790333][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.816165][ T5905] usb 2-1: Product: syz
[  600.824744][ T5905] usb 2-1: Manufacturer: syz
[  600.837729][ T5905] usb 2-1: SerialNumber: syz
[  600.855478][ T5905] usb 2-1: config 0 descriptor??
[  600.983747][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'.
[  601.487777][T13262] udevd[13262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  601.710244][T13377] usb 2-1: USB disconnect, device number 16
[  602.647380][T14212] loop3: detected capacity change from 0 to 40427
[  602.685168][T14212] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff
[  603.046636][ T5905] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  603.157613][T14231] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2648'.
[  603.280939][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  603.295301][ T5905] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  603.306765][T13311] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  603.327162][ T5905] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.348483][ T5905] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  603.382405][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0
[  603.396824][ T5905] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  603.421343][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.461100][ T5905] usb 2-1: config 0 descriptor??
[  603.546767][T13311] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  603.605629][T13311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  603.735625][T13311] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  603.839557][T13311] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  603.924331][T13311] usb 3-1: Manufacturer: syz
[  604.030294][ T5905] usbhid 2-1:0.0: can't add hid device: -71
[  604.059711][T13311] usb 3-1: config 0 descriptor??
[  604.099521][ T5905] usbhid: probe of 2-1:0.0 failed with error -71
[  604.324061][ T5905] usb 2-1: USB disconnect, device number 17
[  604.535660][T13311] rc_core: IR keymap rc-hauppauge not found
[  604.555941][T13311] Registered IR keymap rc-empty
[  604.577632][T14247] binder: 14246:14247 ioctl c018620c 200000000240 returned -22
[  604.599422][T13311] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  604.628928][T13311] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15
[  604.719706][T14252] loop3: detected capacity change from 0 to 47
[  604.773800][T14251] loop1: detected capacity change from 0 to 2048
[  604.828124][T14251] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  604.867948][T13953] udevd[13953]: incorrect nilfs2 checksum on /dev/loop1
[  604.898906][T14254] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  605.078518][T13311] usb 3-1: USB disconnect, device number 6
[  605.587256][T14265] loop0: detected capacity change from 0 to 512
[  605.605445][T14265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  605.638966][T14265] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2661: iget: bad extra_isize 5 (inode size 256)
[  605.658001][T14265] EXT4-fs (loop0): Remounting filesystem read-only
[  605.673859][T14265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  605.719920][T13432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.122295][T14271] loop0: detected capacity change from 0 to 32768
[  606.159781][T14271] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2663 (14271)
[  606.213655][T14271] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  606.224132][T14271] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  606.234203][T14271] BTRFS info (device loop0): turning on flush-on-commit
[  606.241309][T14271] BTRFS info (device loop0): max_inline at 0
[  606.247362][T14271] BTRFS info (device loop0): enabling disk space caching
[  606.254412][T14271] BTRFS info (device loop0): setting nodatasum
[  606.260948][T14271] BTRFS info (device loop0): turning off barriers
[  606.267485][T14271] BTRFS info (device loop0): disabling tree log
[  606.273754][T14271] BTRFS info (device loop0): enabling ssd optimizations
[  606.280903][T14271] BTRFS info (device loop0): force clearing of disk cache
[  606.288234][T14271] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  606.297696][T14271] BTRFS info (device loop0): use zstd compression, level 3
[  606.304974][T14271] BTRFS info (device loop0): max_inline at 0
[  606.311023][T14271] BTRFS info (device loop0): disk space caching is enabled
[  606.331785][T14275] loop1: detected capacity change from 0 to 512
[  606.435274][T14271] BTRFS info (device loop0): rebuilding free space tree
[  606.457674][T14271] BTRFS info (device loop0): disabling free space tree
[  606.464652][T14271] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  606.474365][T14271] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  606.492518][T14275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.527633][T14271] BTRFS info (device loop0): checking UUID tree
[  606.543118][T14275] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  606.720405][T13778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.825400][T13432] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  606.886693][  T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  607.078864][  T787] usb 3-1: Using ep0 maxpacket: 32
[  607.097843][  T787] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.131170][  T787] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.151739][ T5832] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  607.170768][  T787] usb 3-1: config 0 interface 0 has no altsetting 0
[  607.198578][  T787] usb 3-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00
[  607.222320][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.253611][  T787] usb 3-1: config 0 descriptor??
[  607.357149][ T5832] usb 2-1: Using ep0 maxpacket: 8
[  607.377555][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  607.396660][ T5832] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  607.416204][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.439084][ T5832] usb 2-1: config 0 descriptor??
[  607.458675][ T5832] gspca_main: vc032x-2.14.0 probing 046d:0892
[  607.706798][  T787] wacom 0003:056A:0004.0003: unknown main item tag 0x0
[  607.713755][  T787] wacom 0003:056A:0004.0003: unknown main item tag 0x0
[  607.731056][  T787] wacom 0003:056A:0004.0003: Unknown device_type for 'HID 056a:0004'. Ignoring.
[  607.940427][T13377] usb 3-1: USB disconnect, device number 7
[  608.077668][    T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  608.296232][    T8] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  608.310368][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.329378][    T8] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  608.347110][    T8] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  608.355375][    T8] usb 1-1: Manufacturer: syz
[  608.372460][    T8] usb 1-1: config 0 descriptor??
[  608.460801][    T8] rc_core: IR keymap rc-hauppauge not found
[  608.467060][    T8] Registered IR keymap rc-empty
[  608.478203][    T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  608.516510][    T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19
[  608.673342][ T5832] gspca_vc032x: reg_w err -71
[  608.692066][ T5832] vc032x: probe of 2-1:0.0 failed with error -71
[  608.724697][ T5832] usb 2-1: USB disconnect, device number 18
[  608.818607][T13311] usb 1-1: USB disconnect, device number 17
[  609.536898][T13311] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  609.809484][T13311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  609.821035][T13311] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  609.830370][T13311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.845222][T13311] usb 4-1: config 0 descriptor??
[  610.058350][  T787] usb 4-1: USB disconnect, device number 13
[  610.186604][T13311] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  610.380388][T13311] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  610.390577][T13311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.404421][T13311] usb 3-1: config 0 descriptor??
[  610.623519][T13311] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  611.169172][T14370] loop3: detected capacity change from 0 to 8192
[  611.229560][   T28] audit: type=1800 audit(1761792384.071:166): pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2696" name="file2" dev="loop3" ino=1048613 res=0 errno=0
[  611.276746][T14370] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  611.285244][T14370] FAT-fs (loop3): Filesystem has been set read-only
[  611.373646][T14370] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  611.921738][T14381] loop1: detected capacity change from 0 to 32768
[  611.937300][T14381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2700 (14381)
[  611.964813][T14381] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  611.976395][T14381] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  611.985177][T14381] BTRFS info (device loop1): turning on flush-on-commit
[  611.992531][T14381] BTRFS info (device loop1): max_inline at 0
[  611.998651][T14381] BTRFS info (device loop1): enabling disk space caching
[  612.005787][T14381] BTRFS info (device loop1): setting nodatasum
[  612.012091][T14381] BTRFS info (device loop1): turning off barriers
[  612.019043][T14381] BTRFS info (device loop1): disabling tree log
[  612.025333][T14381] BTRFS info (device loop1): enabling ssd optimizations
[  612.032660][T14381] BTRFS info (device loop1): force clearing of disk cache
[  612.039945][T14381] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  612.049391][T14381] BTRFS info (device loop1): use zstd compression, level 3
[  612.057131][T14381] BTRFS info (device loop1): max_inline at 0
[  612.063156][T14381] BTRFS info (device loop1): disk space caching is enabled
[  612.154132][T14381] BTRFS info (device loop1): rebuilding free space tree
[  612.176870][T14381] BTRFS info (device loop1): disabling free space tree
[  612.183828][T14381] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  612.193770][T14381] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  612.213434][T14381] BTRFS info (device loop1): checking UUID tree
[  612.445947][T13311] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  612.495533][T13311] asix: probe of 3-1:0.0 failed with error -71
[  612.519413][T13311] usb 3-1: USB disconnect, device number 8
[  612.962723][T13778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  613.136947][T13311] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  613.338413][T13311] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  613.371843][T13311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  613.398045][T13311] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  613.402856][T14427] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2711'.
[  613.428939][T13311] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  613.466075][T13311] usb 1-1: Manufacturer: syz
[  613.489656][T13311] usb 1-1: config 0 descriptor??
[  613.786531][T13311] rc_core: IR keymap rc-hauppauge not found
[  613.792492][T13311] Registered IR keymap rc-empty
[  613.802883][T13311] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  613.821511][T13311] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20
[  614.024699][T14442] loop3: detected capacity change from 0 to 32768
[  614.035656][T14442] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2715 (14442)
[  614.051595][T14442] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  614.061887][T14442] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  614.070736][T14442] BTRFS info (device loop3): turning on flush-on-commit
[  614.077781][T14442] BTRFS info (device loop3): max_inline at 0
[  614.083782][T14442] BTRFS info (device loop3): enabling disk space caching
[  614.090867][T14442] BTRFS info (device loop3): setting nodatasum
[  614.097075][T14442] BTRFS info (device loop3): turning off barriers
[  614.103513][T14442] BTRFS info (device loop3): disabling tree log
[  614.109813][T14442] BTRFS info (device loop3): enabling ssd optimizations
[  614.117057][T14442] BTRFS info (device loop3): force clearing of disk cache
[  614.124195][T14442] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  614.133626][T14442] BTRFS info (device loop3): use zstd compression, level 3
[  614.140960][T14442] BTRFS info (device loop3): max_inline at 0
[  614.147013][T14442] BTRFS info (device loop3): disk space caching is enabled
[  614.232635][T14442] BTRFS info (device loop3): rebuilding free space tree
[  614.263525][T14442] BTRFS info (device loop3): disabling free space tree
[  614.270746][T14442] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  614.280592][T14442] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  614.296382][T14442] BTRFS info (device loop3): checking UUID tree
[  614.336937][T13311] usb 1-1: USB disconnect, device number 18
[  614.785191][T12590] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  615.758873][T14478] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2722'.
[  615.776795][    T8] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  615.968406][    T8] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  615.986287][    T8] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping
[  616.003816][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  616.023292][    T8] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  616.041165][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.052253][    T8] usb 1-1: Product: syz
[  616.064666][    T8] usb 1-1: Manufacturer: syz
[  616.072375][    T8] usb 1-1: SerialNumber: syz
[  616.088769][    T8] usb 1-1: config 0 descriptor??
[  616.514165][    T8] usb 1-1: USB disconnect, device number 19
[  616.753658][T14498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2732'.
[  617.090315][T14509] Invalid ELF header type: 3 != 1
[  617.811422][T14511] loop3: detected capacity change from 0 to 256
[  617.832216][T14511] FAT-fs (loop3): Directory bread(block 64) failed
[  617.839859][T14511] FAT-fs (loop3): Directory bread(block 65) failed
[  617.846610][T14511] FAT-fs (loop3): Directory bread(block 66) failed
[  617.853266][T14511] FAT-fs (loop3): Directory bread(block 67) failed
[  617.860057][T14511] FAT-fs (loop3): Directory bread(block 68) failed
[  617.868595][T14511] FAT-fs (loop3): Directory bread(block 69) failed
[  617.875202][T14511] FAT-fs (loop3): Directory bread(block 70) failed
[  617.886570][T14511] FAT-fs (loop3): Directory bread(block 71) failed
[  617.924702][T14511] FAT-fs (loop3): Directory bread(block 72) failed
[  617.972324][T14511] FAT-fs (loop3): Directory bread(block 73) failed
[  618.207715][T14521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2744'.
[  618.428059][T14526] netlink: 'syz.3.2743': attribute type 10 has an invalid length.
[  618.462596][T14526] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  618.543705][T14526] 8021q: adding VLAN 0 to HW filter on device bond2
[  618.566299][T14526] bond_slave_0: entered promiscuous mode
[  618.572573][T14526] bond_slave_1: entered promiscuous mode
[  618.578506][T14526] syz_tun: entered promiscuous mode
[  618.587552][T14526] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  618.597579][T14526] bond2: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0)
[  618.607589][T14526] bond2: (slave macvlan2): speed changed to 0 on port 1
[  618.618815][T14526] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[  618.801174][T14541] loop3: detected capacity change from 0 to 164
[  618.903213][T14545] Invalid ELF header type: 3 != 1
[  619.865993][T14550] loop1: detected capacity change from 0 to 2048
[  619.905222][T14550] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  619.947164][T13262] udevd[13262]: incorrect nilfs2 checksum on /dev/loop1
[  619.961870][T14553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  619.981119][T14550] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  620.043972][T14550] Remounting filesystem read-only
[  620.192033][T14558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2753'.
[  620.562772][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  620.789797][T14572] Invalid ELF header type: 3 != 1
[  620.799128][    T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  621.594085][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.615284][    T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  621.657284][    T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  621.666073][    T8] usb 3-1: Manufacturer: syz
[  621.674653][    T8] usb 3-1: config 0 descriptor??
[  621.729012][T14579] loop1: detected capacity change from 0 to 64
[  621.880329][    T8] rc_core: IR keymap rc-hauppauge not found
[  621.886296][    T8] Registered IR keymap rc-empty
[  621.938300][    T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  621.980203][    T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21
[  622.292818][T13311] usb 3-1: USB disconnect, device number 9
[  622.415851][T14589] loop3: detected capacity change from 0 to 32768
[  622.428277][T14589] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2766 (14589)
[  622.458323][T14589] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  622.470273][T14589] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  622.479119][T14589] BTRFS info (device loop3): turning on flush-on-commit
[  622.486231][T14589] BTRFS info (device loop3): max_inline at 0
[  622.492308][T14589] BTRFS info (device loop3): enabling disk space caching
[  622.499605][T14589] BTRFS info (device loop3): setting nodatasum
[  622.506214][T14589] BTRFS info (device loop3): turning off barriers
[  622.514561][T14589] BTRFS info (device loop3): disabling tree log
[  622.521101][T14589] BTRFS info (device loop3): enabling ssd optimizations
[  622.528138][T14589] BTRFS info (device loop3): force clearing of disk cache
[  622.535295][T14589] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  622.544758][T14589] BTRFS info (device loop3): use zstd compression, level 3
[  622.552179][T14589] BTRFS info (device loop3): max_inline at 0
[  622.558269][T14589] BTRFS info (device loop3): disk space caching is enabled
[  622.702695][T14589] BTRFS info (device loop3): rebuilding free space tree
[  622.728691][T14589] BTRFS info (device loop3): disabling free space tree
[  622.735769][T14589] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  622.746698][T14589] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  622.763032][T14589] BTRFS info (device loop3): checking UUID tree
[  622.994612][T12590] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  623.118547][    T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  623.369415][    T8] usb 2-1: Using ep0 maxpacket: 32
[  623.400127][    T8] usb 2-1: config 0 has an invalid interface number: 151 but max is 0
[  623.419635][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.465143][    T8] usb 2-1: config 0 has no interface number 0
[  623.488708][    T8] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  623.496991][T14632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2778'.
[  623.541897][T14632] unsupported nlmsg_type 40
[  623.557882][    T8] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  623.567521][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.575821][    T8] usb 2-1: Product: syz
[  623.580966][    T8] usb 2-1: Manufacturer: syz
[  623.585764][    T8] usb 2-1: SerialNumber: syz
[  623.621531][    T8] usb 2-1: config 0 descriptor??
[  623.753864][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2780'.
[  623.969293][T14646] tipc: Started in network mode
[  623.988858][T14646] tipc: Node identity 2e00000000000000faffffffffffffff, cluster identity 4711
[  624.044085][T14644] loop2: detected capacity change from 0 to 32768
[  624.058979][T14644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2782 (14644)
[  624.084031][T14644] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  624.094473][T14644] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  624.103822][T14644] BTRFS info (device loop2): turning on flush-on-commit
[  624.111481][T14644] BTRFS info (device loop2): max_inline at 0
[  624.117617][T14644] BTRFS info (device loop2): enabling disk space caching
[  624.124710][T14644] BTRFS info (device loop2): setting nodatasum
[  624.131011][T14644] BTRFS info (device loop2): turning off barriers
[  624.137528][T14644] BTRFS info (device loop2): disabling tree log
[  624.143842][T14644] BTRFS info (device loop2): enabling ssd optimizations
[  624.152244][T14644] BTRFS info (device loop2): force clearing of disk cache
[  624.159543][T14644] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  624.169002][T14644] BTRFS info (device loop2): use zstd compression, level 3
[  624.176278][T14644] BTRFS info (device loop2): max_inline at 0
[  624.182357][T14644] BTRFS info (device loop2): disk space caching is enabled
[  624.292326][    T8] usb 2-1: USB disconnect, device number 19
[  624.332688][T14644] BTRFS info (device loop2): rebuilding free space tree
[  624.362980][T14644] BTRFS info (device loop2): disabling free space tree
[  624.370054][T14644] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  624.379788][T14644] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  624.394297][T14644] BTRFS info (device loop2): checking UUID tree
[  624.404090][T13262] udevd[13262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  624.500206][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  624.679927][T13077] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  625.549572][T14689] loop2: detected capacity change from 0 to 64
[  625.596548][  T787] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  625.864309][T14690] loop0: detected capacity change from 0 to 32768
[  625.873315][T14690] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2795 (14690)
[  625.889038][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  625.911915][T14690] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  625.922193][T14690] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  625.931061][T14690] BTRFS info (device loop0): turning on flush-on-commit
[  625.938297][T14690] BTRFS info (device loop0): max_inline at 0
[  625.944321][T14690] BTRFS info (device loop0): enabling disk space caching
[  625.951488][T14690] BTRFS info (device loop0): setting nodatasum
[  625.957788][T14690] BTRFS info (device loop0): turning off barriers
[  625.964237][T14690] BTRFS info (device loop0): disabling tree log
[  625.970641][T14690] BTRFS info (device loop0): enabling ssd optimizations
[  625.977756][T14690] BTRFS info (device loop0): force clearing of disk cache
[  625.984908][T14690] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  625.994853][T14690] BTRFS info (device loop0): use zstd compression, level 3
[  626.002226][T14690] BTRFS info (device loop0): max_inline at 0
[  626.008348][T14690] BTRFS info (device loop0): disk space caching is enabled
[  626.081363][T14690] BTRFS info (device loop0): rebuilding free space tree
[  626.099208][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.120784][  T787] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  626.130289][T14690] BTRFS info (device loop0): disabling free space tree
[  626.137326][T14690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  626.140578][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  626.147189][T14690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  626.169754][T14690] BTRFS info (device loop0): checking UUID tree
[  626.176324][  T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  626.187206][  T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  626.197675][  T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.209386][  T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  626.230806][  T787] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  626.232943][    T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  626.240066][  T787] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  626.240090][  T787] usb 2-1: Product: syz
[  626.240103][  T787] usb 2-1: Manufacturer: syz
[  626.280353][  T787] cdc_wdm 2-1:1.0: skipping garbage
[  626.285788][  T787] cdc_wdm 2-1:1.0: skipping garbage
[  626.300800][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.301951][  T787] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  626.319093][  T787] cdc_wdm 2-1:1.0: Unknown control protocol
[  626.347625][    T8] usb 3-1: config 0 descriptor??
[  626.436708][T13432] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  626.500892][  T787] usb 2-1: USB disconnect, device number 20
[  626.618288][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  626.637497][    T8] usbhid: probe of 3-1:0.0 failed with error -71
[  626.673680][    T8] usb 3-1: USB disconnect, device number 10
[  626.956975][T14712] loop3: detected capacity change from 0 to 2048
[  627.195657][T14721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2801'.
[  627.226605][    T8] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  627.665044][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  627.684434][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.695023][    T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  627.732222][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.745073][    T8] usb 3-1: config 0 descriptor??
[  627.757627][    T8] hub 3-1:0.0: USB hub found
[  627.964071][    T8] hub 3-1:0.0: 15 ports detected
[  627.983609][    T8] hub 3-1:0.0: insufficient power available to use all downstream ports
[  628.170731][    T8] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  628.203136][    T8] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  628.230173][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  628.236222][    T8] usbhid: probe of 3-1:0.0 failed with error -71
[  628.294732][  T787] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  628.296713][    T8] usb 3-1: USB disconnect, device number 11
[  628.460462][T14740] loop3: detected capacity change from 0 to 1024
[  628.498589][  T787] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  628.515547][  T787] usb 1-1: config 0 has no interface number 0
[  628.522068][T14740] hfsplus: invalid length 32517 has been corrected to 255
[  628.526530][  T787] usb 1-1: config 0 interface 41 has no altsetting 0
[  628.540207][  T787] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  628.549804][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.553481][T14740] hfsplus: invalid length 32517 has been corrected to 255
[  628.576976][  T787] usb 1-1: Product: syz
[  628.596849][  T787] usb 1-1: Manufacturer: syz
[  628.601511][  T787] usb 1-1: SerialNumber: syz
[  628.614251][T14740] hfsplus: invalid length 32517 has been corrected to 255
[  628.618854][  T787] usb 1-1: config 0 descriptor??
[  628.689294][T13562] hfsplus: b-tree write err: -5, ino 4
[  629.081321][T14751] 8021q: adding VLAN 0 to HW filter on device batadv1
[  629.101801][T14751] team0: Port device batadv1 added
[  629.245097][  T787] CoreChips: probe of 1-1:0.41 failed with error -32
[  629.671135][T14758] loop1: detected capacity change from 0 to 40427
[  629.706922][T14758] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff
[  631.144456][T13377] usb 1-1: USB disconnect, device number 20
[  632.592298][T14815] netlink: 'syz.2.2839': attribute type 21 has an invalid length.
[  632.615155][T14815] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2839'.
[  632.636631][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'.
[  633.176587][T13377] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  633.267647][T14838] Invalid ELF header type: 3 != 1
[  634.086505][T13377] usb 3-1: Using ep0 maxpacket: 32
[  634.095021][T13377] usb 3-1: config 0 has an invalid interface number: 151 but max is 0
[  634.116479][T13377] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.127148][T13377] usb 3-1: config 0 has no interface number 0
[  634.133289][T13377] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  634.149473][T13377] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  634.159316][T13377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.168265][T13377] usb 3-1: Product: syz
[  634.172586][T13377] usb 3-1: Manufacturer: syz
[  634.177587][T13377] usb 3-1: SerialNumber: syz
[  634.191582][T13377] usb 3-1: config 0 descriptor??
[  634.302575][T14847] loop0: detected capacity change from 0 to 32768
[  634.313827][T14847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2850 (14847)
[  634.335814][T14847] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  634.346371][T14847] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  634.355669][T14847] BTRFS info (device loop0): turning on flush-on-commit
[  634.363295][T14847] BTRFS info (device loop0): max_inline at 0
[  634.370269][T14847] BTRFS info (device loop0): enabling disk space caching
[  634.380486][T14847] BTRFS info (device loop0): setting nodatasum
[  634.392027][T14847] BTRFS info (device loop0): turning off barriers
[  634.414201][T14847] BTRFS info (device loop0): disabling tree log
[  634.421158][T14847] BTRFS info (device loop0): enabling ssd optimizations
[  634.436578][T14847] BTRFS info (device loop0): force clearing of disk cache
[  634.443785][T14847] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  634.465959][T14847] BTRFS info (device loop0): use zstd compression, level 3
[  634.476369][T14847] BTRFS info (device loop0): max_inline at 0
[  634.490612][T14847] BTRFS info (device loop0): disk space caching is enabled
[  634.551088][T14847] BTRFS info (device loop0): rebuilding free space tree
[  634.588226][T14847] BTRFS info (device loop0): disabling free space tree
[  634.599578][T14847] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  634.609656][T14847] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  634.643144][T14847] BTRFS info (device loop0): checking UUID tree
[  634.654828][T13377] usb 3-1: USB disconnect, device number 12
[  634.693853][T13262] udevd[13262]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  635.102453][T13432] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  636.451737][T13562] bond5: (slave gretap1): Releasing active interface
[  636.461299][T13562] gretap1 (unregistering): left allmulticast mode
[  637.013895][T13562] hsr_slave_0: left promiscuous mode
[  637.035894][T13562] hsr_slave_1: left promiscuous mode
[  637.088489][T13562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.115316][T13562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.162801][T13562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.181543][T13562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.239617][T13562] bridge_slave_1: left allmulticast mode
[  637.255314][T13562] bridge_slave_1: left promiscuous mode
[  637.281547][T13562] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.341657][T13562] bridge_slave_0: left allmulticast mode
[  637.356553][T13562] bridge_slave_0: left promiscuous mode
[  637.371955][T13562] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.521598][T14927] Invalid ELF header type: 3 != 1
[  638.951505][T13562] veth1_macvtap: left promiscuous mode
[  638.957729][T13562] veth0_macvtap: left promiscuous mode
[  638.968096][T13562] veth1_vlan: left promiscuous mode
[  638.974932][T13562] veth0_vlan: left promiscuous mode
[  639.141721][T14941] loop3: detected capacity change from 0 to 256
[  639.252222][T14941] FAT-fs (loop3): Directory bread(block 64) failed
[  639.271776][T14941] FAT-fs (loop3): Directory bread(block 65) failed
[  639.284768][T14941] FAT-fs (loop3): Directory bread(block 66) failed
[  639.294065][T14941] FAT-fs (loop3): Directory bread(block 67) failed
[  639.310977][T14941] FAT-fs (loop3): Directory bread(block 68) failed
[  639.321887][T14941] FAT-fs (loop3): Directory bread(block 69) failed
[  639.331758][T13562] bond5 (unregistering): Released all slaves
[  639.343985][T14941] FAT-fs (loop3): Directory bread(block 70) failed
[  639.365092][T14941] FAT-fs (loop3): Directory bread(block 71) failed
[  639.375308][T14941] FAT-fs (loop3): Directory bread(block 72) failed
[  639.384840][T14941] FAT-fs (loop3): Directory bread(block 73) failed
[  639.392287][T13562] team0 (unregistering): Port device batadv2 removed
[  639.459766][T13562] bond4 (unregistering): (slave bridge2): Releasing active interface
[  639.729484][T13562] bond4 (unregistering): Released all slaves
[  639.774993][T13562] bond3 (unregistering): Released all slaves
[  639.929483][T13377] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  639.980251][T13562] bond2 (unregistering): Released all slaves
[  640.007703][T13562] team0 (unregistering): Port device batadv1 removed
[  640.134799][T13377] usb 4-1: Using ep0 maxpacket: 16
[  640.154523][T13377] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  640.165753][T13377] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.189589][T13377] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  640.203091][T13377] usb 4-1: config 0 interface 0 has no altsetting 0
[  640.210086][T13377] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  640.240814][T13377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.252811][T13377] usb 4-1: config 0 descriptor??
[  640.272635][T13562] bond1 (unregistering): Released all slaves
[  640.685623][T13377] usbhid 4-1:0.0: can't add hid device: -71
[  640.693863][T13377] usbhid: probe of 4-1:0.0 failed with error -71
[  640.718036][T13377] usb 4-1: USB disconnect, device number 14
[  640.883502][T13562] team0 (unregistering): Port device team_slave_1 removed
[  640.939047][T13562] team0 (unregistering): Port device team_slave_0 removed
[  640.989891][T13562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  641.057855][T13562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  641.436577][T13377] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  641.499769][T13562] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  641.620697][T13377] usb 2-1: Using ep0 maxpacket: 32
[  641.629848][T13377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.641009][T13377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.662735][T13377] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  641.687793][T13377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.708542][T13377] usb 2-1: config 0 descriptor??
[  641.955296][ T5800] Bluetooth: hci4: command 0x0406 tx timeout
[  641.981932][T13562] bond0 (unregistering): Released all slaves
[  642.155848][T13377] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  642.176245][T13377] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  642.186744][T13377] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  642.193696][T13377] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  642.207196][T13377] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  642.214158][T13377] savu 0003:1E7D:2D5A.0004: unbalanced collection at end of report description
[  642.230162][T13377] savu 0003:1E7D:2D5A.0004: parse failed
[  642.235881][T13377] savu: probe of 0003:1E7D:2D5A.0004 failed with error -22
[  642.397295][   T23] usb 2-1: USB disconnect, device number 21
[  643.206909][T14976] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2893'.
[  643.533259][T14985] Invalid ELF header type: 3 != 1
[  643.821353][T14984] loop3: detected capacity change from 0 to 512
[  643.950622][T14984] EXT4-fs: Ignoring removed oldalloc option
[  644.057876][T14984] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  644.377625][T14984] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.2897: Parent and EA inode have the same ino 15
[  644.466938][T14984] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.2897: Parent and EA inode have the same ino 15
[  644.535303][T14984] EXT4-fs (loop3): 1 orphan inode deleted
[  644.556363][T14984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.598114][T14998] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2902'.
[  644.609291][T14984] EXT4-fs error (device loop3): ext4_rename:3859: inode #15: comm syz.3.2897: target of rename is already freed
[  644.708801][T15000] loop1: detected capacity change from 0 to 128
[  644.744478][T12590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.789472][T15000] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  646.109230][T15031] loop1: detected capacity change from 0 to 1024
[  646.143622][T15031] hfsplus: invalid length 32517 has been corrected to 255
[  646.213984][T13562] hfsplus: b-tree write err: -5, ino 4
[  646.236520][  T787] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  646.461094][  T787] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  646.489254][  T787] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  646.515462][  T787] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  646.531242][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.540565][  T787] usb 4-1: Product: syz
[  646.544827][  T787] usb 4-1: Manufacturer: syz
[  646.561063][  T787] usb 4-1: SerialNumber: syz
[  646.579069][  T787] usb 4-1: config 0 descriptor??
[  646.590827][T15025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  646.602276][T15025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  646.829189][T15025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  646.850001][T15025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  647.260072][  T787] Error reading MAC address
[  647.844294][T15058] loop2: detected capacity change from 0 to 32768
[  647.885310][T15058] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  647.951498][T15058] XFS (loop2): Ending clean mount
[  648.078350][T15068] loop1: detected capacity change from 0 to 1024
[  648.150554][T15068] hfsplus: invalid length 32517 has been corrected to 255
[  648.303427][ T3470] hfsplus: b-tree write err: -5, ino 4
[  648.367900][T13077] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  648.450493][T15057] loop0: detected capacity change from 0 to 32768
[  648.462397][T15057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2924 (15057)
[  648.511794][T15057] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  648.547246][T15057] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  648.557400][T15057] BTRFS info (device loop0): turning on flush-on-commit
[  648.564427][T15057] BTRFS info (device loop0): max_inline at 0
[  648.573989][T15057] BTRFS info (device loop0): enabling disk space caching
[  648.582064][T15057] BTRFS info (device loop0): setting nodatasum
[  648.618117][T15057] BTRFS info (device loop0): turning off barriers
[  648.625045][T15057] BTRFS info (device loop0): disabling tree log
[  648.676547][T15057] BTRFS info (device loop0): enabling ssd optimizations
[  648.696492][T15057] BTRFS info (device loop0): force clearing of disk cache
[  648.703666][T15057] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  648.736735][T15057] BTRFS info (device loop0): use zstd compression, level 3
[  648.752786][T15057] BTRFS info (device loop0): max_inline at 0
[  648.772796][T15057] BTRFS info (device loop0): disk space caching is enabled
[  648.843269][T15078] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2928'.
[  649.014917][  T787] usb 4-1: USB disconnect, device number 15
[  649.065778][T15097] loop1: detected capacity change from 0 to 512
[  649.069936][T15057] BTRFS info (device loop0): rebuilding free space tree
[  649.083501][T15097] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2932: inode has both inline data and extents flags
[  649.101690][T15097] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2932: couldn't read orphan inode 15 (err -117)
[  649.125721][T15097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.136077][T15057] BTRFS info (device loop0): disabling free space tree
[  649.147169][T15057] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  649.169156][T15057] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  649.194151][T15057] BTRFS info (device loop0): checking UUID tree
[  649.381231][T15103] loop1: detected capacity change from 512 to 0
[  649.425542][   T49] loop: Write error at byte offset 9223372036854818815, length 1024.
[  649.448963][    C0] I/O error, dev loop1, sector 84 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  649.458972][    C0] Buffer I/O error on dev loop1, logical block 42, lost sync page write
[  649.468939][    C0] I/O error, dev loop1, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  649.487354][T15106] EXT4-fs error (device loop1): __ext4_find_entry:1685: inode #2: comm syz.1.2932: reading directory lblock 0
[  649.535337][T15097] EXT4-fs error (device loop1): ext4_splice_branch:472: inode #18: block 42: comm syz.1.2932: IO error syncing itable block
[  649.549707][T15097] syz.1.2932: attempt to access beyond end of device
[  649.549707][T15097] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  649.564066][T15097] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  649.575554][T15106] EXT4-fs (loop1): previous I/O error to superblock detected
[  649.601070][T15106] syz.1.2932: attempt to access beyond end of device
[  649.601070][T15106] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  649.651512][T15106] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  649.677843][T15097] EXT4-fs (loop1): I/O error while writing superblock
[  649.693265][T15097] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.2932: Error while async write back metadata
[  649.720999][T13432] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  649.725705][T15097] syz.1.2932: attempt to access beyond end of device
[  649.725705][T15097] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  649.757501][T15097] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  649.765933][T15097] EXT4-fs (loop1): I/O error while writing superblock
[  649.773601][T15097] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.2932: Error while async write back metadata
[  649.809886][T15097] syz.1.2932: attempt to access beyond end of device
[  649.809886][T15097] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  649.833358][T15097] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  649.843506][T15097] EXT4-fs (loop1): I/O error while writing superblock
[  649.852055][T15097] syz.1.2932: attempt to access beyond end of device
[  649.852055][T15097] loop1: rw=2051, sector=142, nr_sectors = 2 limit=0
[  649.866182][T15097] EXT4-fs (loop1): discard request in group:0 block:70 count:1 failed with -5
[  649.881281][T15097] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.2932: Error while async write back metadata
[  649.935588][T15097] syz.1.2932: attempt to access beyond end of device
[  649.935588][T15097] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  649.989912][T15097] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  650.001846][T15097] EXT4-fs (loop1): I/O error while writing superblock
[  650.014301][T15097] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 18: block 71:freeing already freed block (bit 70); block bitmap corrupt.
[  650.032185][T15097] EXT4-fs (loop1): pa ffff888079b26ae0: logic 32, phys. 65, len 32
[  650.040295][T15097] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 26, pa_free 25
[  650.063999][T13377] kworker/0:5: attempt to access beyond end of device
[  650.063999][T13377] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  650.094699][T13377] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  650.114629][T15097] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.2932: Error while async write back metadata
[  650.127947][T13377] EXT4-fs (loop1): I/O error while writing superblock
[  650.147017][T15097] syz.1.2932: attempt to access beyond end of device
[  650.147017][T15097] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  650.163669][T15097] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  650.173938][T15097] EXT4-fs (loop1): I/O error while writing superblock
[  650.185839][T15097] syz.1.2932: attempt to access beyond end of device
[  650.185839][T15097] loop1: rw=14337, sector=84, nr_sectors = 2 limit=0
[  650.203793][T15097] Buffer I/O error on dev loop1, logical block 42, lost sync page write
[  650.219288][T15097] EXT4-fs error (device loop1): ext4_free_data:985: inode #18: block 42: comm syz.1.2932: IO error syncing itable block
[  650.235887][T15097] syz.1.2932: attempt to access beyond end of device
[  650.235887][T15097] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0
[  650.255074][T15097] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  650.294471][T15097] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.2932: Error while async write back metadata
[  650.309874][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 255)
[  650.324935][T15097] Buffer I/O error on device loop1, logical block 255
[  650.337712][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 253)
[  650.349738][T15097] Buffer I/O error on device loop1, logical block 253
[  650.356533][T15097] Buffer I/O error on device loop1, logical block 254
[  650.364880][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 37)
[  650.376432][T15097] Buffer I/O error on device loop1, logical block 37
[  650.396533][T15097] Buffer I/O error on device loop1, logical block 38
[  650.403267][T15097] Buffer I/O error on device loop1, logical block 39
[  650.409971][T15097] Buffer I/O error on device loop1, logical block 40
[  650.421530][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 249)
[  650.433900][T15097] Buffer I/O error on device loop1, logical block 249
[  650.441054][T15097] Buffer I/O error on device loop1, logical block 250
[  650.447845][T15097] Buffer I/O error on device loop1, logical block 251
[  650.463182][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 41)
[  650.482410][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 43)
[  650.494475][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 209)
[  650.512580][T15097] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 65)
[  650.612692][T13778] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  650.685191][T15122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2941'.
[  651.272282][T15139] batman_adv: batadv0: Adding interface: dummy0
[  651.287712][T15139] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.357333][T15139] batman_adv: batadv0: Interface activated: dummy0
[  651.401347][T15142] batadv0: mtu less than device minimum
[  651.420234][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.432593][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.445016][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.457512][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.470018][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.482520][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.495069][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.507601][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.520011][T15142] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  651.654834][T15146] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2955'.
[  651.937513][T15148] loop2: detected capacity change from 0 to 32768
[  651.970245][T15148] (syz.2.2956,15148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  651.989887][T15148] (syz.2.2956,15148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  651.997294][T12591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  652.019486][T12591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  652.031754][T12591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  652.041132][T12591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  652.049160][T12591] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  652.057949][T12591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  652.065419][T15148] JBD2: Ignoring recovery information on journal
[  652.115619][T15148] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  652.233305][T15155] netlink: 'syz.3.2958': attribute type 1 has an invalid length.
[  652.290675][T13077] ocfs2: Unmounting device (7,2) on (node local)
[  652.346681][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2958'.
[  652.390412][T15158] 8021q: adding VLAN 0 to HW filter on device bond3
[  652.635390][T15160] bond3: (slave bridge2): making interface the new active one
[  652.646328][T15160] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  652.680110][T15155] macvlan3: entered promiscuous mode
[  652.685454][T15155] macvlan3: entered allmulticast mode
[  652.691901][T15155] bond3: entered promiscuous mode
[  652.697019][T15155] bridge2: entered promiscuous mode
[  652.703004][T15155] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  652.710917][T15155] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  652.729227][T15155] bond3: left promiscuous mode
[  652.734023][T15155] bridge2: left promiscuous mode
[  652.765985][T15166] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2960'.
[  653.026194][T15151] chnl_net:caif_netlink_parms(): no params data found
[  653.246580][   T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  653.378441][T15179] team0 (unregistering): Port device team_slave_0 removed
[  653.406841][T15179] team0 (unregistering): Port device team_slave_1 removed
[  653.448513][   T23] usb 4-1: config 0 has no interfaces?
[  653.454290][   T23] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  653.475214][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.495024][   T23] usb 4-1: config 0 descriptor??
[  653.590892][T15151] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.600103][T15151] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.608214][T15151] bridge_slave_0: entered allmulticast mode
[  653.615609][T15151] bridge_slave_0: entered promiscuous mode
[  653.625297][T15151] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.632742][T15151] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.642057][T15151] bridge_slave_1: entered allmulticast mode
[  653.649638][T15151] bridge_slave_1: entered promiscuous mode
[  653.685127][T15151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.704791][T15151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.768977][T13377] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  653.793571][T15151] team0: Port device team_slave_0 added
[  653.803962][T15151] team0: Port device team_slave_1 added
[  653.901143][T15151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.913908][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.951846][T13377] usb 1-1: device descriptor read/64, error -71
[  653.992246][T15151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.008361][ T5832] usb 4-1: USB disconnect, device number 16
[  654.055675][T15151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.062612][T15194] loop2: detected capacity change from 0 to 32768
[  654.070653][T15194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2970 (15194)
[  654.083222][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.095816][T15194] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  654.112313][T12591] Bluetooth: hci1: command tx timeout
[  654.119578][T15194] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  654.133921][T15194] BTRFS info (device loop2): allowing degraded mounts
[  654.140763][T15194] BTRFS info (device loop2): setting nodatasum
[  654.147024][T15194] BTRFS info (device loop2): disabling tree log
[  654.153739][T15194] BTRFS info (device loop2): max_inline at 0
[  654.159831][T15194] BTRFS info (device loop2): using free space tree
[  654.166780][T15151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.239193][T15151] hsr_slave_0: entered promiscuous mode
[  654.246301][T15151] hsr_slave_1: entered promiscuous mode
[  654.262573][T15151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  654.271595][T15151] Cannot create hsr debugfs directory
[  654.277053][T15194] BTRFS info (device loop2): enabling ssd optimizations
[  654.277073][T15194] BTRFS info (device loop2): auto enabling async discard
[  654.306583][T13377] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  654.318043][   T28] audit: type=1800 audit(1761792427.171:167): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2970" name="file1" dev="loop2" ino=260 res=0 errno=0
[  654.338265][T15194] BTRFS error (device loop2): balance: invalid convert system profile single
[  654.389659][T13077] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  654.469167][T13377] usb 1-1: device descriptor read/64, error -71
[  654.587698][T13377] usb usb1-port1: attempt power cycle
[  654.687225][T13262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (13262)
[  654.943281][T15151] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  654.971153][T15151] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  654.986028][T15151] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  655.004316][T15151] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  655.011482][T13377] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  655.059705][T13377] usb 1-1: device descriptor read/8, error -71
[  655.067681][ T5832] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  655.205296][T15151] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.247247][T15151] 8021q: adding VLAN 0 to HW filter on device team0
[  655.252769][T15231] loop3: detected capacity change from 0 to 256
[  655.264093][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.270008][T15231] exfat: Deprecated parameter 'namecase'
[  655.271290][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.288692][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.295947][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.304223][ T5832] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  655.319131][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.352243][ T5832] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  655.368354][ T5832] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  655.389101][T13377] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  655.406087][T15231] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7ee7d695, utbl_chksum : 0xe619d30d)
[  655.406632][ T5832] usb 3-1: Manufacturer: syz
[  655.437975][ T5832] usb 3-1: config 0 descriptor??
[  655.460837][T13377] usb 1-1: device descriptor read/8, error -71
[  655.576586][ T5832] rc_core: IR keymap rc-hauppauge not found
[  655.582730][ T5832] Registered IR keymap rc-empty
[  655.608352][T13377] usb usb1-port1: unable to enumerate USB device
[  655.615089][ T5832] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  655.640317][ T5832] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24
[  655.738368][T12590] bond0: (slave syz_tun): Releasing backup interface
[  655.745100][    C0] igorplugusb 3-1:0.0: Error: urb status = -32
[  655.764765][T13377] usb 3-1: USB disconnect, device number 13
[  655.947596][ T1291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.965782][ T1291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  656.026744][T15151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.137107][ T1291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.153931][ T1291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  656.177728][T12591] Bluetooth: hci1: command tx timeout
[  656.271172][ T1291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.297615][ T1291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  656.411911][ T1291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.423753][ T1291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  656.781085][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  656.801542][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  656.810976][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  656.836887][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  656.848174][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  656.859172][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  657.115434][ T1291] ip6gretap0 (unregistering): left promiscuous mode
[  657.218542][T15151] veth0_vlan: entered promiscuous mode
[  657.296798][ T5832] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  657.320867][T15151] veth1_vlan: entered promiscuous mode
[  657.476643][ T5832] usb 1-1: Using ep0 maxpacket: 16
[  657.486231][ T5832] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  657.516536][ T5832] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.533946][ T5832] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  657.603682][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0
[  657.617150][ T5832] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  657.626335][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.639879][ T5832] usb 1-1: config 0 descriptor??
[  657.834602][T15151] veth0_macvtap: entered promiscuous mode
[  657.933181][T15151] veth1_macvtap: entered promiscuous mode
[  658.070756][ T5832] usbhid 1-1:0.0: can't add hid device: -71
[  658.081856][ T5832] usbhid: probe of 1-1:0.0 failed with error -71
[  658.117402][ T5832] usb 1-1: USB disconnect, device number 25
[  658.150269][T15250] chnl_net:caif_netlink_parms(): no params data found
[  658.220032][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.241823][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.266384][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.266853][ T5800] Bluetooth: hci1: command tx timeout
[  658.282906][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.292887][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.303381][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.313314][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.327707][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.378064][T15151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.461744][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.502083][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.529597][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.557970][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.581702][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.601974][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.614064][T15151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.631959][T15151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.654380][T15151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  658.721897][T15300] netlink: 'syz.2.2986': attribute type 1 has an invalid length.
[  658.784827][T15301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2986'.
[  658.795625][T15301] 8021q: adding VLAN 0 to HW filter on device bond1
[  658.806045][T15151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.815545][T15151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.826010][T15151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.835266][T15151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.883285][T15306] bond1: (slave bridge1): making interface the new active one
[  658.893076][T15306] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  658.934989][T15300] macvlan2: entered promiscuous mode
[  658.941446][T15300] macvlan2: entered allmulticast mode
[  658.949193][T15300] bond1: entered promiscuous mode
[  658.954254][T15300] bridge1: entered promiscuous mode
[  658.962255][T15300] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  658.971582][T15300] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  658.987756][ T5800] Bluetooth: hci3: command tx timeout
[  658.995169][T15300] bond1: left promiscuous mode
[  659.000462][T15300] bridge1: left promiscuous mode
[  659.044205][ T1291] bridge0: left promiscuous mode
[  659.053935][ T1291] hsr_slave_0: left promiscuous mode
[  659.060526][ T1291] hsr_slave_1: left promiscuous mode
[  659.070430][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  659.078147][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.086345][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  659.094613][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.102662][ T1291] bridge_slave_1: left allmulticast mode
[  659.108649][ T1291] bridge_slave_1: left promiscuous mode
[  659.116639][T13311] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  659.124383][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.154438][ T1291] bridge_slave_0: left allmulticast mode
[  659.161817][ T1291] bridge_slave_0: left promiscuous mode
[  659.176056][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.214039][ T1291] bond_slave_0: left promiscuous mode
[  659.219747][ T1291] bond_slave_1: left promiscuous mode
[  659.228513][ T1291] veth1_macvtap: left promiscuous mode
[  659.234074][ T1291] veth0_macvtap: left promiscuous mode
[  659.240787][ T1291] veth1_vlan: left promiscuous mode
[  659.246116][ T1291] veth0_vlan: left promiscuous mode
[  659.336613][T13311] usb 1-1: Using ep0 maxpacket: 32
[  659.354242][T13311] usb 1-1: config 6 has an invalid interface number: 61 but max is 0
[  659.365792][T13311] usb 1-1: config 6 has no interface number 0
[  659.399185][T13311] usb 1-1: config 6 interface 61 has no altsetting 0
[  659.407190][ T1291] bond3 (unregistering): (slave bridge2): Releasing active interface
[  659.417595][T13311] usb 1-1: New USB device found, idVendor=0572, idProduct=cb02, bcdDevice=bd.c4
[  659.426951][T13311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.434961][T13311] usb 1-1: Product: syz
[  659.439308][  T787] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  659.447257][T13311] usb 1-1: Manufacturer: syz
[  659.452146][T13311] usb 1-1: SerialNumber: syz
[  659.609540][  T787] usb 3-1: device descriptor read/64, error -71
[  659.630754][ T1291] bond3 (unregistering): Released all slaves
[  659.661671][ T1291] team0 (unregistering): Port device batadv1 removed
[  659.695994][ T1291] bond2 (unregistering): (slave macvlan2): Removing an active aggregator
[  659.696139][T13311] hub 1-1:6.61: bad descriptor, ignoring hub
[  659.712852][ T1291] bond2 (unregistering): (slave macvlan2): Releasing backup interface
[  659.721585][T13311] hub: probe of 1-1:6.61 failed with error -5
[  659.730448][T13311] cxacru 1-1:6.61: cxacru_bind: interface has incorrect endpoints
[  659.738841][T13311] cxacru 1-1:6.61: usbatm_usb_probe: bind failed: -19!
[  659.781508][T13311] usb 1-1: USB disconnect, device number 26
[  659.877896][  T787] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  659.914762][ T1291] bond2 (unregistering): Released all slaves
[  659.937228][ T1291] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  660.038293][  T787] usb 3-1: device descriptor read/64, error -71
[  660.128472][ T1291] bond1 (unregistering): Released all slaves
[  660.163880][  T787] usb usb3-port1: attempt power cycle
[  660.337859][ T5800] Bluetooth: hci1: command tx timeout
[  660.517297][T15318] loop0: detected capacity change from 0 to 1024
[  660.538610][T15318] hfsplus: invalid length 32517 has been corrected to 255
[  660.597363][  T787] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  660.637157][  T787] usb 3-1: device descriptor read/8, error -71
[  660.646998][ T3442] hfsplus: b-tree write err: -5, ino 4
[  660.926692][  T787] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  660.969506][  T787] usb 3-1: device descriptor read/8, error -71
[  661.004268][ T1291] team0 (unregistering): Port device team_slave_1 removed
[  661.055426][ T1291] team0 (unregistering): Port device team_slave_0 removed
[  661.075195][ T5800] Bluetooth: hci3: command tx timeout
[  661.092132][  T787] usb usb3-port1: unable to enumerate USB device
[  661.124309][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  661.175360][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  661.723735][ T1291] bond0 (unregistering): Released all slaves
[  661.813856][T15250] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.821205][T15250] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.839448][T15250] bridge_slave_0: entered allmulticast mode
[  661.867838][T15250] bridge_slave_0: entered promiscuous mode
[  661.887094][T15250] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.894310][T15250] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.911033][T15250] bridge_slave_1: entered allmulticast mode
[  661.922213][T15250] bridge_slave_1: entered promiscuous mode
[  662.099136][T15250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.203724][T15250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.257032][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.264869][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.533587][T15250] team0: Port device team_slave_0 added
[  662.539721][T15347] loop0: detected capacity change from 0 to 1024
[  662.564733][T15347] hfsplus: invalid length 32517 has been corrected to 255
[  662.570901][T15250] team0: Port device team_slave_1 added
[  662.703243][ T3470] hfsplus: b-tree write err: -5, ino 4
[  662.782355][T15250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.805012][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.906546][T15250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.919704][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.923061][T15250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.933466][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.934734][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.970880][T15250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  663.136721][ T5800] Bluetooth: hci3: command tx timeout
[  663.266301][T15250] hsr_slave_0: entered promiscuous mode
[  663.313029][T15250] hsr_slave_1: entered promiscuous mode
[  663.611733][T15366] loop4: detected capacity change from 0 to 32768
[  663.644881][T15250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  663.653718][T15366] (syz.4.2951,15366,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  663.668827][T15366] (syz.4.2951,15366,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  663.686762][T15250] Cannot create hsr debugfs directory
[  663.714213][T15366] JBD2: Ignoring recovery information on journal
[  663.717445][T15361] tipc: Started in network mode
[  663.725534][T15361] tipc: Node identity 1, cluster identity 4711
[  663.731860][T15361] tipc: Node number set to 1
[  663.784373][T15366] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  663.937977][T15366] 
[  663.940612][T15366] ======================================================
[  663.947638][T15366] WARNING: possible circular locking dependency detected
[  663.954679][T15366] syzkaller #0 Not tainted
[  663.959104][T15366] ------------------------------------------------------
[  663.966135][T15366] syz.4.2951/15366 is trying to acquire lock:
[  663.972208][T15366] ffff88806798a608 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_setattr+0x95a/0x1b20
[  663.981223][T15366] 
[  663.981223][T15366] but task is already holding lock:
[  663.988597][T15366] ffff88805ea914a0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0x94b/0x1b20
[  663.997941][T15366] 
[  663.997941][T15366] which lock already depends on the new lock.
[  663.997941][T15366] 
[  664.008351][T15366] 
[  664.008351][T15366] the existing dependency chain (in reverse order) is:
[  664.017380][T15366] 
[  664.017380][T15366] -> #4 (&oi->ip_alloc_sem){+.+.}-{3:3}:
[  664.025237][T15366]        down_write+0x97/0x1f0
[  664.030029][T15366]        ocfs2_try_remove_refcount_tree+0xb7/0x320
[  664.036549][T15366]        ocfs2_xattr_set+0x596/0x11f0
[  664.041944][T15366]        ocfs2_set_acl+0x4e1/0x590
[  664.047079][T15366]        ocfs2_iop_set_acl+0x1ab/0x2a0
[  664.052559][T15366]        vfs_remove_acl+0x4e3/0x740
[  664.057780][T15366]        ovl_workdir_create+0x409/0x760
[  664.063342][T15366]        ovl_get_workdir+0x300/0x1740
[  664.068730][T15366]        ovl_fill_super+0x1345/0x3560
[  664.074112][T15366]        get_tree_nodev+0xb5/0x140
[  664.079235][T15366]        vfs_get_tree+0x8c/0x280
[  664.084187][T15366]        do_new_mount+0x24b/0xa40
[  664.089217][T15366]        __se_sys_mount+0x2da/0x3c0
[  664.094428][T15366]        do_syscall_64+0x55/0xb0
[  664.099385][T15366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.105813][T15366] 
[  664.105813][T15366] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  664.113659][T15366]        down_read+0x46/0x2e0
[  664.118363][T15366]        ocfs2_init_acl+0x2fa/0x720
[  664.123584][T15366]        ocfs2_mknod+0x12e5/0x20f0
[  664.128709][T15366]        ocfs2_mkdir+0x196/0x410
[  664.133662][T15366]        vfs_mkdir+0x296/0x440
[  664.138446][T15366]        do_mkdirat+0x1d4/0x440
[  664.143295][T15366]        __x64_sys_mkdirat+0x89/0xa0
[  664.148576][T15366]        do_syscall_64+0x55/0xb0
[  664.153505][T15366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.159907][T15366] 
[  664.159907][T15366] -> #2 (jbd2_handle){++++}-{0:0}:
[  664.167193][T15366]        start_this_handle+0x1e9d/0x20c0
[  664.172811][T15366]        jbd2__journal_start+0x2bb/0x5b0
[  664.178427][T15366]        jbd2_journal_start+0x2a/0x40
[  664.183783][T15366]        ocfs2_start_trans+0x376/0x6c0
[  664.189237][T15366]        ocfs2_modify_bh+0xe9/0x470
[  664.194425][T15366]        ocfs2_local_read_info+0x13fd/0x1770
[  664.200392][T15366]        dquot_load_quota_sb+0x757/0xb80
[  664.206015][T15366]        dquot_load_quota_inode+0x2dc/0x5d0
[  664.211898][T15366]        ocfs2_enable_quotas+0x1c7/0x440
[  664.217514][T15366]        ocfs2_fill_super+0x3f6d/0x4d90
[  664.223043][T15366]        mount_bdev+0x22b/0x2d0
[  664.227880][T15366]        legacy_get_tree+0xea/0x180
[  664.233065][T15366]        vfs_get_tree+0x8c/0x280
[  664.237985][T15366]        do_new_mount+0x24b/0xa40
[  664.242991][T15366]        __se_sys_mount+0x2da/0x3c0
[  664.248172][T15366]        do_syscall_64+0x55/0xb0
[  664.253101][T15366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.259501][T15366] 
[  664.259501][T15366] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  664.267999][T15366]        down_read+0x46/0x2e0
[  664.272666][T15366]        ocfs2_start_trans+0x36a/0x6c0
[  664.278115][T15366]        ocfs2_modify_bh+0xe9/0x470
[  664.283297][T15366]        ocfs2_local_read_info+0x13fd/0x1770
[  664.289264][T15366]        dquot_load_quota_sb+0x757/0xb80
[  664.294884][T15366]        dquot_load_quota_inode+0x2dc/0x5d0
[  664.300769][T15366]        ocfs2_enable_quotas+0x1c7/0x440
[  664.306386][T15366]        ocfs2_fill_super+0x3f6d/0x4d90
[  664.311920][T15366]        mount_bdev+0x22b/0x2d0
[  664.316755][T15366]        legacy_get_tree+0xea/0x180
[  664.321942][T15366]        vfs_get_tree+0x8c/0x280
[  664.326883][T15366]        do_new_mount+0x24b/0xa40
[  664.331891][T15366]        __se_sys_mount+0x2da/0x3c0
[  664.337081][T15366]        do_syscall_64+0x55/0xb0
[  664.342009][T15366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.348410][T15366] 
[  664.348410][T15366] -> #0 (sb_internal#5){.+.+}-{0:0}:
[  664.355876][T15366]        __lock_acquire+0x2ddb/0x7c80
[  664.361250][T15366]        lock_acquire+0x197/0x410
[  664.366259][T15366]        ocfs2_start_trans+0x26b/0x6c0
[  664.371711][T15366]        ocfs2_setattr+0x95a/0x1b20
[  664.376896][T15366]        notify_change+0xb0d/0xe10
[  664.381992][T15366]        ovl_workdir_create+0x5de/0x760
[  664.387521][T15366]        ovl_get_workdir+0x300/0x1740
[  664.392881][T15366]        ovl_fill_super+0x1345/0x3560
[  664.398240][T15366]        get_tree_nodev+0xb5/0x140
[  664.403334][T15366]        vfs_get_tree+0x8c/0x280
[  664.408251][T15366]        do_new_mount+0x24b/0xa40
[  664.413258][T15366]        __se_sys_mount+0x2da/0x3c0
[  664.418439][T15366]        do_syscall_64+0x55/0xb0
[  664.423362][T15366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.429762][T15366] 
[  664.429762][T15366] other info that might help us debug this:
[  664.429762][T15366] 
[  664.439970][T15366] Chain exists of:
[  664.439970][T15366]   sb_internal#5 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem
[  664.439970][T15366] 
[  664.453167][T15366]  Possible unsafe locking scenario:
[  664.453167][T15366] 
[  664.460601][T15366]        CPU0                    CPU1
[  664.465947][T15366]        ----                    ----
[  664.471752][T15366]   lock(&oi->ip_alloc_sem);
[  664.476327][T15366]                                lock(&oi->ip_xattr_sem);
[  664.483423][T15366]                                lock(&oi->ip_alloc_sem);
[  664.490518][T15366]   rlock(sb_internal#5);
[  664.494840][T15366] 
[  664.494840][T15366]  *** DEADLOCK ***
[  664.494840][T15366] 
[  664.502971][T15366] 5 locks held by syz.4.2951/15366:
[  664.508152][T15366]  #0: ffff88802e20a0e0 (&type->s_umount_key#54/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x920
[  664.518257][T15366]  #1: ffff88806798a418 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  664.527477][T15366]  #2: ffff88805ea909d8 (&sb->s_type->i_mutex_key#39/1){+.+.}-{3:3}, at: ovl_workdir_create+0x150/0x760
[  664.538616][T15366]  #3: ffff88805ea91818 (&sb->s_type->i_mutex_key#41){+.+.}-{3:3}, at: ovl_workdir_create+0x557/0x760
[  664.550087][T15366]  #4: ffff88805ea914a0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0x94b/0x1b20
[  664.559841][T15366] 
[  664.559841][T15366] stack backtrace:
[  664.565740][T15366] CPU: 1 PID: 15366 Comm: syz.4.2951 Not tainted syzkaller #0
[  664.573187][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  664.583237][T15366] Call Trace:
[  664.586508][T15366]  <TASK>
[  664.589431][T15366]  dump_stack_lvl+0x16c/0x230
[  664.594555][T15366]  ? load_image+0x3b0/0x3b0
[  664.599052][T15366]  ? show_regs_print_info+0x20/0x20
[  664.604247][T15366]  ? print_circular_bug+0x12b/0x1a0
[  664.609433][T15366]  check_noncircular+0x2bd/0x3c0
[  664.614361][T15366]  ? print_deadlock_bug+0x5d0/0x5d0
[  664.619548][T15366]  ? lockdep_lock+0xe0/0x220
[  664.624125][T15366]  ? _find_first_zero_bit+0xd3/0x100
[  664.629401][T15366]  __lock_acquire+0x2ddb/0x7c80
[  664.634247][T15366]  ? verify_lock_unused+0x140/0x140
[  664.639429][T15366]  ? verify_lock_unused+0x140/0x140
[  664.644614][T15366]  ? verify_lock_unused+0x140/0x140
[  664.649803][T15366]  lock_acquire+0x197/0x410
[  664.654291][T15366]  ? ocfs2_setattr+0x95a/0x1b20
[  664.659134][T15366]  ? __might_sleep+0xe0/0xe0
[  664.663711][T15366]  ? do_raw_spin_lock+0x121/0x2c0
[  664.668725][T15366]  ? read_lock_is_recursive+0x20/0x20
[  664.674084][T15366]  ? __rwlock_init+0x150/0x150
[  664.678835][T15366]  ? do_raw_spin_unlock+0x121/0x230
[  664.684036][T15366]  ocfs2_start_trans+0x26b/0x6c0
[  664.688971][T15366]  ? ocfs2_setattr+0x95a/0x1b20
[  664.693812][T15366]  ? ocfs2_recovery_exit+0x50/0x50
[  664.698920][T15366]  ? setattr_prepare+0x1e6/0xac0
[  664.703853][T15366]  ocfs2_setattr+0x95a/0x1b20
[  664.708524][T15366]  ? ocfs2_extend_allocation+0x1760/0x1760
[  664.714318][T15366]  ? ktime_get_coarse_real_ts64+0x3a/0x120
[  664.720114][T15366]  ? seqcount_lockdep_reader_access+0x176/0x1c0
[  664.726347][T15366]  ? ktime_get_coarse_real_ts64+0x110/0x120
[  664.732230][T15366]  ? current_time+0x18d/0x270
[  664.736895][T15366]  ? inode_set_ctime_current+0x2d0/0x2d0
[  664.742511][T15366]  ? down_write+0x162/0x1f0
[  664.747007][T15366]  ? evm_inode_setattr+0x94/0x6a0
[  664.752036][T15366]  ? bpf_lsm_inode_setattr+0x9/0x10
[  664.757218][T15366]  ? try_break_deleg+0x79/0x120
[  664.762065][T15366]  ? ocfs2_extend_allocation+0x1760/0x1760
[  664.767859][T15366]  notify_change+0xb0d/0xe10
[  664.772439][T15366]  ovl_workdir_create+0x5de/0x760
[  664.777451][T15366]  ? ovl_statfs+0x2f0/0x2f0
[  664.781937][T15366]  ? rcu_read_lock_any_held+0xb4/0x120
[  664.787381][T15366]  ? __mnt_want_write+0x223/0x2a0
[  664.792398][T15366]  ovl_get_workdir+0x300/0x1740
[  664.797237][T15366]  ? ovl_fill_super+0x3560/0x3560
[  664.802250][T15366]  ? ovl_inuse_trylock+0xbd/0xd0
[  664.807175][T15366]  ? __lock_acquire+0x7c80/0x7c80
[  664.812188][T15366]  ? __rwlock_init+0x150/0x150
[  664.816941][T15366]  ? clone_mnt+0xa10/0xc60
[  664.821351][T15366]  ? do_raw_spin_unlock+0x121/0x230
[  664.826540][T15366]  ? _raw_spin_unlock+0x28/0x40
[  664.831375][T15366]  ? ovl_inuse_trylock+0xbd/0xd0
[  664.836300][T15366]  ovl_fill_super+0x1345/0x3560
[  664.841142][T15366]  ? ida_alloc_range+0x79e/0x830
[  664.846080][T15366]  ? virtio_fs_zero_page_range+0x140/0x140
[  664.851959][T15366]  ? sget_fc+0x7f0/0x8d0
[  664.856197][T15366]  ? __lock_acquire+0x7c80/0x7c80
[  664.861208][T15366]  ? down_write+0x162/0x1f0
[  664.865702][T15366]  ? down_read_killable+0x340/0x340
[  664.870900][T15366]  ? sget_fc+0x7f0/0x8d0
[  664.875146][T15366]  ? kill_litter_super+0xb0/0xb0
[  664.880065][T15366]  ? virtio_fs_zero_page_range+0x140/0x140
[  664.885854][T15366]  get_tree_nodev+0xb5/0x140
[  664.890429][T15366]  vfs_get_tree+0x8c/0x280
[  664.894835][T15366]  do_new_mount+0x24b/0xa40
[  664.899332][T15366]  __se_sys_mount+0x2da/0x3c0
[  664.903996][T15366]  ? __x64_sys_mount+0xc0/0xc0
[  664.908760][T15366]  ? lockdep_hardirqs_on+0x98/0x150
[  664.914291][T15366]  ? __x64_sys_mount+0x20/0xc0
[  664.919037][T15366]  do_syscall_64+0x55/0xb0
[  664.923440][T15366]  ? clear_bhb_loop+0x40/0x90
[  664.928103][T15366]  ? clear_bhb_loop+0x40/0x90
[  664.932766][T15366]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.938645][T15366] RIP: 0033:0x7fd49d38efc9
[  664.943061][T15366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  664.962655][T15366] RSP: 002b:00007fd49e28d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  664.971053][T15366] RAX: ffffffffffffffda RBX: 00007fd49d5e5fa0 RCX: 00007fd49d38efc9
[  664.979013][T15366] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  664.986969][T15366] RBP: 00007fd49d411f91 R08: 0000200000000200 R09: 0000000000000000
[  664.994926][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  665.002879][T15366] R13: 00007fd49d5e6038 R14: 00007fd49d5e5fa0 R15: 00007ffeb5b24f28
[  665.010847][T15366]  </TASK>
[  665.013919][    C1] sched: RT throttling activated
[  665.015649][T15366] overlayfs: upper fs does not support tmpfile.
[  665.028089][T15366] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  665.062796][T15366] overlayfs: upper fs missing required features.
[  665.137905][T15151] ocfs2: Unmounting device (7,4) on (node local)
[  665.180978][T15250] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  665.214130][T15250] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  665.228091][ T5800] Bluetooth: hci3: command tx timeout
[  665.250495][T15250] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  665.270682][T15250] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  665.424422][T15250] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.443969][T15250] 8021q: adding VLAN 0 to HW filter on device team0
[  665.459876][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.467044][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.499422][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.506625][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  665.538656][T15250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  665.686813][T15250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.913122][T15250] veth0_vlan: entered promiscuous mode
[  665.930742][T15250] veth1_vlan: entered promiscuous mode
[  665.968177][T15250] veth0_macvtap: entered promiscuous mode
[  665.978616][T15250] veth1_macvtap: entered promiscuous mode
[  666.002817][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.016262][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.026945][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.038309][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.048402][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.059026][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.069150][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.079686][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.090776][T15250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.104684][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.115208][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.125656][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.136579][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.146566][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.157239][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.167098][T15250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.179980][T15250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.190967][T15250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  666.206991][T15250] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  666.215797][T15250] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  666.225292][T15250] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  666.235499][T15250] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.268328][T15250] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
[  666.298022][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.308575][T15250] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  666.311216][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.349203][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.358305][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.536794][ T5800] Bluetooth: hci0: command 0x0406 tx timeout