last executing test programs:

5.475840934s ago: executing program 0 (id=336):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x473, &(0x7f0000001380)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x7d, 0x0, &(0x7f0000001a00))
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240))

5.041787689s ago: executing program 0 (id=339):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040))
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e"], 0xc)

4.387873107s ago: executing program 2 (id=346):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x5a413}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

4.184044998s ago: executing program 2 (id=348):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b01, 0x0)
syz_usb_disconnect(r0)

3.316496279s ago: executing program 1 (id=350):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x6}}, 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0))

3.056224424s ago: executing program 1 (id=351):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000002e40)="ed", 0x1}], 0x1}}], 0x2, 0x3404c891)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x4afa, 0x1, [0x0]}, 0xa)

2.864103865s ago: executing program 1 (id=352):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x4018f50b, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

2.519805795s ago: executing program 3 (id=354):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x2, 0x2b418842, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)

2.304196327s ago: executing program 3 (id=355):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000002010400000000000000000a00fffc1800038014000180080001000a0101010800020064010102100002800c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

2.25588277s ago: executing program 3 (id=356):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x68, 0x2, r1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, r3})

2.08916559s ago: executing program 3 (id=357):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/8, 0x8}, 0xc1c}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.883882801s ago: executing program 3 (id=358):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f0000000240)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x70]}}, {@ssd}, {@usebackuproot}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000900)=ANY=[], 0x700, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

1.808368356s ago: executing program 1 (id=359):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb7e1, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0)

1.73311084s ago: executing program 0 (id=360):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x10, 0x4, 0x4})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]})
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2})

1.571991519s ago: executing program 2 (id=361):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ppoll(&(0x7f0000000740)=[{r0, 0x104}], 0x1, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000480), 0x1, 0x2)
r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)

1.531954322s ago: executing program 1 (id=362):
syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file2\x00', 0x1ffd)

1.405463959s ago: executing program 2 (id=363):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getdents(r0, &(0x7f00000000c0)=""/127, 0x7f)

1.324112354s ago: executing program 0 (id=364):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000001240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x21)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x90)

1.034529101s ago: executing program 0 (id=365):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x295}], 0x1, 0x0, 0x0, 0x0)

975.751214ms ago: executing program 2 (id=366):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x242})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

612.282955ms ago: executing program 3 (id=367):
r0 = socket$inet6(0xa, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
connect$inet6(r0, &(0x7f0000000940)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfc}, 0x1c)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)

303.957893ms ago: executing program 2 (id=368):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

14.164249ms ago: executing program 0 (id=369):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)

0s ago: executing program 1 (id=370):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts.
[   57.594624][ T5750] cgroup: Unknown subsys name 'net'
[   57.741432][ T5750] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.128841][ T5750] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.536682][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.545300][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.554317][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.562143][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.570098][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.577664][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.586143][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.586854][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.593849][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   60.608253][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.609474][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.626210][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.626256][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.644923][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   60.652207][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.660007][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.667247][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.675067][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.675183][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.690338][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.702915][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.710330][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.719288][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   60.727155][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.038186][ T5764] chnl_net:caif_netlink_parms(): no params data found
[   61.138098][ T5762] chnl_net:caif_netlink_parms(): no params data found
[   61.177692][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.186024][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.193281][ T5764] bridge_slave_0: entered allmulticast mode
[   61.201078][ T5764] bridge_slave_0: entered promiscuous mode
[   61.248082][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.255413][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.263005][ T5764] bridge_slave_1: entered allmulticast mode
[   61.271214][ T5764] bridge_slave_1: entered promiscuous mode
[   61.292537][ T5763] chnl_net:caif_netlink_parms(): no params data found
[   61.347183][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.362619][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.396732][ T5765] chnl_net:caif_netlink_parms(): no params data found
[   61.445720][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.452953][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.460240][ T5762] bridge_slave_0: entered allmulticast mode
[   61.467139][ T5762] bridge_slave_0: entered promiscuous mode
[   61.478063][ T5764] team0: Port device team_slave_0 added
[   61.505413][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.512688][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.522304][ T5762] bridge_slave_1: entered allmulticast mode
[   61.529318][ T5762] bridge_slave_1: entered promiscuous mode
[   61.548546][ T5764] team0: Port device team_slave_1 added
[   61.609093][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.649923][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.660058][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.667134][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.693448][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.707542][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.714605][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.740569][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.751925][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.762250][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.769550][ T5763] bridge_slave_0: entered allmulticast mode
[   61.777223][ T5763] bridge_slave_0: entered promiscuous mode
[   61.784148][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.791264][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.798597][ T5765] bridge_slave_0: entered allmulticast mode
[   61.805397][ T5765] bridge_slave_0: entered promiscuous mode
[   61.822087][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.831563][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.839015][ T5765] bridge_slave_1: entered allmulticast mode
[   61.846665][ T5765] bridge_slave_1: entered promiscuous mode
[   61.868586][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.875919][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.883107][ T5763] bridge_slave_1: entered allmulticast mode
[   61.892306][ T5763] bridge_slave_1: entered promiscuous mode
[   61.920589][ T5762] team0: Port device team_slave_0 added
[   61.940687][ T5764] hsr_slave_0: entered promiscuous mode
[   61.947160][ T5764] hsr_slave_1: entered promiscuous mode
[   61.987146][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.998358][ T5762] team0: Port device team_slave_1 added
[   62.033897][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.046287][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.063288][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.070504][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.096954][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.109885][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.116951][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.143258][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.173153][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.231227][ T5763] team0: Port device team_slave_0 added
[   62.245922][ T5765] team0: Port device team_slave_0 added
[   62.262881][ T5763] team0: Port device team_slave_1 added
[   62.278289][ T5765] team0: Port device team_slave_1 added
[   62.314559][ T5762] hsr_slave_0: entered promiscuous mode
[   62.320758][ T5762] hsr_slave_1: entered promiscuous mode
[   62.327277][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.335627][ T5762] Cannot create hsr debugfs directory
[   62.369757][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.376845][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.402893][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.443635][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.450939][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.477311][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.489309][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.500655][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.527040][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.555002][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.561979][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.588228][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.654631][ T5777] Bluetooth: hci0: command tx timeout
[   62.735384][ T5777] Bluetooth: hci3: command tx timeout
[   62.741284][ T5765] hsr_slave_0: entered promiscuous mode
[   62.748430][ T5765] hsr_slave_1: entered promiscuous mode
[   62.754797][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.762354][ T5765] Cannot create hsr debugfs directory
[   62.777388][ T5763] hsr_slave_0: entered promiscuous mode
[   62.785882][ T5763] hsr_slave_1: entered promiscuous mode
[   62.791949][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.799874][ T5763] Cannot create hsr debugfs directory
[   62.814266][   T51] Bluetooth: hci1: command tx timeout
[   62.820034][ T5777] Bluetooth: hci2: command tx timeout
[   62.926846][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.941642][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.951053][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.988669][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.119975][ T5762] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.136237][ T5762] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.150914][ T5762] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.160994][ T5762] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.245826][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.261638][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.273255][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.285677][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.363073][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.385885][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.413266][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.421117][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.431445][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.488630][ T5764] 8021q: adding VLAN 0 to HW filter on device team0
[   63.514098][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.521427][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.538928][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.546128][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.598700][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.630166][ T5762] 8021q: adding VLAN 0 to HW filter on device team0
[   63.669433][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.676642][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.692855][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.739273][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.746408][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.795977][ T5765] 8021q: adding VLAN 0 to HW filter on device team0
[   63.811383][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.835606][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.842769][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.890987][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.898160][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.927269][ T5763] 8021q: adding VLAN 0 to HW filter on device team0
[   63.999716][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.006927][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.053228][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.060428][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.122293][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.233141][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.347076][ T5764] veth0_vlan: entered promiscuous mode
[   64.361627][ T5762] veth0_vlan: entered promiscuous mode
[   64.410907][ T5764] veth1_vlan: entered promiscuous mode
[   64.443160][ T5762] veth1_vlan: entered promiscuous mode
[   64.513185][ T5764] veth0_macvtap: entered promiscuous mode
[   64.540580][ T5764] veth1_macvtap: entered promiscuous mode
[   64.567936][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.587407][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.606962][ T5762] veth0_macvtap: entered promiscuous mode
[   64.626362][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.640215][ T5762] veth1_macvtap: entered promiscuous mode
[   64.665997][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.680331][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.690717][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.699673][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.710838][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.734887][ T5777] Bluetooth: hci0: command tx timeout
[   64.745484][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.757398][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.769584][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.789267][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.800374][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.812318][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.825055][ T5777] Bluetooth: hci3: command tx timeout
[   64.849853][ T5765] veth0_vlan: entered promiscuous mode
[   64.861280][ T5762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.871096][ T5762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.880064][ T5762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.889070][ T5762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.905379][ T5777] Bluetooth: hci2: command tx timeout
[   64.910838][ T5777] Bluetooth: hci1: command tx timeout
[   64.923564][ T5765] veth1_vlan: entered promiscuous mode
[   65.009898][ T5763] veth0_vlan: entered promiscuous mode
[   65.044711][  T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.063716][  T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.085391][ T5765] veth0_macvtap: entered promiscuous mode
[   65.119043][ T5763] veth1_vlan: entered promiscuous mode
[   65.128547][ T5765] veth1_macvtap: entered promiscuous mode
[   65.147287][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.148235][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.169633][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.174662][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.189366][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.200303][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.212490][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.260345][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.278448][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.288909][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.300359][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.311685][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.337869][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.352028][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.352351][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.372416][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.382131][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.392185][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.415100][ T5763] veth0_macvtap: entered promiscuous mode
[   65.482095][ T5763] veth1_macvtap: entered promiscuous mode
[   65.492604][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.511820][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.635571][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.652247][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.662305][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.676847][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.687207][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.698857][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.710173][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.723658][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.734351][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.744238][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.749752][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.763356][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.775346][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.786063][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.796974][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.808307][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.844591][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.860314][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.871178][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.881979][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.906870][ T5852] syz.3.4[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   65.940332][ T4455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.962018][ T4455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.078391][  T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.107660][  T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.194006][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.213874][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.603995][ T5852] loop3: detected capacity change from 0 to 32768
[   66.616109][ T5852] =======================================================
[   66.616109][ T5852] WARNING: The mand mount option has been deprecated and
[   66.616109][ T5852]          and is ignored by this kernel. Remove the mand
[   66.616109][ T5852]          option from the mount to silence this warning.
[   66.616109][ T5852] =======================================================
[   66.711893][ T5859] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET)
[   66.747788][ T5859] syzkaller1: entered promiscuous mode
[   66.763890][ T5852] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   66.773248][ T5859] syzkaller1: entered allmulticast mode
[   66.814365][ T5777] Bluetooth: hci0: command tx timeout
[   66.895010][ T5777] Bluetooth: hci3: command tx timeout
[   66.981019][ T5777] Bluetooth: hci1: command tx timeout
[   66.985249][   T51] Bluetooth: hci2: command tx timeout
[   67.010106][ T5852] XFS (loop3): Ending clean mount
[   67.018093][ T5871] input: syz0 as /devices/virtual/input/input5
[   67.196665][ T5854] loop2: detected capacity change from 0 to 40427
[   67.252132][ T5854] F2FS-fs (loop2): invalid crc value
[   67.298362][ T5854] F2FS-fs (loop2): Found nat_bits in checkpoint
[   67.356149][ T5878] loop1: detected capacity change from 0 to 764
[   67.573479][ T5854] F2FS-fs (loop2): Start checkpoint disabled!
[   67.637449][ T5854] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   67.712943][ T5878] rock: directory entry would overflow storage
[   67.721032][ T5762] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   67.746862][ T5878] rock: sig=0x4f50, size=4, remaining=3
[   67.752489][ T5878] iso9660: Corrupted directory entry in block 4 of inode 1792
[   68.178504][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'.
[   68.308805][   T12] kworker/u4:1: attempt to access beyond end of device
[   68.308805][   T12] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   68.341530][ T5898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'.
[   68.357192][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   68.374685][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   68.383992][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   68.720178][ T5909] loop3: detected capacity change from 0 to 4096
[   68.780950][ T5909] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   68.819709][ T5909] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   68.865094][ T5909] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   68.901490][ T5909] ntfs: volume version 3.1.
[   68.940899][ T5916] process 'syz.1.16' launched './file0' with NULL argv: empty string added
[   69.055398][ T5909] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[   69.087641][ T5909] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[   69.161309][ T5909] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[   69.200203][ T5909] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[   69.326111][ T4260] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[   69.382909][ T5762] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   69.413354][ T5928] syzkaller1: entered promiscuous mode
[   69.419605][ T5928] syzkaller1: entered allmulticast mode
[   70.037065][ T5954] loop2: detected capacity change from 0 to 256
[   70.249474][ T5954] syz.2.27: attempt to access beyond end of device
[   70.249474][ T5954] loop2: rw=2049, sector=256, nr_sectors = 40 limit=256
[   70.383623][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   70.395049][ T5963] bridge: RTM_NEWNEIGH with invalid ether address
[   70.434500][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   70.464273][ T5963] bridge: RTM_NEWNEIGH with invalid ether address
[   70.873096][ T5952] loop3: detected capacity change from 0 to 32768
[   70.950631][ T5952] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.063865][ T5952] XFS (loop3): Ending clean mount
[   71.085091][ T5952] XFS (loop3): Quotacheck needed: Please wait.
[   71.197119][ T5952] XFS (loop3): Quotacheck: Done.
[   71.485966][ T5762] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.543225][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[   71.554337][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[   72.028555][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.279366][ T5976] loop1: detected capacity change from 0 to 65536
[   72.339112][ T5976] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   72.445297][ T5976] XFS (loop1): Ending clean mount
[   72.459594][ T5976] XFS (loop1): Quotacheck needed: Please wait.
[   72.494630][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   72.549353][ T5976] XFS (loop1): Quotacheck: Done.
[   72.557784][ T6038] loop3: detected capacity change from 0 to 2048
[   72.641438][ T6038] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   72.664147][ T6038] UDF-fs: Scanning with blocksize 512 failed
[   72.714192][   T23] usb 3-1: Using ep0 maxpacket: 8
[   72.734008][   T23] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   72.760659][ T6038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.776038][   T23] usb 3-1: config 179 has no interface number 0
[   72.795915][   T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   72.835483][   T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   72.855308][ T5764] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   72.871338][   T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   72.885399][   T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   72.897815][   T23] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   72.918152][   T23] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   72.928723][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.964415][ T6020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   73.445613][   T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6
[   73.896905][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   73.896989][ T5766] usb 3-1: USB disconnect, device number 2
[   73.914208][    C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[   73.918002][ T5766] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   73.950713][ T6056] loop3: detected capacity change from 0 to 512
[   73.989460][ T6056] EXT4-fs: Ignoring removed i_version option
[   74.014593][ T6056] EXT4-fs: Ignoring removed oldalloc option
[   74.035456][ T6056] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.089049][ T6056] EXT4-fs (loop3): Test dummy encryption mode enabled
[   74.139524][ T6056] EXT4-fs (loop3): 1 truncate cleaned up
[   74.163932][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.316153][ T6056] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.47: invalid indirect mapped block 234881024 (level 0)
[   74.414660][ T6056] EXT4-fs (loop3): Remounting filesystem read-only
[   74.456023][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.479830][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   74.535112][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   74.543871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   74.624785][ T6078] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   74.654405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   74.676692][ T6076] vivid-000: disconnect
[   74.688873][ T6080] netlink: 'syz.0.52': attribute type 1 has an invalid length.
[   74.696955][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   74.707138][ T6080] Zero length message leads to an empty skb
[   74.783771][ T6075] vivid-000: reconnect
[   74.872087][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   74.915391][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   74.923192][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   74.972285][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   74.986066][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   74.999484][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   75.023477][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   75.038082][ T6084] netlink: 'syz.0.54': attribute type 3 has an invalid length.
[   75.112766][ T6093] mmap: syz.2.57 (6093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   75.145721][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   75.161872][ T6095] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.171227][ T6095] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.180044][ T6095] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.188845][ T6095] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.211021][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   75.324190][ T5766] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.524168][ T5766] usb 2-1: Using ep0 maxpacket: 8
[   75.544586][ T5766] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   75.560980][ T5766] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   75.571811][ T5766] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   75.590894][ T5766] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   75.604454][ T5766] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   75.613610][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.842189][ T5766] usb 2-1: GET_CAPABILITIES returned 0
[   75.858251][ T5766] usbtmc 2-1:16.0: can't read capabilities
[   75.913083][ T6108] loop0: detected capacity change from 0 to 32768
[   76.058728][    T9] usb 2-1: USB disconnect, device number 2
[   76.071724][ T6108] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   76.133704][ T6117] loop2: detected capacity change from 0 to 4096
[   76.179517][ T6108] (syz.0.63,6108,0):ocfs2_read_blocks:239 ERROR: status = -12
[   76.205015][ T6108] (syz.0.63,6108,1):ocfs2_trim_mainbm:7610 ERROR: status = -12
[   76.320182][ T6117] ntfs3: loop2: ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[   76.371789][ T5763] ocfs2: Unmounting device (7,0) on (node local)
[   76.445644][ T6121] syzkaller1: tun_chr_ioctl cmd 1074025677
[   76.451528][ T6121] syzkaller1: Linktype set failed because interface is up
[   76.475943][   T28] syzkaller1: tun_net_xmit 90
[   77.385239][ T6123] loop2: detected capacity change from 0 to 32768
[   77.438748][ T6123] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   77.457709][ T6123] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   77.500767][ T6135] loop1: detected capacity change from 0 to 4096
[   77.532641][ T6127] loop0: detected capacity change from 0 to 32768
[   77.598549][ T6127] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   77.638762][ T6123] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   77.671837][   T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   77.685720][ T6145] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.728447][   T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   77.829947][ T6127] XFS (loop0): Ending clean mount
[   77.895366][ T6127] XFS (loop0): Quotacheck needed: Please wait.
[   77.958902][   T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 230ms
[   77.989251][   T28] gfs2: fsid=syz:syz.0: jid=0: Done
[   78.005234][ T6123] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   78.038182][ T6127] XFS (loop0): Quotacheck: Done.
[   78.178184][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   78.501022][ T6154] loop1: detected capacity change from 0 to 8192
[   78.567104][ T6154] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   78.643813][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.725856][ T6154] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   78.742873][ T6161] loop0: detected capacity change from 0 to 512
[   78.759814][ T6154] REISERFS (device loop1): using ordered data mode
[   78.779949][ T6154] reiserfs: using flush barriers
[   78.787205][ T6161] EXT4-fs: Ignoring removed oldalloc option
[   78.807676][ T6154] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   78.842951][ T6154] REISERFS (device loop1): checking transaction log (loop1)
[   78.854953][ T6161] EXT4-fs (loop0): 1 truncate cleaned up
[   78.897957][ T6161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.978446][ T6150] loop3: detected capacity change from 0 to 32768
[   79.030712][ T6150] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.77 (6150)
[   79.087744][ T6150] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   79.106849][ T6150] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   79.125219][ T6150] BTRFS info (device loop3): using free space tree
[   79.145411][ T6154] REISERFS (device loop1): Using tea hash to sort names
[   79.158414][ T6154] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   79.174459][ T6154] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   79.186424][   T28] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[   79.186424][   T28]   bh = 9387 (magic number)
[   79.186424][   T28]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503
[   79.206552][   T23] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[   79.206552][   T23]   bh = 9381 (magic number)
[   79.206552][   T23]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503
[   79.227486][ T6154] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[   79.244879][ T5828] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[   79.244879][ T5828]   bh = 9390 (magic number)
[   79.244879][ T5828]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503
[   79.264574][ T5752] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[   79.264574][ T5752]   bh = 9386 (magic number)
[   79.264574][ T5752]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503
[   79.285775][ T6123] gfs2: fsid=syz:syz.0: inum=9394 error=-28, nblocks=111, full=1 fail_pt=0
[   79.303261][ T5828] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   79.314186][ T6123] gfs2: fsid=syz:syz.0: rgrp 68 has an error, marking it readonly until umount
[   79.324290][ T6123] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[   79.333299][ T6123] gfs2: fsid=syz:syz.0:  R: n:68 f:80000000 b:4294967295/4294967295 i:2147483648 q:0 r:4190 e:0
[   79.374241][ T6150] BTRFS info (device loop3): enabling ssd optimizations
[   79.381426][ T6150] BTRFS info (device loop3): auto enabling async discard
[   79.413791][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.748050][ T5762] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   79.828067][ T6187] loop1: detected capacity change from 0 to 1024
[   79.925771][ T5778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (5778)
[   80.423414][ T6185] loop0: detected capacity change from 0 to 32768
[   80.479741][ T6185] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.522593][ T6205] validate_nla: 48 callbacks suppressed
[   80.522610][ T6205] netlink: 'syz.1.89': attribute type 12 has an invalid length.
[   80.545567][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'.
[   80.559992][ T6205] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.569156][ T6205] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.578255][ T6205] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.587332][ T6205] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.597926][ T6205] netlink: 'syz.1.89': attribute type 12 has an invalid length.
[   80.603814][ T6185] XFS (loop0): Ending clean mount
[   80.605655][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'.
[   80.631131][ T6185] XFS (loop0): Quotacheck needed: Please wait.
[   80.654143][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.675979][ T6185] XFS (loop0): Quotacheck: Done.
[   80.787181][ T5763] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.865538][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.882265][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.913738][ T5848] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   80.934618][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.971043][ T5848] usb 4-1: config 0 descriptor??
[   81.049872][ T6214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.117822][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'.
[   81.570642][ T6225] loop0: detected capacity change from 0 to 1024
[   81.584872][ T6225] EXT4-fs: Ignoring removed nomblk_io_submit option
[   81.589105][ T5848] usb 4-1: string descriptor 0 read error: -22
[   81.632686][ T6225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.695109][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   81.795950][  T786] cfg80211: failed to load regulatory.db
[   81.811227][ T5848] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input7
[   81.888481][ T5815] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   81.893554][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.901661][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.939102][ T5815] usb 2-1: config 0 descriptor??
[   81.946890][ T5848] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[   81.990358][ T5815] cp210x 2-1:0.0: cp210x converter detected
[   82.043263][ T5848] usb 4-1: USB disconnect, device number 2
[   82.068319][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   82.118822][ T6229] fido_id[6229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[   82.191592][ T6233] loop3: detected capacity change from 0 to 7
[   82.208824][ T6233] Dev loop3: unable to read RDB block 7
[   82.220777][ T6233]  loop3: unable to read partition table
[   82.227268][ T6233] loop3: partition table beyond EOD, truncated
[   82.237314][ T6233] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[   82.384275][ T5815] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   82.412870][ T5815] usb 2-1: cp210x converter now attached to ttyUSB0
[   82.518082][ T6239] loop0: detected capacity change from 0 to 8192
[   82.540450][ T6239] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   82.623876][ T5815] usb 2-1: USB disconnect, device number 3
[   82.648746][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   82.692009][ T5815] cp210x 2-1:0.0: device disconnected
[   83.100711][ T6245] loop3: detected capacity change from 0 to 32768
[   83.114504][ T6245] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.103 (6245)
[   83.151967][ T6245] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   83.174425][ T6245] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   83.209151][ T6245] BTRFS info (device loop3): enabling auto defrag
[   83.224401][ T6245] BTRFS info (device loop3): force clearing of disk cache
[   83.231731][ T6245] BTRFS info (device loop3): enabling disk space caching
[   83.258157][ T6245] BTRFS info (device loop3): max_inline at 0
[   83.279877][ T6245] BTRFS info (device loop3): disk space caching is enabled
[   83.318279][ T6248] loop0: detected capacity change from 0 to 32768
[   83.359402][ T6248] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.392954][ T6245] BTRFS info (device loop3): enabling ssd optimizations
[   83.409263][ T6245] BTRFS info (device loop3): auto enabling async discard
[   83.441562][ T6245] BTRFS info (device loop3): rebuilding free space tree
[   83.488859][ T6245] BTRFS info (device loop3): disabling free space tree
[   83.496741][ T6245] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   83.512445][ T6245] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.553601][ T6248] XFS (loop0): Ending clean mount
[   83.569709][ T6248] XFS (loop0): Quotacheck needed: Please wait.
[   83.590987][  T994] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 
[   83.609220][  T994] XFS (loop0): Unmount and run xfs_repair
[   83.614247][   T27] audit: type=1804 audit(1769181912.371:2): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.103" name="/newroot/19/file0/file1" dev="loop3" ino=260 res=1 errno=0
[   83.616837][  T994] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   83.650828][  T994] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[   83.661134][  T994] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[   83.687530][  T994] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[   83.711689][  T994] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[   83.725959][  T994] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.736876][  T994] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.746335][  T994] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.755957][  T994] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   83.768260][  T994] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x21e/0x3d0" at daddr 0x3 len 1 error 74
[   83.783869][ T5762] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   83.791683][ T6248] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   83.836336][ T6248] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 
[   83.847942][ T6248] XFS (loop0): Unmount and run xfs_repair
[   83.853705][ T6248] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   83.872965][ T6248] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[   83.903605][ T6248] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[   83.912956][ T6248] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[   83.942980][ T6248] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[   84.005779][ T6248] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   84.041188][ T6248] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   84.059442][ T6248] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   84.078769][ T6248] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   84.125041][ T6248] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x21e/0x3d0" at daddr 0x3 len 1 error 74
[   84.222115][ T6248] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   84.278433][ T6248] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   84.350493][ T5828] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   84.374069][ T5828] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 1
[   84.398411][ T5828] gfs2: fsid=syz:syz.0: File system withdrawn
[   84.415606][ T5828] CPU: 1 PID: 5828 Comm: kworker/1:5 Not tainted syzkaller #0
[   84.423112][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   84.433209][ T5828] Workqueue: gfs2-delete/syz:syz delete_work_func
[   84.439669][ T5828] Call Trace:
[   84.442962][ T5828]  <TASK>
[   84.445910][ T5828]  dump_stack_lvl+0x18c/0x250
[   84.450615][ T5828]  ? kobject_uevent_env+0x363/0x8b0
[   84.455834][ T5828]  ? show_regs_print_info+0x20/0x20
[   84.461051][ T5828]  ? load_image+0x400/0x400
[   84.465576][ T5828]  ? kobject_uevent_env+0x363/0x8b0
[   84.470799][ T5828]  gfs2_withdraw+0xb24/0x13d0
[   84.475502][ T5828]  ? gfs2_lm+0x240/0x240
[   84.479741][ T5828]  ? wake_bit_function+0x200/0x200
[   84.484886][ T5828]  ? gfs2_meta_read+0x84c/0x990
[   84.489753][ T5828]  ? gfs2_meta_new+0x160/0x160
[   84.494528][ T5828]  gfs2_meta_check_ii+0x72/0x90
[   84.499381][ T5828]  gfs2_meta_buffer+0x236/0x310
[   84.504232][ T5828]  gfs2_inode_refresh+0xc1/0x1000
[   84.509263][ T5828]  ? __lock_acquire+0x7d40/0x7d40
[   84.514280][ T5828]  ? gfs2_inode_metasync+0xf0/0xf0
[   84.519381][ T5828]  ? do_raw_spin_unlock+0x121/0x230
[   84.524575][ T5828]  gfs2_instantiate+0x162/0x220
[   84.529422][ T5828]  gfs2_inode_lookup+0x69a/0xb60
[   84.534368][ T5828]  ? set_meta_super+0x10/0x10
[   84.539042][ T5828]  ? gfs2_lookup_by_inum+0x52/0xf0
[   84.544156][ T5828]  gfs2_lookup_by_inum+0x52/0xf0
[   84.549104][ T5828]  delete_work_func+0x360/0x6e0
[   84.553951][ T5828]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[   84.559925][ T5828]  ? glock_work_func+0x4c0/0x4c0
[   84.564859][ T5828]  ? read_lock_is_recursive+0x20/0x20
[   84.570225][ T5828]  ? _raw_spin_unlock_irq+0x23/0x50
[   84.575418][ T5828]  ? process_scheduled_works+0x96f/0x15d0
[   84.581131][ T5828]  ? process_scheduled_works+0x96f/0x15d0
[   84.586929][ T5828]  process_scheduled_works+0xa5d/0x15d0
[   84.592485][ T5828]  ? assign_work+0x430/0x430
[   84.597072][ T5828]  ? assign_work+0x3d0/0x430
[   84.601658][ T5828]  worker_thread+0xa55/0xfc0
[   84.606295][ T5828]  kthread+0x2fa/0x390
[   84.610392][ T5828]  ? pr_cont_work+0x560/0x560
[   84.615060][ T5828]  ? kthread_blkcg+0xd0/0xd0
[   84.619635][ T5828]  ret_from_fork+0x48/0x80
[   84.624051][ T5828]  ? kthread_blkcg+0xd0/0xd0
[   84.628631][ T5828]  ret_from_fork_asm+0x11/0x20
[   84.633394][ T5828]  </TASK>
[   84.653817][ T5763] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   85.295395][ T6281] loop1: detected capacity change from 0 to 40427
[   85.351228][ T6281] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x7ffff
[   85.374633][ T6281] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7698c
[   85.388211][ T6281] F2FS-fs (loop1): invalid crc value
[   85.397639][ T6281] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0
[   85.423355][ T6281] F2FS-fs (loop1): Found nat_bits in checkpoint
[   85.528247][ T6281] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[   85.546759][   T27] audit: type=1804 audit(1769181914.311:3): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.113" name="bus" dev="ramfs" ino=8071 res=1 errno=0
[   85.605316][ T6281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   85.655280][ T6281] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[   85.737077][ T6281] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xcb/0x610
[   85.829862][ T5764] syz-executor: attempt to access beyond end of device
[   85.829862][ T5764] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.870597][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   86.024774][ T5766] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   86.116369][ T6304] loop0: detected capacity change from 0 to 32768
[   86.188605][ T6304] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   86.234586][ T5766] usb 3-1: Using ep0 maxpacket: 16
[   86.242968][ T5766] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   86.256807][ T5766] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.270827][ T5766] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.282376][ T5766] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.303820][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.324086][ T5766] usb 3-1: Product: syz
[   86.328298][ T5766] usb 3-1: Manufacturer: syz
[   86.332906][ T5766] usb 3-1: SerialNumber: syz
[   86.503312][ T5763] ocfs2: Unmounting device (7,0) on (node local)
[   86.604267][ T5828] kernel read not supported for file /rfkill (pid: 5828 comm: kworker/1:5)
[   86.796802][ T5766] usb 3-1: 0:2 : does not exist
[   87.068114][ T6314] loop3: detected capacity change from 0 to 32768
[   87.082748][ T6314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.118 (6314)
[   87.176871][ T6314] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.190514][ T6314] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   87.207598][ T6314] BTRFS info (device loop3): force clearing of disk cache
[   87.227817][ T6314] BTRFS info (device loop3): enabling auto defrag
[   87.238346][ T6334] atomic_op ffff888025492998 conn xmit_atomic 0000000000000000
[   87.250658][ T6314] BTRFS info (device loop3): enabling ssd optimizations
[   87.264279][ T6314] BTRFS info (device loop3): max_inline at 0
[   87.274093][ T6314] BTRFS info (device loop3): enabling disk space caching
[   87.293528][ T6314] BTRFS info (device loop3): disk space caching is enabled
[   87.406647][ T5766] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[   87.414987][    T9] psmouse serio2: Failed to reset mouse on : -5
[   87.447422][ T6314] BTRFS info (device loop3): rebuilding free space tree
[   87.491941][ T5766] usb 3-1: USB disconnect, device number 3
[   87.518075][ T6314] BTRFS info (device loop3): disabling free space tree
[   87.552021][ T6314] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   87.572825][ T6314] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   87.619453][ T6356] loop1: detected capacity change from 0 to 128
[   87.628023][ T6356] EXT4-fs (loop1): Test dummy encryption mode enabled
[   87.656423][ T6356] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   87.693518][ T6356] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.838129][ T4455] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   87.885329][ T5762] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.213499][ T6356] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   88.514591][ T6368] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   88.606518][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   88.860735][ T6377] loop2: detected capacity change from 0 to 40427
[   88.867611][ T6390] loop1: detected capacity change from 0 to 4096
[   88.875666][ T6377] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   88.883343][ T6377] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   88.905021][ T6377] F2FS-fs (loop2): invalid crc value
[   88.932536][ T6377] F2FS-fs (loop2): Found nat_bits in checkpoint
[   88.993311][ T6377] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   89.018056][ T6377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   89.054185][ T5766] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   89.078561][   T27] audit: type=1800 audit(1769181917.841:4): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.131" name="bus" dev="loop2" ino=10 res=0 errno=0
[   89.122280][ T6377] syz.2.131: attempt to access beyond end of device
[   89.122280][ T6377] loop2: rw=2049, sector=77824, nr_sectors = 816 limit=40427
[   89.247328][ T5765] syz-executor: attempt to access beyond end of device
[   89.247328][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.268216][ T5766] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[   89.268635][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   89.277636][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.296552][ T5766] usb 4-1: config 0 descriptor??
[   89.305368][ T5766] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[   89.547580][ T5766] gp8psk: usb in 128 operation failed.
[   89.680392][ T6397] loop1: detected capacity change from 0 to 512
[   89.759678][ T6397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.765414][ T5766] gp8psk: usb in 146 operation failed.
[   89.776407][ T6397] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.783852][ T5766] gp8psk: failed to get FW version
[   89.796463][ T5766] gp8psk: usb in 149 operation failed.
[   89.801958][ T5766] gp8psk: failed to get FPGA version
[   89.940827][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.014692][ T5766] gp8psk: usb out operation failed.
[   90.039041][ T5766] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   90.056370][ T5766] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[   90.078494][ T5766] usb 4-1: USB disconnect, device number 3
[   90.134617][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.143549][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.152237][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.160145][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.168924][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.183731][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.195850][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.203378][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.216358][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.223904][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.232031][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.240046][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.241615][ T6409] loop2: detected capacity change from 0 to 1024
[   90.249902][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.257495][ T6409] EXT4-fs: Ignoring removed bh option
[   90.271455][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.280743][ T6409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.281536][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.303677][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.312539][    T8] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   90.326466][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.330735][    T8] hid-generic 0006:0004:0009.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[   90.427299][ T6412] fido_id[6412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   90.435889][ T6409] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.142: Allocating blocks 385-513 which overlap fs metadata
[   90.472171][ T6409] EXT4-fs (loop2): pa ffff88807465bd98: logic 16, phys. 129, len 24
[   90.480972][ T6409] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 8
[   90.519415][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.041558][ T6421] loop3: detected capacity change from 0 to 32768
[   91.056800][ T6421] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   91.065084][ T6421] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   91.111839][ T6421] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   91.140652][ T5828] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   91.149708][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'.
[   91.156717][ T5828] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   91.163055][ T6433] netlink: 'syz.2.150': attribute type 18 has an invalid length.
[   91.173902][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'.
[   91.201593][ T6433] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.210576][ T6433] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.219405][ T6433] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.228153][ T6433] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.232962][ T5828] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms
[   91.246212][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'.
[   91.250369][ T5828] gfs2: fsid=syz:syz.0: jid=0: Done
[   91.260004][ T6433] netlink: 'syz.2.150': attribute type 18 has an invalid length.
[   91.268661][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'.
[   91.275301][ T6421] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   91.294164][    T9] misc userio: Buffer overflowed, userio client isn't keeping up
[   91.633727][ T6421] capability: warning: `syz.3.145' uses deprecated v2 capabilities in a way that may be insecure
[   91.956802][ T6437] loop2: detected capacity change from 0 to 40427
[   91.974291][ T6437] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   91.982883][ T6437] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   92.016851][ T6437] F2FS-fs (loop2): invalid crc value
[   92.064095][ T6437] F2FS-fs (loop2): Found nat_bits in checkpoint
[   92.189600][ T6437] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   92.203468][ T6437] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   92.387428][    T9] input: PS/2 Generic Mouse as /devices/serio2/input/input8
[   92.706553][    T9] psmouse serio2: Failed to enable mouse on 
[   92.759306][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.744845][ T6487] loop2: detected capacity change from 0 to 4096
[   93.766879][ T6487] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[   93.784213][ T5766] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   93.790611][ T6487] ntfs3: loop2: It is recommened to use chkdsk.
[   93.971147][ T5766] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.002100][ T5766] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   94.054076][ T5766] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   94.087288][ T5766] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[   94.112700][ T5766] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   94.138568][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.169201][ T5766] usb 4-1: config 0 descriptor??
[   94.178015][ T6483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   94.410776][ T5766] usbhid 4-1:0.0: can't add hid device: -71
[   94.424549][    T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   94.433889][ T5766] usbhid: probe of 4-1:0.0 failed with error -71
[   94.455387][ T5766] usb 4-1: USB disconnect, device number 4
[   94.601492][ T6500] loop1: detected capacity change from 0 to 32768
[   94.612150][ T6500] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.176 (6500)
[   94.629219][    T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   94.640963][    T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   94.657850][ T6500] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   94.668092][    T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   94.668335][ T6500] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   94.681759][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.688603][ T6500] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   94.706104][ T6500] BTRFS info (device loop1): use zstd compression, level 3
[   94.717615][ T6495] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   94.725446][ T6500] BTRFS info (device loop1): using free space tree
[   94.738082][    T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[   94.830413][ T6500] BTRFS info (device loop1): enabling ssd optimizations
[   94.843438][ T6500] BTRFS info (device loop1): auto enabling async discard
[   94.970182][    T8] usb 1-1: USB disconnect, device number 2
[   94.976207][ T5766] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   95.077447][ T5764] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   95.100475][ T6520] batadv_slave_1: entered promiscuous mode
[   95.111660][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'.
[   95.122149][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.174179][ T5766] usb 4-1: Using ep0 maxpacket: 32
[   95.200188][ T5766] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.221618][ T5766] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.233357][ T5766] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[   95.250868][ T5766] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   95.260648][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.293129][ T5766] usb 4-1: config 0 descriptor??
[   95.362269][ T6520] batadv_slave_1 (unregistering): left promiscuous mode
[   95.397684][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.708621][ T5766] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0xd
[   95.738889][ T5766] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0
[   96.007660][ T5766] usb 4-1: USB disconnect, device number 5
[   96.720173][ T6546] loop1: detected capacity change from 0 to 4096
[   97.461404][ T6544] loop0: detected capacity change from 0 to 40427
[   97.473749][ T6544] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[   97.496909][ T6544] F2FS-fs (loop0): invalid crc value
[   97.523378][ T6544] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.633550][ T6544] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   97.743138][ T5763] syz-executor: attempt to access beyond end of device
[   97.743138][ T5763] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.743896][ T6565] loop2: detected capacity change from 0 to 32768
[   97.771989][ T5763] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   97.783155][ T6565] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.194 (6565)
[   97.810419][ T6565] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   97.824168][ T6565] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   97.847019][ T6565] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   97.872391][ T6565] BTRFS info (device loop2): use zstd compression, level 3
[   97.891765][ T6565] BTRFS info (device loop2): using free space tree
[   98.029200][ T6565] BTRFS info (device loop2): enabling ssd optimizations
[   98.046841][ T6565] BTRFS info (device loop2): auto enabling async discard
[   98.078788][   T27] audit: type=1800 audit(1769181926.841:5): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="file1" dev="loop2" ino=260 res=0 errno=0
[   98.349144][ T5765] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   98.872539][ T6604] loop2: detected capacity change from 0 to 128
[   98.911866][ T6604] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   99.154570][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   99.364484][    T8] usb 4-1: Using ep0 maxpacket: 8
[   99.372252][    T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   99.384658][    T8] usb 4-1: config 179 has no interface number 0
[   99.402221][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   99.422733][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   99.444347][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   99.454702][ T6615] loop0: detected capacity change from 0 to 4096
[   99.463671][    T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   99.514131][    T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   99.562641][    T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   99.582362][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.628253][ T6605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   99.819599][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'.
[   99.887149][    T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9
[   99.905336][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  100.124247][ T5828] usb 2-1: Using ep0 maxpacket: 8
[  100.131431][ T5828] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  100.137101][    T9] usb 4-1: USB disconnect, device number 6
[  100.142693][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  100.142738][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  100.148776][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  100.148804][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  100.148826][ T5828] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.148865][ T5828] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  100.148885][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.152763][ T6636] loop2: detected capacity change from 0 to 256
[  100.228554][    T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  100.289921][ T6636] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  100.382670][ T6636] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[  100.390726][ T6636] exFAT-fs (loop2): Filesystem has been set read-only
[  100.397597][ T6636] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[  100.449863][ T5828] usb 2-1: usb_control_msg returned -32
[  100.458294][ T5828] usbtmc 2-1:16.0: can't read capabilities
[  100.496806][ T6638] loop2: detected capacity change from 0 to 1024
[  101.324757][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d3fc000: rx timeout, send abort
[  101.438731][ T6658] loop2: detected capacity change from 0 to 40427
[  101.462944][ T6658] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  101.472942][ T6658] F2FS-fs (loop2): invalid crc value
[  101.486871][ T6658] F2FS-fs (loop2): Found nat_bits in checkpoint
[  101.537915][ T6658] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  101.613198][ T6658] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x12c0/0x3e60
[  101.668217][ T5765] syz-executor: attempt to access beyond end of device
[  101.668217][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  101.684936][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  101.825282][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f12f800: rx timeout, send abort
[  101.834764][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d3fc000: abort rx timeout. Force session deactivation
[  102.333513][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f12f800: abort rx timeout. Force session deactivation
[  102.569625][ T6666] loop3: detected capacity change from 0 to 32768
[  102.601687][ T6666] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.663398][   T23] usb 2-1: USB disconnect, device number 4
[  102.763175][ T6676] loop2: detected capacity change from 0 to 32768
[  102.810136][ T6666] XFS (loop3): Ending clean mount
[  102.850075][ T6666] XFS (loop3): Quotacheck needed: Please wait.
[  102.860831][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[  102.953516][ T6666] XFS (loop3): Quotacheck: Done.
[  103.179758][ T6701] loop2: detected capacity change from 0 to 1024
[  103.262272][ T6701] hfsplus: invalid length 32517 has been corrected to 255
[  103.300459][ T5762] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.701805][ T6698] loop1: detected capacity change from 0 to 40427
[  103.723878][ T6698] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff
[  103.733971][ T6698] F2FS-fs (loop1): invalid crc value
[  103.775989][ T6698] F2FS-fs (loop1): Found nat_bits in checkpoint
[  103.876947][ T6698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.976713][ T6698] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x12c0/0x3e60
[  104.031151][ T5764] syz-executor: attempt to access beyond end of device
[  104.031151][ T5764] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.049694][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.496433][ T6720] loop0: detected capacity change from 0 to 32768
[  104.573895][ T6720] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.665968][ T6720] XFS (loop0): Ending clean mount
[  104.676863][ T6720] XFS (loop0): Quotacheck needed: Please wait.
[  104.867537][ T6720] XFS (loop0): Quotacheck: Done.
[  105.058206][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.227605][ T6735] loop1: detected capacity change from 0 to 32768
[  105.240246][ T6735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.241 (6735)
[  105.262362][ T6735] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.272809][ T6735] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  105.281990][ T6735] BTRFS info (device loop1): enabling auto defrag
[  105.288773][ T6735] BTRFS info (device loop1): use no compression
[  105.295793][ T6735] BTRFS info (device loop1): max_inline at 4096
[  105.302167][ T6735] BTRFS info (device loop1): using free space tree
[  105.368627][ T6735] BTRFS info (device loop1): enabling ssd optimizations
[  105.377569][ T6735] BTRFS info (device loop1): auto enabling async discard
[  105.399616][   T27] audit: type=1804 audit(1769181934.161:6): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.241" name="/newroot/68/bus/file1" dev="loop1" ino=260 res=1 errno=0
[  105.486403][ T5764] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.904713][ T6770] loop1: detected capacity change from 0 to 1024
[  105.937452][ T6770] hfsplus: invalid length 32517 has been corrected to 255
[  106.223273][ T6779] netlink: 51 bytes leftover after parsing attributes in process `syz.2.252'.
[  106.753199][ T6774] loop3: detected capacity change from 0 to 32768
[  106.818246][ T6774]  loop3: p1 p3 < >
[  106.925509][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  106.953077][ T6802] loop3: detected capacity change from 0 to 128
[  107.103872][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  107.114459][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  107.135516][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.156884][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.176355][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  107.190146][   T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  107.200478][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.231327][   T23] usb 3-1: config 0 descriptor??
[  107.649880][   T23] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  107.664867][   T23] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  107.817154][ T6811] loop0: detected capacity change from 0 to 1024
[  107.838958][ T6811] hfsplus: invalid length 32517 has been corrected to 255
[  107.933162][ T6814] netlink: 'syz.1.265': attribute type 1 has an invalid length.
[  107.951234][ T6814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.959137][ T6814] IPv6: NLM_F_CREATE should be set when creating new route
[  107.966440][ T6814] IPv6: NLM_F_CREATE should be set when creating new route
[  107.991258][ T6814] netlink: 'syz.1.265': attribute type 1 has an invalid length.
[  107.999189][ T6814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.006492][ T6814] IPv6: NLM_F_CREATE should be set when creating new route
[  108.250605][ T6809] loop3: detected capacity change from 0 to 32768
[  108.270398][ T6809] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.264 (6809)
[  108.300214][    C0] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz.2.256)
[  108.313458][ T6809] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  108.340453][ T6809] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  108.355558][ T6809] BTRFS info (device loop3): using free space tree
[  108.438887][ T6828] loop0: detected capacity change from 0 to 1024
[  108.524675][    T9] usb 3-1: USB disconnect, device number 4
[  108.533582][ T6809] BTRFS info (device loop3): enabling ssd optimizations
[  108.534929][ T6828] hfsplus: invalid length 32517 has been corrected to 255
[  108.581479][ T6809] BTRFS info (device loop3): auto enabling async discard
[  108.767736][ T5762] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  109.584211][ T5766] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  109.627217][ T6859] loop0: detected capacity change from 0 to 512
[  109.633984][ T6858] netlink: 'syz.1.276': attribute type 1 has an invalid length.
[  109.642630][ T6859] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  109.657115][ T6859] EXT4-fs (loop0): invalid journal inode
[  109.663223][ T6859] EXT4-fs (loop0): can't get journal size
[  109.679581][ T6859] EXT4-fs (loop0): 1 truncate cleaned up
[  109.689872][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.790312][ T5766] usb 4-1: Using ep0 maxpacket: 32
[  109.831655][ T5766] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  109.865040][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.880982][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.894516][ T5766] usb 4-1: config 0 descriptor??
[  109.999499][ T6868] loop0: detected capacity change from 0 to 64
[  110.073916][   T27] audit: type=1800 audit(1769181938.831:7): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.279" name="file0" dev="loop0" ino=21 res=0 errno=0
[  110.130825][ T5766] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  110.168781][ T5766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  110.195980][ T5766] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  110.212587][ T5766] usb 4-1: media controller created
[  110.220914][ T6872] binder: 6871:6872 ioctl c018620c 200000000200 returned -1
[  110.282131][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.420350][ T5766] DVB: Unable to find symbol dib7000p_attach()
[  110.443422][ T5766] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  110.597270][ T5766] rc_core: IR keymap rc-dib0700-rc5 not found
[  110.628701][ T5766] Registered IR keymap rc-empty
[  110.644644][ T5766] dvb-usb: could not initialize remote control.
[  110.661888][ T5766] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  110.821056][ T5766] usb 4-1: USB disconnect, device number 7
[  110.872799][ T5766] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  110.883834][ T6891] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  110.980772][   T27] audit: type=1326 audit(1769181939.741:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.041311][   T27] audit: type=1326 audit(1769181939.741:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.126489][   T27] audit: type=1326 audit(1769181939.741:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.169872][   T27] audit: type=1326 audit(1769181939.741:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.212278][   T27] audit: type=1326 audit(1769181939.741:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.264549][   T27] audit: type=1326 audit(1769181939.741:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.266600][ T6899] loop2: detected capacity change from 0 to 128
[  111.292685][   T27] audit: type=1326 audit(1769181939.741:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.346197][   T27] audit: type=1326 audit(1769181939.741:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.416361][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  111.427084][   T27] audit: type=1326 audit(1769181939.741:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.492168][   T27] audit: type=1326 audit(1769181939.741:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdb4979acb9 code=0x7ffc0000
[  111.545654][ T6904] input: syz1 as /devices/virtual/input/input12
[  111.566905][ T6905] loop3: detected capacity change from 0 to 1024
[  111.595503][ T6905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  111.645821][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.653257][ T6905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.664172][   T23] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  111.697120][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.723962][   T23] usb 1-1: config 0 descriptor??
[  111.865897][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.941060][   T23] usbhid 1-1:0.0: can't add hid device: -71
[  111.948923][   T23] usbhid: probe of 1-1:0.0 failed with error -71
[  111.994376][   T23] usb 1-1: USB disconnect, device number 3
[  112.034197][ T5828] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  112.227107][ T5828] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  112.242846][ T5828] usb 2-1: config 0 has no interface number 0
[  112.253744][ T6924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'.
[  112.263476][ T5828] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  112.294376][ T5828] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  112.318623][ T5828] usb 2-1: config 0 interface 255 has no altsetting 0
[  112.338371][ T5828] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  112.366836][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.387408][ T5828] usb 2-1: config 0 descriptor??
[  112.395369][ T5828] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  112.544276][   T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  112.601129][ T5828] usb 2-1: USB disconnect, device number 5
[  112.734196][   T23] usb 1-1: Using ep0 maxpacket: 32
[  112.737729][    T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  112.742402][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.757857][   T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  112.766975][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.777511][   T23] usb 1-1: config 0 descriptor??
[  112.795644][   T23] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  112.817176][   T23] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  112.935580][    T9] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  112.944855][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.954498][    T9] usb 4-1: config 0 descriptor??
[  112.976018][ T5766] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  113.017828][    C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped
[  113.167539][ T5766] usb 3-1: Using ep0 maxpacket: 32
[  113.183235][ T5766] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  113.192983][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.201117][ T5766] usb 3-1: Product: syz
[  113.205522][ T5766] usb 3-1: Manufacturer: syz
[  113.210137][ T5766] usb 3-1: SerialNumber: syz
[  113.218210][ T5766] usb 3-1: config 0 descriptor??
[  113.227768][ T5766] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  113.351399][    C1] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped
[  113.588907][ T6950] loop1: detected capacity change from 0 to 32768
[  113.597091][ T6950] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.309 (6950)
[  113.625120][ T6950] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.636057][ T6950] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  113.645121][ T6950] BTRFS info (device loop1): using free space tree
[  113.734219][ T6950] BTRFS info (device loop1): enabling ssd optimizations
[  113.741522][ T6950] BTRFS info (device loop1): auto enabling async discard
[  113.844558][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.941912][ T5757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5757)
[  114.187223][    T9] pegasus 4-1:0.0: can't reset MAC
[  114.209910][    T9] pegasus: probe of 4-1:0.0 failed with error -5
[  114.237714][    T9] usb 4-1: USB disconnect, device number 8
[  114.414540][ T5752] usb 1-1: USB disconnect, device number 4
[  114.422805][ T5752] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  114.454910][ T5766] gspca_topro: reg_w err -71
[  114.506562][ T5766] gspca_topro: Sensor soi763a
[  114.540821][ T5766] usb 3-1: USB disconnect, device number 5
[  115.438011][ T7002] loop2: detected capacity change from 0 to 32768
[  115.454574][ T7002] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.323 (7002)
[  115.479518][ T7002] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.493580][ T7002] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  115.508656][ T7002] BTRFS info (device loop2): using free space tree
[  115.594430][ T7002] BTRFS info (device loop2): enabling ssd optimizations
[  115.601440][ T7002] BTRFS info (device loop2): auto enabling async discard
[  115.683123][ T7022] loop0: detected capacity change from 0 to 512
[  115.707872][ T7022] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  115.736943][ T7022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  115.791003][ T5765] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.816622][ T7022] EXT4-fs (loop0): 1 truncate cleaned up
[  115.855879][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.060071][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.492187][ T7044] netlink: 'syz.3.334': attribute type 13 has an invalid length.
[  116.632817][ T7049] loop0: detected capacity change from 0 to 512
[  116.734647][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  116.843838][ T7049] EXT4-fs (loop0): Test dummy encryption mode enabled
[  116.848734][ T7050] syzkaller1: entered promiscuous mode
[  116.853222][ T7049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  116.864956][ T7050] syzkaller1: entered allmulticast mode
[  116.880327][ T7049] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.336: bad orphan inode 131083
[  116.900229][ T7049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.058221][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.231306][ T5766] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  117.265031][ T5766] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  117.514388][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.570908][ T7060] loop1: detected capacity change from 0 to 32768
[  117.593659][ T7060] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.632693][ T7060] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  117.642584][ T7060] BTRFS info (device loop1): using free space tree
[  117.705994][    T9] usb 1-1: config 0 has no interfaces?
[  117.713187][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  117.729309][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  117.734192][ T7060] BTRFS info (device loop1): enabling ssd optimizations
[  117.744093][    T9] usb 1-1: SerialNumber: syz
[  117.757901][    T9] usb 1-1: config 0 descriptor??
[  117.775765][ T7060] BTRFS info (device loop1): auto enabling async discard
[  117.958576][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.150462][ T5778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5778)
[  118.407518][ T7099] loop3: detected capacity change from 0 to 32768
[  118.490232][ T7099] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.347 (7099)
[  118.579512][ T7099] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.626967][ T7099] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  118.646458][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  118.656136][ T7099] BTRFS info (device loop3): enabling auto defrag
[  118.663049][ T7099] BTRFS info (device loop3): use no compression
[  118.670459][ T7099] BTRFS info (device loop3): force clearing of disk cache
[  118.696562][ T7099] BTRFS info (device loop3): max_inline at 4096
[  118.702877][ T7099] BTRFS info (device loop3): disabling free space tree
[  118.770552][ T7099] BTRFS info (device loop3): enabling ssd optimizations
[  118.791393][ T7099] BTRFS info (device loop3): auto enabling async discard
[  118.806794][ T7099] BTRFS info (device loop3): rebuilding free space tree
[  118.840959][ T7099] BTRFS info (device loop3): disabling free space tree
[  118.854660][    T9] usb 3-1: Using ep0 maxpacket: 8
[  118.864777][ T7099] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  118.884359][ T7099] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  118.895365][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  118.903580][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.944095][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.953876][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.963954][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.977416][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.987786][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.201240][ T5762] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.223276][    T9] usb 3-1: GET_CAPABILITIES returned 0
[  119.238306][    T9] usbtmc 3-1:16.0: can't read capabilities
[  119.576551][ T7098] usbtmc 3-1:16.0: usb_control_msg returned -71
[  119.576802][    T9] usb 3-1: USB disconnect, device number 6
[  119.608843][ T7130] usbtmc 3-1:16.0: usb_control_msg returned -19
[  119.799259][ T7137] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  119.832585][ T7137] iommufd_mock iommufd_mock2: Adding to iommu group 1
[  119.992399][ T7126] loop1: detected capacity change from 0 to 40427
[  120.003599][ T7126] F2FS-fs (loop1): invalid crc value
[  120.024778][ T7126] F2FS-fs (loop1): Found nat_bits in checkpoint
[  120.092316][ T7126] F2FS-fs (loop1): Start checkpoint disabled!
[  120.117087][ T7126] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  120.252485][    T9] usb 1-1: USB disconnect, device number 5
[  120.656803][ T7153] loop1: detected capacity change from 0 to 2048
[  120.707317][ T7156] loop2: detected capacity change from 0 to 512
[  120.716673][ T7144] loop3: detected capacity change from 0 to 32768
[  120.736498][ T7156] EXT4-fs (loop2): Test dummy encryption mode enabled
[  120.745590][ T7158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.757179][ T7144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.358 (7144)
[  120.769909][ T7156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  120.796096][ T7144] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  120.808781][ T7156] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.363: bad orphan inode 131083
[  120.842541][ T7144] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  120.853488][ T7156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.866069][ T7144] BTRFS info (device loop3): enabling auto defrag
[  120.872564][ T7144] BTRFS info (device loop3): max_inline at 0
[  120.878941][ T7144] BTRFS info (device loop3): enabling ssd optimizations
[  120.886293][ T7144] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  120.897972][ T7144] BTRFS info (device loop3): trying to use backup root at mount time
[  120.906723][ T7144] BTRFS info (device loop3): using free space tree
[  120.965317][ T7158] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  121.022130][ T7158] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2)
[  121.054993][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.135702][ T7158] Remounting filesystem read-only
[  121.171251][   T11] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  121.182563][ T7174] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  121.204193][   T11] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  121.217491][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.238083][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.257491][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.285145][   T11] NILFS (loop1): discard dirty page: offset=0, ino=3
[  121.309575][   T11] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  121.336528][   T11] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  121.361183][   T11] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  121.388340][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.428311][   T11] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  121.448328][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.460550][ T5762] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.474342][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.483234][   T11] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  121.512426][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.554249][   T11] NILFS (loop1): discard dirty page: offset=0, ino=18
[  121.568707][   T11] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  121.599849][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.634709][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.643627][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.703258][ T5778] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5778)
[  121.720639][   T11] NILFS (loop1): discard dirty page: offset=0, ino=2
[  121.735184][   T11] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  121.754279][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.802020][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.834385][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.864115][   T11] NILFS (loop1): discard dirty page: offset=0, ino=5
[  121.870889][   T11] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  121.904616][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.913526][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.954200][   T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.963339][ T7153] NILFS (loop1): mounting fs with errors
[  122.016580][ T7158] ------------[ cut here ]------------
[  122.023204][ T7158] WARNING: CPU: 0 PID: 7158 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4c0
[  122.032532][ T7158] Modules linked in:
[  122.036845][ T7158] CPU: 0 PID: 7158 Comm: segctord Not tainted syzkaller #0
[  122.044353][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  122.054494][ T7158] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0
[  122.060420][ T7158] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 cf 9a fc ff e8 5a c8 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 6a 09 e8 ff e8 45 c8 88 ff <0f> 0b e9 84 fd ff ff e8 39 c8 88 ff 0f 0b e9 b0 fd ff ff e8 2d c8
[  122.080236][ T7158] RSP: 0018:ffffc900038f76f0 EFLAGS: 00010293
[  122.086391][ T7158] RAX: ffffffff81fe4adb RBX: ffff88805bd51d98 RCX: ffff888078bf3c00
[  122.096167][ T7158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  122.104948][ T7158] RBP: ffffc900038f7b01 R08: ffff88805bd51d9f R09: 1ffff1100b7aa3b3
[  122.112958][ T7158] R10: dffffc0000000000 R11: ffffed100b7aa3b4 R12: 1ffff1100e8e1cf7
[  122.121061][ T7158] R13: ffff88807470e7c8 R14: ffff88807d423328 R15: 1ffff1100e8e1cf9
[  122.129124][ T7158] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  122.138137][ T7158] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.144781][ T7158] CR2: 00007fdb499de2f8 CR3: 000000005d8b8000 CR4: 00000000003506f0
[  122.152777][ T7158] Call Trace:
[  122.156114][ T7158]  <TASK>
[  122.159068][ T7158]  nilfs_segctor_do_construct+0x307/0x68a0
[  122.164965][ T7158]  ? verify_lock_unused+0x140/0x140
[  122.170205][ T7158]  ? verify_lock_unused+0x140/0x140
[  122.175530][ T7158]  ? nilfs_transaction_unlock+0x220/0x220
[  122.181283][ T7158]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  122.187515][ T7158]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  122.192991][ T7158]  ? __lock_acquire+0x7d40/0x7d40
[  122.198057][ T7158]  ? __rwlock_init+0x150/0x150
[  122.202838][ T7158]  ? do_raw_spin_unlock+0x121/0x230
[  122.208141][ T7158]  ? _raw_spin_unlock+0x28/0x40
[  122.213011][ T7158]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  122.218527][ T7158]  nilfs_segctor_construct+0x17b/0x690
[  122.224082][ T7158]  nilfs_segctor_thread+0x536/0x10d0
[  122.229394][ T7158]  ? nilfs_iput_work_func+0x70/0x70
[  122.234678][ T7158]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  122.240591][ T7158]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  122.246531][ T7158]  ? wake_bit_function+0x200/0x200
[  122.251664][ T7158]  ? __kthread_parkme+0x7a/0x1c0
[  122.256760][ T7158]  kthread+0x2fa/0x390
[  122.260851][ T7158]  ? nilfs_iput_work_func+0x70/0x70
[  122.266110][ T7158]  ? kthread_blkcg+0xd0/0xd0
[  122.270716][ T7158]  ret_from_fork+0x48/0x80
[  122.275196][ T7158]  ? kthread_blkcg+0xd0/0xd0
[  122.279799][ T7158]  ret_from_fork_asm+0x11/0x20
[  122.284635][ T7158]  </TASK>
[  122.287669][ T7158] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  122.294961][ T7158] CPU: 0 PID: 7158 Comm: segctord Not tainted syzkaller #0
[  122.302166][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  122.312231][ T7158] Call Trace:
[  122.315526][ T7158]  <TASK>
[  122.318464][ T7158]  dump_stack_lvl+0x18c/0x250
[  122.323166][ T7158]  ? show_regs_print_info+0x20/0x20
[  122.328385][ T7158]  ? load_image+0x400/0x400
[  122.332918][ T7158]  panic+0x2dc/0x730
[  122.336835][ T7158]  ? bpf_jit_dump+0xd0/0xd0
[  122.341362][ T7158]  ? ret_from_fork_asm+0x11/0x20
[  122.346316][ T7158]  __warn+0x2e0/0x470
[  122.350292][ T7158]  ? mark_buffer_dirty+0x2bb/0x4c0
[  122.355401][ T7158]  ? mark_buffer_dirty+0x2bb/0x4c0
[  122.360513][ T7158]  report_bug+0x2be/0x4f0
[  122.364839][ T7158]  ? mark_buffer_dirty+0x2bb/0x4c0
[  122.369944][ T7158]  ? mark_buffer_dirty+0x2bb/0x4c0
[  122.375047][ T7158]  ? mark_buffer_dirty+0x2bd/0x4c0
[  122.380151][ T7158]  handle_bug+0xcf/0x120
[  122.384391][ T7158]  exc_invalid_op+0x1a/0x50
[  122.388886][ T7158]  asm_exc_invalid_op+0x1a/0x20
[  122.393722][ T7158] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0
[  122.399432][ T7158] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 cf 9a fc ff e8 5a c8 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 6a 09 e8 ff e8 45 c8 88 ff <0f> 0b e9 84 fd ff ff e8 39 c8 88 ff 0f 0b e9 b0 fd ff ff e8 2d c8
[  122.419028][ T7158] RSP: 0018:ffffc900038f76f0 EFLAGS: 00010293
[  122.425085][ T7158] RAX: ffffffff81fe4adb RBX: ffff88805bd51d98 RCX: ffff888078bf3c00
[  122.433056][ T7158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  122.441014][ T7158] RBP: ffffc900038f7b01 R08: ffff88805bd51d9f R09: 1ffff1100b7aa3b3
[  122.448974][ T7158] R10: dffffc0000000000 R11: ffffed100b7aa3b4 R12: 1ffff1100e8e1cf7
[  122.456933][ T7158] R13: ffff88807470e7c8 R14: ffff88807d423328 R15: 1ffff1100e8e1cf9
[  122.464898][ T7158]  ? mark_buffer_dirty+0x2bb/0x4c0
[  122.470014][ T7158]  nilfs_segctor_do_construct+0x307/0x68a0
[  122.475835][ T7158]  ? verify_lock_unused+0x140/0x140
[  122.481039][ T7158]  ? verify_lock_unused+0x140/0x140
[  122.486232][ T7158]  ? nilfs_transaction_unlock+0x220/0x220
[  122.491944][ T7158]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  122.498110][ T7158]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  122.503569][ T7158]  ? __lock_acquire+0x7d40/0x7d40
[  122.508591][ T7158]  ? __rwlock_init+0x150/0x150
[  122.513355][ T7158]  ? do_raw_spin_unlock+0x121/0x230
[  122.518551][ T7158]  ? _raw_spin_unlock+0x28/0x40
[  122.523392][ T7158]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  122.528871][ T7158]  nilfs_segctor_construct+0x17b/0x690
[  122.534338][ T7158]  nilfs_segctor_thread+0x536/0x10d0
[  122.539630][ T7158]  ? nilfs_iput_work_func+0x70/0x70
[  122.544814][ T7158]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  122.550780][ T7158]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  122.556668][ T7158]  ? wake_bit_function+0x200/0x200
[  122.561774][ T7158]  ? __kthread_parkme+0x7a/0x1c0
[  122.566725][ T7158]  kthread+0x2fa/0x390
[  122.570779][ T7158]  ? nilfs_iput_work_func+0x70/0x70
[  122.575971][ T7158]  ? kthread_blkcg+0xd0/0xd0
[  122.580548][ T7158]  ret_from_fork+0x48/0x80
[  122.584958][ T7158]  ? kthread_blkcg+0xd0/0xd0
[  122.589534][ T7158]  ret_from_fork_asm+0x11/0x20
[  122.594305][ T7158]  </TASK>
[  122.597694][ T7158] Kernel Offset: disabled
[  122.602080][ T7158] Rebooting in 86400 seconds..