last executing test programs:

1m11.19415046s ago: executing program 3 (id=23):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f0000000840)={0x0, 0x16}, 0x0, 0x0})

1m8.877606083s ago: executing program 3 (id=36):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffb, 0x1}, &(0x7f0000000280)=0x90)

1m8.683324935s ago: executing program 3 (id=38):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0010007, 0x0, 0x5}]})

1m8.378369093s ago: executing program 3 (id=39):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@type={'type', 0x3d, "e833026f"}}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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")
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

1m7.878591411s ago: executing program 3 (id=42):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103000000000009050203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)

1m7.356537052s ago: executing program 3 (id=45):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf251100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x4c}, 0x1, 0x0, 0x0, 0x48851}, 0x4000080)

1m6.780441075s ago: executing program 32 (id=45):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf251100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x4c}, 0x1, 0x0, 0x0, 0x48851}, 0x4000080)

4.042883937s ago: executing program 2 (id=527):
r0 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000200)=<r1=>0x0)
r2 = syz_io_uring_setup(0x28c, &(0x7f0000000300)={0x0, 0xf2f6, 0x40, 0x0, 0x100023}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000040))
syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xfffffffffffffd9b, 0x2})
io_uring_enter(r0, 0x2003, 0x0, 0x0, 0x0, 0x0)

3.82891609s ago: executing program 2 (id=532):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x20000000, 0x0)
ptrace$setsig(0x4203, r0, 0x100, &(0x7f00000001c0)={0x1d, 0x2, 0xffff8000})

3.696328727s ago: executing program 2 (id=533):
r0 = getpid()
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x3})

3.588957363s ago: executing program 2 (id=535):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

3.450897451s ago: executing program 2 (id=536):
r0 = syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x5505, &(0x7f00000079c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143040, 0x127)
r2 = dup3(r1, r0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000012c0)={0x0, 0x1000})

3.374472336s ago: executing program 0 (id=537):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.981647298s ago: executing program 0 (id=547):
r0 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="9b7185220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}], 0x1)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})

2.753637872s ago: executing program 0 (id=541):
ioperm(0x83, 0x6, 0x7fffffff)
unshare(0x600)
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
signalfd4(r0, &(0x7f0000000080), 0x8, 0x0)

2.60272163s ago: executing program 0 (id=543):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r0)
socket(0x2, 0x80805, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="018d00"})

2.470745698s ago: executing program 0 (id=545):
r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000280)={[{@discard_unit_segment}, {@jqfmt_vfsold}, {@six_active_logs}, {@nodiscard}, {@checkpoint_enable}, {@segment_mode}, {@prjjquota={'prjjquota', 0x3d, 'uX\xc2ser_xat'}}, {@gc_merge}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@fsync_mode_strict}, {@background_gc_on}, {@usrjquota={'usrjquota', 0x3d, ':&#)'}}, {@noinline_dentry}]}, 0x0, 0x554d, &(0x7f0000000380)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0)

1.939895309s ago: executing program 1 (id=550):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.498479824s ago: executing program 4 (id=552):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2000000000000002)

1.344935563s ago: executing program 1 (id=553):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2080483)
pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)

1.295585906s ago: executing program 2 (id=554):
r0 = syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000000c0)=ANY=[@ANYRES16=<r1=>0x0, @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e687ed7cc92413591118b4c90c38ce6717086f74110d64c905e04106d03caec62ca1fecda509971eca727d8f39b9d782da9a7d0d28312cc6ed5b00392b37b96c8d4cc83a017fa5fca81fba2263b"], 0x5, 0x60a5, &(0x7f000000c4c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRES16, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.224787399s ago: executing program 4 (id=555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28)

1.090603337s ago: executing program 1 (id=556):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r0, 0x646ea000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28)

1.05201791s ago: executing program 4 (id=557):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000800)=ANY=[], 0x1, 0x307, &(0x7f00000002c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000600)='./file0\x00', 0x2144840, 0x0, 0x3, 0x0, &(0x7f0000000100))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1)

843.360962ms ago: executing program 1 (id=558):
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x1, &(0x7f00000006c0)=ANY=[], 0xfd, 0x155, &(0x7f0000000400)="$eJzskc9LImEch5/R0f2lqwsuuAu7LOwhMcxxxG4dNJKEbKDw0inIiYSxIiE8VucO/QEeiqCTSETHDmYnSyHs7/AWRBAYrzOVHbu/z2GY9/l+vh9meGemuhGC4MZmWjzMSsUs/lsw8tnFs/OL70J9Aj4PE+XNLREu2vlmGtZ4GjRV6O/a+srvAixzYmXDEud+GiJA5husljxoYtEFX4ULCWeZCez9yH9o/bSdPupUoGSZScf9ViETsHOib3AEY6Lvx1vfPVCteZw/i0VP/rjTzoFqbbxRv57vtHOx6F9zX8/+OvaF3RRML6CI+V28HbuNN+q9bic/Z+SNblLXJ5NaQtNSPeOmk0vtHKDO+rZhSXnf5xUdBdhToKZAfTjvXyp+oHX4YJQDp6EvwHoQlOrjYGSiON/nXMly2PNieH2RSCQSiUQikUgkEonkozwHAAD//2PxW+g=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x124)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

842.101922ms ago: executing program 4 (id=559):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
umount2(&(0x7f0000000000)='./file0\x00', 0x1)

666.453902ms ago: executing program 0 (id=560):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0)

576.625807ms ago: executing program 1 (id=561):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r0, 0xe0ffff, 0x19, 0x3)
execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100)

575.925517ms ago: executing program 4 (id=562):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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")
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x3de26bb8a39e0da4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xfeffffff, 0xa99c, 0x0, 0xfffffffffe000001})

369.2µs ago: executing program 4 (id=563):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030006ac0f"], 0x58}}, 0x0)

0s ago: executing program 1 (id=564):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000240)=[<r2=>0x0]})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.210' (ED25519) to the list of known hosts.
[   56.131030][ T5752] cgroup: Unknown subsys name 'net'
[   56.267573][ T5752] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.677312][ T5752] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.983035][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.001809][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.009512][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.018866][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.026671][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   59.035948][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.043426][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.051531][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.095206][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.099351][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.103418][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.121865][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.122325][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.137156][ T5769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   59.144759][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.152032][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.159743][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   59.171140][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.209696][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.218274][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.226887][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.235518][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.243257][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   59.250621][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.600971][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   59.656234][ T5771] chnl_net:caif_netlink_parms(): no params data found
[   59.696672][ T5764] chnl_net:caif_netlink_parms(): no params data found
[   59.709436][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   59.809552][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.817012][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.824303][ T5775] bridge_slave_0: entered allmulticast mode
[   59.830995][ T5775] bridge_slave_0: entered promiscuous mode
[   59.854521][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.861737][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.868900][ T5775] bridge_slave_1: entered allmulticast mode
[   59.875847][ T5775] bridge_slave_1: entered promiscuous mode
[   59.900829][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.908105][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.915614][ T5771] bridge_slave_0: entered allmulticast mode
[   59.922312][ T5771] bridge_slave_0: entered promiscuous mode
[   59.937744][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.945029][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.954635][ T5771] bridge_slave_1: entered allmulticast mode
[   59.961318][ T5771] bridge_slave_1: entered promiscuous mode
[   59.993040][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.002835][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.009936][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.018452][ T5764] bridge_slave_0: entered allmulticast mode
[   60.025855][ T5764] bridge_slave_0: entered promiscuous mode
[   60.033307][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.040485][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.047885][ T5764] bridge_slave_1: entered allmulticast mode
[   60.054618][ T5764] bridge_slave_1: entered promiscuous mode
[   60.079203][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.099762][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.137991][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.147217][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.154880][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.162057][ T5767] bridge_slave_0: entered allmulticast mode
[   60.168640][ T5767] bridge_slave_0: entered promiscuous mode
[   60.186612][ T5775] team0: Port device team_slave_0 added
[   60.196243][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.221734][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.228790][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.236029][ T5767] bridge_slave_1: entered allmulticast mode
[   60.242938][ T5767] bridge_slave_1: entered promiscuous mode
[   60.250884][ T5775] team0: Port device team_slave_1 added
[   60.266819][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.287570][ T5771] team0: Port device team_slave_0 added
[   60.320044][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.328431][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.354517][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.367188][ T5771] team0: Port device team_slave_1 added
[   60.385069][ T5764] team0: Port device team_slave_0 added
[   60.391400][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.398445][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.424531][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.453638][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.467118][ T5764] team0: Port device team_slave_1 added
[   60.487949][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.495037][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.521087][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.534041][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.562857][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.569808][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.595759][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.632668][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.639601][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.665803][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.678471][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.685624][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.711910][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.752271][ T5767] team0: Port device team_slave_0 added
[   60.779187][ T5764] hsr_slave_0: entered promiscuous mode
[   60.785397][ T5764] hsr_slave_1: entered promiscuous mode
[   60.796129][ T5767] team0: Port device team_slave_1 added
[   60.804969][ T5775] hsr_slave_0: entered promiscuous mode
[   60.811023][ T5775] hsr_slave_1: entered promiscuous mode
[   60.819523][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.827268][ T5775] Cannot create hsr debugfs directory
[   60.918857][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.925881][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.954188][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.969702][ T5771] hsr_slave_0: entered promiscuous mode
[   60.976123][ T5771] hsr_slave_1: entered promiscuous mode
[   60.984572][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.992474][ T5771] Cannot create hsr debugfs directory
[   61.016273][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.023281][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.049363][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.157133][ T5767] hsr_slave_0: entered promiscuous mode
[   61.163711][ T5767] hsr_slave_1: entered promiscuous mode
[   61.169726][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.177445][ T5767] Cannot create hsr debugfs directory
[   61.202139][ T5773] Bluetooth: hci1: command tx timeout
[   61.207789][ T5773] Bluetooth: hci2: command tx timeout
[   61.213536][ T5766] Bluetooth: hci0: command tx timeout
[   61.282019][ T5773] Bluetooth: hci3: command tx timeout
[   61.432247][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.453277][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.463617][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.487645][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.536777][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.554755][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.566797][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.585993][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.657111][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.684682][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.695032][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.705449][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.780803][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   61.799095][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   61.808308][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   61.819955][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.886582][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.913782][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.963048][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   61.971078][ T5764] 8021q: adding VLAN 0 to HW filter on device team0
[   62.007171][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.014396][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.025485][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.032571][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.055741][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.062887][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.080566][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.087700][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.146342][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.172284][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.238420][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   62.257309][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   62.279888][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.287059][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.307755][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.314920][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.367635][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.374792][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.396313][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.403469][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.500016][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.639683][ T5764] veth0_vlan: entered promiscuous mode
[   62.678823][ T5764] veth1_vlan: entered promiscuous mode
[   62.705079][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.818565][ T5775] veth0_vlan: entered promiscuous mode
[   62.835991][ T5764] veth0_macvtap: entered promiscuous mode
[   62.869129][ T5775] veth1_vlan: entered promiscuous mode
[   62.889633][ T5764] veth1_macvtap: entered promiscuous mode
[   62.949661][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.967434][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.985995][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.998216][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.010870][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.019904][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.030844][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.044125][ T5775] veth0_macvtap: entered promiscuous mode
[   63.060858][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.077569][ T5775] veth1_macvtap: entered promiscuous mode
[   63.153931][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.165045][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.176357][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.194463][ T5771] veth0_vlan: entered promiscuous mode
[   63.211061][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.223668][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.235277][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.265479][ T5771] veth1_vlan: entered promiscuous mode
[   63.273992][ T5767] veth0_vlan: entered promiscuous mode
[   63.283267][ T5769] Bluetooth: hci0: command tx timeout
[   63.288685][ T5769] Bluetooth: hci1: command tx timeout
[   63.292189][ T5773] Bluetooth: hci2: command tx timeout
[   63.317241][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.329510][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.338516][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.347471][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.362205][ T5773] Bluetooth: hci3: command tx timeout
[   63.372431][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.377443][ T5767] veth1_vlan: entered promiscuous mode
[   63.380359][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.432148][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.451106][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.509709][ T5771] veth0_macvtap: entered promiscuous mode
[   63.561857][ T5771] veth1_macvtap: entered promiscuous mode
[   63.573065][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.580890][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.589400][ T5767] veth0_macvtap: entered promiscuous mode
[   63.608007][ T5767] veth1_macvtap: entered promiscuous mode
[   63.696901][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.697010][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.715901][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.717406][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.734370][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.745097][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.756616][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.767667][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.778658][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.788703][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.804674][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.814726][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.825207][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.836413][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.864462][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.880379][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.890975][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.902586][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.917966][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.931174][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.943753][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.951967][   T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   63.954522][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.973075][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.983073][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.994654][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.006320][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.024501][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.033470][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.042832][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.051538][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.069793][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.079901][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.098455][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.108289][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.121180][ T5849] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 !
[   64.165992][   T28] usb 3-1: Using ep0 maxpacket: 32
[   64.185244][   T28] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[   64.210124][   T28] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   64.261434][   T28] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   64.297953][   T28] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   64.307166][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.326656][   T28] usb 3-1: config 0 interface 0 has no altsetting 0
[   64.331153][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.337958][   T28] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   64.363947][   T28] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   64.388255][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.396687][   T28] usb 3-1: Product: syz
[   64.400872][   T28] usb 3-1: Manufacturer: syz
[   64.401062][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.429857][   T28] usb 3-1: SerialNumber: syz
[   64.456494][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.462426][   T28] usb 3-1: config 0 descriptor??
[   64.469472][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.511305][   T28] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   64.536578][ T5854] syz.0.6[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   64.549119][   T28] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   64.603534][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.643756][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.918874][ T5847] ldusb 3-1:0.0: Write buffer overflow, 2 bytes dropped
[   64.920518][   T28] usb 3-1: USB disconnect, device number 2
[   64.926279][    C0] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[   64.987303][ T5847] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[   65.011840][   T28] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[   65.261323][ T5854] loop0: detected capacity change from 0 to 32768
[   65.370850][ T5773] Bluetooth: hci1: command tx timeout
[   65.376520][ T5773] Bluetooth: hci0: command tx timeout
[   65.377208][ T5769] Bluetooth: hci2: command tx timeout
[   65.439480][ T5854] ea_get: invalid extended attribute
[   65.445346][ T5769] Bluetooth: hci3: command tx timeout
[   65.482974][ T5854] ffff88805fb3b170: 04 00 00 00                                      ....
[   65.515985][ T5870] ea_get: invalid extended attribute
[   65.521302][ T5870] ffff88805fb3b170: 04 00 00 00                                      ....
[   65.589017][ T5854] ea_get: invalid extended attribute
[   65.595700][ T5854] ffff88805fb3b170: 04 00 00 00                                      ....
[   65.698365][ T5872] loop1: detected capacity change from 0 to 4096
[   65.735637][ T5872] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[   66.038285][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   66.064681][ T5880] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.626409][ T5896] relay: one or more items not logged [item size (56) > sub-buffer size (5)]
[   66.768407][ T5901] loop2: detected capacity change from 0 to 4096
[   66.836018][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   66.893595][ T5901] ntfs: volume version 3.1.
[   66.942263][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.056383][ T5901] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[   67.093208][ T5901] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[   67.172945][ T5860] usb 4-1: Using ep0 maxpacket: 8
[   67.199357][ T5860] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   67.205809][ T5909] =======================================================
[   67.205809][ T5909] WARNING: The mand mount option has been deprecated and
[   67.205809][ T5909]          and is ignored by this kernel. Remove the mand
[   67.205809][ T5909]          option from the mount to silence this warning.
[   67.205809][ T5909] =======================================================
[   67.243275][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.243299][ T5860] usb 4-1: Product: syz
[   67.243313][ T5860] usb 4-1: Manufacturer: syz
[   67.243327][ T5860] usb 4-1: SerialNumber: syz
[   67.247475][ T5860] usb 4-1: config 0 descriptor??
[   67.301249][ T5860] gspca_main: se401-2.14.0 probing 047d:5003
[   67.441865][ T5766] Bluetooth: hci0: command tx timeout
[   67.442057][ T5773] Bluetooth: hci1: command tx timeout
[   67.447478][ T5769] Bluetooth: hci2: command tx timeout
[   67.521900][ T5769] Bluetooth: hci3: command tx timeout
[   67.672383][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   67.891767][ T5814] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   67.908269][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.925099][ T5860] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[   67.962771][ T5814] usb 1-1: config 0 descriptor??
[   68.186070][ T5814] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[   68.221632][ T5814] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[   68.242292][ T5860] usb 4-1: USB disconnect, device number 2
[   68.396909][ T5814] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[   68.416075][ T5814] [drm] Initialized udl on minor 2
[   68.525440][ T5924] loop2: detected capacity change from 0 to 32768
[   68.552811][ T5924] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   68.585727][ T5814] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[   68.593195][ T5807] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   68.622681][ T5814] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   68.657253][ T5924] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   68.689453][ T5924] XFS (loop2): Starting recovery (logdev: internal)
[   68.733249][ T5924] XFS (loop2): Ending recovery (logdev: internal)
[   68.748822][ T5924] XFS (loop2): Quotacheck needed: Please wait.
[   68.777635][ T5924] XFS (loop2): Quotacheck: Done.
[   68.807244][ T5807] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   68.821722][ T5807] usb 2-1: config 0 has no interface number 0
[   68.840888][ T5807] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   68.859689][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.889566][ T5827] usb 1-1: USB disconnect, device number 2
[   68.891848][ T5860] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   68.910962][ T5807] usb 2-1: Product: syz
[   68.932057][ T5807] usb 2-1: Manufacturer: syz
[   68.936679][ T5807] usb 2-1: SerialNumber: syz
[   68.959740][ T5860] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   68.972818][ T5807] usb 2-1: config 0 descriptor??
[   69.030005][ T5764] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   69.148152][ T5941] kvm: kvm [5940]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x5
[   69.207038][ T5807] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[   69.248905][ T5807] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   69.269929][ T5807] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[   69.287691][ T5807] usb 2-1: media controller created
[   69.337570][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   69.544699][ T5949] loop3: detected capacity change from 0 to 1024
[   69.883380][ T5767] hfsplus: bad catalog entry type
[   70.106347][ T5954] Failed to get privilege flags for destination (handle=0x2:0xf7ffffff)
[   70.239027][ T5956] loop2: detected capacity change from 0 to 128
[   70.261006][ T5952] loop0: detected capacity change from 0 to 32768
[   70.283285][ T1110] hfsplus: b-tree write err: -5, ino 4
[   70.289651][ T5952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.41 (5952)
[   70.360797][ T5952] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.410253][ T5952] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   70.429838][ T5807] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[   70.448090][ T5952] BTRFS info (device loop0): using free space tree
[   70.448286][ T2987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.583723][ T5807] usb 2-1: USB disconnect, device number 2
[   70.601968][ T5759] udevd[5759]: setting mode of /dev/bus/usb/002/002 to 020664 failed: No such file or directory
[   70.659044][ T2987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.662182][ T5759] udevd[5759]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory
[   70.732726][ T5952] BTRFS info (device loop0): enabling ssd optimizations
[   70.739697][ T5952] BTRFS info (device loop0): auto enabling async discard
[   70.831120][ T2987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.911722][ T2987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.958269][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.462674][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[   71.469252][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[   71.602137][ T5827] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   71.833404][ T5827] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   71.861712][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.869746][ T5827] usb 3-1: Product: syz
[   71.911075][ T5827] usb 3-1: Manufacturer: syz
[   71.926149][ T5827] usb 3-1: SerialNumber: syz
[   71.966705][ T5827] usb 3-1: config 0 descriptor??
[   72.012618][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.021118][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.030778][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.040604][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.050267][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   72.061760][   T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   72.061928][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.113836][ T6000] loop0: detected capacity change from 0 to 8192
[   72.153282][ T6000] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   72.204364][ T6000] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   72.223705][ T6000] REISERFS (device loop0): using ordered data mode
[   72.230260][ T6000] reiserfs: using flush barriers
[   72.247791][ T6000] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   72.289040][ T6000] REISERFS (device loop0): checking transaction log (loop0)
[   72.301751][   T28] usb 2-1: Using ep0 maxpacket: 8
[   72.318372][   T28] usb 2-1: unable to get BOS descriptor or descriptor too short
[   72.340854][ T6000] REISERFS (device loop0): Using r5 hash to sort names
[   72.342286][   T28] usb 2-1: config 4 interface 0 has no altsetting 0
[   72.361514][ T6000] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   72.386527][   T28] usb 2-1: string descriptor 0 read error: -22
[   72.405231][ T5827] airspy 3-1:0.0: Board ID: 00
[   72.411779][   T28] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   72.420260][ T5827] airspy 3-1:0.0: Firmware version: 
[   72.420808][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.487418][   T28] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   72.530114][   T28] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   72.572491][   T28] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   72.584800][   T28] usb 2-1: media controller created
[   72.664539][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   72.792762][ T5998] usb 2-1: dvb_usb_au6610: wlen=0, aborting
[   72.827425][ T5827] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e
[   72.848754][ T5827] airspy 3-1:0.0: Registered as swradio24
[   72.859328][ T5827] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[   72.875301][ T5827] usb 3-1: USB disconnect, device number 3
[   72.904000][ T6016] capability: warning: `syz.0.55' uses 32-bit capabilities (legacy support in use)
[   72.921545][ T6016] Falling back ldisc for ttyS3.
[   73.002056][   T28] zl10353_read_register: readreg error (reg=127, ret==0)
[   73.170102][   T28] usb 2-1: USB disconnect, device number 3
[   73.288830][ T6003] chnl_net:caif_netlink_parms(): no params data found
[   73.384963][ T2987] hsr_slave_0: left promiscuous mode
[   73.391357][ T2987] hsr_slave_1: left promiscuous mode
[   73.401547][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.428064][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.449188][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.470258][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.494537][ T2987] bridge_slave_1: left allmulticast mode
[   73.521186][ T2987] bridge_slave_1: left promiscuous mode
[   73.528144][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.541979][ T5814] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   73.552825][ T2987] bridge_slave_0: left allmulticast mode
[   73.558585][ T2987] bridge_slave_0: left promiscuous mode
[   73.567570][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.605411][ T2987] veth1_macvtap: left promiscuous mode
[   73.615313][ T2987] veth0_macvtap: left promiscuous mode
[   73.628250][ T2987] veth1_vlan: left promiscuous mode
[   73.638724][ T2987] veth0_vlan: left promiscuous mode
[   73.739359][ T5814] usb 1-1: Using ep0 maxpacket: 32
[   73.773524][ T5814] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   73.795456][ T5814] usb 1-1: config 0 has no interface number 0
[   73.811834][ T5814] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   73.831402][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.853963][ T5814] usb 1-1: Product: syz
[   73.858145][ T5814] usb 1-1: Manufacturer: syz
[   73.871690][ T5814] usb 1-1: SerialNumber: syz
[   73.891764][ T5814] usb 1-1: config 0 descriptor??
[   73.915390][ T5814] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   74.160948][ T5814] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   74.171777][ T5769] Bluetooth: hci1: command tx timeout
[   74.207479][ T5814] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   74.405606][ T6034] loop2: detected capacity change from 0 to 32768
[   74.498750][ T6034] add_index: next_index = 0.  Resetting!
[   74.514482][ T6034] find_entry called with index >= next_index
[   74.530682][ T6034] find_entry called with index >= next_index
[   74.539462][ T6034] find_entry called with index >= next_index
[   74.548276][ T6034] find_entry called with index >= next_index
[   74.561547][   T27] audit: type=1800 audit(1770428880.490:2): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.58" name=01 dev="loop2" ino=7 res=0 errno=0
[   74.622792][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   74.632713][ T5807] usb 1-1: USB disconnect, device number 3
[   74.660187][ T5807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   74.722052][ T5807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   74.757228][ T5807] quatech2 1-1:0.51: device disconnected
[   74.900775][ T6046] loop1: detected capacity change from 0 to 32768
[   75.007239][ T6046] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   75.112420][ T6044] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free
[   75.167669][ T6044] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   75.185756][ T6044] OCFS2: File system is now read-only.
[   75.191249][ T6044] (syz.1.60,6044,0):ocfs2_search_chain:1761 ERROR: status = -30
[   75.261927][ T2987] team0 (unregistering): Port device team_slave_1 removed
[   75.263732][ T6044] (syz.1.60,6044,0):ocfs2_search_chain:1871 ERROR: status = -30
[   75.377557][ T6044] (syz.1.60,6044,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   75.416940][ T6044] (syz.1.60,6044,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   75.438767][ T6044] (syz.1.60,6044,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[   75.460748][ T2987] team0 (unregistering): Port device team_slave_0 removed
[   75.483753][ T6044] (syz.1.60,6044,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[   75.521635][ T6044] (syz.1.60,6044,1):ocfs2_mknod_locked:639 ERROR: status = -30
[   75.529227][ T6044] (syz.1.60,6044,1):ocfs2_symlink:1944 ERROR: status = -30
[   75.546879][ T6044] (syz.1.60,6044,1):ocfs2_symlink:2068 ERROR: status = -30
[   75.557161][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.616652][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.633114][ T5771] ocfs2: Unmounting device (7,1) on (node local)
[   75.988314][ T2987] bond0 (unregistering): Released all slaves
[   76.136383][ T6060] tap0: tun_chr_ioctl cmd 1074025677
[   76.153027][ T6060] tap0: linktype set to 6
[   76.241782][ T5769] Bluetooth: hci1: command tx timeout
[   76.315394][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.358651][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.386390][ T6003] bridge_slave_0: entered allmulticast mode
[   76.406700][ T6003] bridge_slave_0: entered promiscuous mode
[   76.426518][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.444391][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.469328][ T6003] bridge_slave_1: entered allmulticast mode
[   76.486910][ T6003] bridge_slave_1: entered promiscuous mode
[   76.624207][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.683236][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.784698][ T6003] team0: Port device team_slave_0 added
[   76.822471][ T6003] team0: Port device team_slave_1 added
[   76.936915][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.967107][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.998525][ T6065] loop0: detected capacity change from 0 to 32768
[   77.047449][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.061764][ T6065] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.65 (6065)
[   77.087823][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.115168][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.173548][ T6088] loop1: detected capacity change from 0 to 512
[   77.180864][ T6088] EXT4-fs: Ignoring removed i_version option
[   77.218141][ T6065] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.234491][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.261386][ T6065] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   77.280227][ T6088] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   77.287118][ T6065] BTRFS info (device loop0): turning on async discard
[   77.315841][ T6065] BTRFS info (device loop0): use no compression
[   77.332044][ T6088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   77.363109][ T6065] BTRFS info (device loop0): turning on sync discard
[   77.423518][ T6065] BTRFS info (device loop0): force clearing of disk cache
[   77.430688][ T6065] BTRFS info (device loop0): enabling auto defrag
[   77.456027][ T6065] BTRFS info (device loop0): disabling free space tree
[   77.463976][ T6088] EXT4-fs (loop1): 1 truncate cleaned up
[   77.470995][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.549411][ T6003] hsr_slave_0: entered promiscuous mode
[   77.652258][ T6003] hsr_slave_1: entered promiscuous mode
[   77.694383][ T6065] BTRFS info (device loop0): enabling ssd optimizations
[   77.734490][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.739087][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'.
[   77.763320][ T6003] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.771825][ T6065] BTRFS info (device loop0): rebuilding free space tree
[   77.776745][ T6003] Cannot create hsr debugfs directory
[   77.785012][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'.
[   77.912366][ T6065] BTRFS info (device loop0): disabling free space tree
[   77.949760][ T6065] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.007030][ T6065] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.321785][ T5769] Bluetooth: hci1: command tx timeout
[   78.614730][ T6003] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.631496][ T6003] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   78.649414][ T6003] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   78.665015][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.681173][ T6003] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   78.967365][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.037903][ T6003] 8021q: adding VLAN 0 to HW filter on device team0
[   79.067401][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.074564][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.129054][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.136239][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.719766][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.962203][ T6182] loop0: detected capacity change from 0 to 64
[   80.020579][ T6182] hfs: unable to locate alternate MDB
[   80.048517][ T6182] hfs: continuing without an alternate MDB
[   80.106211][ T6191] loop1: detected capacity change from 0 to 256
[   80.139725][ T6189] netlink: 428 bytes leftover after parsing attributes in process `syz.2.90'.
[   80.170118][ T6191] exfat: Deprecated parameter 'namecase'
[   80.175513][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.90'.
[   80.222032][ T6191] exfat: Deprecated parameter 'utf8'
[   80.310438][ T6191] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   80.402339][ T5769] Bluetooth: hci1: command tx timeout
[   80.510649][ T6003] veth0_vlan: entered promiscuous mode
[   80.558837][ T6003] veth1_vlan: entered promiscuous mode
[   80.704358][ T6003] veth0_macvtap: entered promiscuous mode
[   80.765030][ T6003] veth1_macvtap: entered promiscuous mode
[   80.856821][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.896566][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.919242][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.929955][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.947245][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.959709][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.976324][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.014426][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.029372][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.045009][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.059169][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.092966][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.118689][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.130902][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.159447][ T6003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.175618][ T6003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.205729][ T6003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.217936][ T6003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.389458][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.424026][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.522011][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.529849][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.581358][ T6234] loop2: detected capacity change from 0 to 256
[   81.590269][ T6234] FAT-fs (loop2): Unrecognized mount option "uni_xlate?1" or missing value
[   81.633880][ T6234] tipc: Started in network mode
[   81.649190][ T6234] tipc: Node identity 5f3d302c73686f72, cluster identity 4711
[   81.675426][ T6234] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   81.697152][ T3606] cfg80211: failed to load regulatory.db
[   81.851684][ T5807] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   81.891423][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'.
[   81.921893][ T5827] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.052739][ T5807] usb 2-1: Using ep0 maxpacket: 32
[   82.063537][ T5807] usb 2-1: config 0 has an invalid interface number: 147 but max is 0
[   82.081610][ T5807] usb 2-1: config 0 has no interface number 0
[   82.087873][ T5807] usb 2-1: config 0 interface 147 has no altsetting 0
[   82.104821][ T5807] usb 2-1: New USB device found, idVendor=1342, idProduct=0204, bcdDevice=40.e2
[   82.119418][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.130781][ T5807] usb 2-1: Product: syz
[   82.133567][ T5827] usb 1-1: Using ep0 maxpacket: 32
[   82.135471][ T5807] usb 2-1: Manufacturer: syz
[   82.145058][ T5807] usb 2-1: SerialNumber: syz
[   82.153805][ T5827] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[   82.162370][ T5807] usb 2-1: config 0 descriptor??
[   82.171885][   T28] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   82.181521][ T5827] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   82.216169][ T5827] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   82.248136][ T5827] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   82.267187][ T5827] usb 1-1: config 0 interface 0 has no altsetting 0
[   82.292944][ T5827] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   82.307936][ T5827] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   82.320589][ T5827] usb 1-1: Product: syz
[   82.338203][ T5827] usb 1-1: Manufacturer: syz
[   82.344475][ T5827] usb 1-1: SerialNumber: syz
[   82.356998][ T5827] usb 1-1: config 0 descriptor??
[   82.373592][ T5827] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   82.380880][   T28] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   82.394208][ T5827] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   82.422498][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.442688][ T5807] kaweth 2-1:0.147: Firmware present in device.
[   82.469917][   T28] usb 5-1: config 0 descriptor??
[   82.491128][   T28] cp210x 5-1:0.0: cp210x converter detected
[   82.612643][ T5807] kaweth 2-1:0.147: Statistics collection: 0
[   82.618697][ T5807] kaweth 2-1:0.147: Multicast filter limit: 0
[   82.657266][ T5807] kaweth 2-1:0.147: MTU: 0
[   82.667395][ T5807] kaweth 2-1:0.147: Read MAC address 00:00:00:00:00:00
[   82.889513][ T5814] usb 1-1: USB disconnect, device number 4
[   82.919327][   T28] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[   82.931022][ T5814] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[   82.971396][   T28] usb 5-1: cp210x converter now attached to ttyUSB0
[   83.018018][ T5807] kaweth 2-1:0.147: Error setting SOFS wait
[   83.034649][ T5807] kaweth: probe of 2-1:0.147 failed with error -5
[   83.064035][ T5807] usb 2-1: USB disconnect, device number 4
[   83.240171][ T5814] usb 5-1: USB disconnect, device number 2
[   83.253221][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   83.290291][ T5814] cp210x 5-1:0.0: device disconnected
[   83.904007][ T6296] loop0: detected capacity change from 0 to 4096
[   83.923856][ T6296] ntfs3: Unknown parameter 'windowv_names'
[   83.954451][ T6283] loop2: detected capacity change from 0 to 32768
[   83.973952][ T5759] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   83.991403][ T6283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.115 (6283)
[   84.066418][ T6283] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.111914][ T6283] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   84.168000][ T6283] BTRFS info (device loop2): turning on async discard
[   84.185992][ T6283] BTRFS info (device loop2): use no compression
[   84.221284][ T6283] BTRFS info (device loop2): turning on sync discard
[   84.238553][ T6283] BTRFS info (device loop2): force clearing of disk cache
[   84.263384][ T6283] BTRFS info (device loop2): enabling auto defrag
[   84.269843][ T6283] BTRFS info (device loop2): disabling free space tree
[   84.386089][ T6283] BTRFS info (device loop2): enabling ssd optimizations
[   84.399772][ T6283] BTRFS info (device loop2): rebuilding free space tree
[   84.450237][ T6308] loop4: detected capacity change from 0 to 4096
[   84.470285][ T6283] BTRFS info (device loop2): disabling free space tree
[   84.512367][ T6283] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.532058][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   84.562828][ T6283] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.731643][ T5814] usb 2-1: Using ep0 maxpacket: 32
[   84.743410][ T5814] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   84.775732][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.822925][ T5814] usb 2-1: config 0 descriptor??
[   84.998224][ T5764] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.081708][ T5814] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   85.150364][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   85.205468][ T5814] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   85.245602][ T5814] usb 2-1: media controller created
[   85.327847][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.372156][ T6348] loop0: detected capacity change from 0 to 512
[   85.482866][ T5814] az6027: usb out operation failed. (-71)
[   85.542418][ T5814] az6027: usb out operation failed. (-71)
[   85.604115][ T5814] stb0899_attach: Driver disabled by Kconfig
[   85.657706][ T5814] az6027: no front-end attached
[   85.657706][ T5814] 
[   85.722112][ T5814] az6027: usb out operation failed. (-71)
[   85.768494][ T5814] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   85.867121][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[   85.967224][ T5814] dvb-usb: schedule remote query interval to 400 msecs.
[   86.035965][ T5814] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   86.099263][ T6348] EXT4-fs (loop0): Test dummy encryption mode enabled
[   86.109982][ T6348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   86.144331][ T5814] usb 2-1: USB disconnect, device number 5
[   86.215279][ T6348] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.125: bad orphan inode 131083
[   86.321581][    C0] sched: RT throttling activated
[   86.332542][ T6348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.543928][ T5814] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   87.068704][ T6348] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   87.304978][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.516440][ T6350] loop2: detected capacity change from 0 to 262144
[   87.525783][ T6350] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.123 (6350)
[   87.545275][ T6350] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   87.557493][ T6350] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   87.566830][ T6350] BTRFS info (device loop2): using free space tree
[   87.624341][ T6350] BTRFS info (device loop2): enabling ssd optimizations
[   88.001004][ T5764] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   88.249513][ T6417] loop1: detected capacity change from 0 to 2048
[   88.424481][ T6422] ieee802154 phy0 wpan0: encryption failed: -22
[   88.468662][ T6419] loop0: detected capacity change from 0 to 32768
[   88.491121][ T6419] JBD2: Ignoring recovery information on journal
[   88.496994][ T6417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   88.554948][ T6417] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   88.573676][ T6417] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[   88.588246][ T6417] EXT4-fs (loop1): This should not happen!! Data will be lost
[   88.588246][ T6417] 
[   88.598561][ T6417] EXT4-fs (loop1): Total free blocks count 0
[   88.607411][ T6419] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   88.608961][ T6417] EXT4-fs (loop1): Free/Dirty block details
[   88.625325][ T6417] EXT4-fs (loop1): free_blocks=2415919104
[   88.631360][ T6417] EXT4-fs (loop1): dirty_blocks=32
[   88.636653][ T6417] EXT4-fs (loop1): Block reservation details
[   88.642749][ T6417] EXT4-fs (loop1): i_reserved_data_blocks=2
[   88.677532][   T27] audit: type=1804 audit(1770428894.610:3): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.139" name="/newroot/40/file2/file1" dev="loop1" ino=15 res=1 errno=0
[   88.839499][ T6419] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[   88.857471][ T6419] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   88.867356][ T6419] OCFS2: File system is now read-only.
[   88.872913][ T6419] (syz.0.140,6419,1):ocfs2_search_chain:1761 ERROR: status = -30
[   88.881313][ T6419] (syz.0.140,6419,1):ocfs2_search_chain:1871 ERROR: status = -30
[   88.889254][ T6419] (syz.0.140,6419,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   88.897671][ T6419] (syz.0.140,6419,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   88.907571][ T6419] (syz.0.140,6419,1):__ocfs2_claim_clusters:2365 ERROR: status = -30
[   88.916357][ T6419] (syz.0.140,6419,1):__ocfs2_claim_clusters:2373 ERROR: status = -30
[   88.924529][ T6419] (syz.0.140,6419,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30
[   88.933358][ T6419] (syz.0.140,6419,1):ocfs2_block_group_alloc:705 ERROR: status = -30
[   88.942146][ T6419] (syz.0.140,6419,1):ocfs2_block_group_alloc:758 ERROR: status = -30
[   88.950502][ T6419] (syz.0.140,6419,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30
[   88.958979][ T6419] (syz.0.140,6419,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[   88.961336][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   88.967487][ T6419] (syz.0.140,6419,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[   88.967586][ T6419] (syz.0.140,6419,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[   88.995722][ T6419] (syz.0.140,6419,1):ocfs2_expand_inline_dir:2841 ERROR: status = -30
[   89.003954][ T6419] (syz.0.140,6419,1):ocfs2_extend_dir:3205 ERROR: status = -30
[   89.011800][ T6419] (syz.0.140,6419,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[   89.020409][ T6419] (syz.0.140,6419,1):ocfs2_mknod:298 ERROR: status = -30
[   89.027503][ T6419] (syz.0.140,6419,1):ocfs2_mknod:502 ERROR: status = -30
[   89.034594][ T6419] (syz.0.140,6419,1):ocfs2_create:676 ERROR: status = -30
[   89.109218][ T6438] loop4: detected capacity change from 0 to 256
[   89.147163][ T6419] syz.0.140 (6419) used greatest stack depth: 17712 bytes left
[   89.281745][ T6438] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   89.392848][ T5775] ocfs2: Unmounting device (7,0) on (node local)
[   89.466067][ T6438] exFAT-fs (loop4): invalid start cluster (520)
[   89.669195][ T6451] pim6reg: entered allmulticast mode
[   89.785459][ T6449] pim6reg: left allmulticast mode
[   90.011155][ T6458] loop4: detected capacity change from 0 to 4096
[   90.243279][ T6468] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.476244][ T6458] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   90.600357][ T6458] Remounting filesystem read-only
[   90.986363][ T6003] NILFS (loop4): discard dirty page: offset=8192, ino=6
[   91.022041][ T6003] NILFS (loop4): discard dirty block: blocknr=25, size=4096
[   91.151701][ T5814] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   91.375335][ T5814] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[   91.394722][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.421647][ T5814] usb 1-1: Product: syz
[   91.430609][ T5814] usb 1-1: Manufacturer: syz
[   91.446224][ T5814] usb 1-1: SerialNumber: syz
[   91.462760][ T5814] usb 1-1: config 0 descriptor??
[   91.479884][ T5814] hub 1-1:0.0: bad descriptor, ignoring hub
[   91.503137][ T5814] hub: probe of 1-1:0.0 failed with error -5
[   91.521002][ T5814] f81232 1-1:0.0: f81534a converter detected
[   91.533846][ T6478] loop2: detected capacity change from 0 to 32768
[   91.608898][ T6478] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.620893][ T6474] loop1: detected capacity change from 0 to 32768
[   91.700638][ T5814] usb 1-1: f81534a converter now attached to ttyUSB0
[   91.717959][ T6474] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   91.926932][ T6474] XFS (loop1): Ending clean mount
[   91.957935][ T6474] XFS (loop1): Quotacheck needed: Please wait.
[   92.027852][ T6474] XFS (loop1): Quotacheck: Done.
[   92.041882][ T5860] usb 1-1: USB disconnect, device number 5
[   92.071170][ T5860] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[   92.113634][ T6478] XFS (loop2): Ending clean mount
[   92.121342][ T5860] f81232 1-1:0.0: device disconnected
[   92.213630][ T6478] XFS (loop2): Quotacheck needed: Please wait.
[   92.303777][ T6478] XFS (loop2): Quotacheck: Done.
[   92.345610][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.537737][ T6535] loop4: detected capacity change from 0 to 512
[   92.636772][ T6535] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.161: corrupted in-inode xattr: invalid ea_ino
[   92.746723][ T6535] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.161: couldn't read orphan inode 15 (err -117)
[   92.783195][ T6535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.803524][ T5764] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.913735][ T6003] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.937974][ T6540] loop0: detected capacity change from 0 to 4096
[   93.170059][ T6548] veth0: entered promiscuous mode
[   93.190183][ T6547] veth0: left promiscuous mode
[   93.378407][ T6552] loop4: detected capacity change from 0 to 64
[   93.521476][ T6557] netlink: 'syz.2.169': attribute type 3 has an invalid length.
[   93.660235][ T6563] loop0: detected capacity change from 0 to 256
[   93.687988][ T6563] exfat: Deprecated parameter 'utf8'
[   93.750206][ T6563] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[   94.212955][ T6575] loop1: detected capacity change from 0 to 2048
[   94.221132][ T6575] EXT4-fs: Ignoring removed mblk_io_submit option
[   94.310278][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.403587][ T6561] loop4: detected capacity change from 0 to 32768
[   94.446194][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.573402][   T27] audit: type=1800 audit(1770428900.510:4): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.171" name="file2" dev="loop4" ino=5 res=0 errno=0
[   94.639793][ T6585] process 'syz.1.181' launched '/dev/fd/4' with NULL argv: empty string added
[   94.983803][ T6592] loop4: detected capacity change from 0 to 4096
[   95.018023][ T6592] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[   95.054942][ T6595] loop1: detected capacity change from 0 to 4096
[   95.084231][ T6595] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[   95.095797][ T6592] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   95.189980][ T6595] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   95.213302][ T6595] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[   95.557150][ T6602] loop0: detected capacity change from 0 to 16
[   95.606329][ T6602] erofs: (device loop0): mounted with root inode @ nid 36.
[   95.664511][ T6602] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1416] out[3560]
[   95.702686][ T6606] Zero length message leads to an empty skb
[   95.721944][ T6602] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 80 of nid 36
[   95.950627][ T6613] loop2: detected capacity change from 0 to 2048
[   95.994642][ T6618] loop1: detected capacity change from 0 to 16
[   95.999591][ T6614] loop0: detected capacity change from 0 to 4096
[   96.018461][ T6614] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   96.029662][ T6618] erofs: (device loop1): mounted with root inode @ nid 36.
[   96.086857][ T6614] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[   96.097801][ T6613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.114791][ T6618] capability: warning: `syz.1.195' uses deprecated v2 capabilities in a way that may be insecure
[   96.139951][ T6614] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[   96.173666][ T6613] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.246667][ T6614] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   96.249660][   T27] audit: type=1800 audit(1770428902.180:5): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.192" name="file0" dev="loop2" ino=13 res=0 errno=0
[   96.279269][ T6613] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3
[   96.280029][ T6614] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[   96.341786][ T6614] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   96.355343][ T6614] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[   96.382337][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.384464][ T6614] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   96.432954][ T6614] ntfs: volume version 3.1.
[   96.761043][  T786] kernel read not supported for file /dsp (pid: 786 comm: kworker/0:2)
[   96.962122][  T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   97.164097][  T786] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.174873][  T786] usb 5-1: config 0 interface 0 has no altsetting 0
[   97.189301][  T786] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[   97.221352][  T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.262108][  T786] usb 5-1: config 0 descriptor??
[   97.440239][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'.
[   97.456715][ T6655] loop0: detected capacity change from 0 to 2048
[   97.513006][ T6657] batman_adv: batadv0: Adding interface: macvtap0
[   97.519475][ T6657] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.571405][ T6660] loop2: detected capacity change from 0 to 128
[   97.579342][ T6657] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[   97.593284][ T6655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   97.629364][ T6660] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.645841][ T6660] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.715804][  T786] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x1
[   97.751876][  T786] holtek_kbd 0003:04D9:A055.0001: item fetching failed at offset 2/3
[   97.783672][ T6655] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   97.800766][ T6655] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[   97.807666][  T786] holtek_kbd: probe of 0003:04D9:A055.0001 failed with error -22
[   97.817263][ T6655] EXT4-fs (loop0): This should not happen!! Data will be lost
[   97.817263][ T6655] 
[   97.837364][ T6655] EXT4-fs (loop0): Total free blocks count 0
[   97.848867][ T6655] EXT4-fs (loop0): Free/Dirty block details
[   97.859480][ T6655] EXT4-fs (loop0): free_blocks=2415919104
[   97.861154][ T5764] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.872428][ T6655] EXT4-fs (loop0): dirty_blocks=32
[   97.880667][ T6655] EXT4-fs (loop0): Block reservation details
[   97.897409][ T6655] EXT4-fs (loop0): i_reserved_data_blocks=2
[   97.987009][ T5807] usb 5-1: USB disconnect, device number 3
[   98.097548][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   98.266648][ T6679] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   98.908353][ T6703] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[   99.117442][ T6716] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.131668][  T786] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   99.333725][  T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.358398][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   99.394540][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.419089][  T786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   99.440868][  T786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   99.460442][  T786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   99.472457][  T786] usb 2-1: Manufacturer: syz
[   99.505463][  T786] usb 2-1: config 0 descriptor??
[   99.611732][ T5827] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   99.634754][ T6729] loop2: detected capacity change from 0 to 1024
[   99.861998][ T5827] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.882211][ T5827] usb 1-1: config 0 interface 0 has no altsetting 0
[   99.890693][ T5827] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[   99.903180][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.911719][  T786] rc_core: IR keymap rc-hauppauge not found
[   99.917639][  T786] Registered IR keymap rc-empty
[   99.928157][   T11] hfsplus: bad catalog file entry
[   99.928775][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   99.944313][   T11] hfsplus: b-tree write err: -5, ino 3
[   99.949021][ T5827] usb 1-1: config 0 descriptor??
[   99.983620][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.023556][  T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  100.093881][  T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  100.100383][ T6738] loop2: detected capacity change from 0 to 1024
[  100.141428][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.176227][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'.
[  100.191903][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.205278][ T6738] hfsplus: bad catalog entry type
[  100.232505][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.272636][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.291046][   T11] hfsplus: b-tree write err: -5, ino 4
[  100.311759][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.377657][ T5827] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x1
[  100.377690][ T5827] holtek_kbd 0003:04D9:A055.0002: item fetching failed at offset 2/3
[  100.378958][ T5827] holtek_kbd: probe of 0003:04D9:A055.0002 failed with error -22
[  100.385706][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.411813][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.442741][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.474133][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.501739][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.547910][  T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  100.567188][ T5769] Bluetooth: hci1: command tx timeout
[  100.603996][  T786] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  100.661644][  T786] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  100.676354][ T5827] usb 1-1: USB disconnect, device number 6
[  100.721213][  T786] usb 2-1: USB disconnect, device number 6
[  101.181853][ T5827] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  101.411196][ T5827] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  101.431960][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.439977][ T5827] usb 5-1: Product: syz
[  101.456398][ T5827] usb 5-1: Manufacturer: syz
[  101.468002][ T5827] usb 5-1: SerialNumber: syz
[  101.484731][ T5827] usb 5-1: config 0 descriptor??
[  101.616648][  T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  101.707555][ T5827] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  101.771813][ T6795] loop0: detected capacity change from 0 to 8192
[  101.802278][ T6795] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  101.817846][  T786] usb 3-1: Using ep0 maxpacket: 32
[  101.849394][  T786] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.881676][ T6795] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  101.900611][ T6795] REISERFS (device loop0): using ordered data mode
[  101.900876][  T786] usb 3-1: config 0 interface 0 has no altsetting 0
[  101.908901][ T6795] reiserfs: using flush barriers
[  101.944601][  T786] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  101.960838][ T6795] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  101.979368][ T6795] REISERFS (device loop0): checking transaction log (loop0)
[  101.984600][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.013926][  T786] usb 3-1: config 0 descriptor??
[  102.017452][ T6795] REISERFS (device loop0): Using r5 hash to sort names
[  102.050209][ T6795] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  102.066089][ T6795] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  102.148687][ T6795] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  102.204456][ T6795] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  102.230043][ T6810] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  102.249938][ T6795] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  102.309321][ T5827] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  102.328978][ T5827] usb 5-1: USB disconnect, device number 4
[  102.490487][  T786] aquacomputer_d5next 0003:0C70:F00E.0003: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.2-1/input0
[  102.721002][ T6823] loop0: detected capacity change from 0 to 128
[  102.776249][ T6823] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  102.807000][ T6823] hpfs: filesystem error: improperly stopped
[  102.833583][ T6823] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  102.841378][ T6823] hpfs: You really don't want any checks? You are crazy...
[  102.908600][ T6823] hpfs: hpfs_map_sector(): read error
[  102.924834][ T6823] hpfs: code page support is disabled
[  102.932649][ T6823] hpfs: hpfs_map_4sectors(): unaligned read
[  102.938999][ T6823] hpfs: hpfs_map_4sectors(): unaligned read
[  102.947964][ T6823] hpfs: filesystem error: unable to find root dir
[  103.006984][ T6823] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  103.034851][ T5827] usb 3-1: USB disconnect, device number 4
[  103.201493][ T6835] loop1: detected capacity change from 0 to 256
[  103.230663][ T6835] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.255030][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  103.255042][   T27] audit: type=1800 audit(1770428909.190:7): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.247" name="file1" dev="loop1" ino=1048609 res=0 errno=0
[  103.294193][   T27] audit: type=1800 audit(1770428909.190:8): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.247" name="file1" dev="loop1" ino=1048609 res=0 errno=0
[  103.337397][ T6840] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  103.370903][ T6840] FAT-fs (loop1): Filesystem has been set read-only
[  103.412434][ T6840] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  104.198276][ T6868] Bluetooth: MGMT ver 1.22
[  104.421910][ T5827] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  104.631752][ T5827] usb 5-1: Using ep0 maxpacket: 16
[  104.650147][ T5827] usb 5-1: config 173 has too many interfaces: 43, using maximum allowed: 32
[  104.691849][ T5827] usb 5-1: config 173 has 1 interface, different from the descriptor's value: 43
[  104.701024][ T5827] usb 5-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.731342][ T5827] usb 5-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.770437][ T5827] usb 5-1: config 173 interface 0 has no altsetting 0
[  104.787530][ T5827] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  104.808473][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.960357][ T6887] loop2: detected capacity change from 0 to 4096
[  104.969382][ T6887] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  105.009380][ T6887] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  105.030628][ T6887] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  105.039351][ T6875] loop1: detected capacity change from 0 to 32768
[  105.081757][ T6887] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  105.101704][ T6887] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  105.127658][ T6887] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  105.152983][ T6887] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  105.178658][ T6887] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  105.182417][  T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  105.195748][ T6887] ntfs: volume version 3.1.
[  105.200954][ T6875] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.281756][ T5769] Bluetooth: hci1: command tx timeout
[  105.290102][ T5827] hid (null): nested delimiters
[  105.297516][ T5827] hid (null): nested delimiters
[  105.319969][ T5827] hid (null): nested delimiters
[  105.357477][ T5827] hid (null): report_id 24797 is invalid
[  105.364436][ T6875] XFS (loop1): Ending clean mount
[  105.377990][ T6875] XFS (loop1): Quotacheck needed: Please wait.
[  105.412386][  T786] usb 1-1: Using ep0 maxpacket: 16
[  105.419600][  T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.465249][  T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.498651][ T6875] XFS (loop1): Quotacheck: Done.
[  105.501803][  T786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  105.526955][ T5827] usb 5-1: USB disconnect, device number 5
[  105.536863][  T786] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  105.547510][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.562800][  T786] usb 1-1: config 0 descriptor??
[  105.756260][ T5771] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  106.024436][ T6909] loop2: detected capacity change from 0 to 256
[  106.062007][  T786] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input8
[  106.157177][  T786] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  106.238366][  T786] usb 1-1: USB disconnect, device number 7
[  106.399538][ T6916] fido_id[6916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  107.085418][ T6925] loop2: detected capacity change from 0 to 32768
[  107.241156][ T6925] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  107.573995][ T5764] ocfs2: Unmounting device (7,2) on (node local)
[  107.855384][ T6960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.934461][ T6962] loop0: detected capacity change from 0 to 2048
[  107.943185][ T6960] wireguard0: entered promiscuous mode
[  107.959253][ T6960] wireguard0: entered allmulticast mode
[  108.007587][ T6962]  loop0: p2 < > p4
[  108.029729][ T6962] loop0: p4 size 262144 extends beyond EOD, truncated
[  108.083895][ T6967] kvm: kvm [6966]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x1
[  108.294480][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  108.349905][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  108.665882][ T6991] netlink: 152 bytes leftover after parsing attributes in process `syz.0.298'.
[  108.674981][ T6991] tipc: Started in network mode
[  108.679853][ T6991] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  108.693804][ T6991] tipc: Enabled bearer <udp:syz0>, priority 10
[  108.866066][ T6989] loop2: detected capacity change from 0 to 32768
[  108.887437][ T6989] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  108.918648][ T6989] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  108.944882][ T6989] (syz.2.297,6989,0):ocfs2_read_blocks:239 ERROR: status = -12
[  108.953506][ T6989] (syz.2.297,6989,0):ocfs2_search_chain:1761 ERROR: status = -12
[  108.961763][ T6989] (syz.2.297,6989,0):ocfs2_search_chain:1871 ERROR: status = -12
[  108.969515][ T6989] (syz.2.297,6989,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -12
[  108.977966][ T6989] (syz.2.297,6989,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12
[  108.986980][ T6989] (syz.2.297,6989,0):__ocfs2_claim_clusters:2365 ERROR: status = -12
[  108.995123][ T6989] (syz.2.297,6989,0):__ocfs2_claim_clusters:2373 ERROR: status = -12
[  109.003255][ T6989] (syz.2.297,6989,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12
[  109.011936][ T6989] (syz.2.297,6989,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12
[  109.020546][ T6989] (syz.2.297,6989,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12
[  109.029690][ T6989] (syz.2.297,6989,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12
[  109.038910][ T6989] (syz.2.297,6989,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12
[  109.047680][ T6989] (syz.2.297,6989,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12
[  109.057422][ T6989] (syz.2.297,6989,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12
[  109.066535][ T6989] (syz.2.297,6989,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12
[  109.075635][ T6989] (syz.2.297,6989,0):ocfs2_symlink:1914 ERROR: status = -12
[  109.083114][ T6989] (syz.2.297,6989,0):ocfs2_symlink:2068 ERROR: status = -12
[  109.161206][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  109.239579][ T5764] ocfs2: Unmounting device (7,2) on (node local)
[  110.566293][ T7002] loop4: detected capacity change from 0 to 32768
[  110.574854][ T5860] tipc: Node number set to 4269801514
[  110.614389][ T7002] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.302 (7002)
[  111.051778][ T5769] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  111.100364][ T6998] loop0: detected capacity change from 0 to 262144
[  111.144055][ T7002] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  111.166073][ T6998] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.300 (6998)
[  111.194895][ T6998] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  111.205894][ T6998] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  111.211994][ T7002] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  111.215438][ T6998] BTRFS info (device loop0): using free space tree
[  111.273926][ T7002] BTRFS info (device loop4): using free space tree
[  111.379369][ T6998] BTRFS info (device loop0): enabling ssd optimizations
[  111.433498][ T7025] loop2: detected capacity change from 0 to 1024
[  111.465902][ T7002] BTRFS info (device loop4): enabling ssd optimizations
[  111.516845][ T7002] BTRFS info (device loop4): auto enabling async discard
[  111.696946][ T5775] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  111.776165][ T7049] loop1: detected capacity change from 0 to 512
[  111.809612][ T7049] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.841124][ T6003] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  111.900461][ T7049] EXT4-fs (loop1): Test dummy encryption mode enabled
[  111.911783][ T7049] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  111.996752][ T7049] EXT4-fs (loop1): 1 truncate cleaned up
[  112.068213][ T7049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.307647][   T27] kauditd_printk_skb: 12 callbacks suppressed
[  112.307670][   T27] audit: type=1326 audit(1770428918.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb8f9aeb9 code=0x7ffc0000
[  112.449103][   T27] audit: type=1326 audit(1770428918.270:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7febb8f9aeb9 code=0x7ffc0000
[  112.505035][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.568877][   T27] audit: type=1326 audit(1770428918.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb8f9aeb9 code=0x7ffc0000
[  112.660888][   T27] audit: type=1326 audit(1770428918.270:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb8f9aeb9 code=0x7ffc0000
[  112.802007][   T27] audit: type=1326 audit(1770428918.270:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7febb8f9aeb9 code=0x7ffc0000
[  112.861057][ T7071] loop4: detected capacity change from 0 to 128
[  112.893044][   T27] audit: type=1326 audit(1770428918.270:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb8f9aeb9 code=0x7ffc0000
[  112.934792][ T7072] autofs4:pid:7072:autofs_fill_super: called with bogus options
[  112.960810][ T7071] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  113.012846][   T27] audit: type=1326 audit(1770428918.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb8f9aeb9 code=0x7ffc0000
[  113.013932][ T7071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.836279][ T7091] mmap: syz.4.326 (7091) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  114.397295][ T7081] loop1: detected capacity change from 0 to 40427
[  114.444894][ T7081] F2FS-fs (loop1): invalid crc value
[  114.467458][ T7081] F2FS-fs (loop1): Found nat_bits in checkpoint
[  114.666352][ T7081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  114.818553][ T7103] f2fs_ckpt-7:1: attempt to access beyond end of device
[  114.818553][ T7103] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  114.845539][ T7103] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  115.276464][ T7121] program syz.0.338 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.404297][ T7124] loop2: detected capacity change from 0 to 16
[  115.432677][ T7124] erofs: (device loop2): mounted with root inode @ nid 36.
[  115.643143][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[  116.025742][ T7142] loop2: detected capacity change from 0 to 2048
[  116.062768][ T7142] UDF-fs: bad mount option "defcont‡Þð+Ì8rÛ8xtroot}®°oèDÉ·°BúpM#d%" or missing value
[  116.258794][ T7147] Bluetooth: MGMT ver 1.22
[  116.404134][ T7150] loop0: detected capacity change from 0 to 256
[  116.447998][ T7134] loop4: detected capacity change from 0 to 32768
[  116.478572][ T7150] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  116.620429][   T27] audit: type=1800 audit(1770428922.550:16): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.349" name="file1" dev="loop0" ino=1048611 res=0 errno=0
[  116.711688][   T27] audit: type=1800 audit(1770428922.580:17): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.349" name="file1" dev="loop0" ino=1048611 res=0 errno=0
[  117.446087][ T7178] loop2: detected capacity change from 0 to 1024
[  117.472621][ T7178] EXT4-fs: Ignoring removed oldalloc option
[  117.495280][ T7178] EXT4-fs: Ignoring removed bh option
[  117.513764][ T7178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.573450][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.783638][ T7185] EXT4-fs error (device loop2): mb_free_blocks:1954: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  117.869314][ T7172] loop4: detected capacity change from 0 to 32768
[  117.953249][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.974580][ T7172] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.053914][ T7174] loop0: detected capacity change from 0 to 32768
[  118.067393][ T7197] loop1: detected capacity change from 0 to 16
[  118.074712][ T7197] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  118.136569][ T7174] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.189726][ T7205] loop2: detected capacity change from 0 to 16
[  118.199768][ T7205] erofs: (device loop2): mounted with root inode @ nid 36.
[  118.239285][ T7174] XFS (loop0): Ending clean mount
[  118.290617][   T27] audit: type=1800 audit(1770428924.220:18): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.367" name="file1" dev="loop2" ino=86 res=0 errno=0
[  118.380074][ T7172] XFS (loop4): Ending clean mount
[  118.439194][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.597881][   T27] audit: type=1800 audit(1770428924.530:19): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.360" name="file2" dev="loop4" ino=9287 res=0 errno=0
[  118.704558][ T6003] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  119.261834][ T7230] loop6: detected capacity change from 0 to 524287999
[  119.338280][ T7235] xt_hashlimit: size too large, truncated to 1048576
[  119.474342][ T7239] program syz.2.380 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.807846][ T7251] loop4: detected capacity change from 0 to 524287936
[  120.146679][ T7256] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.239918][ T7256] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.359752][ T7256] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.371738][ T5807] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  120.450416][ T5764] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.584577][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.601670][ T5807] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  120.610727][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.655886][ T5807] usb 5-1: config 0 descriptor??
[  120.672273][ T5807] pwc: Askey VC010 type 2 USB webcam detected.
[  120.790100][ T7266] hfsplus: b-tree write err: -5, ino 3
[  120.842384][   T11] hfsplus: b-tree write err: -5, ino 3
[  120.984821][ T7268] EXT4-fs (loop2): orphan cleanup on readonly fs
[  121.070313][ T7268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.390: bg 0: block 248: padding at end of block bitmap is not set
[  121.092438][ T5807] pwc: recv_control_msg error -32 req 02 val 2b00
[  121.151370][ T7268] Quota error (device loop2): write_blk: dquota write failed
[  121.168361][ T7268] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  121.180019][ T7268] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.390: Failed to acquire dquot type 1
[  121.199926][ T7271] Context (ID=0x1) not attached to queue pair (handle=0x2:0x40)
[  121.227061][ T7268] EXT4-fs (loop2): 1 truncate cleaned up
[  121.245077][ T7268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  121.298218][ T7268] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  121.315144][ T5807] pwc: recv_control_msg error -71 req 02 val 2c00
[  121.333837][ T5807] pwc: recv_control_msg error -71 req 04 val 1000
[  121.358236][ T7268] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0
[  121.361853][ T5807] pwc: recv_control_msg error -71 req 04 val 1300
[  121.407231][ T5807] pwc: recv_control_msg error -71 req 04 val 1400
[  121.423395][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.427428][ T5807] pwc: recv_control_msg error -71 req 02 val 2000
[  121.469205][ T5807] pwc: recv_control_msg error -71 req 02 val 2100
[  121.486040][ T5807] pwc: recv_control_msg error -71 req 04 val 1500
[  121.502811][ T5807] pwc: recv_control_msg error -71 req 02 val 2500
[  121.521768][ T5807] pwc: recv_control_msg error -71 req 02 val 2400
[  121.546021][ T5807] pwc: recv_control_msg error -71 req 02 val 2600
[  121.569797][ T5807] pwc: recv_control_msg error -71 req 02 val 2900
[  121.592015][ T5807] pwc: recv_control_msg error -71 req 02 val 2800
[  121.606578][ T5807] pwc: recv_control_msg error -71 req 04 val 1100
[  121.627497][ T5807] pwc: recv_control_msg error -71 req 04 val 1200
[  121.643224][ T5807] pwc: Registered as video103.
[  121.673217][ T5807] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  121.711867][ T5807] usb 5-1: USB disconnect, device number 6
[  121.786393][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.395'.
[  122.230267][ T5827] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  122.246961][ T5827] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  122.254844][ T5827] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  122.280569][ T5827] hid-generic 0006:0004:0009.0006: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  122.430244][ T7295] fido_id[7295]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  122.481697][ T5807] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  122.697424][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.707399][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  122.730423][ T5807] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  122.751827][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.779889][ T5807] usb 3-1: config 0 descriptor??
[  122.836966][ T7294] set_capacity_and_notify: 3 callbacks suppressed
[  122.837052][ T7294] loop4: detected capacity change from 0 to 32768
[  122.877650][ T7294] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.402 (7294)
[  122.909701][ T7294] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  122.930083][ T7294] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  122.951712][ T7294] BTRFS info (device loop4): enabling disk space caching
[  122.958766][ T7294] BTRFS info (device loop4): force clearing of disk cache
[  123.006581][ T7294] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  123.031614][ T7294] BTRFS info (device loop4): use zstd compression, level 3
[  123.045718][ T7294] BTRFS info (device loop4): disk space caching is enabled
[  123.231018][ T5807] pantherlord 0003:0F30:0111.0007: item fetching failed at offset 2/5
[  123.246777][ T7294] BTRFS info (device loop4): enabling ssd optimizations
[  123.252270][ T5807] pantherlord 0003:0F30:0111.0007: parse failed
[  123.260024][ T5807] pantherlord: probe of 0003:0F30:0111.0007 failed with error -22
[  123.271746][ T7294] BTRFS info (device loop4): auto enabling async discard
[  123.291454][ T7294] BTRFS info (device loop4): rebuilding free space tree
[  123.352727][ T7294] BTRFS info (device loop4): disabling free space tree
[  123.359660][ T7294] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.406097][ T7294] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.505235][ T5807] usb 3-1: USB disconnect, device number 5
[  123.764388][ T6003] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  124.146038][ T7336] sp0: Synchronizing with TNC
[  124.236161][ T7335] [U] è``
[  124.432679][ T7343] loop1: detected capacity change from 0 to 256
[  124.445979][ T7341] loop4: detected capacity change from 0 to 2048
[  124.446010][ T7343] exfat: Deprecated parameter 'utf8'
[  124.458543][ T7343] exfat: Deprecated parameter 'utf8'
[  124.486410][ T7341] EXT4-fs: Ignoring removed bh option
[  124.519553][ T7343] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d)
[  124.580805][ T7341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.832770][ T3000] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  124.907056][ T3000] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  124.964866][ T3000] EXT4-fs (loop4): This should not happen!! Data will be lost
[  124.964866][ T3000] 
[  124.994849][ T3000] EXT4-fs (loop4): Total free blocks count 0
[  125.000855][ T3000] EXT4-fs (loop4): Free/Dirty block details
[  125.036870][ T3000] EXT4-fs (loop4): free_blocks=2415919104
[  125.051712][ T3000] EXT4-fs (loop4): dirty_blocks=16
[  125.057169][ T3000] EXT4-fs (loop4): Block reservation details
[  125.071711][ T3000] EXT4-fs (loop4): i_reserved_data_blocks=1
[  125.091512][ T6003] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.133986][ T7357] tmpfs: Cannot retroactively limit size
[  125.175791][ T3606] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  125.355878][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'.
[  125.378235][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.387540][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.391644][ T3606] usb 3-1: Using ep0 maxpacket: 32
[  125.405956][ T3606] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  125.432730][ T3606] usb 3-1: config 0 has no interface number 0
[  125.451674][ T3606] usb 3-1: config 0 interface 184 has no altsetting 0
[  125.464431][ T3606] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  125.491620][ T3606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.499631][ T3606] usb 3-1: Product: syz
[  125.531663][ T3606] usb 3-1: Manufacturer: syz
[  125.536281][ T3606] usb 3-1: SerialNumber: syz
[  125.553966][ T3606] usb 3-1: config 0 descriptor??
[  125.565033][ T3606] smsc75xx v1.0.0
[  125.676733][ T7367] loop4: detected capacity change from 0 to 1024
[  125.734215][ T7367] hfsplus: bad catalog entry type
[  125.823495][ T1110] hfsplus: b-tree write err: -5, ino 4
[  126.124850][ T7378] loop4: detected capacity change from 0 to 128
[  126.423356][ T3606] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  126.444844][ T3606] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  126.479689][ T3606] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  126.493808][ T2987] kworker/u4:9: attempt to access beyond end of device
[  126.493808][ T2987] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  126.531671][ T3606] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  126.541333][ T3606] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  126.578542][ T3606] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  126.602227][ T3606] smsc75xx: probe of 3-1:0.184 failed with error -71
[  126.623862][ T3606] usb 3-1: USB disconnect, device number 6
[  126.751253][ T5807] hid-generic 0005:0C45:1010.0008: item fetching failed at offset 3/5
[  126.777001][ T5807] hid-generic: probe of 0005:0C45:1010.0008 failed with error -22
[  127.451663][ T7419] syz.2.450 uses obsolete (PF_INET,SOCK_PACKET)
[  127.569435][ T7402] loop0: detected capacity change from 0 to 32768
[  127.615735][   T27] audit: type=1800 audit(1770428933.550:20): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.442" name="file1" dev="loop0" ino=4 res=0 errno=0
[  128.071770][    T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  128.088357][ T7434] sctp: [Deprecated]: syz.1.458 (pid 7434) Use of int in maxseg socket option.
[  128.088357][ T7434] Use struct sctp_assoc_value instead
[  128.266576][    T8] usb 5-1: Using ep0 maxpacket: 8
[  128.279869][    T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  128.296029][ T7426] loop2: detected capacity change from 0 to 32768
[  128.305418][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  128.331760][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  128.346411][ T7426] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.453 (7426)
[  128.360580][    T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  128.388756][    T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  128.401211][ T7426] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  128.420627][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.429267][ T7426] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  128.444444][ T7426] BTRFS info (device loop2): using free space tree
[  128.624904][ T7426] BTRFS info (device loop2): enabling ssd optimizations
[  128.645715][ T7426] BTRFS info (device loop2): auto enabling async discard
[  128.671921][    T8] usb 5-1: GET_CAPABILITIES returned 0
[  128.677445][    T8] usbtmc 5-1:16.0: can't read capabilities
[  128.886730][ T5814] usb 5-1: USB disconnect, device number 7
[  128.987287][ T5764] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  129.125102][ T5759] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (5759)
[  129.876168][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'.
[  129.891861][ T7492] loop2: detected capacity change from 0 to 64
[  130.040184][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'.
[  130.050581][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'.
[  130.068814][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'.
[  130.086811][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'.
[  130.211737][ T5827] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.261934][ T7479] loop0: detected capacity change from 0 to 32768
[  130.315024][   T27] audit: type=1800 audit(1770428936.250:21): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.470" name="file1" dev="loop0" ino=4 res=0 errno=0
[  130.369057][ T7479] syz.0.470: attempt to access beyond end of device
[  130.369057][ T7479] loop0: rw=34817, sector=4680064, nr_sectors = 120 limit=32768
[  130.415098][  T112] blkno = 8ed30, nblocks = f
[  130.419848][  T112] ERROR: (device loop0): dbFree: block to be freed is outside the map
[  130.419848][  T112] 
[  130.421677][ T5827] usb 2-1: Using ep0 maxpacket: 8
[  130.430486][  T112] ERROR: (device loop0): remounting filesystem as read-only
[  130.473780][ T5827] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  130.504404][ T5827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  130.543371][ T5827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  130.558503][ T5827] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.574210][ T5827] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  130.584329][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.820156][ T5827] usb 2-1: GET_CAPABILITIES returned 0
[  130.831686][ T5827] usbtmc 2-1:16.0: can't read capabilities
[  131.103148][ T5814] usb 2-1: USB disconnect, device number 7
[  131.891782][ T7552] program syz.4.506 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  132.228351][ T7562] input: syz1 as /devices/virtual/input/input10
[  132.591844][ T3606] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  132.744190][ T7573] loop0: detected capacity change from 0 to 256
[  132.796695][   T27] audit: type=1800 audit(1770428938.730:22): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.516" name="file1" dev="loop0" ino=1048613 res=0 errno=0
[  132.830761][ T7573] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  132.832611][ T3606] usb 5-1: Using ep0 maxpacket: 32
[  132.859419][ T7565] loop1: detected capacity change from 0 to 32768
[  132.884952][ T3606] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  132.894876][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  132.901175][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  132.901228][ T7573] FAT-fs (loop0): Filesystem has been set read-only
[  132.913486][ T3606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.961816][ T7573] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  132.976560][   T27] audit: type=1800 audit(1770428938.910:23): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.512" name="file1" dev="loop1" ino=4 res=0 errno=0
[  132.982083][ T3606] usb 5-1: config 0 descriptor??
[  133.045680][ T3606] gspca_main: sq930x-2.14.0 probing 041e:403c
[  133.493697][ T7591] dummy0: entered promiscuous mode
[  133.499159][ T7591] macvlan2: entered promiscuous mode
[  133.911665][ T3606] gspca_sq930x: reg_w 0105 bf00 failed -71
[  133.981862][ T3606] sq930x: probe of 5-1:0.0 failed with error -71
[  133.997549][ T3606] usb 5-1: USB disconnect, device number 8
[  134.231716][  T786] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  134.437821][  T786] usb 2-1: unable to get BOS descriptor set
[  134.446006][  T786] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  134.491671][  T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.505955][  T786] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  134.536063][  T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.546382][  T786] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  134.561644][  T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.579596][  T786] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  134.591457][  T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.613788][  T786] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  134.629684][  T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.651006][  T786] usb 2-1: string descriptor 0 read error: -22
[  134.659326][  T786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.674585][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.709149][  T786] usb 2-1: invalid UAC_HEADER (v1)
[  134.868707][  T786] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  134.925539][  T786] usb 2-1: USB disconnect, device number 8
[  135.203968][ T7638] netlink: 124 bytes leftover after parsing attributes in process `syz.4.542'.
[  135.337858][ T7644] loop4: detected capacity change from 0 to 256
[  135.396251][ T7622] loop2: detected capacity change from 0 to 40427
[  135.456425][ T7622] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  135.532941][ T7622] F2FS-fs (loop2): Image doesn't support compression
[  135.552623][ T7622] F2FS-fs (loop2): Image doesn't support compression
[  135.630540][ T7622] F2FS-fs (loop2): invalid crc value
[  135.721702][ T7622] F2FS-fs (loop2): Found nat_bits in checkpoint
[  135.921169][ T7655] bridge0: port 3(syz_tun) entered blocking state
[  135.935794][ T7655] bridge0: port 3(syz_tun) entered disabled state
[  135.944445][ T7655] syz_tun: entered allmulticast mode
[  135.965484][ T7655] syz_tun: entered promiscuous mode
[  136.079617][ T7622] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.325604][ T7643] loop0: detected capacity change from 0 to 40427
[  136.359655][ T7643] F2FS-fs (loop0): Invalid log sectorsize (131081)
[  136.375863][ T7643] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  136.408560][ T7643] F2FS-fs (loop0): invalid crc value
[  136.507501][ T5764] syz-executor: attempt to access beyond end of device
[  136.507501][ T5764] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  136.586926][ T5764] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  136.755216][ T7643] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  136.772107][ T7643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  136.784193][ T7671] loop4: detected capacity change from 0 to 64
[  136.813384][ T7671] hfs: unable to locate alternate MDB
[  136.819155][ T7671] hfs: continuing without an alternate MDB
[  136.963022][ T7673] loop1: detected capacity change from 0 to 8
[  137.000535][ T7673] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  137.031218][ T5757] udevd[5757]: incorrect cramfs checksum on /dev/loop1
[  137.073987][ T7675] /dev/loop0: Can't open blockdev
[  137.142266][ T5758] udevd[5758]: incorrect cramfs checksum on /dev/loop1
[  137.298669][ T7677] loop4: detected capacity change from 0 to 512
[  137.306676][ T7679] loop1: detected capacity change from 0 to 16
[  137.342641][ T7679] erofs: (device loop1): mounted with root inode @ nid 36.
[  137.357538][ T7677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  137.391476][ T7679] syz.1.561: attempt to access beyond end of device
[  137.391476][ T7679] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16
[  137.442678][ T7679] syz.1.561: attempt to access beyond end of device
[  137.442678][ T7679] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16
[  137.465079][ T7677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.520346][ T7677] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.544515][ T7683] syz.1.561: attempt to access beyond end of device
[  137.544515][ T7683] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  137.632391][   T27] audit: type=1800 audit(1770428943.560:24): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.562" name="file2" dev="loop4" ino=16 res=0 errno=0
[  137.730287][ T5771] BUG: Bad page state in process syz-executor  pfn:26db6
[  137.733039][ T6003] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.737973][ T5771] page:ffffea00009b6d80 refcount:0 mapcount:0 mapping:ffff88805de087c8 index:0x2 pfn:0x26db6
[  137.758635][ T5771] aops:z_erofs_cache_aops ino:0
[  137.764050][ T5771] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  137.772133][ T5771] page_type: 0xffffffff()
[  137.776477][ T5771] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805de087c8
[  137.785254][ T5771] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[  137.793889][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  137.801179][ T5771] page_owner tracks the page as allocated
[  137.807204][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7679, tgid 7678 (syz.1.561), ts 137390966546, free_ts 137122333103
[  137.829749][ T5771]  post_alloc_hook+0x1c1/0x200
[  137.834866][ T5771]  get_page_from_freelist+0x1951/0x19e0
[  137.840438][ T5771]  __alloc_pages+0x1f0/0x460
[  137.845137][ T5771]  z_erofs_do_read_page+0x2181/0x36b0
[  137.850533][ T5771]  z_erofs_readahead+0x88b/0xda0
[  137.855568][ T5771]  read_pages+0x189/0x850
[  137.859936][ T5771]  page_cache_ra_unbounded+0x68a/0x770
[  137.865442][ T5771]  force_page_cache_ra+0x2c1/0x320
[  137.870564][ T5771]  generic_fadvise+0x47e/0x780
[  137.875365][ T5771]  __x64_sys_fadvise64+0x140/0x180
[  137.880490][ T5771]  do_syscall_64+0x55/0xa0
[  137.884958][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  137.890861][ T5771] page last free stack trace:
[  137.895591][ T5771]  free_unref_page_prepare+0x7b2/0x8c0
[  137.901064][ T5771]  free_unref_page+0x32/0x2e0
[  137.905782][ T5771]  vfree+0x1a6/0x320
[  137.909688][ T5771]  delayed_vfree_work+0x55/0x80
[  137.914592][ T5771]  process_scheduled_works+0xa5d/0x15d0
[  137.920152][ T5771]  worker_thread+0xa55/0xfc0
[  137.924851][ T5771]  kthread+0x2fa/0x390
[  137.929503][ T5771]  ret_from_fork+0x48/0x80
[  137.934056][ T5771]  ret_from_fork_asm+0x11/0x20
[  137.938839][ T5771] Modules linked in:
[  137.942816][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Not tainted syzkaller #0
[  137.950365][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  137.960418][ T5771] Call Trace:
[  137.963690][ T5771]  <TASK>
[  137.966608][ T5771]  dump_stack_lvl+0x18c/0x250
[  137.971281][ T5771]  ? show_regs_print_info+0x20/0x20
[  137.976469][ T5771]  ? swiotlb_print_info+0x70/0x70
[  137.981496][ T5771]  bad_page+0x14b/0x170
[  137.985642][ T5771]  free_unref_page_prepare+0x85f/0x8c0
[  137.991095][ T5771]  free_unref_page+0x32/0x2e0
[  137.995765][ T5771]  ? __folio_put+0xef/0x210
[  138.000256][ T5771]  erofs_try_to_free_all_cached_pages+0x295/0x5f0
[  138.006674][ T5771]  erofs_shrink_workstation+0x11f/0x290
[  138.012219][ T5771]  ? erofs_shrinker_unregister+0x170/0x170
[  138.018014][ T5771]  ? io_schedule+0xd0/0xd0
[  138.022422][ T5771]  ? kobject_put+0x428/0x460
[  138.027002][ T5771]  erofs_shrinker_unregister+0x5d/0x170
[  138.032540][ T5771]  erofs_put_super+0x4e/0x150
[  138.037211][ T5771]  ? erofs_free_inode+0xb0/0xb0
[  138.042056][ T5771]  generic_shutdown_super+0x134/0x2b0
[  138.047415][ T5771]  kill_block_super+0x44/0x90
[  138.052079][ T5771]  erofs_kill_sb+0x4c/0x140
[  138.056576][ T5771]  deactivate_locked_super+0x97/0x100
[  138.061936][ T5771]  cleanup_mnt+0x43b/0x4d0
[  138.066344][ T5771]  task_work_run+0x1d4/0x260
[  138.070928][ T5771]  ? task_work_cancel+0x220/0x220
[  138.075949][ T5771]  ? exit_to_user_mode_loop+0x3b/0x110
[  138.081400][ T5771]  exit_to_user_mode_loop+0xe6/0x110
[  138.086677][ T5771]  exit_to_user_mode_prepare+0xee/0x180
[  138.092216][ T5771]  syscall_exit_to_user_mode+0x1a/0x50
[  138.097661][ T5771]  do_syscall_64+0x61/0xa0
[  138.102066][ T5771]  ? clear_bhb_loop+0x40/0x90
[  138.106729][ T5771]  ? clear_bhb_loop+0x40/0x90
[  138.111391][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.117271][ T5771] RIP: 0033:0x7f0e6879c117
[  138.121682][ T5771] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  138.141274][ T5771] RSP: 002b:00007ffe923e9d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  138.149677][ T5771] RAX: 0000000000000000 RBX: 00007f0e6880471f RCX: 00007f0e6879c117
[  138.157635][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe923e9df0
[  138.165592][ T5771] RBP: 00007ffe923e9df0 R08: 00007ffe923eadf0 R09: 00000000ffffffff
[  138.173549][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe923eae80
[  138.181506][ T5771] R13: 00007f0e6880471f R14: 0000000000021980 R15: 00007ffe923eaec0
[  138.189475][ T5771]  </TASK>
[  138.193501][ T5771] Disabling lock debugging due to kernel taint
[  138.199663][ T5771] BUG: Bad page state in process syz-executor  pfn:681fb
[  138.206830][ T5771] page:ffffea0001a07ec0 refcount:0 mapcount:0 mapping:ffff88805de087c8 index:0x3 pfn:0x681fb
[  138.217009][ T5771] aops:z_erofs_cache_aops ino:0
[  138.221905][ T5771] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  138.229618][ T5771] page_type: 0xffffffff()
[  138.233962][ T5771] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805de087c8
[  138.243082][ T5771] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000
[  138.251739][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  138.259019][ T5771] page_owner tracks the page as allocated
[  138.264763][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7679, tgid 7678 (syz.1.561), ts 137390983687, free_ts 137122321738
[  138.286681][ T5771]  post_alloc_hook+0x1c1/0x200
[  138.291456][ T5771]  get_page_from_freelist+0x1951/0x19e0
[  138.297048][ T5771]  __alloc_pages+0x1f0/0x460
[  138.301682][ T5771]  z_erofs_do_read_page+0x2181/0x36b0
[  138.307060][ T5771]  z_erofs_readahead+0x88b/0xda0
[  138.312038][ T5771]  read_pages+0x189/0x850
[  138.316370][ T5771]  page_cache_ra_unbounded+0x68a/0x770
[  138.321854][ T5771]  force_page_cache_ra+0x2c1/0x320
[  138.326974][ T5771]  generic_fadvise+0x47e/0x780
[  138.331776][ T5771]  __x64_sys_fadvise64+0x140/0x180
[  138.336897][ T5771]  do_syscall_64+0x55/0xa0
[  138.341903][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.347803][ T5771] page last free stack trace:
[  138.352577][ T5771]  free_unref_page_prepare+0x7b2/0x8c0
[  138.358048][ T5771]  free_unref_page+0x32/0x2e0
[  138.362764][ T5771]  vfree+0x1a6/0x320
[  138.366670][ T5771]  delayed_vfree_work+0x55/0x80
[  138.371525][ T5771]  process_scheduled_works+0xa5d/0x15d0
[  138.377115][ T5771]  worker_thread+0xa55/0xfc0
[  138.381746][ T5771]  kthread+0x2fa/0x390
[  138.385816][ T5771]  ret_from_fork+0x48/0x80
[  138.390239][ T5771]  ret_from_fork_asm+0x11/0x20
[  138.395031][ T5771] Modules linked in:
[  138.398923][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Tainted: G    B              syzkaller #0
[  138.407946][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  138.418003][ T5771] Call Trace:
[  138.421292][ T5771]  <TASK>
[  138.424217][ T5771]  dump_stack_lvl+0x18c/0x250
[  138.428887][ T5771]  ? show_regs_print_info+0x20/0x20
[  138.434076][ T5771]  ? swiotlb_print_info+0x70/0x70
[  138.439092][ T5771]  bad_page+0x14b/0x170
[  138.443233][ T5771]  free_unref_page_prepare+0x85f/0x8c0
[  138.448685][ T5771]  free_unref_page+0x32/0x2e0
[  138.453348][ T5771]  ? __folio_put+0xef/0x210
[  138.457841][ T5771]  erofs_try_to_free_all_cached_pages+0x295/0x5f0
[  138.464242][ T5771]  erofs_shrink_workstation+0x11f/0x290
[  138.469773][ T5771]  ? erofs_shrinker_unregister+0x170/0x170
[  138.475560][ T5771]  ? io_schedule+0xd0/0xd0
[  138.479965][ T5771]  ? kobject_put+0x428/0x460
[  138.484539][ T5771]  erofs_shrinker_unregister+0x5d/0x170
[  138.490067][ T5771]  erofs_put_super+0x4e/0x150
[  138.494731][ T5771]  ? erofs_free_inode+0xb0/0xb0
[  138.499566][ T5771]  generic_shutdown_super+0x134/0x2b0
[  138.504921][ T5771]  kill_block_super+0x44/0x90
[  138.509584][ T5771]  erofs_kill_sb+0x4c/0x140
[  138.514077][ T5771]  deactivate_locked_super+0x97/0x100
[  138.519431][ T5771]  cleanup_mnt+0x43b/0x4d0
[  138.523837][ T5771]  task_work_run+0x1d4/0x260
[  138.528413][ T5771]  ? task_work_cancel+0x220/0x220
[  138.533427][ T5771]  ? exit_to_user_mode_loop+0x3b/0x110
[  138.538873][ T5771]  exit_to_user_mode_loop+0xe6/0x110
[  138.544147][ T5771]  exit_to_user_mode_prepare+0xee/0x180
[  138.549677][ T5771]  syscall_exit_to_user_mode+0x1a/0x50
[  138.555121][ T5771]  do_syscall_64+0x61/0xa0
[  138.559523][ T5771]  ? clear_bhb_loop+0x40/0x90
[  138.564182][ T5771]  ? clear_bhb_loop+0x40/0x90
[  138.568849][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.574736][ T5771] RIP: 0033:0x7f0e6879c117
[  138.579142][ T5771] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  138.598751][ T5771] RSP: 002b:00007ffe923e9d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  138.607153][ T5771] RAX: 0000000000000000 RBX: 00007f0e6880471f RCX: 00007f0e6879c117
[  138.615111][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe923e9df0
[  138.623068][ T5771] RBP: 00007ffe923e9df0 R08: 00007ffe923eadf0 R09: 00000000ffffffff
[  138.631076][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe923eae80
[  138.639032][ T5771] R13: 00007f0e6880471f R14: 0000000000021980 R15: 00007ffe923eaec0
[  138.646997][ T5771]  </TASK>
[  138.650802][ T5771] BUG: Bad page state in process syz-executor  pfn:2c84e
[  138.657986][ T5771] page:ffffea0000b21380 refcount:0 mapcount:0 mapping:ffff88805de087c8 index:0x4 pfn:0x2c84e
[  138.668177][ T5771] aops:z_erofs_cache_aops ino:0
[  138.673083][ T5771] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  138.680802][ T5771] page_type: 0xffffffff()
[  138.685168][ T5771] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805de087c8
[  138.693780][ T5771] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[  138.702386][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  138.709662][ T5771] page_owner tracks the page as allocated
[  138.715391][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7679, tgid 7678 (syz.1.561), ts 137391000904, free_ts 137122309145
[  138.737427][ T5771]  post_alloc_hook+0x1c1/0x200
[  138.742228][ T5771]  get_page_from_freelist+0x1951/0x19e0
[  138.748311][ T5771]  __alloc_pages+0x1f0/0x460
[  138.753001][ T5771]  z_erofs_do_read_page+0x2181/0x36b0
[  138.758379][ T5771]  z_erofs_readahead+0x88b/0xda0
[  138.763357][ T5771]  read_pages+0x189/0x850
[  138.767689][ T5771]  page_cache_ra_unbounded+0x68a/0x770
[  138.773177][ T5771]  force_page_cache_ra+0x2c1/0x320
[  138.778291][ T5771]  generic_fadvise+0x47e/0x780
[  138.783086][ T5771]  __x64_sys_fadvise64+0x140/0x180
[  138.788203][ T5771]  do_syscall_64+0x55/0xa0
[  138.792651][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.798547][ T5771] page last free stack trace:
[  138.803241][ T5771]  free_unref_page_prepare+0x7b2/0x8c0
[  138.808707][ T5771]  free_unref_page+0x32/0x2e0
[  138.813418][ T5771]  vfree+0x1a6/0x320
[  138.817317][ T5771]  delayed_vfree_work+0x55/0x80
[  138.822207][ T5771]  process_scheduled_works+0xa5d/0x15d0
[  138.827759][ T5771]  worker_thread+0xa55/0xfc0
[  138.832396][ T5771]  kthread+0x2fa/0x390
[  138.836469][ T5771]  ret_from_fork+0x48/0x80
[  138.840892][ T5771]  ret_from_fork_asm+0x11/0x20
[  138.845702][ T5771] Modules linked in:
[  138.849601][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Tainted: G    B              syzkaller #0
[  138.858623][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  138.868678][ T5771] Call Trace:
[  138.871955][ T5771]  <TASK>
[  138.874888][ T5771]  dump_stack_lvl+0x18c/0x250
[  138.879574][ T5771]  ? show_regs_print_info+0x20/0x20
[  138.884783][ T5771]  ? swiotlb_print_info+0x70/0x70
[  138.889834][ T5771]  bad_page+0x14b/0x170
[  138.893992][ T5771]  free_unref_page_prepare+0x85f/0x8c0
[  138.899464][ T5771]  free_unref_page+0x32/0x2e0
[  138.904152][ T5771]  ? __folio_put+0xef/0x210
[  138.908658][ T5771]  erofs_try_to_free_all_cached_pages+0x295/0x5f0
[  138.915079][ T5771]  erofs_shrink_workstation+0x11f/0x290
[  138.920631][ T5771]  ? erofs_shrinker_unregister+0x170/0x170
[  138.926435][ T5771]  ? io_schedule+0xd0/0xd0
[  138.930844][ T5771]  ? kobject_put+0x428/0x460
[  138.935422][ T5771]  erofs_shrinker_unregister+0x5d/0x170
[  138.940952][ T5771]  erofs_put_super+0x4e/0x150
[  138.945619][ T5771]  ? erofs_free_inode+0xb0/0xb0
[  138.950455][ T5771]  generic_shutdown_super+0x134/0x2b0
[  138.955814][ T5771]  kill_block_super+0x44/0x90
[  138.960476][ T5771]  erofs_kill_sb+0x4c/0x140
[  138.964968][ T5771]  deactivate_locked_super+0x97/0x100
[  138.970325][ T5771]  cleanup_mnt+0x43b/0x4d0
[  138.974730][ T5771]  task_work_run+0x1d4/0x260
[  138.979307][ T5771]  ? task_work_cancel+0x220/0x220
[  138.984319][ T5771]  ? exit_to_user_mode_loop+0x3b/0x110
[  138.989765][ T5771]  exit_to_user_mode_loop+0xe6/0x110
[  138.995039][ T5771]  exit_to_user_mode_prepare+0xee/0x180
[  139.000572][ T5771]  syscall_exit_to_user_mode+0x1a/0x50
[  139.006014][ T5771]  do_syscall_64+0x61/0xa0
[  139.010414][ T5771]  ? clear_bhb_loop+0x40/0x90
[  139.015073][ T5771]  ? clear_bhb_loop+0x40/0x90
[  139.019734][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.025622][ T5771] RIP: 0033:0x7f0e6879c117
[  139.030026][ T5771] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  139.049620][ T5771] RSP: 002b:00007ffe923e9d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  139.058021][ T5771] RAX: 0000000000000000 RBX: 00007f0e6880471f RCX: 00007f0e6879c117
[  139.065980][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe923e9df0
[  139.073936][ T5771] RBP: 00007ffe923e9df0 R08: 00007ffe923eadf0 R09: 00000000ffffffff
[  139.081896][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe923eae80
[  139.089850][ T5771] R13: 00007f0e6880471f R14: 0000000000021980 R15: 00007ffe923eaec0
[  139.097814][ T5771]  </TASK>
[  139.288143][ T7690] loop2: detected capacity change from 0 to 32768