last executing test programs:

3.584356336s ago: executing program 2 (id=252):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x41, 0xb210, 0x0, 0x0}, {0x9, 0xa200, 0xffffffffffffff5c, 0x0}], 0x2})

2.433931785s ago: executing program 0 (id=273):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c000000100001042dbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058006001f00ff"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.375443912s ago: executing program 1 (id=274):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
ppoll(&(0x7f00000000c0)=[{r1, 0x2004}], 0x1, 0x0, 0x0, 0x0)

2.35344896s ago: executing program 2 (id=275):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xe058, [{0x3, 0x2, 0xe}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x28)

2.283363691s ago: executing program 0 (id=276):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x86)
mknodat$loop(r4, &(0x7f0000000100)='./file0\x00', 0xffffc000, 0x1)

2.001581181s ago: executing program 2 (id=277):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

1.554752695s ago: executing program 2 (id=278):
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1.444640084s ago: executing program 2 (id=279):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {0x1, 0x0, 0x4000}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000)

1.282500505s ago: executing program 2 (id=280):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1b)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
truncate(&(0x7f0000000240)='./file1\x00', 0xd52d)

974.73577ms ago: executing program 0 (id=281):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@map, 0xffffffffffffffff, 0x17}, 0x20)

892.61009ms ago: executing program 0 (id=282):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
connect$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

801.346344ms ago: executing program 0 (id=283):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

800.714723ms ago: executing program 1 (id=284):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

613.318335ms ago: executing program 0 (id=285):
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000040)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@cpuset_v2_mode}]})

493.465626ms ago: executing program 1 (id=286):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000100001ff0f000000000000000000000a38000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0)

445.447883ms ago: executing program 1 (id=287):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02"], 0x120}}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804)

209.199199ms ago: executing program 1 (id=288):
r0 = socket$xdp(0x2c, 0x3, 0x0)
accept$nfc_llcp(r0, 0x0, 0x0)

0s ago: executing program 1 (id=289):
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
syz_open_dev$sndpcmc(0x0, 0xb, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22633' (ED25519) to the list of known hosts.
syzkaller login: [   58.322311][ T5810] cgroup: Unknown subsys name 'net'
[   58.472063][ T5810] cgroup: Unknown subsys name 'cpuset'
[   58.477956][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.987508][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.596466][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.600884][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.604175][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.607875][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.609317][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.611242][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.615042][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.619642][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.624453][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.627683][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.665303][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.670514][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.673683][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.677886][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.681794][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.054750][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   67.083671][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   67.163749][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   67.293713][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.297175][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.300571][ T5824] bridge_slave_0: entered allmulticast mode
[   67.304484][ T5824] bridge_slave_0: entered promiscuous mode
[   67.315476][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.318341][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.321554][ T5833] bridge_slave_0: entered allmulticast mode
[   67.325398][ T5833] bridge_slave_0: entered promiscuous mode
[   67.330331][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.333105][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.336096][ T5833] bridge_slave_1: entered allmulticast mode
[   67.340422][ T5833] bridge_slave_1: entered promiscuous mode
[   67.344648][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.347438][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.350496][ T5824] bridge_slave_1: entered allmulticast mode
[   67.354265][ T5824] bridge_slave_1: entered promiscuous mode
[   67.444697][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.452715][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.456762][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.460510][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.463619][ T5825] bridge_slave_0: entered allmulticast mode
[   67.467428][ T5825] bridge_slave_0: entered promiscuous mode
[   67.475285][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.494881][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.499433][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.502379][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.505294][ T5825] bridge_slave_1: entered allmulticast mode
[   67.509382][ T5825] bridge_slave_1: entered promiscuous mode
[   67.582168][ T5833] team0: Port device team_slave_0 added
[   67.586300][ T5824] team0: Port device team_slave_0 added
[   67.592525][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.597554][ T5824] team0: Port device team_slave_1 added
[   67.603032][ T5833] team0: Port device team_slave_1 added
[   67.621197][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.691423][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.694106][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.704822][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.710859][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.713637][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.725045][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.731123][ T5825] team0: Port device team_slave_0 added
[   67.734280][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.736966][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.747460][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.752750][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.755293][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.765001][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.770966][ T5825] team0: Port device team_slave_1 added
[   67.804118][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.806822][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.817758][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.839223][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.841869][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.852798][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.890348][ T5833] hsr_slave_0: entered promiscuous mode
[   67.893471][ T5833] hsr_slave_1: entered promiscuous mode
[   67.916138][ T5824] hsr_slave_0: entered promiscuous mode
[   67.919838][ T5824] hsr_slave_1: entered promiscuous mode
[   67.922701][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   67.925345][ T5824] Cannot create hsr debugfs directory
[   67.987111][ T5825] hsr_slave_0: entered promiscuous mode
[   67.991762][ T5825] hsr_slave_1: entered promiscuous mode
[   67.994501][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   67.996688][ T5825] Cannot create hsr debugfs directory
[   68.339580][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.349747][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.363873][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.375364][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.412565][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.417831][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.436945][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.442549][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.500493][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.511614][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.522549][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.531296][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.654361][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.659754][   T55] Bluetooth: hci0: command tx timeout
[   68.661674][ T5829] Bluetooth: hci1: command tx timeout
[   68.686321][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.700180][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   68.710567][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.724417][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.727552][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.739656][ T5829] Bluetooth: hci2: command tx timeout
[   68.745550][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   68.751140][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.754120][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.772908][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.775864][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.788606][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.791451][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.808854][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   68.843848][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.846734][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.878221][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.881393][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.971001][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.146340][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.171651][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.181905][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.235241][ T5824] veth0_vlan: entered promiscuous mode
[   69.273824][ T5824] veth1_vlan: entered promiscuous mode
[   69.298309][ T5825] veth0_vlan: entered promiscuous mode
[   69.305524][ T5833] veth0_vlan: entered promiscuous mode
[   69.325898][ T5825] veth1_vlan: entered promiscuous mode
[   69.332428][ T5824] veth0_macvtap: entered promiscuous mode
[   69.337797][ T5833] veth1_vlan: entered promiscuous mode
[   69.350532][ T5824] veth1_macvtap: entered promiscuous mode
[   69.382169][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.397180][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.421810][ T5833] veth0_macvtap: entered promiscuous mode
[   69.425730][ T5825] veth0_macvtap: entered promiscuous mode
[   69.437051][ T5833] veth1_macvtap: entered promiscuous mode
[   69.443539][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.447368][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.456130][ T5825] veth1_macvtap: entered promiscuous mode
[   69.461192][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.472143][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.504876][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.515765][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.534540][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.551714][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.575955][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.581835][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.603116][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.626723][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.631922][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.635188][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.643360][  T418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.650752][  T418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.661424][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.665207][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.722139][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.725818][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.805536][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.818251][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.825844][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.826277][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.831206][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.879782][  T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.882794][  T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.916274][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.920103][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.937294][ T5892] tls_set_device_offload_rx: netdev not found
[   70.543432][ T5920] loop0: detected capacity change from 0 to 2048
[   70.569565][ T5920] NILFS (loop0): invalid segment: Inconsistency found
[   70.571922][ T5920] NILFS (loop0): trying rollback from an earlier position
[   70.627225][ T5920] NILFS (loop0): recovery complete
[   70.644856][ T5921] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.739726][   T55] Bluetooth: hci0: command tx timeout
[   70.743177][ T5829] Bluetooth: hci1: command tx timeout
[   70.818791][ T5829] Bluetooth: hci2: command tx timeout
[   70.826141][ T5922] process 'syz.1.11' launched '/dev/fd/3' with NULL argv: empty string added
[   70.994570][ T5929] loop2: detected capacity change from 0 to 128
[   71.245827][ T5940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'.
[   71.250455][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[   71.307407][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.313919][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.413851][ T5954] mmap: syz.2.24 (5954): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   71.543648][ T5963] loop1: detected capacity change from 0 to 512
[   71.548775][ T5963] =======================================================
[   71.548775][ T5963] WARNING: The mand mount option has been deprecated and
[   71.548775][ T5963]          and is ignored by this kernel. Remove the mand
[   71.548775][ T5963]          option from the mount to silence this warning.
[   71.548775][ T5963] =======================================================
[   71.613377][ T5963] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.28: Invalid inode bitmap blk 4 in block_group 0
[   71.624430][ T5963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.649886][ T5963] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.28: iget: bad extended attribute block 1
[   71.714392][ T5963] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[   71.756375][ T5967] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.783771][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.321582][   T33] audit: type=1326 audit(1759215076.237:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.37" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7fc00000
[   72.357354][ T5995] loop1: detected capacity change from 0 to 256
[   72.375277][ T5995] mmap: syz.1.40 (5995) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   72.397201][ T5995] syz.1.40: attempt to access beyond end of device
[   72.397201][ T5995] loop1: rw=2049, sector=256, nr_sectors = 68 limit=256
[   72.407074][ T5995] syz.1.40: attempt to access beyond end of device
[   72.407074][ T5995] loop1: rw=34817, sector=261, nr_sectors = 27 limit=256
[   72.820103][   T55] Bluetooth: hci0: command tx timeout
[   72.822305][ T5829] Bluetooth: hci1: command tx timeout
[   72.887098][   T33] audit: type=1326 audit(1759215076.797:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.37" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7fc00000
[   72.901679][ T5829] Bluetooth: hci2: command tx timeout
[   72.912305][ T6008] netlink: 'syz.0.46': attribute type 1 has an invalid length.
[   72.950063][ T6004] loop1: detected capacity change from 0 to 32768
[   72.993866][ T5835]  loop1: p1 p3 < >
[   73.022414][ T6004]  loop1: p1 p3 < >
[   73.106952][ T6017] netem: incorrect ge model size
[   73.116893][ T6017] netem: change failed
[   73.381416][ T6030] netlink: 'syz.2.58': attribute type 3 has an invalid length.
[   73.424903][   T33] audit: type=1326 audit(1759215077.337:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.446143][   T33] audit: type=1326 audit(1759215077.337:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.460246][   T33] audit: type=1326 audit(1759215077.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.473755][   T33] audit: type=1326 audit(1759215077.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.485825][   T33] audit: type=1326 audit(1759215077.357:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.497298][   T33] audit: type=1326 audit(1759215077.357:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.506079][   T33] audit: type=1326 audit(1759215077.357:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.516308][   T33] audit: type=1326 audit(1759215077.357:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.59" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05df8ec29 code=0x7ffc0000
[   73.585025][ T6040] sctp: [Deprecated]: syz.2.62 (pid 6040) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.585025][ T6040] Use struct sctp_sack_info instead
[   73.670077][  T970] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.828789][  T970] usb 1-1: Using ep0 maxpacket: 32
[   73.833716][  T970] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   73.836138][  T970] usb 1-1: config 0 has no interface number 0
[   73.842318][  T970] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   73.845755][  T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.850407][  T970] usb 1-1: Product: syz
[   73.852011][  T970] usb 1-1: Manufacturer: syz
[   73.853749][  T970] usb 1-1: SerialNumber: syz
[   73.863846][  T970] usb 1-1: config 0 descriptor??
[   73.873287][  T970] smsc95xx v2.0.0
[   74.276722][  T970] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[   74.280242][  T970] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   74.720454][ T6063] loop2: detected capacity change from 0 to 128
[   74.766629][ T6063] syz.2.72: attempt to access beyond end of device
[   74.766629][ T6063] loop2: rw=2049, sector=140, nr_sectors = 8 limit=128
[   74.771690][ T6063] syz.2.72: attempt to access beyond end of device
[   74.771690][ T6063] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128
[   74.777161][ T6063] Buffer I/O error on dev loop2, logical block 156, lost async page write
[   74.783508][ T6063] syz.2.72: attempt to access beyond end of device
[   74.783508][ T6063] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128
[   74.789630][ T6063] Buffer I/O error on dev loop2, logical block 157, lost async page write
[   74.793085][ T6063] syz.2.72: attempt to access beyond end of device
[   74.793085][ T6063] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128
[   74.798311][ T6063] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   74.803970][ T6063] syz.2.72: attempt to access beyond end of device
[   74.803970][ T6063] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128
[   74.810080][ T6063] Buffer I/O error on dev loop2, logical block 159, lost async page write
[   74.813663][ T6063] syz.2.72: attempt to access beyond end of device
[   74.813663][ T6063] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128
[   74.819797][ T6063] Buffer I/O error on dev loop2, logical block 160, lost async page write
[   74.823326][ T6063] syz.2.72: attempt to access beyond end of device
[   74.823326][ T6063] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128
[   74.828886][ T6063] Buffer I/O error on dev loop2, logical block 161, lost async page write
[   74.832682][ T6063] syz.2.72: attempt to access beyond end of device
[   74.832682][ T6063] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128
[   74.837976][ T6063] Buffer I/O error on dev loop2, logical block 132, lost async page write
[   74.841657][ T6063] Buffer I/O error on dev loop2, logical block 133, lost async page write
[   74.845213][ T6063] Buffer I/O error on dev loop2, logical block 150, lost async page write
[   74.848367][ T6063] Buffer I/O error on dev loop2, logical block 151, lost async page write
[   74.881815][  T970] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   74.890254][  T970] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   74.899852][   T55] Bluetooth: hci0: command tx timeout
[   74.901616][ T5829] Bluetooth: hci1: command tx timeout
[   74.907517][  T970] usb 1-1: USB disconnect, device number 2
[   74.979769][ T5829] Bluetooth: hci2: command tx timeout
[   76.069827][ T5890] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   76.410824][ T5890] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[   76.413925][ T5890] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[   76.417850][ T5890] usb 3-1: config 0 has no interface number 0
[   76.432509][ T5890] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64
[   76.436753][ T5890] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.442751][ T5890] usb 3-1: config 0 interface 52 has no altsetting 0
[   76.447032][ T5890] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[   76.451260][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[   76.454612][ T5890] usb 3-1: Product: syz
[   76.456318][ T5890] usb 3-1: SerialNumber: syz
[   76.464435][ T5890] usb 3-1: config 0 descriptor??
[   76.506000][ T5291] kernel read not supported for file /sequencer (pid: 5291 comm: kworker/1:3)
[   76.693093][ T5890] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input4
[   76.907307][  T970] usb 3-1: USB disconnect, device number 2
[   76.907383][    C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[   77.503228][ T6127] loop1: detected capacity change from 0 to 32768
[   77.565967][ T6127] bio_check_eod: 11 callbacks suppressed
[   77.565992][ T6127] syz.1.100: attempt to access beyond end of device
[   77.565992][ T6127] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[   77.591044][ T6127] metapage_write_end_io: I/O error
[   77.597292][ T6127] ERROR: (device loop1): release_metapage: metapage_write_one() failed
[   77.597292][ T6127] 
[   77.616794][ T6127] ERROR: (device loop1): remounting filesystem as read-only
[   77.631422][ T6127] ERROR: (device loop1): diWrite: ixpxd invalid
[   77.631422][ T6127] 
[   77.641712][ T6127] ERROR: (device loop1): txCommit: 
[   77.641712][ T6127] 
[   77.673056][ T6127] blkno = 8ed2c, nblocks = 1
[   77.676999][ T6127] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   77.676999][ T6127] 
[   77.686704][ T6133] loop2: detected capacity change from 0 to 1024
[   77.693078][ T6127] UFO tlock:0xffffc90001fa2090
[   77.713163][ T6127] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[   77.713163][ T6127] 
[   77.728211][ T6127] jfs_lookup: dtSearch returned -5
[   77.736985][   T33] audit: type=1800 audit(1759215081.647:12): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=20 res=0 errno=0
[   77.763906][   T33] audit: type=1800 audit(1759215081.667:13): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=20 res=0 errno=0
[   77.848679][  T116] blkno = 8ed2c, nblocks = 4
[   77.850647][  T116] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   77.850647][  T116] 
[   77.870002][ T5825] syz-executor: attempt to access beyond end of device
[   77.870002][ T5825] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[   77.887874][ T5825] metapage_write_end_io: I/O error
[   77.898866][ T5825] JFS: metapage_get_blocks failed
[   77.900911][ T5825] JFS: metapage_get_blocks failed
[   77.902967][ T5825] JFS: metapage_get_blocks failed
[   77.905032][ T5825] JFS: metapage_get_blocks failed
[   78.110550][ T6144] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   78.140019][ T6146] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.145776][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   78.219850][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.258772][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.113'.
[   78.262375][ T6152] Zero length message leads to an empty skb
[   79.189016][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   79.367088][ T5890] usb 1-1: config 0 has an invalid interface number: 197 but max is 0
[   79.384222][ T5890] usb 1-1: config 0 has no interface number 0
[   79.386595][ T5890] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[   79.404414][ T5890] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   79.410705][ T5890] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[   79.433723][ T5890] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[   79.450219][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.468216][ T5890] usb 1-1: Product: syz
[   79.481271][ T5890] usb 1-1: Manufacturer: syz
[   79.495895][ T5890] usb 1-1: SerialNumber: syz
[   79.555126][ T5890] usb 1-1: config 0 descriptor??
[   79.566867][ T6173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   79.579289][ T6173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   79.840663][ T6173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   79.843763][ T6173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   79.858361][ T5890] qmi_wwan 1-1:0.197: probe with driver qmi_wwan failed with error -22
[   80.065778][ T5890] usb 1-1: USB disconnect, device number 3
[   80.228680][  T970] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   80.405578][  T970] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[   80.409307][  T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.412555][  T970] usb 2-1: Product: syz
[   80.415043][  T970] usb 2-1: Manufacturer: syz
[   80.416808][  T970] usb 2-1: SerialNumber: syz
[   80.425603][  T970] usb 2-1: config 0 descriptor??
[   80.431671][  T970] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002
[   80.646281][ T6208] loop0: detected capacity change from 0 to 8
[   80.660589][ T6208] SQUASHFS error: Failed to read block 0x62: -5
[   80.663160][ T6208] squashfs image failed sanity check
[   80.738841][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.837281][  T970]  (null): failure reading functionality
[   80.852307][  T970] i2c i2c-2: connected i2c-tiny-usb device
[   80.911916][ T5890] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   80.915832][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   80.926573][ T5890] usb 3-1: config 0 has no interfaces?
[   80.929449][ T5890] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   80.932498][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.939997][ T5890] usb 3-1: config 0 descriptor??
[   81.051744][ T6223] netlink: 'syz.0.143': attribute type 1 has an invalid length.
[   81.055786][ T5890] usb 2-1: USB disconnect, device number 2
[   81.154459][ T5236] usb 3-1: USB disconnect, device number 3
[   81.220514][ T6231] netlink: 2 bytes leftover after parsing attributes in process `syz.0.147'.
[   81.477468][ T6233] loop0: detected capacity change from 0 to 32768
[   81.491356][ T6233] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   81.530688][ T6233] XFS (loop0): Ending clean mount
[   81.536449][ T6233] XFS (loop0): Quotacheck needed: Please wait.
[   81.599971][ T6233] XFS (loop0): Quotacheck: Done.
[   81.670492][ T5824] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   82.005714][ T6259] loop1: detected capacity change from 0 to 256
[   82.037494][ T6259] FAT-fs (loop1): Directory bread(block 64) failed
[   82.060489][ T6259] FAT-fs (loop1): Directory bread(block 65) failed
[   82.063109][ T6259] FAT-fs (loop1): Directory bread(block 66) failed
[   82.082616][ T6259] FAT-fs (loop1): Directory bread(block 67) failed
[   82.097226][ T6259] FAT-fs (loop1): Directory bread(block 68) failed
[   82.106611][ T6259] FAT-fs (loop1): Directory bread(block 69) failed
[   82.112335][ T6259] FAT-fs (loop1): Directory bread(block 70) failed
[   82.114919][ T6259] FAT-fs (loop1): Directory bread(block 71) failed
[   82.126962][ T6259] FAT-fs (loop1): Directory bread(block 72) failed
[   82.130552][ T6259] FAT-fs (loop1): Directory bread(block 73) failed
[   82.162356][ T6259] FAT-fs (loop1): Filesystem has been set read-only
[   82.165852][   T33] audit: type=1800 audit(1759215086.077:14): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.157" name="rdma.current" dev="loop1" ino=1048595 res=0 errno=0
[   82.474766][ T6265] netlink: 'syz.0.159': attribute type 10 has an invalid length.
[   82.478141][ T6265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.159'.
[   82.488955][ T6265] dummy0: entered promiscuous mode
[   82.492583][ T6265] bridge0: port 3(dummy0) entered blocking state
[   82.495759][ T6265] bridge0: port 3(dummy0) entered disabled state
[   82.506007][ T6265] dummy0: entered allmulticast mode
[   82.520452][ T6265] bridge0: port 3(dummy0) entered blocking state
[   82.523264][ T6265] bridge0: port 3(dummy0) entered forwarding state
[   82.940780][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.145680][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   83.175730][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.186489][ T5889] usb 2-1: Product: syz
[   83.188304][ T5889] usb 2-1: Manufacturer: syz
[   83.319782][  T970] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   83.336098][ T5889] usb 2-1: SerialNumber: syz
[   83.501049][  T970] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   83.516555][  T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.522451][  T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.527798][  T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   83.536682][  T970] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   83.541648][  T970] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   83.545065][  T970] usb 1-1: Manufacturer: syz
[   83.578502][  T970] usb 1-1: config 0 descriptor??
[   84.128147][  T970] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[   84.191405][  T970] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[   84.490278][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[   84.496909][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   84.503335][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   84.508158][ T5889] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[   84.516181][ T5889] usb 2-1: USB disconnect, device number 3
[   84.544466][ T6293] loop2: detected capacity change from 0 to 32768
[   84.551180][ T6293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.170 (6293)
[   84.565937][ T6293] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.569550][ T6293] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   84.572815][ T6293] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   84.638463][ T6293] BTRFS info (device loop2): rebuilding free space tree
[   84.656076][ T6293] BTRFS info (device loop2): disabling free space tree
[   84.659967][ T6293] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.664087][ T6293] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.673916][ T6293] BTRFS info (device loop2): enabling ssd optimizations
[   84.676334][ T6293] BTRFS info (device loop2): enabling disk space caching
[   84.680301][ T6293] BTRFS info (device loop2): force clearing of disk cache
[   84.685116][ T6293] BTRFS info (device loop2): enabling auto defrag
[   84.688695][ T6293] BTRFS info (device loop2): force zlib compression, level 3
[   84.729585][   T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   84.760958][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.915517][ T5889] usb 1-1: USB disconnect, device number 4
[   86.680128][   T24] cfg80211: failed to load regulatory.db
[   86.898856][ T6337] netlink: 'syz.1.178': attribute type 6 has an invalid length.
[   86.904799][ T6337] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.178'.
[   87.349541][ T6330] loop2: detected capacity change from 0 to 32768
[   87.383699][ T6330] (syz.2.176,6330,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode.
[   87.387700][ T6330] (syz.2.176,6330,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   87.391218][ T6330] (syz.2.176,6330,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[   87.391333][ T6330] (syz.2.176,6330,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   87.399289][ T6330] (syz.2.176,6330,1):ocfs2_initialize_super:2198 ERROR: status = -22
[   87.402583][ T6330] (syz.2.176,6330,1):ocfs2_fill_super:1177 ERROR: status = -22
[   87.975431][ T6334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.032505][ T6349] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   88.334828][ T6367] loop0: detected capacity change from 0 to 4096
[   88.342263][ T6367] ntfs3(loop0): Primary boot: invalid record size -64.
[   88.345423][ T6367] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[   88.368649][ T5889] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   88.391793][ T6369] macvtap1: entered promiscuous mode
[   88.393787][ T6369] vlan0: entered promiscuous mode
[   88.396140][ T6369] macvtap1: entered allmulticast mode
[   88.398310][ T6369] vlan0: entered allmulticast mode
[   88.406147][ T6369] veth0_vlan: entered allmulticast mode
[   88.423757][ T6369] macvtap2: entered promiscuous mode
[   88.426193][ T6369] macvtap2: entered allmulticast mode
[   88.521343][ T5889] usb 3-1: Using ep0 maxpacket: 16
[   88.525151][ T5889] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[   88.528348][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.532935][ T5889] usb 3-1: config 0 has no interface number 0
[   88.539065][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   88.542592][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.545714][ T5889] usb 3-1: Product: syz
[   88.547345][ T5889] usb 3-1: Manufacturer: syz
[   88.550287][ T5889] usb 3-1: SerialNumber: syz
[   88.554413][ T5889] usb 3-1: config 0 descriptor??
[   88.570138][ T5889] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22
[   88.685992][ T6377] tmpfs: Group quota block hardlimit too large.
[   88.778853][   T24] usb 3-1: USB disconnect, device number 4
[   88.784457][ T6381] loop0: detected capacity change from 0 to 1024
[   88.788199][ T6381] EXT4-fs: Ignoring removed orlov option
[   88.805945][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.857221][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.965956][ T6393] loop0: detected capacity change from 0 to 8
[   88.976657][ T6393] SQUASHFS error: lzo decompression failed, data probably corrupt
[   88.987020][ T6393] SQUASHFS error: Failed to read block 0x91: -5
[   88.989553][ T6393] SQUASHFS error: Unable to read metadata cache entry [8f]
[   88.992153][ T6393] SQUASHFS error: Unable to read inode 0x11f
[   89.175458][ T6401] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[   89.456518][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[   90.380057][ T6433] loop1: detected capacity change from 0 to 256
[   90.494626][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.497631][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.508323][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.512240][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.515202][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.518860][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.521684][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.524595][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.527458][ T6435] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   90.547914][ T6437] loop1: detected capacity change from 0 to 65
[   90.570195][ T6437] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[   90.938645][ T5291] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   91.058875][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   91.103199][ T5291] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[   91.106334][ T5291] usb 2-1: config 0 has no interface number 0
[   91.108738][ T5291] usb 2-1: config 0 interface 133 altsetting 9 endpoint 0x6 has an invalid bInterval 108, changing to 10
[   91.112898][ T5291] usb 2-1: config 0 interface 133 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[   91.117166][ T5291] usb 2-1: config 0 interface 133 has no altsetting 0
[   91.121993][ T5291] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1006, bcdDevice=8e.0a
[   91.125550][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.130972][ T5291] usb 2-1: config 0 descriptor??
[   91.208915][ T5889] usb 1-1: Using ep0 maxpacket: 32
[   91.214812][ T5889] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   91.218874][ T5889] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   91.223359][ T5889] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.228092][ T5889] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   91.236973][ T5889] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   91.240482][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.243667][ T5889] usb 1-1: Product: syz
[   91.245251][ T5889] usb 1-1: Manufacturer: syz
[   91.247018][ T5889] usb 1-1: SerialNumber: syz
[   91.264587][ T5889] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input5
[   91.346894][ T5291] usb 2-1: string descriptor 0 read error: -71
[   91.353867][ T5291] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones
[   91.362374][ T5291] usb 2-1: USB disconnect, device number 4
[   91.478714][ T5889] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[   91.482067][ T5889]  (id 0x00)
[   91.538780][ T5889] rc_core: IR keymap rc-imon-pad not found
[   91.541457][ T5889] Registered IR keymap rc-empty
[   91.550985][ T5889] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[   91.555255][ T5889] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   91.576618][ T6451] loop2: detected capacity change from 0 to 128
[   91.589692][ T6451] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   91.596528][ T6451] hpfs: filesystem error: improperly stopped
[   91.600611][ T6451] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   91.602936][ T6451] hpfs: You really don't want any checks? You are crazy...
[   91.606032][ T6451] hpfs: hpfs_map_sector(): read error
[   91.607775][ T6451] hpfs: code page support is disabled
[   91.610417][ T6451] hpfs: hpfs_map_4sectors(): unaligned read
[   91.612687][ T6451] hpfs: hpfs_map_4sectors(): unaligned read
[   91.614408][ T6451] hpfs: filesystem error: unable to find root dir
[   91.623490][ T6451] hpfs: hpfs_map_4sectors(): unaligned read
[   91.700863][ T5889] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[   91.709391][ T5889] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input6
[   91.717076][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.721331][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.724611][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.727680][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.730769][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.733857][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.736435][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.739169][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.741805][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.744742][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.747876][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.750970][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.754140][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.757208][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'.
[   91.757246][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.764967][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.767687][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.770583][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.773617][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.776390][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.779316][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.782604][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.789926][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.793370][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.796563][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.799386][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.802278][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.805763][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.808648][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.811714][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.814884][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.817570][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.820583][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.823893][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.827079][ T5889] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:5> initialized
[   91.830555][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.833867][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.837102][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.840451][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.843652][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.847018][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.850383][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.853710][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.857042][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.860362][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.863533][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.866734][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.869979][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.873071][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.876208][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.879344][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.882072][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.885755][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.888854][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.891985][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.894762][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.897323][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.899923][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.902627][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.905489][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.908011][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.911175][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.913755][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.916510][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.919011][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.921668][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.924723][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.927588][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.930348][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.933172][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.936074][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.938599][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.941475][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.944116][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.946705][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.949783][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.952696][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.955365][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.958598][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.961819][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.965249][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.967937][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.970898][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.974101][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.977292][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.980270][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.983403][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.986507][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.989423][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.992650][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.996105][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   91.999249][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   92.002295][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   92.005065][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   92.008354][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   92.011603][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   92.014336][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   92.017036][ T5889] usb 1-1: USB disconnect, device number 5
[   92.019080][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored
[   92.029509][ T5236] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   92.035737][ T6459] Bluetooth: MGMT ver 1.23
[   92.185619][ T5236] usb 3-1: config index 0 descriptor too short (expected 8192, got 36)
[   92.193033][ T5236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.199826][ T5236] usb 3-1: config 0 has no interfaces?
[   92.202076][ T5236] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   92.205486][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.211588][ T5236] usb 3-1: config 0 descriptor??
[   92.420784][  T970] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   92.422536][ T5236] usb 3-1: USB disconnect, device number 5
[   92.594644][  T970] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   92.598386][  T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.608878][  T970] usb 2-1: Product: syz
[   92.610480][  T970] usb 2-1: Manufacturer: syz
[   92.612196][  T970] usb 2-1: SerialNumber: syz
[   92.619782][  T970] usb 2-1: config 0 descriptor??
[   92.759551][ T5889] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   92.828678][  T970] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   92.910560][ T5889] usb 1-1: not running at top speed; connect to a high speed hub
[   92.915136][ T5889] usb 1-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config
[   92.918650][ T5889] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   92.922009][ T5889] usb 1-1: config 1 has no interface number 1
[   92.924558][ T5889] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   92.931621][ T5889] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 29, changing to 4
[   92.940381][ T5889] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   92.943769][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.946814][ T5889] usb 1-1: Product: syz
[   92.948388][ T5889] usb 1-1: Manufacturer: syz
[   92.950004][ T5889] usb 1-1: SerialNumber: syz
[   93.023384][ T6471] loop2: detected capacity change from 0 to 4096
[   93.030145][ T6471] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   93.046458][ T6471] ntfs3(loop2): $Volume is corrupted.
[   93.196028][ T5889] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[   93.208753][ T5889] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   93.281506][ T6479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.294772][ T5889] usb 1-1: USB disconnect, device number 6
[   93.397745][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.715434][ T6494] loop2: detected capacity change from 0 to 2048
[   93.739785][ T6494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.749592][ T6494] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.249: inline data xattr refers to an external xattr inode
[   93.757187][ T6494] EXT4-fs (loop2): Remounting filesystem read-only
[   93.761287][ T6494] EXT4-fs (loop2): shut down requested (0)
[   93.794017][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.839713][ T6499] loop0: detected capacity change from 0 to 512
[   93.842385][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'.
[   93.887296][ T6499] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842e028, mo2=0082]
[   93.890437][ T6499] System zones: 0-2, 18-18, 34-35
[   93.892592][ T6499] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.250: bad orphan inode 11862016
[   93.897207][ T6499] EXT4-fs (loop0): Remounting filesystem read-only
[   93.904807][ T6499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   93.910461][ T6499] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.931756][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   94.065576][ T6511] dns_resolver: Unsupported content type (218)
[   94.109057][ T5291] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   94.157697][ T6515] loop0: detected capacity change from 0 to 8
[   94.259651][ T5291] usb 3-1: Using ep0 maxpacket: 8
[   94.270016][ T5291] usb 3-1: unable to get BOS descriptor or descriptor too short
[   94.273813][ T5291] usb 3-1: config 4 has an invalid interface number: 30 but max is 0
[   94.273904][  T970] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   94.276799][ T5291] usb 3-1: config 4 has no interface number 0
[   94.276825][ T5291] usb 3-1: config 4 interface 30 has no altsetting 0
[   94.284704][ T5291] usb 3-1: string descriptor 0 read error: -22
[   94.284820][ T5291] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[   94.284837][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.307830][  T970] usb 2-1: USB disconnect, device number 5
[   94.312759][ T5291] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[   94.315050][ T5291] dw2102: su3000_power_ctrl: 1, initialized 0
[   94.318038][ T5291] dvb-usb: bulk message failed: -22 (2/0)
[   94.352641][ T5291] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   94.361975][ T5291] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[   94.367412][ T5291] usb 3-1: media controller created
[   94.370705][ T5291] dvb-usb: bulk message failed: -22 (6/0)
[   94.372700][ T5291] dw2102: i2c transfer failed.
[   94.374405][ T5291] dvb-usb: bulk message failed: -22 (6/0)
[   94.377081][ T5291] dw2102: i2c transfer failed.
[   94.379636][ T5291] dvb-usb: bulk message failed: -22 (6/0)
[   94.383021][ T5291] dw2102: i2c transfer failed.
[   94.384809][ T5291] dvb-usb: bulk message failed: -22 (6/0)
[   94.387074][ T5291] dw2102: i2c transfer failed.
[   94.389643][ T5291] dvb-usb: bulk message failed: -22 (6/0)
[   94.391263][ T5291] dw2102: i2c transfer failed.
[   94.398206][ T5291] dvb-usb: bulk message failed: -22 (6/0)
[   94.401750][ T5291] dw2102: i2c transfer failed.
[   94.403572][ T5291] dvb-usb: MAC address: 02:02:02:02:02:02
[   94.416819][ T5291] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   94.430469][ T5291] dvb-usb: bulk message failed: -22 (3/0)
[   94.432124][ T5291] dw2102: command 0x0e transfer failed.
[   94.436560][ T5291] dvb-usb: bulk message failed: -22 (3/0)
[   94.441389][ T5291] dw2102: command 0x0e transfer failed.
[   94.722243][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[   94.725685][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'.
[   94.729821][ T6535] validate_nla: 45 callbacks suppressed
[   94.730103][ T6535] netlink: 'syz.0.267': attribute type 11 has an invalid length.
[   94.751934][ T5291] dvb-usb: bulk message failed: -22 (3/0)
[   94.754248][ T5291] dw2102: command 0x0e transfer failed.
[   94.756433][ T5291] dvb-usb: bulk message failed: -22 (3/0)
[   94.761525][ T5291] dw2102: command 0x0e transfer failed.
[   94.770606][ T5291] dvb-usb: bulk message failed: -22 (1/0)
[   94.773101][ T5291] dw2102: command 0x51 transfer failed.
[   94.775354][ T5291] dvb-usb: bulk message failed: -22 (5/0)
[   94.777598][ T5291] dw2102: i2c probe for address 0x68 failed.
[   94.782679][ T5291] dvb-usb: bulk message failed: -22 (5/0)
[   94.785106][ T5291] dw2102: i2c probe for address 0x69 failed.
[   94.787461][ T5291] dvb-usb: bulk message failed: -22 (5/0)
[   94.792427][ T5291] dw2102: i2c probe for address 0x6a failed.
[   94.798069][ T5291] dw2102: probing for demodulator failed. Is the external power switched on?
[   94.805226][ T5291] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[   94.873814][ T5291] rc_core: IR keymap rc-tt-1500 not found
[   94.876007][ T5291] Registered IR keymap rc-empty
[   94.885979][ T5291] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[   94.903531][ T5291] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7
[   94.913343][ T5291] dvb-usb: schedule remote query interval to 250 msecs.
[   94.916107][ T5291] dw2102: su3000_power_ctrl: 0, initialized 1
[   94.920243][ T5291] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[   94.925539][ T5291] usb 3-1: USB disconnect, device number 6
[   95.064149][ T5291] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[   95.114830][ T6548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.273'.
[   96.601051][ T6570] loop2: detected capacity change from 0 to 32768
[   96.647208][   T33] audit: type=1800 audit(1759215100.557:15): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.280" name="file1" dev="loop2" ino=4 res=0 errno=0
[   96.861249][ T6579] netlink: 60 bytes leftover after parsing attributes in process `syz.1.284'.
[   96.984413][ T6570] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[   96.984413][ T6570] 
[   96.997515][ T6570] ERROR: (device loop2): remounting filesystem as read-only
[   97.236469][ T6593] new mount options do not match the existing superblock, will be ignored
[   97.515634][ T5833] ------------[ cut here ]------------
[   97.517759][ T5833] kernel BUG at fs/jfs/inode.c:169!
[   97.522338][ T5833] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   97.525481][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   97.529081][ T5833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.532572][ T5833] RIP: 0010:jfs_evict_inode+0x438/0x440
[   97.534312][ T5833] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 2b e7 fe e9 16 fe ff ff e8 09 ab 83 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   97.541575][ T5833] RSP: 0018:ffffc900035dfae0 EFLAGS: 00010293
[   97.543405][ T5833] RAX: ffffffff833a6b17 RBX: ffff888112bf3b20 RCX: ffff888106b28000
[   97.545901][ T5833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888112bf3b20
[   97.548192][ T5833] RBP: 0000000000000001 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[   97.550412][ T5833] R10: dffffc0000000000 R11: ffffffff833a4810 R12: dffffc0000000000
[   97.552961][ T5833] R13: dffffc0000000000 R14: ffff888112bf37a8 R15: ffffffff833a66e0
[   97.555654][ T5833] FS:  0000555568198500(0000) GS:ffff8880b8d7e000(0000) knlGS:0000000000000000
[   97.558551][ T5833] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.560717][ T5833] CR2: 00005555681b35c8 CR3: 000000010d4f0000 CR4: 00000000000006f0
[   97.563466][ T5833] Call Trace:
[   97.564460][ T5833]  <TASK>
[   97.565318][ T5833]  ? evict+0x4f8/0x9c0
[   97.566517][ T5833]  ? __pfx_jfs_evict_inode+0x10/0x10
[   97.568097][ T5833]  evict+0x504/0x9c0
[   97.569269][ T5833]  ? __pfx_evict+0x10/0x10
[   97.570575][ T5833]  ? do_raw_spin_unlock+0x4d/0x240
[   97.572100][ T5833]  evict_inodes+0x64c/0x6d0
[   97.573408][ T5833]  ? __pfx_evict_inodes+0x10/0x10
[   97.574917][ T5833]  generic_shutdown_super+0x9a/0x2c0
[   97.576809][ T5833]  kill_block_super+0x44/0x90
[   97.578216][ T5833]  deactivate_locked_super+0xbc/0x130
[   97.579785][ T5833]  cleanup_mnt+0x425/0x4c0
[   97.581077][ T5833]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.582589][ T5833]  task_work_run+0x1d4/0x260
[   97.584251][ T5833]  ? __pfx_task_work_run+0x10/0x10
[   97.585767][ T5833]  ? __x64_sys_umount+0x122/0x160
[   97.587338][ T5833]  ? exit_to_user_mode_loop+0x40/0x110
[   97.588922][ T5833]  exit_to_user_mode_loop+0xec/0x110
[   97.590688][ T5833]  do_syscall_64+0x2bd/0x3b0
[   97.592060][ T5833]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.593626][ T5833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.595405][ T5833]  ? exc_page_fault+0x9f/0xf0
[   97.596734][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.598464][ T5833] RIP: 0033:0x7ff05df8ff57
[   97.599818][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   97.605516][ T5833] RSP: 002b:00007fffe3a73f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   97.608080][ T5833] RAX: 0000000000000000 RBX: 00007ff05e011c2d RCX: 00007ff05df8ff57
[   97.610803][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe3a74050
[   97.613250][ T5833] RBP: 00007fffe3a74050 R08: 0000000000000000 R09: 0000000000000000
[   97.615484][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe3a750e0
[   97.617969][ T5833] R13: 00007ff05e011c2d R14: 0000000000017c41 R15: 00007fffe3a75120
[   97.620633][ T5833]  </TASK>
[   97.621555][ T5833] Modules linked in:
[   97.623915][ T5833] ---[ end trace 0000000000000000 ]---
[   97.628657][ T5833] RIP: 0010:jfs_evict_inode+0x438/0x440
[   97.630379][ T5833] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 2b e7 fe e9 16 fe ff ff e8 09 ab 83 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   97.636288][ T5833] RSP: 0018:ffffc900035dfae0 EFLAGS: 00010293
[   97.638189][ T5833] RAX: ffffffff833a6b17 RBX: ffff888112bf3b20 RCX: ffff888106b28000
[   97.642814][ T5833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888112bf3b20
[   97.645703][ T5833] RBP: 0000000000000001 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[   97.649188][ T5833] R10: dffffc0000000000 R11: ffffffff833a4810 R12: dffffc0000000000
[   97.652166][ T5833] R13: dffffc0000000000 R14: ffff888112bf37a8 R15: ffffffff833a66e0
[   97.655133][ T5833] FS:  0000555568198500(0000) GS:ffff8880b8d7e000(0000) knlGS:0000000000000000
[   97.658409][ T5833] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.661966][ T5833] CR2: 00005555681b35c8 CR3: 000000010d4f0000 CR4: 00000000000006f0
[   97.665035][ T5833] Kernel panic - not syncing: Fatal exception
[   97.668082][ T5833] Kernel Offset: disabled
[   97.669816][ T5833] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:51:41  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900035df230
R8 =ffff888106208237 R9 =1ffff11020c41046 R10=dffffc0000000000 R11=ffffffff850b3ff0
R12=dffffc0000000000 R13=ffffffff995968ce R14=ffffffff99889380 R15=0000000000000000
RIP=ffffffff850b406c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555568198500 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555681b35c8 CR3=000000010d4f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa3eac12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000003818 RBX=00000000000000b6 RCX=ffff8880232d8000 RDX=ffff888107f72398
RSI=0000000000000000 RDI=ffff888107f723aa RBP=ffffc9000314ec90 RSP=ffffc9000314ea80
R8 =ffffffff8f5cac37 R9 =1ffffffff1eb9586 R10=dffffc0000000000 R11=fffffbfff1eb9587
R12=00000000ffffffff R13=dffffc0000000000 R14=ffffc900076e0000 R15=00000000ffffff49
RIP=ffffffff86553c61 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7ff1a94800 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb45f9e95e8 CR3=000000010e20e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=ffff0000ff000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
