last executing test programs:

28.624144521s ago: executing program 0 (id=701):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000300)='./file0\x00', 0x16, &(0x7f0000001440)={[{@barrier}, {@subvolid}, {@acl}, {@noflushoncommit}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x15, 0x5102, &(0x7f000000a2c0)="$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")
socket$inet(0x2b, 0x801, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

28.251834729s ago: executing program 0 (id=706):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
splice(r0, 0x0, r1, 0x0, 0x1, 0x0)

25.111716832s ago: executing program 0 (id=742):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x4dd4, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118)

24.974050042s ago: executing program 0 (id=746):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

24.731628355s ago: executing program 0 (id=749):
memfd_create(&(0x7f0000000180)='-&:\n\x03\x00\x00\x00\x00\x00\x00\x00V$&\xb8=\x94Z}~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m,\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xd0^\x00\x00\x00\x00\x00\x00\x00\xc3\xaa\x9a\x9be\xed\xf2\xde\xccx\x1f\x0fne\xe8G\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\bn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a\xf7\x94\xc0rk\x88r\x94\xb6e\x98\xdf\xf36\x82\x8b\x9a\xb9\x10\xa0q\xd8n\x15\x02\xc2@\xa5\xbe\xab\x83\xf9-\x9f\x19\x05\x12*!>\xde\x18L#8\xa5\b^\x19\xeb\xba\xd7\xbdV\x02\xf2\xcf6w\x86\x01\x81\xe4E\v\xd4\xd9\xe7_\xc2\x80\xea\xf9A\xf0\xef\xde\xe3)\xa8\n\f\xb1\f\x159pV2\xf6FCw\xf3r:y\xb1\xee\xc4!\xbaW\xb8\xb1 \x8e\x98!\xd0LL\xec)N\xa1\xa0\x15\xea\xf8kZ\xca\x1eMU\xf6\xfb\xbd\xb2\xc3\a\xc9\xea\x1db\x9b\xd6\x94\x8em\x1b\xd3T\xef*\x1cI\x17:yu8\xb5\x04\xb4\x9e$\xf0\ruS\xee\t3\xeeUb\x10\xfeP\xb3GQ\xc3\xbfA1\atU\xc1\xd6a\x9f1\xe0\xf8.b\a\xe8v\xf7=\x8e\xf5\xfe\xd8Y\xf8\x99_\xe4%\xc54\x96\xf4\xe9\x80:\x8erg\xd8L\xd1\xe0\xc3\xf5\xfe\xa0Dm\xd8_\xf1\xca\x03\xdc\xad\x91\xa6\x18\t\x00'/450, 0x3)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

24.023214958s ago: executing program 0 (id=756):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x515, &(0x7f0000000240)="$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")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

23.846416582s ago: executing program 32 (id=756):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x515, &(0x7f0000000240)="$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")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

2.001384033s ago: executing program 3 (id=945):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x2d, 0x2})

1.769593298s ago: executing program 3 (id=951):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20)

1.700793619s ago: executing program 3 (id=953):
r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xcb6, 0x400, 0x0, 0x1bb}, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

1.601190624s ago: executing program 3 (id=955):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)

1.600906673s ago: executing program 1 (id=956):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
socket$inet(0x2, 0x0, 0x9)
bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e)
r5 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e)

1.511221261s ago: executing program 3 (id=957):
r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x401, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f16242413860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})

1.438144997s ago: executing program 1 (id=958):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}})

1.437920646s ago: executing program 3 (id=959):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000402f17370000000001000109022400010000a00009040000040300020009210000020122030009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="403005"], 0x0, 0x0, 0x0}, 0x0)

1.364679294s ago: executing program 1 (id=960):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})

1.364539143s ago: executing program 1 (id=961):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0936, {0x0, 0x6fd8e84b}, 0x3, 0xed}})

1.284808923s ago: executing program 1 (id=962):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

1.284267273s ago: executing program 1 (id=963):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

577.537647ms ago: executing program 2 (id=976):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000300)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14967e, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)
fallocate(r0, 0x1, 0x9, 0x10000)

192.767748ms ago: executing program 2 (id=977):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1108)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

71.915748ms ago: executing program 2 (id=978):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x10000, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c)

71.718712ms ago: executing program 2 (id=979):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000000), 0x8)

185.454µs ago: executing program 2 (id=980):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

0s ago: executing program 2 (id=981):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@delsa={0x34, 0x11, 0x4b49a87d091fa3c9, 0x70bd2c, 0x25dfdbfe, {@in6=@remote, 0x4d6, 0xa, 0x33}, [@mark={0xc, 0x15, {0x35075d, 0x6e}}]}, 0x34}}, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27127' (ED25519) to the list of known hosts.
syzkaller login: [   56.799415][ T5827] cgroup: Unknown subsys name 'net'
[   56.948515][ T5827] cgroup: Unknown subsys name 'cpuset'
[   56.952959][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.759078][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.805493][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.808956][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.811795][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.814783][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.817755][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.832490][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.836693][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.839886][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.843179][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.875320][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.878510][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.881459][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.884327][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.886837][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.890273][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.182589][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   64.207402][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.253803][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.382975][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.386638][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.389628][ T5843] bridge_slave_0: entered allmulticast mode
[   64.392414][ T5843] bridge_slave_0: entered promiscuous mode
[   64.397164][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.399340][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.401494][ T5843] bridge_slave_1: entered allmulticast mode
[   64.404203][ T5843] bridge_slave_1: entered promiscuous mode
[   64.455481][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.457968][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.460429][ T5847] bridge_slave_0: entered allmulticast mode
[   64.463736][ T5847] bridge_slave_0: entered promiscuous mode
[   64.469543][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.472050][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.475618][ T5847] bridge_slave_1: entered allmulticast mode
[   64.478728][ T5847] bridge_slave_1: entered promiscuous mode
[   64.481748][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.484466][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.487216][ T5850] bridge_slave_0: entered allmulticast mode
[   64.489968][ T5850] bridge_slave_0: entered promiscuous mode
[   64.521425][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.523726][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.527039][ T5850] bridge_slave_1: entered allmulticast mode
[   64.529829][ T5850] bridge_slave_1: entered promiscuous mode
[   64.536045][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.540287][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.546151][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.559891][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.607641][ T5843] team0: Port device team_slave_0 added
[   64.612523][ T5843] team0: Port device team_slave_1 added
[   64.617539][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.646053][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.663256][ T5847] team0: Port device team_slave_0 added
[   64.674423][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.678174][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.687850][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.693154][ T5847] team0: Port device team_slave_1 added
[   64.712262][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.715563][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.726164][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.739177][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.741398][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.751399][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.757140][ T5850] team0: Port device team_slave_0 added
[   64.767781][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.770028][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.778461][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.783114][ T5850] team0: Port device team_slave_1 added
[   64.810643][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.813140][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.821697][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.854860][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.857600][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.867611][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.898708][ T5843] hsr_slave_0: entered promiscuous mode
[   64.901840][ T5843] hsr_slave_1: entered promiscuous mode
[   64.925942][ T5847] hsr_slave_0: entered promiscuous mode
[   64.928849][ T5847] hsr_slave_1: entered promiscuous mode
[   64.931220][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   64.933242][ T5847] Cannot create hsr debugfs directory
[   65.014382][ T5850] hsr_slave_0: entered promiscuous mode
[   65.018051][ T5850] hsr_slave_1: entered promiscuous mode
[   65.020741][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.022981][ T5850] Cannot create hsr debugfs directory
[   65.258092][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.266512][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.279749][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.285762][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.327087][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.336743][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.344077][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.351393][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.420633][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.428117][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.441643][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.447464][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.558297][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.572466][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.588454][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   65.601983][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.604581][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.620567][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.623613][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.633604][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.649647][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.664219][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.675651][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.678533][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.701286][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.703858][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.709255][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.711774][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.723379][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.726039][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.809909][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.835999][ T5849] Bluetooth: hci0: command tx timeout
[   65.916011][ T5849] Bluetooth: hci2: command tx timeout
[   65.917988][ T5849] Bluetooth: hci1: command tx timeout
[   65.965523][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.998862][ T5847] veth0_vlan: entered promiscuous mode
[   66.028604][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.038398][ T5847] veth1_vlan: entered promiscuous mode
[   66.043852][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.105885][ T5847] veth0_macvtap: entered promiscuous mode
[   66.129956][ T5843] veth0_vlan: entered promiscuous mode
[   66.134077][ T5847] veth1_macvtap: entered promiscuous mode
[   66.139688][ T5850] veth0_vlan: entered promiscuous mode
[   66.155938][ T5850] veth1_vlan: entered promiscuous mode
[   66.160290][ T5843] veth1_vlan: entered promiscuous mode
[   66.176848][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.197459][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.219523][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.222538][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.227578][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.238492][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.243628][ T5850] veth0_macvtap: entered promiscuous mode
[   66.251701][ T5843] veth0_macvtap: entered promiscuous mode
[   66.258899][ T5850] veth1_macvtap: entered promiscuous mode
[   66.273159][ T5843] veth1_macvtap: entered promiscuous mode
[   66.314574][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.332052][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.343421][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.371270][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.378862][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.385386][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.390310][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.405097][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.408558][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.422045][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.439401][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.457654][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.461407][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.486947][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.490309][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.504026][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.578659][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.587964][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.591126][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.599799][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.607614][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.662661][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.666909][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.701989][  T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.704411][  T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.761799][ T5915] warning: `syz.2.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.159643][ T5935] loop0: detected capacity change from 0 to 1024
[   67.243529][ T5917] loop1: detected capacity change from 0 to 32768
[   67.250752][ T5917] =======================================================
[   67.250752][ T5917] WARNING: The mand mount option has been deprecated and
[   67.250752][ T5917]          and is ignored by this kernel. Remove the mand
[   67.250752][ T5917]          option from the mount to silence this warning.
[   67.250752][ T5917] =======================================================
[   67.321173][ T5917] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   67.346588][ T5917] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[   67.359086][ T5917] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[   67.390578][ T5917] XFS (loop1): Ending clean mount
[   67.434394][ T5931] loop2: detected capacity change from 0 to 32768
[   67.551065][ T5843] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   67.568506][ T5931] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,wide_macs,recovery_pass_last=alloc_read,nojournal_transaction_names,read_only
[   67.568526][ T5931]   allowing incompatible features above 0.0: (unknown version)
[   67.568534][ T5931]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   67.606354][ T5931] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   67.611142][ T5931] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   67.624883][ T5931] bcachefs (loop2): Version upgrade required:
[   67.624883][ T5931] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   67.624883][ T5931] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   67.624883][ T5931]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   67.734995][ T5931] bcachefs (loop2): accounting_read... done
[   67.748466][ T5931] bcachefs (loop2): alloc_read... done
[   67.751969][ T5931] bcachefs (loop2): done starting filesystem
[   67.826438][ T5847] bcachefs (loop2): shutting down
[   67.872829][ T5847] bcachefs (loop2): shutdown complete
[   67.925899][ T5849] Bluetooth: hci0: command tx timeout
[   67.995909][ T5849] Bluetooth: hci1: command tx timeout
[   67.998247][ T5849] Bluetooth: hci2: command tx timeout
[   68.240865][ T5957] loop0: detected capacity change from 0 to 65536
[   68.257921][ T5957] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   68.280873][ T5957] XFS (loop0): Ending clean mount
[   68.308341][ T5850] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   68.898061][ T5981] loop0: detected capacity change from 0 to 16
[   68.904244][ T5981] erofs (device loop0): mounted with root inode @ nid 36.
[   69.144505][ T5987] loop0: detected capacity change from 0 to 32768
[   69.179000][ T5987] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   69.191134][ T5987] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   69.201804][ T5987] XFS (loop0): Starting recovery (logdev: internal)
[   69.214918][ T5987] XFS (loop0): Ending recovery (logdev: internal)
[   69.249049][ T5850] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   69.300323][ T5999] Bluetooth: MGMT ver 1.23
[   69.607491][   T51] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   69.788930][   T51] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[   69.793913][   T51] usb 3-1: config 0 interface 0 has no altsetting 0
[   69.796649][   T51] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[   69.800053][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.813703][   T51] usb 3-1: config 0 descriptor??
[   69.914931][ T5852] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   69.918330][ T5849] Bluetooth: hci3: command 0x1003 tx timeout
[   69.995047][ T5852] Bluetooth: hci0: command tx timeout
[   70.075431][ T5852] Bluetooth: hci2: command tx timeout
[   70.077147][ T5852] Bluetooth: hci1: command tx timeout
[   70.235918][   T51] lenovo 0003:17EF:60A3.0001: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0
[   70.432011][ T5848] usb 3-1: USB disconnect, device number 2
[   71.046112][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.049988][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.220026][ T6016] loop2: detected capacity change from 0 to 4096
[   71.267865][ T6020] loop1: detected capacity change from 0 to 512
[   71.293994][ T6016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.303610][ T6020] EXT4-fs: Ignoring removed nobh option
[   71.323002][ T6020] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.37: iget: bad i_size value: 38620345925642
[   71.329591][ T6020] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.37: couldn't read orphan inode 15 (err -117)
[   71.335541][ T6020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.370201][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.375005][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.440604][ T6029] loop1: detected capacity change from 0 to 16
[   71.457583][ T6029] erofs (device loop1): mounted with root inode @ nid 36.
[   71.468325][ T6031] loop0: detected capacity change from 0 to 512
[   71.958159][ T6045] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   72.035688][ T6047] loop0: detected capacity change from 0 to 4096
[   72.056429][ T6042] loop1: detected capacity change from 0 to 32768
[   72.062739][ T6042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.46 (6042)
[   72.074939][ T5849] Bluetooth: hci0: command tx timeout
[   72.079894][ T6048] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.098151][ T6042] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.102440][ T6042] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   72.107404][ T6042] BTRFS info (device loop1): disk space caching is enabled
[   72.109743][ T6042] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   72.138838][ T6042] BTRFS info (device loop1): rebuilding free space tree
[   72.155274][ T5849] Bluetooth: hci1: command tx timeout
[   72.157008][ T5849] Bluetooth: hci2: command tx timeout
[   72.161177][ T6042] BTRFS info (device loop1): disabling free space tree
[   72.163390][ T6042] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   72.169133][ T6042] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   72.206821][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'.
[   72.337343][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.490142][ T6073] loop0: detected capacity change from 0 to 2048
[   72.562965][ T6073] hpfs: hpfs_map_sector(): read error
[   73.020511][ T6080] loop0: detected capacity change from 0 to 256
[   73.415114][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.574802][   T10] usb 1-1: Using ep0 maxpacket: 16
[   73.595210][   T10] usb 1-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config
[   73.599656][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   73.678443][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   73.689843][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.695961][   T10] usb 1-1: Product: syz
[   73.702153][   T10] usb 1-1: Manufacturer: syz
[   73.714340][   T10] usb 1-1: SerialNumber: syz
[   73.777717][ T6082] loop1: detected capacity change from 0 to 4096
[   73.822034][ T6082] ntfs3(loop1): ino=5, "/" mi_enum_attr
[   73.829104][ T6082] ntfs3(loop1): ino=5, "/" mi_enum_attr
[   73.935126][   T10] usb 1-1: 0:2 : does not exist
[   73.938431][ T6088] binder: Bad value for 'max'
[   73.955430][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   74.010398][   T10] usb 1-1: USB disconnect, device number 2
[   74.058055][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   74.112810][ T6095] Bluetooth: MGMT ver 1.23
[   74.223661][ T6100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.349332][ T6102] libceph: resolve '40.' (ret=-3): failed
[   74.990626][ T6127] Zero length message leads to an empty skb
[   75.070190][ T6127] loop0: detected capacity change from 0 to 256
[   75.080575][ T6127] exfat: Deprecated parameter 'namecase'
[   75.120056][ T6127] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   75.702418][ T6133] loop0: detected capacity change from 0 to 32768
[   75.796579][ T6133] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   75.837106][ T6133] XFS (loop0): Ending clean mount
[   75.842680][ T6133] XFS (loop0): Quotacheck needed: Please wait.
[   75.868397][ T6133] XFS (loop0): Quotacheck: Done.
[   75.877488][ T6153] evm: overlay not supported
[   75.907199][ T5850] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   76.921257][ T6193] netlink: 'syz.1.101': attribute type 1 has an invalid length.
[   76.923812][ T6193] netlink: 'syz.1.101': attribute type 11 has an invalid length.
[   76.927711][ T6193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.101'.
[   76.965734][ T6195] loop1: detected capacity change from 0 to 16
[   76.972591][ T6195] erofs (device loop1): mounted with root inode @ nid 36.
[   77.383626][ T6207] syzkaller0: entered allmulticast mode
[   77.391597][ T6207] syzkaller0: entered promiscuous mode
[   77.408641][ T6207] syzkaller0 (unregistering): left allmulticast mode
[   77.410897][ T6207] syzkaller0 (unregistering): left promiscuous mode
[   77.489150][ T6169] loop0: detected capacity change from 0 to 262144
[   77.494488][ T6169] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.89 (6169)
[   77.511897][ T6169] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   77.516248][ T6169] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   77.519926][ T6169] BTRFS info (device loop0): using free-space-tree
[   77.681320][ T5850] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   77.947951][ T6236] loop0: detected capacity change from 0 to 1024
[   78.035561][ T6239] capability: warning: `syz.2.116' uses deprecated v2 capabilities in a way that may be insecure
[   78.051542][  T716] hfsplus: b-tree write err: -5, ino 4
[   78.661451][ T6263] tipc: Started in network mode
[   78.663582][ T6263] tipc: Node identity ., cluster identity 4711
[   78.684377][ T6263] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   78.971681][ T6272] loop2: detected capacity change from 0 to 256
[   78.990825][ T6272] exfat: Deprecated parameter 'namecase'
[   78.993126][ T6272] exfat: Deprecated parameter 'namecase'
[   79.002899][ T6272] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   79.114890][ T1273] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   79.120690][ T6268] loop1: detected capacity change from 0 to 32768
[   79.131822][ T6268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.130 (6268)
[   79.155250][ T6268] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.161791][ T6268] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   79.171277][ T6268] BTRFS info (device loop1): using free-space-tree
[   79.278151][ T1273] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.280299][ T1273] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   79.283241][ T1273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.297943][ T1273] usb 1-1: config 0 descriptor??
[   79.386713][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.504068][ T1273]  (null): keene_cmd_main failed (-71)
[   79.528839][ T1273] video4linux radio48: keene_cmd_main failed (-71)
[   79.531030][ T1273] radio-keene 1-1:0.0: V4L2 device registered as radio48
[   79.549397][ T1273] usb 1-1: USB disconnect, device number 3
[   79.715152][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'.
[   79.827864][ T6312] (syz.2.141,6312,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   79.831596][ T6312] (syz.2.141,6312,1):ocfs2_fill_super:1177 ERROR: status = -22
[   80.303433][ T6313] loop1: detected capacity change from 0 to 40427
[   80.329278][ T6313] F2FS-fs (loop1): build fault injection rate: 14
[   80.331355][ T6313] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   80.337862][ T6313] F2FS-fs (loop1): invalid crc value
[   80.342811][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   80.352623][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   80.397207][ T6313] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.400518][ T6313] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   80.407102][ T6313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.416389][ T6313] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   80.422013][   T33] audit: type=1800 audit(1755448222.051:2): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.143" name="file2" dev="loop1" ino=10 res=0 errno=0
[   80.434834][   T51] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   80.466817][ T6322] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[   80.479113][ T6322] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   80.496077][ T6313] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[   80.500732][ T6313] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[   80.542542][ T5843] syz-executor: attempt to access beyond end of device
[   80.542542][ T5843] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   80.548340][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   80.548356][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.548363][ T5843] Call Trace:
[   80.548377][ T5843]  <TASK>
[   80.548383][ T5843]  dump_stack_lvl+0x189/0x250
[   80.548404][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.548417][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[   80.548463][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   80.548478][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   80.548499][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[   80.548521][ T5843]  f2fs_write_end_io+0x886/0xb60
[   80.548547][ T5843]  __submit_merged_bio+0x27a/0x6a0
[   80.548568][ T5843]  __submit_merged_write_cond+0x255/0x530
[   80.548587][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[   80.548628][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   80.548717][ T5843]  ? __lock_acquire+0xab9/0xd20
[   80.548742][ T5843]  ? do_raw_spin_lock+0x121/0x290
[   80.548767][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   80.548784][ T5843]  do_writepages+0x32e/0x550
[   80.548809][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   80.548825][ T5843]  filemap_fdatawrite+0x199/0x240
[   80.548840][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   80.548891][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   80.548907][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[   80.548930][ T5843]  f2fs_write_checkpoint+0x95a/0x1df0
[   80.548961][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   80.549029][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[   80.549048][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[   80.549065][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[   80.549075][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[   80.549095][ T5843]  ? shrinker_free+0x2ce/0x3e0
[   80.549110][ T5843]  deactivate_locked_super+0xbc/0x130
[   80.549127][ T5843]  cleanup_mnt+0x425/0x4c0
[   80.549141][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.549159][ T5843]  task_work_run+0x1d4/0x260
[   80.549179][ T5843]  ? __pfx_task_work_run+0x10/0x10
[   80.549192][ T5843]  ? __x64_sys_umount+0x122/0x160
[   80.549210][ T5843]  ? exit_to_user_mode_loop+0x40/0x110
[   80.549229][ T5843]  exit_to_user_mode_loop+0xec/0x110
[   80.549246][ T5843]  do_syscall_64+0x2bd/0x3b0
[   80.549260][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.549283][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.549295][ T5843]  ? exc_page_fault+0x9f/0xf0
[   80.549311][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.549322][ T5843] RIP: 0033:0x7f9b0e38ff17
[   80.549335][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   80.549345][ T5843] RSP: 002b:00007ffc868e9fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   80.549358][ T5843] RAX: 0000000000000000 RBX: 00007f9b0e411c05 RCX: 00007f9b0e38ff17
[   80.549365][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc868ea090
[   80.549372][ T5843] RBP: 00007ffc868ea090 R08: 0000000000000000 R09: 0000000000000000
[   80.549379][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc868eb120
[   80.549387][ T5843] R13: 00007f9b0e411c05 R14: 0000000000013a18 R15: 00007ffc868eb160
[   80.549410][ T5843]  </TASK>
[   80.676141][    C1] vkms_vblank_simulate: vblank timer overrun
[   80.681531][ T5843] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   80.727533][   T51] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[   80.730724][   T51] usb 1-1: config 0 has no interface number 0
[   80.733230][   T51] usb 1-1: config 0 interface 29 has no altsetting 0
[   80.737090][   T51] usb 1-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d
[   80.740629][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.747444][   T51] usb 1-1: config 0 descriptor??
[   80.960295][   T51] usb 1-1: string descriptor 0 read error: -71
[   80.964059][   T51] usb-storage 1-1:0.29: USB Mass Storage device detected
[   80.980684][   T51] usb-storage 1-1:0.29: Quirks match for vid 357d pid 7788: 4800000
[   81.068870][   T51] usb 1-1: USB disconnect, device number 4
[   81.233765][ T6338] tmpfs: Cannot enable quota on remount
[   81.265758][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.153'.
[   81.269429][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.153'.
[   81.279660][   T24] cfg80211: failed to load regulatory.db
[   81.296456][ T6340] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   81.396549][ T6342] loop2: detected capacity change from 0 to 4096
[   81.407918][ T6342] NILFS (loop2): mounting unchecked fs
[   81.415307][ T6342] NILFS (loop2): invalid segment: Checksum error in segment payload
[   81.418582][ T6342] NILFS (loop2): trying rollback from an earlier position
[   81.436754][ T6342] NILFS (loop2): recovery cancelled because norecovery option was specified for a read/write mount
[   81.704049][ T6344] loop1: detected capacity change from 0 to 32768
[   81.735352][ T6344] JBD2: Ignoring recovery information on journal
[   81.769136][ T6348] loop2: detected capacity change from 0 to 32768
[   81.790114][ T6344] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   81.882533][ T5843] ocfs2: Unmounting device (7,1) on (node local)
[   82.289599][ T6359] loop1: detected capacity change from 0 to 32768
[   82.304066][ T6359] JBD2: Ignoring recovery information on journal
[   82.308241][ T6359] JBD2: corrupted journal superblock
[   82.310415][ T6359] JBD2: error -117 scanning journal
[   82.312422][ T6359] (syz.1.162,6359,0):ocfs2_journal_wipe:1216 ERROR: status = -117
[   82.315692][ T6359] (syz.1.162,6359,0):ocfs2_check_volume:2363 ERROR: status = -117
[   82.320363][ T6359] (syz.1.162,6359,0):ocfs2_check_volume:2432 ERROR: status = -117
[   82.323361][ T6359] (syz.1.162,6359,0):ocfs2_mount_volume:1764 ERROR: status = -117
[   82.330109][ T6359] (syz.1.162,6359,0):ocfs2_fill_super:1177 ERROR: status = -117
[   82.554726][ T6362] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   83.152865][ T6376] loop1: detected capacity change from 0 to 512
[   84.357359][   T33] audit: type=1326 audit(1755448225.991:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.193" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x0
[   84.754737][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   84.793676][ T6436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.198'.
[   84.843128][ T6438] loop0: detected capacity change from 0 to 512
[   84.860102][ T6438] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.200: casefold flag without casefold feature
[   84.873946][ T6438] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.200: couldn't read orphan inode 15 (err -117)
[   84.888406][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.907881][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   84.910845][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.919839][   T24] usb 2-1: config 0 descriptor??
[   84.930100][   T24] gspca_main: spca508-2.14.0 probing 8086:0110
[   84.930345][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.133537][   T24] gspca_spca508: reg_read err -71
[   85.141610][   T24] gspca_spca508: reg_read err -71
[   85.143538][   T24] gspca_spca508: reg_read err -71
[   85.145942][   T24] gspca_spca508: reg_read err -71
[   85.148954][   T24] gspca_spca508: reg_read err -71
[   85.155657][   T24] gspca_spca508: reg write: error -71
[   85.157542][   T24] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[   85.168541][   T24] usb 2-1: USB disconnect, device number 2
[   85.220356][ T6458] netlink: set zone limit has 4 unknown bytes
[   85.494844][ T1273] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   85.516751][   T26] wlan1: Trigger new scan to find an IBSS to join
[   85.534881][ T5909] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.651094][ T1273] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   85.655625][ T1273] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   85.659590][ T1273] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   85.663250][ T1273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.695437][ T5909] usb 1-1: Using ep0 maxpacket: 16
[   85.704069][ T5909] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   85.712246][ T5909] usb 1-1: config 0 has no interface number 0
[   85.719860][ T5909] usb 1-1: config 0 interface 41 has no altsetting 0
[   85.730089][ T5909] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   85.733801][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.739802][ T5909] usb 1-1: Product: syz
[   85.741602][ T5909] usb 1-1: Manufacturer: syz
[   85.743480][ T5909] usb 1-1: SerialNumber: syz
[   85.757460][ T5909] usb 1-1: config 0 descriptor??
[   85.772609][ T5909] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22
[   85.787845][ T6466] loop1: detected capacity change from 0 to 4096
[   85.826349][ T6466] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   85.832574][ T6466] ntfs3(loop1): Failed to load $Extend (-22).
[   85.836244][ T6466] ntfs3(loop1): Failed to initialize $Extend.
[   85.884848][ T1273] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[   85.908374][ T1273] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input4
[   85.942169][ T1273] input: failed to attach handler kbd to device input4, error: -5
[   85.981632][ T5909] usb 1-1: USB disconnect, device number 5
[   85.986077][ T1273] usb 3-1: USB disconnect, device number 3
[   86.046291][ T6472] loop1: detected capacity change from 0 to 1024
[   86.078316][   T33] audit: type=1800 audit(1755448227.711:4): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.215" name="file1" dev="loop1" ino=20 res=0 errno=0
[   86.173774][ T6475] loop1: detected capacity change from 0 to 2048
[   86.188081][ T6475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.203629][   T33] audit: type=1800 audit(1755448227.831:5): pid=6475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.216" name="file1" dev="loop1" ino=1367 res=0 errno=0
[   86.289047][ T6477] batadv_slave_0: entered promiscuous mode
[   86.296783][ T6477] batadv_slave_0: left promiscuous mode
[   86.479959][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.483071][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.490583][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.493471][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.502473][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.507205][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.510209][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.513152][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.525192][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.535003][ T5909] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   86.551758][ T5909] hid-generic 00A0:0006:0003.0002: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   87.140102][ T6489] loop0: detected capacity change from 0 to 32768
[   87.179992][ T6489] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.181515][ T6513] netlink: 'syz.1.231': attribute type 1 has an invalid length.
[   87.187443][ T6513] netlink: 228 bytes leftover after parsing attributes in process `syz.1.231'.
[   87.238297][ T6489] XFS (loop0): Ending clean mount
[   87.543015][ T5850] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.628848][ T6522] netlink: 104 bytes leftover after parsing attributes in process `syz.1.234'.
[   87.930975][ T6538] loop1: detected capacity change from 0 to 512
[   87.950079][ T6538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   87.969080][ T6538] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.240: invalid indirect mapped block 4294967295 (level 1)
[   87.978458][ T6538] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.240: invalid indirect mapped block 4294967295 (level 1)
[   87.983360][ T6538] EXT4-fs (loop1): 2 truncates cleaned up
[   87.987126][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.042666][ T6547] loop2: detected capacity change from 0 to 256
[   88.045269][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.171962][ T6554] vlan2: entered promiscuous mode
[   88.173690][ T6554] hsr0: entered promiscuous mode
[   88.233687][ T6557] syz.2.246 uses obsolete (PF_INET,SOCK_PACKET)
[   88.476090][   T36] wlan1: Trigger new scan to find an IBSS to join
[   88.532177][ T6571] loop2: detected capacity change from 0 to 512
[   88.537144][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'.
[   88.552446][ T6571] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.255: corrupted in-inode xattr: overlapping e_value 
[   88.568042][ T6571] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.255: couldn't read orphan inode 15 (err -117)
[   88.580562][ T6571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.630838][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.651819][ T6565] loop1: detected capacity change from 0 to 32768
[   88.711018][ T6565] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   88.729028][ T6565] (syz.1.252,6565,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   88.750471][ T6565] ocfs2: Unmounting device (7,1) on (node local)
[   89.156609][ T6583] loop0: detected capacity change from 0 to 32768
[   89.182615][ T6583] JBD2: Ignoring recovery information on journal
[   89.221993][ T6583] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   89.225884][ T6595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.264'.
[   89.239555][ T6595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.264'.
[   89.297435][ T6583] syz.0.259 (6583) used greatest stack depth: 17616 bytes left
[   89.328019][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[   89.488036][ T6606] Illegal XDP return value 4294967274 on prog  (id 16) dev N/A, expect packet loss!
[   90.672185][ T6610] loop2: detected capacity change from 0 to 32768
[   90.687793][ T6626] program syz.1.276 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.698165][ T6610] JBD2: Ignoring recovery information on journal
[   90.768380][ T6610] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   90.809944][ T6634] loop1: detected capacity change from 0 to 128
[   90.862602][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[   91.135326][ T6646] loop2: detected capacity change from 0 to 136
[   91.142667][ T6646] Attempt to read inode for relocated directory
[   91.216010][   T51] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   91.380973][   T51] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   91.386801][   T51] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   91.390411][   T51] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   91.407648][   T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[   91.410912][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   91.413870][   T51] usb 1-1: SerialNumber: syz
[   91.515922][   T27] wlan1: Trigger new scan to find an IBSS to join
[   91.659997][   T51] usbtest 1-1:1.0: Linux user mode ISO test driver
[   91.662733][   T51] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[   91.673831][   T51] usb 1-1: USB disconnect, device number 6
[   91.714202][ T6671] loop1: detected capacity change from 0 to 40427
[   91.717014][ T6671] F2FS-fs: heap/no_heap options were deprecated
[   91.719206][ T6671] F2FS-fs: heap/no_heap options were deprecated
[   92.065762][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   92.223244][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.235681][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   92.250947][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   92.261101][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   92.271537][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   92.276950][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.292309][   T10] usb 2-1: config 0 descriptor??
[   92.299961][ T6679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.428783][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.441852][ T6681] loop2: detected capacity change from 0 to 32768
[   92.456169][ T6681] 
[   92.456169][ T6681]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   92.456169][ T6681] 
[   92.541915][ T6688] read_mapping_page failed!
[   92.544549][ T6688] ERROR: (device loop2): txCommit: 
[   92.544549][ T6688] 
[   92.571213][ T5847] 
[   92.571213][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   92.571213][ T5847] 
[   92.577895][ T5847] 
[   92.577895][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   92.577895][ T5847] 
[   92.615690][   T51] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   92.651941][ T6690] input: syz0 as /devices/virtual/input/input5
[   92.726640][   T10] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[   92.746131][   T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   92.788886][   T51] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[   92.791530][   T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.797020][   T51] usb 1-1: config 0 has no interface number 0
[   92.799142][   T51] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   92.802065][   T51] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.810059][   T51] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[   92.832041][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.836700][   T51] usb 1-1: Product: syz
[   92.838093][   T51] usb 1-1: Manufacturer: syz
[   92.840181][   T51] usb 1-1: SerialNumber: syz
[   92.845718][   T51] usb 1-1: config 0 descriptor??
[   92.995724][ T5909] usb 2-1: USB disconnect, device number 3
[   93.243626][ T6710] loop2: detected capacity change from 0 to 32768
[   93.266683][ T5909] usb 1-1: USB disconnect, device number 7
[   93.266856][ T6710] (syz.2.311,6710,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[   93.266856][ T6710] found = 1, set = 0, taken = 0, off = 0
[   93.285933][ T6710] (syz.2.311,6710,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[   93.291937][ T6710] (syz.2.311,6710,1):ocfs2_check_volume:2404 ERROR: status = -22
[   93.294299][ T6710] (syz.2.311,6710,1):ocfs2_check_volume:2432 ERROR: status = -22
[   93.298161][ T6710] (syz.2.311,6710,1):ocfs2_mount_volume:1764 ERROR: status = -22
[   93.300616][ T6710] (syz.2.311,6710,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode.
[   93.312932][ T6710] (syz.2.311,6710,1):ocfs2_fill_super:1177 ERROR: status = -22
[   93.582340][ T6723] syz.2.315: attempt to access beyond end of device
[   93.582340][ T6723] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[   94.169354][ T6767] loop2: detected capacity change from 0 to 512
[   94.203775][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.208471][ T6767] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.318897][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.171298][ T6797] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   95.179944][ T6789] loop0: detected capacity change from 0 to 40427
[   95.185185][ T6789] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   95.188402][ T6789] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   95.207775][ T6797] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.226491][ T6797] bond1: (slave gretap1): making interface the new active one
[   95.230803][ T6797] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   95.239320][ T6789] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.245063][ T6797] vlan2: entered allmulticast mode
[   95.247377][ T6797] bond1: entered allmulticast mode
[   95.249415][ T6797] gretap1: entered allmulticast mode
[   95.253255][ T6789] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   95.253544][ T6797] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   95.255978][ T6789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   95.522100][ T6808] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.917354][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   95.974783][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.064730][ T5909] usb 1-1: Using ep0 maxpacket: 32
[   96.067969][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   96.071425][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   96.074942][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[   96.079383][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   96.083216][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[   96.088513][ T5909] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   96.091576][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.095108][ T5909] usb 1-1: Product: syz
[   96.096434][ T5909] usb 1-1: Manufacturer: syz
[   96.097890][ T5909] usb 1-1: SerialNumber: syz
[   96.101070][ T5909] usb 1-1: config 0 descriptor??
[   96.107043][ T5909] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8
[   96.126752][    T9] usb 2-1: Using ep0 maxpacket: 8
[   96.134397][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.148092][    T9] usb 2-1: config 7 has an invalid interface number: 142 but max is 0
[   96.151092][    T9] usb 2-1: config 7 has no interface number 0
[   96.157676][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[   96.161406][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.164443][    T9] usb 2-1: Product: syz
[   96.167436][ T6834] netlink: 372 bytes leftover after parsing attributes in process `syz.2.360'.
[   96.186391][    T9] usb 2-1: Manufacturer: syz
[   96.188269][    T9] usb 2-1: SerialNumber: syz
[   96.315199][ T5909] usb 1-1: USB disconnect, device number 8
[   96.414803][    T9] usb 2-1: USB disconnect, device number 4
[   97.133411][ T6846] loop1: detected capacity change from 0 to 32768
[   97.178979][ T6846] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.207579][ T6846] XFS (loop1): Ending clean mount
[   97.215249][ T6846] XFS (loop1): Quotacheck needed: Please wait.
[   97.241301][ T6846] XFS (loop1): Quotacheck: Done.
[   97.309776][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.741641][ T6872] loop1: detected capacity change from 0 to 256
[   97.823005][   T33] audit: type=1326 audit(1755448239.451:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.833721][   T33] audit: type=1326 audit(1755448239.451:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.842684][   T33] audit: type=1326 audit(1755448239.451:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.852217][   T33] audit: type=1326 audit(1755448239.461:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.863118][   T33] audit: type=1326 audit(1755448239.461:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.872105][   T33] audit: type=1326 audit(1755448239.461:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.880485][   T33] audit: type=1326 audit(1755448239.461:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.891470][   T33] audit: type=1326 audit(1755448239.461:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.899773][   T33] audit: type=1326 audit(1755448239.461:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.908011][   T33] audit: type=1326 audit(1755448239.461:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[   97.997334][ T6876] loop1: detected capacity change from 0 to 8192
[   98.782531][ T6893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   98.954803][ T5852] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   98.954903][ T5849] Bluetooth: hci3: command 0x1003 tx timeout
[   99.033388][ T6899] loop0: detected capacity change from 0 to 512
[   99.040085][ T6899] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.052453][ T6899] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   99.055828][ T6899] EXT4-fs (loop0): orphan cleanup on readonly fs
[   99.059046][ T6899] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   99.072314][ T6899] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   99.078525][ T6899] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.385: bg 0: block 40: padding at end of block bitmap is not set
[   99.088258][ T6899] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   99.092883][ T6899] EXT4-fs (loop0): 1 truncate cleaned up
[   99.096866][ T6899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.131069][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.757929][ T5852] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   99.762078][ T5852] Bluetooth: hci0: Injecting HCI hardware error event
[   99.765718][ T5852] Bluetooth: hci0: hardware error 0x00
[  100.233534][ T6934] cgroup: noprefix used incorrectly
[  100.275243][ T6936] input: syz0 as /devices/virtual/input/input9
[  100.394449][ T6941] loop0: detected capacity change from 0 to 512
[  100.409633][ T6941] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.418962][ T6941] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  100.422784][ T6941] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  100.436364][ T6941] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  100.439264][ T6941] System zones: 0-2, 18-18, 34-35
[  100.443141][ T6941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  100.458861][ T6941] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  100.472835][ T6941] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  100.486512][ T6941] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  100.504209][ T6941] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.402: bg 0: block 353: padding at end of block bitmap is not set
[  100.547480][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.182879][ T6977] loop1: detected capacity change from 0 to 1024
[  101.186562][ T6968] loop0: detected capacity change from 0 to 32768
[  101.290467][   T26] hfsplus: b-tree write err: -5, ino 4
[  101.393385][ T6968] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  101.393409][ T6968]   allowing incompatible features above 0.0: (unknown version)
[  101.393420][ T6968]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  101.416957][ T6968] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  101.420463][ T6968] bcachefs (loop0): initializing new filesystem
[  101.433453][ T6968] bcachefs (loop0): going read-write
[  101.465919][ T6968] bcachefs (loop0): marking superblocks
[  101.500862][ T6968] bcachefs (loop0): initializing freespace
[  101.551526][ T6968] bcachefs (loop0): done initializing freespace
[  101.563244][ T6968] bcachefs (loop0): reading snapshots table
[  101.566356][ T6968] bcachefs (loop0): reading snapshots done
[  101.612315][ T6968] bcachefs (loop0): done starting filesystem
[  101.796525][ T6968] syz.0.414 (6968) used greatest stack depth: 17448 bytes left
[  101.799883][ T7002] loop1: detected capacity change from 0 to 128
[  101.816383][ T5850] bcachefs (loop0): shutting down
[  101.818490][ T5850] bcachefs (loop0): going read-only
[  101.827864][ T5850] bcachefs (loop0): finished waiting for writes to stop
[  101.834736][ T5852] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  101.835348][ T7002] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.863129][ T7002] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.909542][ T5850] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[  101.950544][ T5850] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  101.983182][ T5850] bcachefs (loop0): clean shutdown complete, journal seq 5
[  101.994200][ T5850] bcachefs (loop0): marking filesystem clean
[  102.067487][ T5850] bcachefs (loop0): shutdown complete
[  102.733509][ T7020] netlink: 'syz.2.432': attribute type 13 has an invalid length.
[  102.757984][ T7020] gretap0: refused to change device tx_queue_len
[  102.760737][ T7020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  103.056631][ T7032] loop1: detected capacity change from 0 to 512
[  103.098627][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.103935][ T7032] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.120831][   T33] kauditd_printk_skb: 254 callbacks suppressed
[  103.120848][   T33] audit: type=1800 audit(1755448244.751:269): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.438" name="file2" dev="loop1" ino=16 res=0 errno=0
[  103.155930][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.251136][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'.
[  103.544726][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  103.705017][ T5848] usb 2-1: Using ep0 maxpacket: 16
[  103.710658][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.719343][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.723118][ T5848] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  103.738318][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.748194][ T5848] usb 2-1: config 0 descriptor??
[  104.174864][   T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  104.184196][ T5848] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  104.358149][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.364289][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  104.402560][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  104.614099][ T5848] corsair 0003:1B1C:1B02.0004: Failed to get K90 initial state (error -71).
[  104.677295][ T5848] usb 2-1: USB disconnect, device number 5
[  104.685115][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  104.688646][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  104.696422][   T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  104.699409][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  104.701901][   T10] usb 1-1: Product: syz
[  104.703192][   T10] usb 1-1: Manufacturer: syz
[  104.707700][   T10] usb 1-1: SerialNumber: syz
[  104.710689][   T10] usb 1-1: config 0 descriptor??
[  104.925233][   T10] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  104.927750][   T10] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  104.960079][ T7086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.126854][   T10] radio-si470x 1-1:0.0: software version 0, hardware version 0
[  105.129377][   T10] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  105.133385][   T10] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  105.327545][   T10] radio-si470x 1-1:0.0: submitting int urb failed (-90)
[  105.480477][ T7108] loop1: detected capacity change from 0 to 1024
[  105.942063][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'.
[  106.716098][   T52] hfsplus: b-tree write err: -5, ino 4
[  106.761592][   T33] audit: type=1326 audit(1755448248.391:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.1.472" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x0
[  106.780796][   T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71
[  106.800546][   T10] usb 1-1: USB disconnect, device number 9
[  106.939278][ T7123] netlink: 156 bytes leftover after parsing attributes in process `syz.2.474'.
[  107.074359][ T7131] netlink: 'syz.2.478': attribute type 10 has an invalid length.
[  107.077962][ T7131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'.
[  107.080943][ T7131] dummy0: entered promiscuous mode
[  107.082973][ T7131] dummy0: entered allmulticast mode
[  107.088554][ T7131] bridge0: port 3(dummy0) entered blocking state
[  107.091391][ T7131] bridge0: port 3(dummy0) entered disabled state
[  107.096596][ T7131] bridge0: port 3(dummy0) entered blocking state
[  107.099529][ T7131] bridge0: port 3(dummy0) entered forwarding state
[  107.183878][ T7135] capability: warning: `syz.2.480' uses 32-bit capabilities (legacy support in use)
[  107.647971][ T7169] loop1: detected capacity change from 0 to 512
[  107.651914][ T7169] EXT4-fs (loop1): Unsupported encryption level 255
[  107.770119][ T7177] netlink: zone id is out of range
[  107.777343][ T7177] netlink: zone id is out of range
[  107.779306][ T7177] netlink: zone id is out of range
[  107.780876][ T7177] netlink: zone id is out of range
[  107.782650][ T7177] netlink: zone id is out of range
[  107.784424][ T7177] netlink: zone id is out of range
[  107.786996][ T7177] netlink: zone id is out of range
[  107.790235][ T7177] netlink: zone id is out of range
[  107.792120][ T7177] netlink: zone id is out of range
[  107.794484][ T7177] netlink: zone id is out of range
[  107.816756][ T7177] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.143326][ T7174] loop1: detected capacity change from 0 to 32768
[  108.174002][ T7174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  108.247829][ T5843] ocfs2: Unmounting device (7,1) on (node local)
[  108.359661][ T7189] "syz.2.504" (7189) uses obsolete ecb(arc4) skcipher
[  108.382907][ T7197] netlink: 71 bytes leftover after parsing attributes in process `syz.1.505'.
[  108.577478][   T24] hid_parser_main: 5 callbacks suppressed
[  108.577494][   T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  108.595558][   T24] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  108.674903][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  108.824361][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'.
[  108.828428][   T10] usb 2-1: Using ep0 maxpacket: 16
[  108.840684][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.843993][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  108.847480][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.858850][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  108.864806][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.872154][   T10] usb 2-1: Product: syz
[  108.873467][   T10] usb 2-1: Manufacturer: syz
[  108.881261][   T10] usb 2-1: SerialNumber: syz
[  108.888370][   T10] usb 2-1: config 0 descriptor??
[  108.896594][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  108.898671][   T10] gspca_stv06xx: st6422 sensor detected
[  109.155747][   T10] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[  109.161530][   T10] usb 2-1: USB disconnect, device number 6
[  109.224922][ T5909] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  109.382906][ T7229] netlink: 'syz.2.521': attribute type 84 has an invalid length.
[  109.392375][ T5909] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  109.396851][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.400364][ T5909] usb 1-1: Product: syz
[  109.402069][ T5909] usb 1-1: Manufacturer: syz
[  109.403966][ T5909] usb 1-1: SerialNumber: syz
[  109.417436][ T5909] usb 1-1: config 0 descriptor??
[  109.696570][ T7239] loop1: detected capacity change from 0 to 8
[  109.720401][ T7239] SQUASHFS error: lzo decompression failed, data probably corrupt
[  109.727174][ T7239] SQUASHFS error: Failed to read block 0x91: -5
[  109.729838][ T7239] SQUASHFS error: Unable to read metadata cache entry [8f]
[  109.732707][ T7239] SQUASHFS error: Unable to read inode 0x11f
[  109.787967][ T5909] hso 1-1:0.0: Failed to find BULK IN ep
[  109.804247][ T5909] usb-storage 1-1:0.0: USB Mass Storage device detected
[  110.192675][ T5909] usb 1-1: USB disconnect, device number 10
[  110.304777][   T24] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  110.459285][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.463470][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  110.469944][   T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  110.473575][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.484141][   T24] usb 2-1: config 0 descriptor??
[  110.492713][   T24] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[  110.704288][ T5909] usb 2-1: USB disconnect, device number 7
[  110.852220][ T7260] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[  110.926168][ T7263] loop0: detected capacity change from 0 to 1024
[  111.368709][ T7266] loop0: detected capacity change from 0 to 1024
[  111.427173][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  111.432539][ T7266] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.449764][ T7266] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.536: lblock 0 mapped to illegal pblock 0 (length 1)
[  111.458428][ T7266] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  111.463441][ T7266] EXT4-fs (loop0): This should not happen!! Data will be lost
[  111.463441][ T7266] 
[  111.470910][ T7266] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.536: lblock 0 mapped to illegal pblock 0 (length 1)
[  111.478248][   T33] audit: type=1800 audit(1755448253.111:271): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.536" name="file1" dev="loop0" ino=15 res=0 errno=0
[  111.510123][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  111.864910][ T5909] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  111.922631][ T7277] loop0: detected capacity change from 0 to 32768
[  111.954183][ T7277] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  111.954183][ T7277] 
[  111.992659][   T26] read_mapping_page failed!
[  111.998336][   T26] ERROR: (device loop0): txCommit: 
[  111.998336][   T26] 
[  112.003238][   T26] jfs_write_inode: jfs_commit_inode failed!
[  112.014885][ T5909] usb 2-1: Using ep0 maxpacket: 32
[  112.020370][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.038069][ T5909] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  112.045355][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.048558][ T5909] usb 2-1: Product: syz
[  112.050221][ T5909] usb 2-1: Manufacturer: syz
[  112.053476][ T5909] usb 2-1: SerialNumber: syz
[  112.063616][ T5909] usb 2-1: config 0 descriptor??
[  112.076919][ T5909] cdc_ether 2-1:0.0: skipping garbage
[  112.079060][ T5909] usb 2-1: bad CDC descriptors
[  112.082122][ T5909] usb 2-1: unsupported MDLM descriptors
[  112.204132][ T7291] loop0: detected capacity change from 0 to 16
[  112.212903][ T7291] erofs (device loop0): mounted with root inode @ nid 36.
[  112.278205][ T5909] usb 2-1: USB disconnect, device number 8
[  112.370228][ T7296] netlink: 2 bytes leftover after parsing attributes in process `syz.0.549'.
[  112.741194][ T7302] loop0: detected capacity change from 0 to 32768
[  112.843841][ T7302] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  112.843867][ T7302]   allowing incompatible features above 0.0: (unknown version)
[  112.843876][ T7302]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  112.869142][ T7302] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  112.877003][ T7302] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  112.880373][ T7302] bcachefs (loop0): Version upgrade required:
[  112.880373][ T7302] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  112.880373][ T7302] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  112.880373][ T7302]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  112.923044][ T7302] bcachefs (loop0): dropping and reconstructing all alloc info
[  113.013270][ T7302] bcachefs (loop0): accounting_read... done
[  113.019352][ T7302] bcachefs (loop0): alloc_read... done
[  113.023836][ T7302] bcachefs (loop0): snapshots_read... done
[  113.036223][ T7302] bcachefs (loop0): done starting filesystem
[  113.268223][ T5850] bcachefs (loop0): shutting down
[  113.353384][ T5850] bcachefs (loop0): shutdown complete
[  114.347769][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[  114.351125][ T7345] netlink: 'syz.1.570': attribute type 20 has an invalid length.
[  114.370705][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[  114.374079][ T7345] netlink: 'syz.1.570': attribute type 20 has an invalid length.
[  114.380372][ T5875] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.384243][ T5875] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.535376][ T5875] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.540836][ T5875] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.224749][ T7362] loop1: detected capacity change from 0 to 4096
[  115.302208][ T7365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.335414][   T33] audit: type=1800 audit(1755448256.961:272): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.576" name="file1" dev="loop1" ino=15 res=0 errno=0
[  115.652095][ T7386] netlink: 'syz.2.586': attribute type 10 has an invalid length.
[  115.785034][   T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  115.956334][   T24] usb 2-1: config 129 has an invalid interface number: 180 but max is 0
[  115.959409][   T24] usb 2-1: config 129 has no interface number 0
[  115.961690][   T24] usb 2-1: config 129 interface 180 has no altsetting 0
[  115.964274][   T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=9a.87
[  115.969450][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.187830][   T24] usb 2-1: string descriptor 0 read error: -71
[  116.192022][   T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251
[  116.210643][   T24] gspca_sn9c20x: Write register 1000 failed -71
[  116.216378][   T24] gspca_sn9c20x: Device initialization failed
[  116.221042][   T24] gspca_sn9c20x 2-1:129.180: probe with driver gspca_sn9c20x failed with error -71
[  116.253603][   T24] usb 2-1: USB disconnect, device number 9
[  116.555158][   T51] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  116.728968][   T51] usb 1-1: config 0 has an invalid interface number: 168 but max is 0
[  116.734784][   T51] usb 1-1: config 0 has no interface number 0
[  116.738223][   T51] usb 1-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  116.742384][   T51] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  116.764944][   T51] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  116.768946][   T51] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  116.771754][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.800034][   T51] usb 1-1: config 0 descriptor??
[  116.802184][ T7414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  117.014867][   T51] usb 1-1: string descriptor 0 read error: -71
[  117.019659][   T51] keyspan 1-1:0.168: Keyspan 2 port adapter converter detected
[  117.022242][   T51] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 1
[  117.033660][   T51] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 84
[  117.044291][   T51] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 2
[  117.052176][   T51] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  117.066237][   T51] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 88
[  117.071209][   T51] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 6
[  117.078584][   T51] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  117.088788][   T51] usb 1-1: USB disconnect, device number 11
[  117.096851][   T51] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  117.103377][   T51] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  117.111614][   T51] keyspan 1-1:0.168: device disconnected
[  117.619542][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'.
[  117.854056][ T7449] tmpfs: Unknown parameter 'qLO9K"tI{I_.X7Ou+[;~}cIV|x`9*X>[VѤz#B֭|rޝ21Xj}mxIӫ_kp("{V?_wpOߟqVkN'
[  119.173348][ T7481] netlink: 'syz.0.628': attribute type 29 has an invalid length.
[  119.177957][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'.
[  119.195097][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  119.229979][ T7483] syz_tun: entered promiscuous mode
[  119.232733][ T7483] batadv_slave_0: entered promiscuous mode
[  119.236679][ T7483] hsr1: entered allmulticast mode
[  119.238358][ T7483] syz_tun: entered allmulticast mode
[  119.240141][ T7483] batadv_slave_0: entered allmulticast mode
[  119.354945][   T24] usb 2-1: Using ep0 maxpacket: 8
[  119.361749][   T24] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  119.370887][   T24] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  119.378566][   T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  119.386565][   T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  119.392085][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  119.401241][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  119.410637][   T24] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  119.414412][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.417873][   T24] usb 2-1: Product: syz
[  119.419641][   T24] usb 2-1: Manufacturer: syz
[  119.421558][   T24] usb 2-1: SerialNumber: syz
[  119.431866][   T24] usb 2-1: config 0 descriptor??
[  119.437130][   T24] hub 2-1:0.0: bad descriptor, ignoring hub
[  119.442925][   T24] hub 2-1:0.0: probe with driver hub failed with error -5
[  119.464994][   T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  119.658183][   T24] usb 2-1: USB disconnect, device number 10
[  121.250659][ T7530] netlink: 'syz.2.649': attribute type 10 has an invalid length.
[  121.261069][ T7530] bridge0: port 3(dummy0) entered disabled state
[  121.265846][ T7530] dummy0: left allmulticast mode
[  121.267811][ T7530] dummy0: left promiscuous mode
[  121.270762][ T7530] bridge0: port 3(dummy0) entered disabled state
[  121.279602][ T7530] team0: Port device dummy0 added
[  121.664356][ T7545] loop1: detected capacity change from 0 to 32768
[  121.673750][ T7545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.656 (7545)
[  121.692121][ T7545] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.703101][ T7545] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  121.711111][ T7545] BTRFS info (device loop1): using free-space-tree
[  122.014219][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.351434][   T33] audit: type=1326 audit(1755448263.981:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f658ebe9 code=0x7ffc0000
[  122.362700][   T33] audit: type=1326 audit(1755448263.981:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f658ebe9 code=0x7ffc0000
[  122.371903][   T33] audit: type=1326 audit(1755448263.981:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.663" exe="/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fe7f658ebe9 code=0x7ffc0000
[  122.381911][   T33] audit: type=1326 audit(1755448263.981:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f658ebe9 code=0x7ffc0000
[  122.394093][   T33] audit: type=1326 audit(1755448264.001:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f658ebe9 code=0x7ffc0000
[  122.621158][ T7591] bridge1: entered promiscuous mode
[  122.623368][ T7591] bridge1: entered allmulticast mode
[  122.628879][ T7591] team0: Port device bridge1 added
[  122.815319][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'.
[  124.052132][ T7624] fuse: Bad value for 'fd'
[  124.291951][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'.
[  124.295357][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'.
[  124.301977][ T7627] ip6gretap0: entered promiscuous mode
[  124.304839][ T7627] syz_tun: entered promiscuous mode
[  124.307284][ T7627] debugfs: 'hsr1' already exists in 'hsr'
[  124.309477][ T7627] Cannot create hsr debugfs directory
[  124.500661][ T7628] loop0: detected capacity change from 0 to 32768
[  124.528737][ T7628] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.544938][ T7628] XFS (loop0): Ending clean mount
[  124.569966][ T5850] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.654832][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  124.751434][ T7648] loop0: detected capacity change from 0 to 128
[  124.764983][ T7650] overlayfs: failed to clone upperpath
[  124.809402][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  124.823221][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.830428][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  124.837061][    T9] usb 2-1: config 1 has no interface number 0
[  124.839336][    T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  124.852279][    T9] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  124.861773][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.870189][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.873132][    T9] usb 2-1: Product: syz
[  124.877932][    T9] usb 2-1: Manufacturer: syz
[  124.879672][    T9] usb 2-1: SerialNumber: syz
[  125.055034][ T7662] loop0: detected capacity change from 0 to 1024
[  125.068523][ T7662] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  125.079109][ T7662] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  125.082120][ T7662] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  125.086641][ T7662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  125.107066][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.317540][   T51] usb 2-1: USB disconnect, device number 11
[  125.430834][ T7669] loop0: detected capacity change from 0 to 32768
[  125.435149][ T7669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.701 (7669)
[  125.457587][ T7669] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.461432][ T7669] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  125.476861][ T7669] BTRFS info (device loop0): using free-space-tree
[  125.604061][ T5850] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.723990][   T33] audit: type=1326 audit(1755448267.351:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.0.706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b57b8ebe9 code=0x7ffc0000
[  125.737715][   T33] audit: type=1326 audit(1755448267.351:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.0.706" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5b57b8ebe9 code=0x7ffc0000
[  126.842151][ T7729] netlink: 'syz.2.722': attribute type 5 has an invalid length.
[  126.868950][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'.
[  126.963671][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.726'.
[  126.969462][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.726'.
[  126.972203][ T7737] cgroup: subsys name conflicts with all
[  127.024882][ T7739] netlink: 'syz.1.727': attribute type 21 has an invalid length.
[  127.028019][ T7739] IPv6: NLM_F_CREATE should be specified when creating new route
[  127.031602][ T7739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.034828][ T7739] IPv6: NLM_F_CREATE should be set when creating new route
[  127.037790][ T7739] IPv6: NLM_F_CREATE should be set when creating new route
[  127.040729][ T7739] IPv6: NLM_F_CREATE should be set when creating new route
[  127.145573][ T7746] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  128.462050][   T33] audit: type=1326 audit(1755448270.091:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.1.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[  128.470730][   T33] audit: type=1326 audit(1755448270.101:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.1.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[  128.480324][   T33] audit: type=1326 audit(1755448270.101:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.1.734" exe="/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[  128.489751][   T33] audit: type=1326 audit(1755448270.101:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.1.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[  128.504719][   T33] audit: type=1326 audit(1755448270.101:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.1.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0e38ebe9 code=0x7ffc0000
[  128.806066][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'.
[  128.833670][ T7774] loop1: detected capacity change from 0 to 2048
[  128.857747][ T7774] EXT4-fs (loop1): failed to initialize system zone (-117)
[  128.860835][ T7774] EXT4-fs (loop1): mount failed
[  128.863854][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'.
[  128.880873][ T7783] loop0: detected capacity change from 0 to 512
[  128.902884][ T7783] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  128.916401][ T7783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  128.925103][ T7783] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.746: corrupted in-inode xattr: e_value size too large
[  128.965588][ T7783] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.746: couldn't read orphan inode 15 (err -117)
[  128.994407][ T7783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.093014][ T5850] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  129.119885][ T5850] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  129.355342][ T6545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.603703][ T6545] syz_tun (unregistering): left promiscuous mode
[  129.773407][ T5850] syz-executor (5850) used greatest stack depth: 16728 bytes left
[  129.833422][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.088158][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.186667][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.296656][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.319409][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.324926][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.328296][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.332943][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.336524][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.368385][ T7806] loop1: detected capacity change from 0 to 40427
[  130.378343][ T7806] F2FS-fs: heap/no_heap options were deprecated
[  130.404589][ T7806] F2FS-fs (loop1): build fault injection rate: 19
[  130.407279][ T7806] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  130.421341][ T7806] F2FS-fs (loop1): invalid crc value
[  130.437819][ T7806] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  130.522622][ T7806] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  130.526924][   T12] bridge_slave_1: left allmulticast mode
[  130.529538][   T12] bridge_slave_1: left promiscuous mode
[  130.533553][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.538885][ T7806] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.554476][ T7806] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  130.569781][   T12] bridge_slave_0: left allmulticast mode
[  130.570966][ T7806] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  130.572061][   T12] bridge_slave_0: left promiscuous mode
[  130.581050][ T7806] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_write_begin+0x952/0x2290
[  130.587660][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.590104][ T7806] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  130.603187][ T7811] f2fs_ckpt-7:1: attempt to access beyond end of device
[  130.603187][ T7811] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.609359][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: f2fs_ckpt-7:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  130.609374][ T7811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.609380][ T7811] Call Trace:
[  130.609384][ T7811]  <TASK>
[  130.609389][ T7811]  dump_stack_lvl+0x189/0x250
[  130.609406][ T7811]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.609415][ T7811]  ? __pfx_queue_work_on+0x10/0x10
[  130.609423][ T7811]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.609434][ T7811]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.609449][ T7811]  f2fs_handle_critical_error+0x37c/0x540
[  130.609464][ T7811]  f2fs_write_end_io+0x886/0xb60
[  130.609482][ T7811]  __submit_merged_bio+0x27a/0x6a0
[  130.609496][ T7811]  __submit_merged_write_cond+0x255/0x530
[  130.609510][ T7811]  f2fs_write_data_pages+0x261d/0x3000
[  130.609539][ T7811]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.609593][ T7811]  ? __lock_acquire+0xab9/0xd20
[  130.609613][ T7811]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.609624][ T7811]  do_writepages+0x32e/0x550
[  130.609641][ T7811]  ? do_raw_spin_unlock+0x4d/0x240
[  130.609663][ T7811]  filemap_fdatawrite+0x199/0x240
[  130.609674][ T7811]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  130.609709][ T7811]  ? do_raw_spin_unlock+0x4d/0x240
[  130.609721][ T7811]  f2fs_sync_dirty_inodes+0x31f/0x830
[  130.609739][ T7811]  f2fs_write_checkpoint+0x95a/0x1df0
[  130.609760][ T7811]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  130.609788][ T7811]  ? down_write+0x162/0x1f0
[  130.609795][ T7811]  ? __pfx_down_write+0x10/0x10
[  130.609803][ T7811]  ? __pfx___schedule+0x10/0x10
[  130.609842][ T7811]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  130.609853][ T7811]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  130.609870][ T7811]  issue_checkpoint_thread+0xd9/0x260
[  130.609880][ T7811]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  130.609888][ T7811]  ? __pfx_autoremove_wake_function+0x10/0x10
[  130.609899][ T7811]  ? __kthread_parkme+0x7b/0x200
[  130.609908][ T7811]  ? __kthread_parkme+0x1a1/0x200
[  130.609920][ T7811]  kthread+0x711/0x8a0
[  130.609931][ T7811]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  130.609939][ T7811]  ? __pfx_kthread+0x10/0x10
[  130.609949][ T7811]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.609958][ T7811]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.609967][ T7811]  ? __pfx_kthread+0x10/0x10
[  130.609976][ T7811]  ret_from_fork+0x3fc/0x770
[  130.609987][ T7811]  ? __pfx_ret_from_fork+0x10/0x10
[  130.609999][ T7811]  ? __switch_to_asm+0x39/0x70
[  130.610008][ T7811]  ? __switch_to_asm+0x33/0x70
[  130.610016][ T7811]  ? __pfx_kthread+0x10/0x10
[  130.610026][ T7811]  ret_from_fork_asm+0x1a/0x30
[  130.610044][ T7811]  </TASK>
[  130.610048][ T7811] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  131.091549][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.766'.
[  131.097221][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'.
[  131.154334][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.162191][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.167660][   T12] bond0 (unregistering): Released all slaves
[  131.327465][ T7842] input: syz0 as /devices/virtual/input/input11
[  131.392527][ T7809] chnl_net:caif_netlink_parms(): no params data found
[  131.829920][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.833339][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.842275][ T7809] bridge_slave_0: entered allmulticast mode
[  131.847597][ T7809] bridge_slave_0: entered promiscuous mode
[  131.910239][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.915976][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.921809][ T7809] bridge_slave_1: entered allmulticast mode
[  131.928109][ T7809] bridge_slave_1: entered promiscuous mode
[  132.007884][   T12] batadv_slave_0: left promiscuous mode
[  132.019318][   T12] hsr_slave_0: left promiscuous mode
[  132.023922][   T12] hsr_slave_1: left promiscuous mode
[  132.029165][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.033896][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.045799][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.051616][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.091890][   T12] veth1_macvtap: left promiscuous mode
[  132.099458][   T12] veth0_macvtap: left promiscuous mode
[  132.103654][   T12] veth1_vlan: left promiscuous mode
[  132.107958][   T12] veth0_vlan: left promiscuous mode
[  132.405449][ T5849] Bluetooth: hci2: command tx timeout
[  132.408091][   T51] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  132.483112][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.486098][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.549447][   T12] team0 (unregistering): Port device team_slave_1 removed
[  132.568939][   T51] usb 2-1: unable to get BOS descriptor set
[  132.571401][   T51] usb 2-1: not running at top speed; connect to a high speed hub
[  132.581543][   T51] usb 2-1: config 1 interface 0 has no altsetting 0
[  132.592349][   T51] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  132.596181][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.598980][   T51] usb 2-1: Product: syz
[  132.600475][   T51] usb 2-1: Manufacturer: syz
[  132.602216][   T51] usb 2-1: SerialNumber: syz
[  132.607126][   T12] team0 (unregistering): Port device team_slave_0 removed
[  132.831332][   T51] usb 2-1: USB disconnect, device number 12
[  132.974352][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.000950][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.037718][ T7809] team0: Port device team_slave_0 added
[  133.043471][ T7809] team0: Port device team_slave_1 added
[  133.107201][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.110144][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.120206][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.126907][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.129254][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.137740][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.221437][ T7809] hsr_slave_0: entered promiscuous mode
[  133.224366][ T7809] hsr_slave_1: entered promiscuous mode
[  133.233844][ T7809] debugfs: 'hsr0' already exists in 'hsr'
[  133.237012][ T7809] Cannot create hsr debugfs directory
[  133.929478][ T7809] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  133.937880][ T7809] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  133.949319][ T7809] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  133.966228][ T7809] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  134.100097][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.134425][ T7809] 8021q: adding VLAN 0 to HW filter on device team0
[  134.157948][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.160703][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.349425][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.351904][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.475343][ T5849] Bluetooth: hci2: command tx timeout
[  134.727391][ T7920] Invalid ELF header magic: != ELF
[  134.796912][ T5849] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  134.801261][ T5849] Bluetooth: hci1: Injecting HCI hardware error event
[  134.814012][ T5852] Bluetooth: hci1: hardware error 0x00
[  135.111170][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.205279][ T7809] veth0_vlan: entered promiscuous mode
[  135.219631][ T7809] veth1_vlan: entered promiscuous mode
[  135.328564][ T7809] veth0_macvtap: entered promiscuous mode
[  135.364233][ T7809] veth1_macvtap: entered promiscuous mode
[  135.453718][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.477285][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.495951][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.514321][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.534899][ T5910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.559199][ T5910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.754362][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.766672][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.877805][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.884959][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.391923][ T7976] net_ratelimit: 17 callbacks suppressed
[  136.391939][ T7976] openvswitch: netlink: Message has 4784 unknown bytes.
[  136.405008][ T7976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.554991][ T5849] Bluetooth: hci2: command tx timeout
[  136.649748][ T7997] input: syz1 as /devices/virtual/input/input12
[  136.811339][ T8008] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.815'.
[  136.957286][ T5852] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  137.028796][ T8021] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  137.147265][ T8027] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  137.231105][ T8034] loop3: detected capacity change from 0 to 256
[  137.265027][ T8034] process 'syz.3.825' launched '/dev/fd/3' with NULL argv: empty string added
[  137.343815][ T8041] loop1: detected capacity change from 0 to 1024
[  137.375811][ T8041] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.418455][ T8041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.460747][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.546700][ T8061] loop1: detected capacity change from 0 to 1024
[  137.590497][ T1091] hfsplus: b-tree write err: -5, ino 8
[  137.963666][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  138.132634][   T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  138.135737][   T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  138.140578][   T10] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  138.144328][   T10] usb 2-1: config 220 has no interface number 2
[  138.146692][   T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  138.153251][   T10] usb 2-1: config 220 interface 0 has no altsetting 0
[  138.155701][   T10] usb 2-1: config 220 interface 76 has no altsetting 0
[  138.158106][   T10] usb 2-1: config 220 interface 1 has no altsetting 0
[  138.163203][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  138.166482][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.169389][   T10] usb 2-1: Product: syz
[  138.172657][   T10] usb 2-1: Manufacturer: syz
[  138.174401][   T10] usb 2-1: SerialNumber: syz
[  138.409880][   T10] usb 2-1: selecting invalid altsetting 0
[  138.439246][   T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  138.441618][   T10] usb 2-1: No valid video chain found.
[  138.445199][ T8074] loop3: detected capacity change from 0 to 1024
[  138.450294][ T8074] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  138.473594][   T10] usb 2-1: selecting invalid altsetting 0
[  138.475766][   T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  138.480033][ T8074] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.842: Invalid block bitmap block 0 in block_group 0
[  138.492012][   T10] usb 2-1: USB disconnect, device number 13
[  138.498522][ T8074] Quota error (device loop3): write_blk: dquota write failed
[  138.505319][ T8074] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  138.508861][ T8074] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.842: Failed to acquire dquot type 0
[  138.527799][ T8074] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.842: Freeing blocks not in datazone - block = 0, count = 4096
[  138.550283][ T8074] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.842: Invalid inode bitmap blk 0 in block_group 0
[  138.561437][ T8074] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  138.566711][ T8074] EXT4-fs (loop3): 1 orphan inode deleted
[  138.570354][ T8074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.685733][ T1091] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7
[  138.689676][ T1091] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u10:5: Failed to release dquot type 0
[  138.708902][ T7809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.210238][ T8090] loop3: detected capacity change from 0 to 256
[  139.251303][ T8090] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  139.553286][ T8088] loop1: detected capacity change from 0 to 32768
[  139.556660][ T8088] XFS: attr2 mount option is deprecated.
[  139.602726][ T8088] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  139.607865][ T8088] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.642136][ T8088] XFS (loop1): Ending clean mount
[  139.657252][ T8088] XFS (loop1): Quotacheck needed: Please wait.
[  139.665727][ T8110] netlink: 'syz.3.853': attribute type 1 has an invalid length.
[  139.677594][ T8110] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.853'.
[  139.714028][ T8088] XFS (loop1): Quotacheck: Done.
[  139.779004][ T5843] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.100107][ T8124] loop3: detected capacity change from 0 to 256
[  140.126816][ T8124] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.130953][ T8124] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  140.154444][ T8124] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  140.258656][ T8130] loop1: detected capacity change from 0 to 128
[  140.292994][ T8130] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.324831][ T8130] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.781142][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.034269][ T5843] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.812525][ T8158] cgroup: fork rejected by pids controller in /syz3
[  142.765256][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.844986][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.938634][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.126998][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.243009][ T8187] overlayfs: failed to clone upperpath
[  143.356790][   T12] bridge_slave_1: left allmulticast mode
[  143.360050][   T12] bridge_slave_1: left promiscuous mode
[  143.362593][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.377346][   T12] bridge_slave_0: left allmulticast mode
[  143.379603][   T12] bridge_slave_0: left promiscuous mode
[  143.382776][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.436574][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.443196][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.447425][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.452103][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.456438][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.582299][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'.
[  144.097486][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.109023][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.117587][   T12] bond0 (unregistering): Released all slaves
[  144.624160][   T12] hsr_slave_0: left promiscuous mode
[  144.635797][   T12] hsr_slave_1: left promiscuous mode
[  144.640651][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.642978][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.653721][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.656806][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.678308][   T12] veth1_macvtap: left promiscuous mode
[  144.680244][   T12] veth0_macvtap: left promiscuous mode
[  144.682701][   T12] veth1_vlan: left promiscuous mode
[  144.686495][   T12] veth0_vlan: left promiscuous mode
[  145.538593][   T12] team0 (unregistering): Port device team_slave_1 removed
[  145.575191][ T5852] Bluetooth: hci2: command tx timeout
[  145.586728][   T12] team0 (unregistering): Port device team_slave_0 removed
[  145.642851][   T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  145.808502][   T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  145.812361][   T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  145.830997][   T51] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  145.834620][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.839229][   T51] usb 2-1: Product: syz
[  145.841087][   T51] usb 2-1: Manufacturer: syz
[  145.843034][   T51] usb 2-1: SerialNumber: syz
[  145.849090][   T51] usb 2-1: config 0 descriptor??
[  145.853882][ T8213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  145.857327][ T8213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  146.069535][ T8213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  146.072908][ T8213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  146.406668][ T8190] chnl_net:caif_netlink_parms(): no params data found
[  146.561289][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.564478][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.567550][ T8190] bridge_slave_0: entered allmulticast mode
[  146.574329][ T8190] bridge_slave_0: entered promiscuous mode
[  146.582945][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.589738][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.594381][ T8190] bridge_slave_1: entered allmulticast mode
[  146.598547][ T8190] bridge_slave_1: entered promiscuous mode
[  146.663113][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.669361][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.707986][ T8190] team0: Port device team_slave_0 added
[  146.714770][ T8190] team0: Port device team_slave_1 added
[  146.748007][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.750807][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.762493][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.769980][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.772717][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.784658][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.839108][ T8190] hsr_slave_0: entered promiscuous mode
[  146.842235][ T8190] hsr_slave_1: entered promiscuous mode
[  146.848019][ T8190] debugfs: 'hsr0' already exists in 'hsr'
[  146.850357][ T8190] Cannot create hsr debugfs directory
[  146.900106][   T51] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[  146.923859][   T51] usb 2-1: USB disconnect, device number 14
[  147.501171][ T8190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  147.510012][ T8190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  147.523444][ T8190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  147.535134][ T8190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  147.691500][ T5852] Bluetooth: hci2: command tx timeout
[  148.204669][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.231261][ T8190] 8021q: adding VLAN 0 to HW filter on device team0
[  148.246273][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.249227][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.268623][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.270908][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.579286][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.640102][ T8190] veth0_vlan: entered promiscuous mode
[  148.655374][ T8190] veth1_vlan: entered promiscuous mode
[  148.697342][ T8190] veth0_macvtap: entered promiscuous mode
[  148.701351][ T8190] veth1_macvtap: entered promiscuous mode
[  148.731854][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.739997][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.758075][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.761366][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.764264][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.783918][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.862570][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.869334][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.910105][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.918743][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.129703][ T8299] loop1: detected capacity change from 0 to 32768
[  149.167419][ T8299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.907 (8299)
[  149.195654][ T8299] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.199645][ T8299] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  149.233264][ T8299] BTRFS info (device loop1): disk space caching is enabled
[  149.254971][ T8299] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  149.448340][ T8299] BTRFS info (device loop1): rebuilding free space tree
[  149.473956][ T8299] BTRFS info (device loop1): disabling free space tree
[  149.477138][ T8299] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.487479][ T8299] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.523790][ T8355] loop3: detected capacity change from 0 to 128
[  149.534412][ T8355] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  149.561579][ T8355] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.607493][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.686043][ T8190] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  149.804218][ T5852] Bluetooth: hci2: command tx timeout
[  150.367527][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[  150.677307][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'.
[  151.706513][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.943'.
[  151.902203][ T5852] Bluetooth: hci2: command tx timeout
[  151.986786][ T8450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.947'.
[  152.671915][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  152.825116][   T51] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  152.831724][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'.
[  152.837709][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.842026][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.846031][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  152.852139][ T5848] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  152.858926][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  152.862239][ T5848] usb 4-1: Product: syz
[  152.867970][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.874591][ T5848] usb 4-1: config 0 descriptor??
[  152.881873][ T8507] bridge_slave_1: left allmulticast mode
[  152.887000][ T8507] bridge_slave_1: left promiscuous mode
[  152.889594][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.995986][   T51] usb 2-1: Using ep0 maxpacket: 16
[  153.013365][   T51] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  153.016909][   T51] usb 2-1: config 0 has no interface number 0
[  153.019441][   T51] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  153.024738][   T51] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  153.031867][   T51] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  153.039204][   T51] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  153.042467][   T51] usb 2-1: Product: syz
[  153.044211][   T51] usb 2-1: SerialNumber: syz
[  153.050643][   T51] usb 2-1: config 0 descriptor??
[  153.060372][   T51] cm109 2-1:0.8: invalid payload size 0, expected 4
[  153.065688][   T51] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input13
[  153.278581][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  153.296455][ T5848] waltop 0003:172F:0037.0006: unknown main item tag 0x0
[  153.298636][ T5848] waltop 0003:172F:0037.0006: unknown main item tag 0x0
[  153.302917][ T5848] waltop 0003:172F:0037.0006: unknown main item tag 0x0
[  153.308444][ T5848] waltop 0003:172F:0037.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  153.482191][ T5848] usb 2-1: USB disconnect, device number 15
[  153.497154][ T5848] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  153.514505][   T51] usb 4-1: USB disconnect, device number 2
[  153.852172][ T8536] ==================================================================
[  153.855343][ T8536] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  153.858460][ T8536] Read of size 2 at addr ffff888122a98a42 by task syz.2.981/8536
[  153.862174][ T8536] 
[  153.863584][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.2.981 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  153.863605][ T8536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.863615][ T8536] Call Trace:
[  153.863623][ T8536]  <TASK>
[  153.863630][ T8536]  dump_stack_lvl+0x189/0x250
[  153.863651][ T8536]  ? __kasan_check_byte+0x12/0x40
[  153.863707][ T8536]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.863724][ T8536]  ? lock_release+0x4b/0x3e0
[  153.863746][ T8536]  ? __virt_addr_valid+0x4a5/0x5c0
[  153.863764][ T8536]  print_report+0xca/0x240
[  153.863777][ T8536]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  153.863799][ T8536]  kasan_report+0x118/0x150
[  153.863818][ T8536]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  153.863839][ T8536]  __xfrm_state_lookup+0x6ad/0x8d0
[  153.863864][ T8536]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  153.863888][ T8536]  ? xfrm_state_lookup+0x45/0x1e0
[  153.863902][ T8536]  xfrm_state_lookup+0x11e/0x1e0
[  153.863920][ T8536]  xfrm_user_state_lookup+0x231/0x370
[  153.863938][ T8536]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  153.863961][ T8536]  xfrm_del_sa+0xf1/0x3e0
[  153.863976][ T8536]  ? __pfx_xfrm_del_sa+0x10/0x10
[  153.863991][ T8536]  ? apparmor_capable+0x137/0x1b0
[  153.864009][ T8536]  ? __nla_parse+0x40/0x60
[  153.864031][ T8536]  xfrm_user_rcv_msg+0x7a3/0xab0
[  153.864048][ T8536]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  153.864075][ T8536]  ? __pfx___mutex_trylock_common+0x10/0x10
[  153.864092][ T8536]  ? rcu_is_watching+0x15/0xb0
[  153.864105][ T8536]  ? trace_contention_end+0x39/0x120
[  153.864120][ T8536]  ? __mutex_lock+0x335/0x1360
[  153.864142][ T8536]  netlink_rcv_skb+0x208/0x470
[  153.864162][ T8536]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  153.864178][ T8536]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  153.864202][ T8536]  ? netlink_deliver_tap+0x2e/0x1b0
[  153.864221][ T8536]  ? netlink_deliver_tap+0x2e/0x1b0
[  153.864241][ T8536]  xfrm_netlink_rcv+0x79/0x90
[  153.864255][ T8536]  netlink_unicast+0x82f/0x9e0
[  153.864276][ T8536]  ? __pfx_netlink_unicast+0x10/0x10
[  153.864294][ T8536]  ? netlink_sendmsg+0x642/0xb30
[  153.864312][ T8536]  ? skb_put+0x11b/0x210
[  153.864326][ T8536]  netlink_sendmsg+0x805/0xb30
[  153.864348][ T8536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.864369][ T8536]  ? aa_sock_msg_perm+0xf1/0x1d0
[  153.864382][ T8536]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.864397][ T8536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.864417][ T8536]  __sock_sendmsg+0x21c/0x270
[  153.864436][ T8536]  ____sys_sendmsg+0x505/0x830
[  153.864452][ T8536]  ? __pfx_____sys_sendmsg+0x10/0x10
[  153.864467][ T8536]  ? import_iovec+0x74/0xa0
[  153.864483][ T8536]  ___sys_sendmsg+0x21f/0x2a0
[  153.864497][ T8536]  ? __pfx____sys_sendmsg+0x10/0x10
[  153.864524][ T8536]  ? __fget_files+0x2a/0x420
[  153.864536][ T8536]  ? __fget_files+0x3a0/0x420
[  153.864551][ T8536]  __x64_sys_sendmsg+0x19b/0x260
[  153.864566][ T8536]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  153.864586][ T8536]  ? do_syscall_64+0xbe/0x3b0
[  153.864608][ T8536]  do_syscall_64+0xfa/0x3b0
[  153.864627][ T8536]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.864645][ T8536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.864658][ T8536]  ? exc_page_fault+0x9f/0xf0
[  153.864712][ T8536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.864727][ T8536] RIP: 0033:0x7fe7f658ebe9
[  153.864742][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.864756][ T8536] RSP: 002b:00007fe7f745c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.864773][ T8536] RAX: ffffffffffffffda RBX: 00007fe7f67b5fa0 RCX: 00007fe7f658ebe9
[  153.864785][ T8536] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[  153.864795][ T8536] RBP: 00007fe7f6611e19 R08: 0000000000000000 R09: 0000000000000000
[  153.864804][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.864813][ T8536] R13: 00007fe7f67b6038 R14: 00007fe7f67b5fa0 R15: 00007ffd000f6e38
[  153.864830][ T8536]  </TASK>
[  153.864836][ T8536] 
[  154.014192][ T8536] Allocated by task 6834:
[  154.015883][ T8536]  kasan_save_track+0x3e/0x80
[  154.017786][ T8536]  __kasan_slab_alloc+0x6c/0x80
[  154.019752][ T8536]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  154.021884][ T8536]  xfrm_state_alloc+0x24/0x2f0
[  154.023844][ T8536]  __find_acq_core+0x8a7/0x1c00
[  154.025815][ T8536]  xfrm_find_acq+0x78/0xa0
[  154.027622][ T8536]  xfrm_alloc_userspi+0x6b3/0xc90
[  154.029675][ T8536]  xfrm_user_rcv_msg+0x7a3/0xab0
[  154.031673][ T8536]  netlink_rcv_skb+0x208/0x470
[  154.033565][ T8536]  xfrm_netlink_rcv+0x79/0x90
[  154.035446][ T8536]  netlink_unicast+0x82f/0x9e0
[  154.037287][ T8536]  netlink_sendmsg+0x805/0xb30
[  154.039087][ T8536]  __sock_sendmsg+0x21c/0x270
[  154.040962][ T8536]  ____sys_sendmsg+0x505/0x830
[  154.042858][ T8536]  ___sys_sendmsg+0x21f/0x2a0
[  154.044707][ T8536]  __x64_sys_sendmsg+0x19b/0x260
[  154.046617][ T8536]  do_syscall_64+0xfa/0x3b0
[  154.048445][ T8536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.050708][ T8536] 
[  154.051683][ T8536] Freed by task 51:
[  154.053263][ T8536]  kasan_save_track+0x3e/0x80
[  154.055172][ T8536]  kasan_save_free_info+0x46/0x50
[  154.057208][ T8536]  __kasan_slab_free+0x5b/0x80
[  154.059150][ T8536]  kmem_cache_free+0x18f/0x400
[  154.061099][ T8536]  xfrm_state_gc_task+0x52d/0x6b0
[  154.063125][ T8536]  process_scheduled_works+0xae1/0x17b0
[  154.065314][ T8536]  worker_thread+0x8a0/0xda0
[  154.067158][ T8536]  kthread+0x711/0x8a0
[  154.068721][ T8536]  ret_from_fork+0x3fc/0x770
[  154.070527][ T8536]  ret_from_fork_asm+0x1a/0x30
[  154.072425][ T8536] 
[  154.073425][ T8536] The buggy address belongs to the object at ffff888122a98900
[  154.073425][ T8536]  which belongs to the cache xfrm_state of size 928
[  154.078899][ T8536] The buggy address is located 322 bytes inside of
[  154.078899][ T8536]  freed 928-byte region [ffff888122a98900, ffff888122a98ca0)
[  154.084352][ T8536] 
[  154.085361][ T8536] The buggy address belongs to the physical page:
[  154.088016][ T8536] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888122a98d80 pfn:0x122a98
[  154.092085][ T8536] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  154.095479][ T8536] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  154.098591][ T8536] page_type: f5(slab)
[  154.100268][ T8536] raw: 057ff00000000040 ffff888104b55c80 dead000000000122 0000000000000000
[  154.103730][ T8536] raw: ffff888122a98d80 00000000800e0009 00000000f5000000 0000000000000000
[  154.107007][ T8536] head: 057ff00000000040 ffff888104b55c80 dead000000000122 0000000000000000
[  154.110392][ T8536] head: ffff888122a98d80 00000000800e0009 00000000f5000000 0000000000000000
[  154.113813][ T8536] head: 057ff00000000002 ffffea00048aa601 00000000ffffffff 00000000ffffffff
[  154.117185][ T8536] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  154.120496][ T8536] page dumped because: kasan: bad access detected
[  154.123063][ T8536] page_owner tracks the page as allocated
[  154.125276][ T8536] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6127, tgid 6126 (syz.0.75), ts 75060145460, free_ts 75019694615
[  154.132703][ T8536]  post_alloc_hook+0x240/0x2a0
[  154.134703][ T8536]  get_page_from_freelist+0x21e4/0x22c0
[  154.136902][ T8536]  __alloc_frozen_pages_noprof+0x181/0x370
[  154.139269][ T8536]  alloc_pages_mpol+0x232/0x4a0
[  154.141235][ T8536]  allocate_slab+0x8a/0x370
[  154.143088][ T8536]  ___slab_alloc+0xbeb/0x1410
[  154.144980][ T8536]  kmem_cache_alloc_noprof+0x283/0x3c0
[  154.147169][ T8536]  xfrm_state_alloc+0x24/0x2f0
[  154.149151][ T8536]  __find_acq_core+0x8a7/0x1c00
[  154.151116][ T8536]  xfrm_find_acq+0x78/0xa0
[  154.152933][ T8536]  pfkey_getspi+0x65d/0xee0
[  154.154842][ T8536]  pfkey_sendmsg+0xbfe/0x1090
[  154.156825][ T8536]  __sock_sendmsg+0x21c/0x270
[  154.158771][ T8536]  ____sys_sendmsg+0x505/0x830
[  154.160707][ T8536]  ___sys_sendmsg+0x21f/0x2a0
[  154.162612][ T8536]  __x64_sys_sendmsg+0x19b/0x260
[  154.164671][ T8536] page last free pid 6118 tgid 6117 stack trace:
[  154.167199][ T8536]  __free_frozen_pages+0xbc4/0xd30
[  154.169243][ T8536]  stack_depot_save_flags+0x436/0x860
[  154.171402][ T8536]  kasan_save_track+0x4f/0x80
[  154.173349][ T8536]  __kasan_kmalloc+0x93/0xb0
[  154.175286][ T8536]  __kmalloc_noprof+0x27a/0x4f0
[  154.177313][ T8536]  security_task_alloc+0x4d/0x360
[  154.179434][ T8536]  copy_process+0x1530/0x3c00
[  154.181375][ T8536]  create_io_thread+0xef/0x150
[  154.183354][ T8536]  create_io_worker+0x182/0x5d0
[  154.185378][ T8536]  io_wq_enqueue+0x62c/0x850
[  154.187320][ T8536]  io_submit_sqes+0x19ac/0x1d10
[  154.189345][ T8536]  __se_sys_io_uring_enter+0x2df/0x2b20
[  154.191574][ T8536]  do_syscall_64+0xfa/0x3b0
[  154.193406][ T8536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.195815][ T8536] 
[  154.196773][ T8536] Memory state around the buggy address:
[  154.198977][ T8536]  ffff888122a98900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.202162][ T8536]  ffff888122a98980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.205224][ T8536] >ffff888122a98a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.208403][ T8536]                                            ^
[  154.210809][ T8536]  ffff888122a98a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.213937][ T8536]  ffff888122a98b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.217091][ T8536] ==================================================================
[  154.227171][ T8536] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  154.230115][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.2.981 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  154.234959][ T8536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.238945][ T8536] Call Trace:
[  154.240317][ T8536]  <TASK>
[  154.241517][ T8536]  dump_stack_lvl+0x99/0x250
[  154.243401][ T8536]  ? __asan_memcpy+0x40/0x70
[  154.245303][ T8536]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.247385][ T8536]  ? __pfx__printk+0x10/0x10
[  154.249308][ T8536]  vpanic+0x281/0x750
[  154.250947][ T8536]  ? preempt_schedule+0xae/0xc0
[  154.252929][ T8536]  ? __pfx_vpanic+0x10/0x10
[  154.254832][ T8536]  ? preempt_schedule_common+0x83/0xd0
[  154.257058][ T8536]  ? preempt_schedule+0xae/0xc0
[  154.259008][ T8536]  ? __pfx_preempt_schedule+0x10/0x10
[  154.261185][ T8536]  panic+0xb9/0xc0
[  154.262726][ T8536]  ? __pfx_panic+0x10/0x10
[  154.264559][ T8536]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  154.266986][ T8536]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  154.269176][ T8536]  check_panic_on_warn+0x89/0xb0
[  154.271238][ T8536]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  154.273383][ T8536]  end_report+0x78/0x160
[  154.275104][ T8536]  kasan_report+0x129/0x150
[  154.276942][ T8536]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  154.279078][ T8536]  __xfrm_state_lookup+0x6ad/0x8d0
[  154.281173][ T8536]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  154.283369][ T8536]  ? xfrm_state_lookup+0x45/0x1e0
[  154.285426][ T8536]  xfrm_state_lookup+0x11e/0x1e0
[  154.287443][ T8536]  xfrm_user_state_lookup+0x231/0x370
[  154.289654][ T8536]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  154.292036][ T8536]  xfrm_del_sa+0xf1/0x3e0
[  154.293777][ T8536]  ? __pfx_xfrm_del_sa+0x10/0x10
[  154.295795][ T8536]  ? apparmor_capable+0x137/0x1b0
[  154.297794][ T8536]  ? __nla_parse+0x40/0x60
[  154.299597][ T8536]  xfrm_user_rcv_msg+0x7a3/0xab0
[  154.301570][ T8536]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  154.303766][ T8536]  ? __pfx___mutex_trylock_common+0x10/0x10
[  154.306030][ T8536]  ? rcu_is_watching+0x15/0xb0
[  154.307942][ T8536]  ? trace_contention_end+0x39/0x120
[  154.310003][ T8536]  ? __mutex_lock+0x335/0x1360
[  154.311973][ T8536]  netlink_rcv_skb+0x208/0x470
[  154.313906][ T8536]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  154.316130][ T8536]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  154.318261][ T8536]  ? netlink_deliver_tap+0x2e/0x1b0
[  154.320403][ T8536]  ? netlink_deliver_tap+0x2e/0x1b0
[  154.322510][ T8536]  xfrm_netlink_rcv+0x79/0x90
[  154.324566][ T8536]  netlink_unicast+0x82f/0x9e0
[  154.326459][ T8536]  ? __pfx_netlink_unicast+0x10/0x10
[  154.328488][ T8536]  ? netlink_sendmsg+0x642/0xb30
[  154.330448][ T8536]  ? skb_put+0x11b/0x210
[  154.332064][ T8536]  netlink_sendmsg+0x805/0xb30
[  154.333969][ T8536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.336105][ T8536]  ? aa_sock_msg_perm+0xf1/0x1d0
[  154.338111][ T8536]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  154.340251][ T8536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.342399][ T8536]  __sock_sendmsg+0x21c/0x270
[  154.344355][ T8536]  ____sys_sendmsg+0x505/0x830
[  154.346317][ T8536]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.348490][ T8536]  ? import_iovec+0x74/0xa0
[  154.350390][ T8536]  ___sys_sendmsg+0x21f/0x2a0
[  154.352328][ T8536]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.354500][ T8536]  ? __fget_files+0x2a/0x420
[  154.356444][ T8536]  ? __fget_files+0x3a0/0x420
[  154.358413][ T8536]  __x64_sys_sendmsg+0x19b/0x260
[  154.360471][ T8536]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.362670][ T8536]  ? do_syscall_64+0xbe/0x3b0
[  154.364557][ T8536]  do_syscall_64+0xfa/0x3b0
[  154.366403][ T8536]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.368486][ T8536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.370969][ T8536]  ? exc_page_fault+0x9f/0xf0
[  154.372840][ T8536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.375204][ T8536] RIP: 0033:0x7fe7f658ebe9
[  154.376991][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.384542][ T8536] RSP: 002b:00007fe7f745c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.387875][ T8536] RAX: ffffffffffffffda RBX: 00007fe7f67b5fa0 RCX: 00007fe7f658ebe9
[  154.391028][ T8536] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[  154.394186][ T8536] RBP: 00007fe7f6611e19 R08: 0000000000000000 R09: 0000000000000000
[  154.397357][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.400506][ T8536] R13: 00007fe7f67b6038 R14: 00007fe7f67b5fa0 R15: 00007ffd000f6e38
[  154.403666][ T8536]  </TASK>
[  154.405658][ T8536] Kernel Offset: disabled
[  154.407395][ T8536] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:31:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013d7 RDI=00000000000013d8 RBP=00000000000003f8 RSP=ffffc9000338e970
R8 =ffff8881071e0237 R9 =1ffff11020e3c046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af990e R14=ffffffff99dee3e0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe7f745c6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe7f745bfc8 CR3=000000002406e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe7f6787498 00007fe7f6787470 XMM03=00007fe7f67874a8 00007fe7f67874a0
XMM04=00007fe7f72ed100 00007fe7f6787460 XMM05=00007fe7f6787478 00007fe7f67874c0
XMM06=00007fe7f67874b8 00007fe7f67874b0 XMM07=00007fe7f67874a8 00007fe7f67874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe7f6612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=895885f95b5f5200 RBX=ffffffff81968308 RCX=895885f95b5f5200 RDX=0000000000000001
RSI=ffffffff8d9b6e65 RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000027d9e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8d82212e53
XMM06=0000000000000000 00007f8d82212e4d XMM07=0000000000000000 00007f8d82212e61
XMM08=0000000000000000 00007f8d82212ee7 XMM09=0000000000000000 00007f8d82212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
