last executing test programs:

56.401243371s ago: executing program 0 (id=274):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)

56.221353513s ago: executing program 0 (id=276):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

56.16604192s ago: executing program 0 (id=277):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x16, 0x18, 0x9, &(0x7f0000000380)="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"})

56.081246896s ago: executing program 0 (id=279):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

56.073981693s ago: executing program 0 (id=281):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c)

55.741379412s ago: executing program 0 (id=285):
flock(0xffffffffffffffff, 0x2)

55.604155873s ago: executing program 32 (id=285):
flock(0xffffffffffffffff, 0x2)

49.527242875s ago: executing program 1 (id=333):
r0 = memfd_secret(0x0)
ftruncate(r0, 0x9)
ftruncate(r0, 0x51a9497)

49.288252521s ago: executing program 1 (id=334):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x64903, 0x141)

49.080400417s ago: executing program 1 (id=335):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r1, r1, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r0, r1, 0x2f, 0xc, 0x4, @void, @value=r0}, 0x20)

48.85878561s ago: executing program 1 (id=337):
inotify_init1(0x800)
syz_mount_image$fuse(0x0, 0x0, 0x1000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\xa2-\x00', 0x3, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
llistxattr(0x0, 0x0, 0x0)

48.454819432s ago: executing program 1 (id=338):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]})
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@quota}]})

47.790514654s ago: executing program 1 (id=340):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f0000000280)="96b4"}, 0x20)

47.48659389s ago: executing program 33 (id=340):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f0000000280)="96b4"}, 0x20)

6.398506743s ago: executing program 2 (id=717):
r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000440)={0x0, @bt={0xa00, 0x8000640, 0x1, 0x1, 0xd59f83, 0x7, 0x80, 0x19ef, 0x3, 0x3, 0x47f, 0x2800, 0x2c19, 0x81, 0x8, 0x0, {0x8, 0xffffffff}, 0xd5, 0x3}})

6.32059839s ago: executing program 2 (id=719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})

3.009732274s ago: executing program 2 (id=744):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000))
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f00000000c0)={0x1, 0x1})

2.999146238s ago: executing program 2 (id=745):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

2.809259259s ago: executing program 2 (id=750):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x60)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket(0x11, 0x800000003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, "95f326cdcb4700348fb30fb073259ba1d894c8782936a22241940351f63a5d49f6b05a95d6c75bec"}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xfc0}, {0x0}], 0x4, 0x0, 0x0, 0x8000}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3e)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10)
r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c4)
write$binfmt_script(r10, &(0x7f0000000140)={'#! ', './file0'}, 0xb)

2.67607441s ago: executing program 2 (id=754):
socket$inet6(0xa, 0x1, 0x100)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r0, 0xffffffffffffffff, 0x0)

2.487197652s ago: executing program 34 (id=754):
socket$inet6(0xa, 0x1, 0x100)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r0, 0xffffffffffffffff, 0x0)

2.265954698s ago: executing program 3 (id=759):
syz_read_part_table(0x1063, &(0x7f0000002100)="$eJzsz7FtAkEQBdC/ujv7LrI7sMtw6MyBY1fgQq4fWiBApJRARh9Ii/ZOUAIQvBfMSjPztZrwUFNJ0vVfJalza7y/roM+0/J2Sx2yPfT7U/KRObUuO+O6uPsdxtS3bkxKjj9TC3y3wUsr5/p//aqsnc9yi+Zvc8dTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBpXQIAAP//DFsO/A==")

1.750630922s ago: executing program 3 (id=760):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90)

1.750432194s ago: executing program 3 (id=761):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, 0x0, 0xc000)

1.656531494s ago: executing program 3 (id=762):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0xc, 0x5, {0x5, 0x23, "5f5503"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

660.169747ms ago: executing program 4 (id=768):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r1}, 0x8)

586.501357ms ago: executing program 4 (id=769):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x108, 0x4)

519.578979ms ago: executing program 4 (id=770):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x102000000)

519.431386ms ago: executing program 4 (id=771):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000500)='XS', 0x2, 0x80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

435.190617ms ago: executing program 4 (id=772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)

434.948426ms ago: executing program 4 (id=773):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/49, 0x2c000, 0x1000, 0x10, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x100000000)

35.581442ms ago: executing program 3 (id=774):
r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, 0x0)

0s ago: executing program 3 (id=775):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000740)={r2}, 0x8)

kernel console output (not intermixed with test programs):

2(bridge_slave_1) entered forwarding state
[   57.061683][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.087216][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.090461][ T4064] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.109691][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.112772][ T4064] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.149914][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.157308][ T5858] Bluetooth: hci0: command tx timeout
[   57.207308][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   57.224428][ T4061] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.227427][ T4061] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.236847][ T5237] Bluetooth: hci2: command tx timeout
[   57.239188][ T5858] Bluetooth: hci1: command tx timeout
[   57.261388][ T4061] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.264545][ T4061] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.323387][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.331241][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.371119][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.431429][ T5845] veth0_vlan: entered promiscuous mode
[   57.451032][ T5845] veth1_vlan: entered promiscuous mode
[   57.473372][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.495915][ T5845] veth0_macvtap: entered promiscuous mode
[   57.503129][ T5845] veth1_macvtap: entered promiscuous mode
[   57.513691][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.543718][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.563238][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.583243][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.590470][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.610616][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.614290][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.623732][ T5846] veth0_vlan: entered promiscuous mode
[   57.628849][ T5849] veth0_vlan: entered promiscuous mode
[   57.645704][ T5849] veth1_vlan: entered promiscuous mode
[   57.653118][ T5846] veth1_vlan: entered promiscuous mode
[   57.721923][ T5846] veth0_macvtap: entered promiscuous mode
[   57.758168][ T5849] veth0_macvtap: entered promiscuous mode
[   57.763833][ T5846] veth1_macvtap: entered promiscuous mode
[   57.779612][ T4064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.782812][ T4064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.789266][ T5849] veth1_macvtap: entered promiscuous mode
[   57.827662][  T727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.832469][  T727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.837449][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.857712][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.865444][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.878567][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.890449][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.899328][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.902902][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.922769][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.926975][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.927611][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.941932][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.957626][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.971634][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.048362][ T5918] JFS: charset not found
[   58.068033][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.071342][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.126679][ T4064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.131152][ T4064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.174009][ T4061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.179864][ T4061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.269264][ T5921] loop2: detected capacity change from 0 to 32768
[   58.323543][ T4064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.332181][ T4064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.438889][ T5921] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   58.438912][ T5921]   allowing incompatible features above 0.0: (unknown version)
[   58.438921][ T5921]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   58.457618][ T5921] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   58.461249][ T5921] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   58.464797][ T5921] bcachefs (loop2): Version upgrade required:
[   58.464797][ T5921] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   58.464797][ T5921] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   58.464797][ T5921]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   58.499139][ T5921] bcachefs (loop2): dropping and reconstructing all alloc info
[   58.521672][ T5921] bcachefs (loop2): accounting_read... done
[   58.554826][ T5921] bcachefs (loop2): alloc_read... done
[   58.557526][ T5921] bcachefs (loop2): snapshots_read... done
[   58.560125][ T5921] bcachefs (loop2): check_allocations... done
[   58.574372][ T5921] bcachefs (loop2): going read-write
[   58.582730][ T5921] bcachefs (loop2): done starting filesystem
[   58.616897][   T33] audit: type=1800 audit(1755555123.509:2): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4" name="file1" dev="loop2" ino=536870912 res=0 errno=0
[   58.623072][ T1091] bcachefs (loop2): bucket incorrectly unset in freespace btree
[   58.634557][ T5921] syz.2.4 (5921) used greatest stack depth: 17400 bytes left
[   58.640689][ T5845] bcachefs (loop2): shutting down
[   58.642539][ T5845] bcachefs (loop2): going read-only
[   58.644537][ T5845] bcachefs (loop2): finished waiting for writes to stop
[   58.647184][ T1091]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[   58.655122][ T1091] bcachefs (loop2): bucket incorrectly unset in freespace btree
[   58.655147][ T1091]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[   58.663425][ T1091] bcachefs (loop2): bucket incorrectly unset in freespace btree
[   58.663437][ T1091]   u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing
[   58.671263][ T5845] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11
[   58.687573][ T5940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.695039][  T727] bcachefs (loop2): bucket incorrectly unset in freespace btree
[   58.695050][  T727]   u64s 5 type deleted 0:44:0 len 0 ver 0, , continuing
[   58.710233][ T5845] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11
[   58.710683][ T5942] unknown channel width for channel at 909000KHz?
[   58.715021][ T5845] bcachefs (loop2): unclean shutdown complete, journal seq 12
[   58.715930][ T5942] unknown channel width for channel at 909000KHz?
[   58.724259][ T5845] bcachefs (loop2): done going read-only, filesystem not clean
[   58.724507][ T5942] unknown channel width for channel at 909000KHz?
[   58.740602][ T5845] bcachefs (loop2): shutdown complete
[   59.159051][ T5953] loop1: detected capacity change from 0 to 32768
[   59.164717][ T5953] BTRFS warning: excessive commit interval 491628334, use with care
[   59.173275][ T5953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11 (5953)
[   59.210596][ T5953] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   59.215180][ T5953] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   59.223118][ T5953] BTRFS info (device loop1): using free-space-tree
[   59.237335][ T5858] Bluetooth: hci0: command tx timeout
[   59.330683][ T5858] Bluetooth: hci1: command tx timeout
[   59.333023][ T5858] Bluetooth: hci2: command tx timeout
[   59.423522][ T5849] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   59.554628][ T5984] loop0: detected capacity change from 0 to 32768
[   59.571439][ T5984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.18 (5984)
[   59.592332][ T5984] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.596787][ T5984] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   59.599810][ T5984] BTRFS info (device loop0): using free-space-tree
[   60.063467][ T5880] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   60.082632][ T5846] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.235266][ T6008] loop0: detected capacity change from 0 to 1024
[   60.264634][ T6008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.312952][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.427102][ T6014] loop2: detected capacity change from 0 to 32768
[   60.441429][ T6014] JBD2: Ignoring recovery information on journal
[   60.475097][ T6014] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   60.604137][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[   60.976634][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   61.056231][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   61.127343][ T5848] usb 2-1: Using ep0 maxpacket: 16
[   61.132709][ T5848] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.138478][ T5848] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.142979][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0
[   61.145725][ T5848] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[   61.149686][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.157651][ T5848] usb 2-1: config 0 descriptor??
[   61.209158][ T5915] usb 3-1: Using ep0 maxpacket: 8
[   61.221137][ T5915] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[   61.236300][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.240283][ T5915] usb 3-1: Product: syz
[   61.242593][ T5915] usb 3-1: Manufacturer: syz
[   61.248637][ T5915] usb 3-1: SerialNumber: syz
[   61.260855][ T5915] usb 3-1: config 0 descriptor??
[   61.316822][ T5237] Bluetooth: hci0: command tx timeout
[   61.386000][ T6040] netlink: 'syz.0.32': attribute type 12 has an invalid length.
[   61.389909][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.397304][ T5237] Bluetooth: hci2: command tx timeout
[   61.398822][ T5858] Bluetooth: hci1: command tx timeout
[   61.411333][ T5681] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.411340][ T6040] netlink: 'syz.0.32': attribute type 12 has an invalid length.
[   61.411490][ T5681] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.424601][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.425933][ T5681] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.432405][ T5681] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.432520][ T6040] Zero length message leads to an empty skb
[   61.487398][ T5915] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[   61.494032][ T5915] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[   61.501566][ T5915] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[   61.505501][ T5915] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[   61.526030][ T5915] usb 3-1: USB disconnect, device number 2
[   61.583904][ T5848] apple 0003:05AC:0247.0001: unexpected long global item
[   61.588753][ T5848] apple 0003:05AC:0247.0001: parse failed
[   61.591211][ T5848] apple 0003:05AC:0247.0001: probe with driver apple failed with error -22
[   61.677287][ T6043] loop0: detected capacity change from 0 to 32768
[   61.685578][ T6043] =======================================================
[   61.685578][ T6043] WARNING: The mand mount option has been deprecated and
[   61.685578][ T6043]          and is ignored by this kernel. Remove the mand
[   61.685578][ T6043]          option from the mount to silence this warning.
[   61.685578][ T6043] =======================================================
[   61.722283][ T6043] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   61.767204][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   61.794091][   T47] usb 2-1: USB disconnect, device number 2
[   61.969320][ T6051] loop0: detected capacity change from 0 to 512
[   61.991709][ T6051] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.36: iget: bad i_size value: 38620345925642
[   62.006751][ T6051] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.36: couldn't read orphan inode 15 (err -117)
[   62.012076][ T6051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.077823][ T6055] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.36: bg 0: block 5: invalid block bitmap
[   62.088176][ T6055] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1788 with error 28
[   62.094144][ T6055] EXT4-fs (loop0): This should not happen!! Data will be lost
[   62.094144][ T6055] 
[   62.099562][ T6055] EXT4-fs (loop0): Total free blocks count 0
[   62.101960][ T6055] EXT4-fs (loop0): Free/Dirty block details
[   62.104498][ T6055] EXT4-fs (loop0): free_blocks=0
[   62.107830][ T6055] EXT4-fs (loop0): dirty_blocks=1928
[   62.110257][ T6055] EXT4-fs (loop0): Block reservation details
[   62.112863][ T6055] EXT4-fs (loop0): i_reserved_data_blocks=1928
[   62.197217][   T33] audit: type=1800 audit(1755555127.088:3): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[   62.216927][ T1089] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1788 with max blocks 140 with error 28
[   62.512095][ T6065] loop1: detected capacity change from 0 to 2048
[   62.588915][ T6068] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   62.630428][   T33] audit: type=1800 audit(1755555127.528:4): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.39" name="file1" dev="loop1" ino=15 res=0 errno=0
[   62.811638][ T6072] loop1: detected capacity change from 0 to 128
[   62.834044][ T6072] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.860718][ T6072] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   63.026879][ T5849] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   63.121610][ T6074] loop0: detected capacity change from 0 to 32768
[   63.148994][ T6074] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.42 (6074)
[   63.204616][ T6074] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   63.212742][ T6074] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   63.219602][ T6074] BTRFS info (device loop0): using free-space-tree
[   63.393677][ T5846] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   63.409245][ T5858] Bluetooth: hci0: command tx timeout
[   63.431792][ T6079] loop1: detected capacity change from 0 to 32768
[   63.444981][ T6079] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.45 (6079)
[   63.476427][ T6079] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   63.478733][ T5858] Bluetooth: hci2: command tx timeout
[   63.480563][ T5237] Bluetooth: hci1: command tx timeout
[   63.487855][ T5237] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   63.490999][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: kworker/u11:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   63.491012][ T5237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.491017][ T5237] Workqueue: hci0 hci_rx_work
[   63.491029][ T5237] Call Trace:
[   63.491033][ T5237]  <TASK>
[   63.491038][ T5237]  dump_stack_lvl+0x189/0x250
[   63.491050][ T5237]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.491058][ T5237]  ? __pfx__printk+0x10/0x10
[   63.491070][ T5237]  ? kernfs_path_from_node+0x250/0x290
[   63.491078][ T5237]  ? kernfs_path_from_node+0x2f/0x290
[   63.491087][ T5237]  sysfs_create_dir_ns+0x259/0x280
[   63.491096][ T5237]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   63.491104][ T5237]  ? do_raw_spin_unlock+0x4d/0x240
[   63.491116][ T5237]  kobject_add_internal+0x59f/0xb40
[   63.491129][ T5237]  kobject_add+0x155/0x220
[   63.491140][ T5237]  ? __pfx_kobject_add+0x10/0x10
[   63.491149][ T5237]  ? _raw_spin_unlock+0x28/0x50
[   63.491159][ T5237]  ? get_device_parent+0x366/0x3a0
[   63.491167][ T5237]  device_add+0x408/0xb50
[   63.491175][ T5237]  hci_conn_add_sysfs+0xd5/0x1e0
[   63.491184][ T5237]  le_conn_complete_evt+0xc3a/0x1220
[   63.491197][ T5237]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   63.491206][ T5237]  ? __mutex_unlock_slowpath+0x1a1/0x760
[   63.491213][ T5237]  ? __asan_memcpy+0x40/0x70
[   63.491223][ T5237]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   63.491231][ T5237]  ? skb_pull_data+0xfb/0x200
[   63.491241][ T5237]  hci_le_conn_complete_evt+0x187/0x450
[   63.491252][ T5237]  hci_event_packet+0x78f/0x1200
[   63.491261][ T5237]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   63.491270][ T5237]  ? __pfx_hci_event_packet+0x10/0x10
[   63.491278][ T5237]  ? kcov_remote_start+0x4d3/0x7f0
[   63.491286][ T5237]  ? lockdep_hardirqs_on+0x90/0x150
[   63.491297][ T5237]  ? hci_send_to_monitor+0xe2/0x570
[   63.491309][ T5237]  hci_rx_work+0x46a/0xe80
[   63.491321][ T5237]  ? process_scheduled_works+0x9ef/0x17b0
[   63.491329][ T5237]  process_scheduled_works+0xae1/0x17b0
[   63.491368][ T5237]  ? __pfx_process_scheduled_works+0x10/0x10
[   63.491385][ T5237]  worker_thread+0x8a0/0xda0
[   63.491403][ T5237]  kthread+0x711/0x8a0
[   63.491413][ T5237]  ? __pfx_worker_thread+0x10/0x10
[   63.491420][ T5237]  ? __pfx_kthread+0x10/0x10
[   63.491429][ T5237]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.491437][ T5237]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.491446][ T5237]  ? __pfx_kthread+0x10/0x10
[   63.491454][ T5237]  ret_from_fork+0x3fc/0x770
[   63.491464][ T5237]  ? __pfx_ret_from_fork+0x10/0x10
[   63.491473][ T5237]  ? __switch_to_asm+0x39/0x70
[   63.491488][ T5237]  ? __switch_to_asm+0x33/0x70
[   63.491495][ T5237]  ? __pfx_kthread+0x10/0x10
[   63.491503][ T5237]  ret_from_fork_asm+0x1a/0x30
[   63.491517][ T5237]  </TASK>
[   63.491532][ T5237] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   63.544752][ T6079] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   63.546134][ T5237] Bluetooth: hci0: failed to register connection device
[   63.561506][ T6079] BTRFS info (device loop1): using free-space-tree
[   63.793610][ T5849] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   63.935897][ T6141] loop1: detected capacity change from 0 to 256
[   63.949798][ T6141] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d)
[   63.956680][   T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   64.138082][   T47] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.142014][   T47] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.145451][   T47] usb 3-1: config 0 interface 0 has no altsetting 0
[   64.148308][ T6153] loop1: detected capacity change from 0 to 512
[   64.149760][   T47] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   64.154592][ T6153] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.160991][ T6153] EXT4-fs: old and new quota format mixing
[   64.167164][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.175504][   T47] usb 3-1: config 0 descriptor??
[   64.265923][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   64.346311][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.506113][   T24] usb 1-1: Using ep0 maxpacket: 32
[   64.517974][   T24] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[   64.521267][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.524002][   T24] usb 1-1: Product: syz
[   64.525599][   T24] usb 1-1: Manufacturer: syz
[   64.527283][   T24] usb 1-1: SerialNumber: syz
[   64.531066][   T24] usb 1-1: config 0 descriptor??
[   64.556454][ T1272] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   64.706387][ T1272] usb 2-1: Using ep0 maxpacket: 16
[   64.712522][ T1272] usb 2-1: unable to get BOS descriptor or descriptor too short
[   64.717670][ T1272] usb 2-1: config 8 has an invalid interface number: 132 but max is 0
[   64.721270][ T1272] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   64.725751][ T1272] usb 2-1: config 8 has no interface number 0
[   64.730663][ T1272] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   64.736548][ T1272] usb 2-1: config 8 interface 132 has no altsetting 0
[   64.744805][   T24] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration
[   64.751270][ T1272] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b
[   64.753430][   T24] usb 1-1: USB disconnect, device number 2
[   64.760762][ T1272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.764509][ T1272] usb 2-1: Product: syz
[   64.768570][ T1272] usb 2-1: Manufacturer: syz
[   64.771382][ T1272] usb 2-1: SerialNumber: syz
[   64.790154][   T47] usb 3-1: string descriptor 0 read error: -22
[   64.993524][ T1272] usb-storage 2-1:8.132: USB Mass Storage device detected
[   64.995232][   T47] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input4
[   65.018209][ T1272] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a
[   65.018883][   T47] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input5
[   65.064293][ T1272] usb 2-1: USB disconnect, device number 3
[   65.092992][   T47] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input6
[   65.113795][   T47] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input7
[   65.152126][   T47] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[   65.210525][ T5915] usb 3-1: USB disconnect, device number 3
[   65.386842][ T6174] netlink: 56 bytes leftover after parsing attributes in process `syz.0.72'.
[   65.390690][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'.
[   65.441696][ T6176] warning: `syz.0.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.917363][ T6194] loop1: detected capacity change from 0 to 32768
[   65.929134][ T6194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.81 (6194)
[   65.949874][ T6194] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   65.955421][ T6194] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   65.960896][ T6207] loop2: detected capacity change from 0 to 16
[   65.975895][ T6194] BTRFS info (device loop1): using free-space-tree
[   66.000822][ T6207] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   66.005231][ T6207] erofs (device loop2): mounted with root inode @ nid 36.
[   66.039819][ T6207] erofs (device loop2): corrupted dir block 0 @ nid 36
[   66.120638][ T5849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.804266][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   66.936800][ T6249] netlink: 'syz.1.94': attribute type 12 has an invalid length.
[   67.136750][ T6254] loop2: detected capacity change from 0 to 1024
[   67.743498][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.107'.
[   67.767751][ T6279] loop2: detected capacity change from 0 to 4096
[   67.823491][ T6284] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.001568][   T33] audit: type=1326 audit(1755555132.898:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.113" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfd038ebe9 code=0x0
[   68.658830][ T6306] loop1: detected capacity change from 0 to 2048
[   68.674032][ T6307] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.742399][ T6309] syz_tun: entered allmulticast mode
[   68.783825][ T6308] syz_tun: left allmulticast mode
[   68.826962][ T6311] loop1: detected capacity change from 0 to 1024
[   68.853370][ T6311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   68.862975][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.873059][   T33] audit: type=1800 audit(1755555133.768:6): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="file1" dev="loop1" ino=15 res=0 errno=0
[   68.881885][ T6311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.119: bg 0: block 88: padding at end of block bitmap is not set
[   68.889790][ T6311] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   68.926490][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.057849][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'.
[   69.131277][ T6330] loop1: detected capacity change from 0 to 4096
[   69.286300][ T5915] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   69.306765][ T6340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.436231][ T5915] usb 1-1: Using ep0 maxpacket: 8
[   69.440535][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short
[   69.444720][ T5915] usb 1-1: config 8 has an invalid interface number: 154 but max is 0
[   69.448921][ T5915] usb 1-1: config 8 has no interface number 0
[   69.451796][ T5915] usb 1-1: config 8 interface 154 has no altsetting 0
[   69.459512][ T5915] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=4f.f6
[   69.463397][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.468149][ T5915] usb 1-1: Product: syz
[   69.470170][ T5915] usb 1-1: Manufacturer: syz
[   69.472475][ T5915] usb 1-1: SerialNumber: syz
[   69.586230][   T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   69.689031][ T5915] mdc800 1-1:8.154: probe fails -> wrong Interface
[   69.695079][ T5915] usb 1-1: USB disconnect, device number 3
[   69.716602][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[   69.740244][   T47] usb 2-1: config 0 has no interfaces?
[   69.743916][   T47] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   69.749024][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   69.752712][   T47] usb 2-1: SerialNumber: syz
[   69.760241][   T47] usb 2-1: config 0 descriptor??
[   69.969949][   T47] usb 2-1: USB disconnect, device number 4
[   70.263071][ T6354] loop0: detected capacity change from 0 to 4096
[   70.285570][ T6355] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.505578][ T6365] cgroup: name respecified
[   70.817720][   T33] audit: type=1326 audit(1755555135.718:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.145" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cf6b8ebe9 code=0x0
[   71.161542][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.164174][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.396806][ T6373] loop0: detected capacity change from 0 to 32768
[   71.457043][ T6373] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   71.457068][ T6373]   allowing incompatible features above 0.0: (unknown version)
[   71.457077][ T6373]   features: 
[   71.471719][ T6373] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   71.475017][ T6373] bcachefs (loop0): initializing new filesystem
[   71.486931][ T6373] bcachefs (loop0): going read-write
[   71.493622][ T6373] bcachefs (loop0): marking superblocks
[   71.510988][ T6373] bcachefs (loop0): initializing freespace
[   71.519555][ T6373] bcachefs (loop0): done initializing freespace
[   71.527196][ T6373] bcachefs (loop0): reading snapshots table
[   71.530102][ T6373] bcachefs (loop0): reading snapshots done
[   71.558063][ T6373] bcachefs (loop0): done starting filesystem
[   71.630461][ T6373] syz.0.146 (6373) used greatest stack depth: 16968 bytes left
[   71.637370][ T5846] bcachefs (loop0): shutting down
[   71.639497][ T5846] bcachefs (loop0): going read-only
[   71.641225][ T5846] bcachefs (loop0): finished waiting for writes to stop
[   71.644014][ T5846] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[   71.672185][ T5846] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[   71.690598][ T5846] bcachefs (loop0): clean shutdown complete, journal seq 4
[   71.694151][ T5846] bcachefs (loop0): marking filesystem clean
[   71.713968][ T5846] bcachefs (loop0): shutdown complete
[   72.640272][ T6404] bridge1: entered promiscuous mode
[   73.231229][ T6410] loop2: detected capacity change from 0 to 65536
[   73.255688][ T6410] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   73.260683][ T6410] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   73.273621][ T6410] XFS (loop2): Ending clean mount
[   73.407003][ T5845] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   73.418229][ T6402] loop1: detected capacity change from 0 to 262144
[   73.426940][ T6402] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.155 (6402)
[   73.441704][ T6402] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   73.445674][ T6402] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   73.449612][ T6402] BTRFS info (device loop1): using free-space-tree
[   73.758904][ T5849] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   74.146313][  T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   74.306238][  T793] usb 1-1: Using ep0 maxpacket: 8
[   74.315004][  T793] usb 1-1: config index 0 descriptor too short (expected 548, got 36)
[   74.320921][  T793] usb 1-1: config 250 has no interfaces?
[   74.327905][ T6449] loop2: detected capacity change from 0 to 512
[   74.331811][ T6449] EXT4-fs: Ignoring removed nobh option
[   74.333706][  T793] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   74.333725][  T793] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   74.348395][ T6449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   74.356487][  T793] usb 1-1: Product: syz
[   74.358317][  T793] usb 1-1: SerialNumber: syz
[   74.378046][ T6449] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.166: corrupted inode contents
[   74.389365][ T6449] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.166: mark_inode_dirty error
[   74.399178][ T6449] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.166: corrupted inode contents
[   74.407560][ T6449] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.166: mark_inode_dirty error
[   74.414289][ T6449] Quota error (device loop2): write_blk: dquota write failed
[   74.417689][ T6449] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   74.421601][ T6449] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.166: Failed to acquire dquot type 0
[   74.437422][ T6449] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.166: corrupted inode contents
[   74.441989][ T5915] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   74.443101][ T6449] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.166: mark_inode_dirty error
[   74.451732][ T6449] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.166: corrupted inode contents
[   74.455997][ T6449] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.166: mark_inode_dirty error
[   74.462867][ T6449] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.166: corrupted inode contents
[   74.467942][ T6449] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   74.469872][ T5915] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   74.477230][ T6449] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.166: corrupted inode contents
[   74.483054][ T6449] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.166: mark_inode_dirty error
[   74.487913][ T6449] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   74.495150][ T6449] EXT4-fs (loop2): 1 truncate cleaned up
[   74.498133][ T6449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.502643][ T6449] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.533061][ T6449] EXT4-fs error (device loop2): ext4_empty_dir:3124: inode #12: block 13: comm syz.2.166: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[   74.571889][ T5915] usb 1-1: USB disconnect, device number 4
[   74.581807][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.597217][ T4064] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   74.602643][ T4064] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u9:6: Failed to release dquot type 1
[   74.668326][ T6459] loop2: detected capacity change from 0 to 764
[   74.675723][ T6459] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   74.802565][ T6465] syzkaller1: tun_chr_ioctl cmd 1074025681
[   75.381424][ T6477] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   75.384923][ T6477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.176'.
[   75.648481][ T6479] loop0: detected capacity change from 0 to 4096
[   75.674389][ T6479] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   75.781086][ T6479] ntfs3(loop0): ino=1a, mi_enum_attr
[   75.789604][ T6479] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   76.556518][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   76.706616][ T5913] usb 3-1: Using ep0 maxpacket: 16
[   76.713917][ T5913] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[   76.717964][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.723397][ T5913] usb 3-1: config 0 has no interface number 0
[   76.731563][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   76.736661][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.739759][ T5913] usb 3-1: Product: syz
[   76.741358][ T5913] usb 3-1: Manufacturer: syz
[   76.743134][ T5913] usb 3-1: SerialNumber: syz
[   76.747279][ T5913] usb 3-1: config 0 descriptor??
[   76.760332][ T6493] loop0: detected capacity change from 0 to 32768
[   76.870493][ T6493] read_mapping_page failed!
[   76.872741][ T6493] ERROR: (device loop0): txCommit: 
[   76.872741][ T6493] 
[   76.902514][ T1091] read_mapping_page failed!
[   76.904614][ T1091] ERROR: (device loop0): txCommit: 
[   76.904614][ T1091] 
[   76.914906][ T1091] jfs_write_inode: jfs_commit_inode failed!
[   76.962415][ T5913] usb 3-1: USB disconnect, device number 4
[   77.282064][  T793] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   77.446386][  T793] usb 1-1: Using ep0 maxpacket: 8
[   77.452909][  T793] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[   77.457524][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.460767][  T793] usb 1-1: Product: syz
[   77.462553][  T793] usb 1-1: Manufacturer: syz
[   77.464544][  T793] usb 1-1: SerialNumber: syz
[   77.470393][  T793] usb 1-1: config 0 descriptor??
[   77.478341][  T793] gspca_main: sq905-2.14.0 probing 2770:9120
[   77.616150][   T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   77.711077][ T6513] loop2: detected capacity change from 0 to 32768
[   77.732936][ T6513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.193 (6513)
[   77.762569][ T6513] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.776694][ T6513] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   77.777293][   T47] usb 2-1: Using ep0 maxpacket: 16
[   77.780415][ T6513] BTRFS info (device loop2): using free-space-tree
[   77.805309][   T47] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[   77.812195][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.815489][   T47] usb 2-1: Product: syz
[   77.828709][   T47] usb 2-1: Manufacturer: syz
[   77.836273][   T47] usb 2-1: SerialNumber: syz
[   77.842429][   T47] usb 2-1: config 0 descriptor??
[   77.863678][   T47] visor 2-1:0.0: Sony Clie 3.5 converter detected
[   77.884822][  T793] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[   77.890375][  T793] sq905 1-1:0.0: probe with driver sq905 failed with error -71
[   77.893395][   T33] audit: type=1800 audit(1755555142.778:8): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.193" name="file1" dev="loop2" ino=260 res=0 errno=0
[   77.904358][  T793] usb 1-1: USB disconnect, device number 5
[   77.960820][ T6513] BTRFS info (device loop2): balance: start -sconvert=raid0,soft
[   77.965099][ T6513] BTRFS info (device loop2): balance: ended with status: 0
[   78.031561][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.268952][   T47] usb 2-1: clie_3_5_startup: get interface number failed: -71
[   78.286381][   T47] visor 2-1:0.0: probe with driver visor failed with error -71
[   78.292514][   T47] usb 2-1: USB disconnect, device number 5
[   78.799643][   T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   78.946974][   T47] usb 1-1: Using ep0 maxpacket: 8
[   78.950401][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   78.954304][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   78.958143][   T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   78.961672][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[   78.965541][   T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   78.969036][   T47] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   78.972596][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.978406][   T47] usb 1-1: config 0 descriptor??
[   78.981514][ T6547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   79.076227][ T5913] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   79.201931][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.205995][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.209156][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.212307][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.215943][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.219671][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.222515][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.225300][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.228974][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.232341][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.235784][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.239571][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.242404][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.245280][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.249790][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.252723][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.255781][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.258785][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.261883][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.265449][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.268710][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.271403][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.274145][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.277377][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.280122][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.282991][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.285915][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.290088][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.293124][ T5237] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   79.316314][ T5913] usb 2-1: Using ep0 maxpacket: 8
[   79.320623][ T5913] usb 2-1: config 0 has no interfaces?
[   79.323014][ T5913] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   79.336188][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.341871][ T5913] usb 2-1: config 0 descriptor??
[   79.428676][ T5858] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[   79.432922][  T793] usb 1-1: USB disconnect, device number 6
[   79.488371][ T6553] loop2: detected capacity change from 0 to 32768
[   79.493217][ T6553] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   79.493217][ T6553] clean (size 2912):
[   79.493217][ T6553] flags:          0
[   79.493217][ T6553] journal_seq:    10
[   79.493217][ T6553] usage: type=inodes v=8
[   79.493217][ T6553] write_buffer_keys: btree=dirents level=0 u64s 5 type deleted 0:21491613697:0 len 0 ver 4294967296
[   79.493217][ T6553] usage: type=reserved v=0
[   79.493217][ T6553] usage: type=reserved v=0
[   79.493217][ T6553] usage: type=reserved v=0
[   79.493217][ T6553] usage: type=reserved v=0
[   79.493217][ T6553] data_usage: free: 0/0 []=83888896
[   79.493217][ T6553] data_usage: journal: 1/1 [0]=0
[   79.493217][ T6553] data_usage: user: 1/1 [0]=32
[   79.493217][ T6553] dev_usage: dev=0  
[   79.493217][ T6553]   free: buckets=83 sectors=0 fragmented=0
[   79.493217][ T6553]   sb: buckets=25 sectors=6152 fragmented=248
[   79.493217][ T6553]   journal: buckets=8 sectors=2048 fragmented=0
[   79.493217][ T6553]   btree: buckets=11 sectors=2816 fragmented=0
[   79.493217][ T6553]   user: buckets=1 sectors=32 fragmented=224
[   79.493217][ T6553]   cached: buckets=0 sectors=0 fragmented=0
[   79.493217][ T6553]   parity: buckets=0 sectors=0 fragmented=0
[   79.493217][ T6553]   stripe: buckets=0 sectors=0 fragmented=0
[   79.493217][ T6553]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   79.493217][ T6553]   need_discard: buckets=0 sectors=0 fragmented=0
[   79.493217][ T6553] clock: read=0
[   79.493217][ T6553] clock: write=1336
[   79.493217][ T6553] btree_root: btre
[   79.493468][ T6553] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   79.567850][ T5900] usb 2-1: USB disconnect, device number 6
[   79.681582][ T6555] loop2: detected capacity change from 0 to 128
[   79.702293][ T6555] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   79.712850][ T6555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.732224][ T6555] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   79.740516][ T6555] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   80.096192][  T793] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   80.246833][  T793] usb 3-1: Using ep0 maxpacket: 16
[   80.263001][  T793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[   80.270809][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   80.284207][  T793] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   80.285214][ T6574] loop1: detected capacity change from 0 to 8
[   80.288989][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.289013][  T793] usb 3-1: Product: syz
[   80.289024][  T793] usb 3-1: Manufacturer: syz
[   80.289035][  T793] usb 3-1: SerialNumber: syz
[   80.291588][  T793] usb 3-1: config 0 descriptor??
[   80.322314][ T6574] SQUASHFS error: Unable to read inode 0x127
[   80.588834][  T793] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[   80.596448][  T793] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110
[   80.619345][ T6584] loop1: detected capacity change from 0 to 32768
[   81.027328][ T6592] loop1: detected capacity change from 0 to 32768
[   81.032989][ T6592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.221 (6592)
[   81.047543][ T5915] usb 3-1: USB disconnect, device number 5
[   81.059125][ T6592] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.063548][ T6592] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   81.068018][ T6592] BTRFS info (device loop1): using free-space-tree
[   81.133023][ T6608] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[   81.196743][ T5849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.602405][ T6628] loop1: detected capacity change from 0 to 4096
[   81.631391][ T6631] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.739019][ T6622] loop0: detected capacity change from 0 to 40427
[   81.745086][ T6622] F2FS-fs: heap/no_heap options were deprecated
[   81.764035][ T6622] F2FS-fs (loop0): Image doesn't support compression
[   81.775025][ T6622] F2FS-fs (loop0): build fault injection rate: 690
[   81.791902][ T6622] F2FS-fs (loop0): invalid crc value
[   81.864406][ T6622] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   81.871266][ T6622] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   81.906989][ T5915] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   81.929473][ T6635] loop2: detected capacity change from 0 to 32768
[   81.933871][ T6635] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.234 (6635)
[   81.935558][ T5846] syz-executor: attempt to access beyond end of device
[   81.935558][ T5846] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   81.947012][ T6635] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   81.951466][ T6635] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   81.955237][ T6635] BTRFS info (device loop2): using free-space-tree
[   81.960904][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   81.960918][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.960924][ T5846] Call Trace:
[   81.960929][ T5846]  <TASK>
[   81.960933][ T5846]  dump_stack_lvl+0x189/0x250
[   81.960950][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.960959][ T5846]  ? __pfx_queue_work_on+0x10/0x10
[   81.960967][ T5846]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   81.960977][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.960992][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[   81.961006][ T5846]  f2fs_write_end_io+0x886/0xb60
[   81.961023][ T5846]  __submit_merged_bio+0x27a/0x6a0
[   81.961037][ T5846]  __submit_merged_write_cond+0x255/0x530
[   81.961050][ T5846]  f2fs_write_data_pages+0x261d/0x3000
[   81.961078][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.961123][ T5846]  ? __lock_acquire+0xab9/0xd20
[   81.961138][ T5846]  ? do_raw_spin_lock+0x121/0x290
[   81.961153][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[   81.961161][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.961172][ T5846]  do_writepages+0x32e/0x550
[   81.961189][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[   81.961200][ T5846]  filemap_fdatawrite+0x199/0x240
[   81.961211][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   81.961281][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[   81.961292][ T5846]  f2fs_sync_dirty_inodes+0x31f/0x830
[   81.961308][ T5846]  f2fs_write_checkpoint+0x95a/0x1df0
[   81.961328][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   81.961359][ T5846]  ? kill_f2fs_super+0x298/0x6c0
[   81.961369][ T5846]  kill_f2fs_super+0x2c3/0x6c0
[   81.961380][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[   81.961386][ T5846]  ? radix_tree_delete_item+0x2b6/0x400
[   81.961400][ T5846]  ? shrinker_free+0x2ce/0x3e0
[   81.961410][ T5846]  deactivate_locked_super+0xbc/0x130
[   81.961421][ T5846]  cleanup_mnt+0x425/0x4c0
[   81.961430][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.961441][ T5846]  task_work_run+0x1d4/0x260
[   81.961454][ T5846]  ? __pfx_task_work_run+0x10/0x10
[   81.961462][ T5846]  ? __x64_sys_umount+0x122/0x160
[   81.961474][ T5846]  ? exit_to_user_mode_loop+0x40/0x110
[   81.961487][ T5846]  exit_to_user_mode_loop+0xec/0x110
[   81.961497][ T5846]  do_syscall_64+0x2bd/0x3b0
[   81.961507][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.961516][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.961532][ T5846]  ? exc_page_fault+0x9f/0xf0
[   81.961542][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.961549][ T5846] RIP: 0033:0x7fdfd038ff17
[   81.961558][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   81.961565][ T5846] RSP: 002b:00007ffed496c3b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   81.961575][ T5846] RAX: 0000000000000000 RBX: 00007fdfd0411c05 RCX: 00007fdfd038ff17
[   81.961580][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed496c470
[   81.961584][ T5846] RBP: 00007ffed496c470 R08: 0000000000000000 R09: 0000000000000000
[   81.961589][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed496d500
[   81.961593][ T5846] R13: 00007fdfd0411c05 R14: 0000000000013f7a R15: 00007ffed496d540
[   81.961609][ T5846]  </TASK>
[   81.961614][ T5846] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   82.179605][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.182981][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.198724][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   82.202659][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.216832][ T5915] usb 2-1: Product: syz
[   82.220865][ T5915] usb 2-1: Manufacturer: syz
[   82.222455][ T5915] usb 2-1: SerialNumber: syz
[   82.305454][ T5845] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   82.442365][ T5915] usb 2-1: 0:2 : does not exist
[   82.471421][ T5915] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   82.544919][ T5915] usb 2-1: USB disconnect, device number 7
[   82.560477][ T6663] loop2: detected capacity change from 0 to 512
[   82.571940][ T6663] EXT4-fs (loop2): Unsupported encryption level 255
[   82.649008][ T6666] loop0: detected capacity change from 0 to 1024
[   82.782730][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.287558][ T5913] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   83.377827][ T6674] mmap: syz.1.242 (6674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   83.446307][ T5913] usb 3-1: Using ep0 maxpacket: 8
[   83.460140][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short
[   83.464983][ T5913] usb 3-1: config 4 has an invalid interface number: 177 but max is 0
[   83.468746][ T5913] usb 3-1: config 4 has no interface number 0
[   83.471120][ T5913] usb 3-1: config 4 interface 177 has no altsetting 0
[   83.487767][ T5913] usb 3-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=26.35
[   83.491056][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.493969][ T5913] usb 3-1: Product: syz
[   83.495884][ T5913] usb 3-1: Manufacturer: syz
[   83.499113][ T5913] usb 3-1: SerialNumber: syz
[   83.750077][ T5913] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones
[   83.774530][ T5913] usb 3-1: USB disconnect, device number 6
[   84.189028][   T26] hfsplus: b-tree write err: -5, ino 4
[   84.834703][ T6690] TCP: TCP_TX_DELAY enabled
[   85.001798][ T6696] random: crng reseeded on system resumption
[   86.016480][  T793] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   86.208269][  T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.211796][  T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[   86.239743][  T793] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[   86.243491][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.263419][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'.
[   86.267590][  T793] usb 2-1: config 0 descriptor??
[   86.392454][ T6722] loop2: detected capacity change from 0 to 512
[   86.395873][ T6722] EXT4-fs: Ignoring removed orlov option
[   86.419122][ T6722] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8040c018, mo2=0002]
[   86.448357][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.458573][ T6722] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.481789][  T793] Bluetooth: Can't get state to change to load ram patch err
[   86.496768][  T793] Bluetooth: Loading patch file failed
[   86.500939][ T6731] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.508364][  T793] ath3k 2-1:0.0: probe with driver ath3k failed with error -71
[   86.515356][  T793] usb 2-1: USB disconnect, device number 8
[   86.516762][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.535569][    T9] cfg80211: failed to load regulatory.db
[   87.211256][ T6753] loop2: detected capacity change from 0 to 40427
[   87.223062][ T6753] F2FS-fs (loop2): build fault injection rate: 771
[   87.235656][ T6753] F2FS-fs (loop2): invalid crc value
[   87.282907][ T6767] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   87.333784][ T6753] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.340282][ T6753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   87.353301][ T6753] syz.2.275: attempt to access beyond end of device
[   87.353301][ T6753] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   87.374357][ T6753] CPU: 1 UID: 0 PID: 6753 Comm: syz.2.275 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   87.374443][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.374454][ T6753] Call Trace:
[   87.374461][ T6753]  <TASK>
[   87.374466][ T6753]  dump_stack_lvl+0x189/0x250
[   87.374484][ T6753]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.374493][ T6753]  ? __pfx_queue_work_on+0x10/0x10
[   87.374502][ T6753]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   87.374514][ T6753]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   87.374528][ T6753]  f2fs_handle_critical_error+0x37c/0x540
[   87.374553][ T6753]  f2fs_write_end_io+0x886/0xb60
[   87.374569][ T6753]  __submit_merged_bio+0x27a/0x6a0
[   87.374583][ T6753]  __submit_merged_write_cond+0x44c/0x530
[   87.374597][ T6753]  f2fs_write_data_pages+0x261d/0x3000
[   87.374623][ T6753]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.374665][ T6753]  ? __lock_acquire+0xab9/0xd20
[   87.374680][ T6753]  ? do_raw_spin_lock+0x121/0x290
[   87.374696][ T6753]  ? do_raw_spin_unlock+0x4d/0x240
[   87.374705][ T6753]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.374716][ T6753]  do_writepages+0x32e/0x550
[   87.374732][ T6753]  ? do_raw_spin_unlock+0x4d/0x240
[   87.374742][ T6753]  filemap_write_and_wait_range+0x21f/0x320
[   87.374755][ T6753]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[   87.374780][ T6753]  ? down_write+0x162/0x1f0
[   87.374787][ T6753]  ? __pfx_down_write+0x10/0x10
[   87.374801][ T6753]  f2fs_collapse_range+0x348/0x3e0
[   87.374816][ T6753]  f2fs_fallocate+0x55d/0x990
[   87.374827][ T6753]  vfs_fallocate+0x669/0x7e0
[   87.374836][ T6753]  ? __fget_files+0x2a/0x420
[   87.374845][ T6753]  ? __pfx_vfs_fallocate+0x10/0x10
[   87.374853][ T6753]  ? __fget_files+0x2a/0x420
[   87.374864][ T6753]  __x64_sys_fallocate+0xc0/0x110
[   87.374874][ T6753]  do_syscall_64+0xfa/0x3b0
[   87.374883][ T6753]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.374893][ T6753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.374900][ T6753]  ? exc_page_fault+0x9f/0xf0
[   87.374909][ T6753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.374916][ T6753] RIP: 0033:0x7fbb8af8ebe9
[   87.374925][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.374931][ T6753] RSP: 002b:00007fbb8be6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   87.374941][ T6753] RAX: ffffffffffffffda RBX: 00007fbb8b1b5fa0 RCX: 00007fbb8af8ebe9
[   87.374946][ T6753] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004
[   87.374950][ T6753] RBP: 00007fbb8b011e19 R08: 0000000000000000 R09: 0000000000000000
[   87.374954][ T6753] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[   87.374959][ T6753] R13: 00007fbb8b1b6038 R14: 00007fbb8b1b5fa0 R15: 00007ffc589f4be8
[   87.374971][ T6753]  </TASK>
[   87.374976][ T6753] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.422707][ T5846] syz-executor (5846) used greatest stack depth: 16760 bytes left
[   87.481104][ T6753] syz.2.275: attempt to access beyond end of device
[   87.481104][ T6753] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427
[   87.585825][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.606316][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.705109][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.727086][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.817821][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.821620][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.901700][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.912383][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.915845][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.934517][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.938741][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.981523][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.985497][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.064438][ T6784] loop1: detected capacity change from 0 to 32768
[   88.071118][ T6784] (syz.1.291,6784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   88.089524][ T6784] (syz.1.291,6784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   88.105729][ T6784] (syz.1.291,6784,1):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[   88.124876][ T6784] (syz.1.291,6784,1):ocfs2_fill_super:1177 ERROR: status = -22
[   88.189241][   T12] bridge_slave_1: left allmulticast mode
[   88.191440][   T12] bridge_slave_1: left promiscuous mode
[   88.195720][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.215763][   T12] bridge_slave_0: left allmulticast mode
[   88.228052][   T12] bridge_slave_0: left promiscuous mode
[   88.231309][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.642125][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.652628][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.657836][   T12] bond0 (unregistering): Released all slaves
[   88.954256][ T6785] chnl_net:caif_netlink_parms(): no params data found
[   89.272473][   T12] hsr_slave_0: left promiscuous mode
[   89.279998][   T12] hsr_slave_1: left promiscuous mode
[   89.285228][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.296314][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.307298][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.313148][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.374065][   T12] veth1_macvtap: left promiscuous mode
[   89.383131][ T6814] loop1: detected capacity change from 0 to 32768
[   89.387351][ T6814] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.297 (6814)
[   89.393017][   T12] veth0_macvtap: left promiscuous mode
[   89.395108][   T12] veth1_vlan: left promiscuous mode
[   89.399936][ T6814] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   89.404459][ T6814] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   89.408128][   T12] veth0_vlan: left promiscuous mode
[   89.412090][ T6814] BTRFS info (device loop1): using free-space-tree
[   89.588150][ T5849] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   89.682958][ T6826] loop2: detected capacity change from 0 to 32768
[   89.766580][ T6826] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.815745][ T6826] XFS (loop2): Ending clean mount
[   89.838147][ T6826] XFS (loop2): Quotacheck needed: Please wait.
[   89.962812][ T5237] Bluetooth: hci2: command tx timeout
[   89.974607][ T6826] XFS (loop2): Quotacheck: Done.
[   90.030571][ T5845] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   90.228688][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   90.331883][   T12] team0 (unregistering): Port device team_slave_1 removed
[   90.354539][ T6860] loop2: detected capacity change from 0 to 4096
[   90.392315][   T12] team0 (unregistering): Port device team_slave_0 removed
[   90.398890][    T9] usb 2-1: Using ep0 maxpacket: 16
[   90.415798][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.422443][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.436711][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   90.439733][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.442777][    T9] usb 2-1: Product: syz
[   90.444559][    T9] usb 2-1: Manufacturer: syz
[   90.456381][    T9] usb 2-1: SerialNumber: syz
[   90.456987][ T6860] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   90.529102][ T5845] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22.
[   90.693476][    T9] usb 2-1: 0:2 : does not exist
[   90.714649][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   90.759413][    T9] usb 2-1: USB disconnect, device number 9
[   90.813973][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   90.836431][ T5848] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   90.965862][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.970835][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.973570][ T6785] bridge_slave_0: entered allmulticast mode
[   90.977494][ T6785] bridge_slave_0: entered promiscuous mode
[   90.982725][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.985970][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.991367][ T5848] usb 3-1: Using ep0 maxpacket: 8
[   90.993654][ T6785] bridge_slave_1: entered allmulticast mode
[   90.995469][ T5848] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17
[   90.999961][ T6785] bridge_slave_1: entered promiscuous mode
[   91.015065][ T5848] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[   91.020242][ T5848] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[   91.023911][ T5848] usb 3-1: Product: syz
[   91.032695][ T5848] usb 3-1: Manufacturer: syz
[   91.036518][ T5848] usb 3-1: SerialNumber: syz
[   91.048943][ T5848] usb 3-1: config 0 descriptor??
[   91.081533][ T6785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.102011][ T6785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.168863][ T6785] team0: Port device team_slave_0 added
[   91.181353][ T6785] team0: Port device team_slave_1 added
[   91.243476][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.256344][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.291930][ T5848] gspca_main: sunplus-2.14.0 probing 04a5:3003
[   91.297218][ T6785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.317851][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.320880][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.339592][ T6785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.530515][ T6785] hsr_slave_0: entered promiscuous mode
[   91.534887][ T6785] hsr_slave_1: entered promiscuous mode
[   91.543525][ T6785] debugfs: 'hsr0' already exists in 'hsr'
[   91.547208][ T6785] Cannot create hsr debugfs directory
[   91.698123][ T5848] gspca_sunplus: reg_w_riv err -71
[   91.711673][ T5848] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[   91.728809][ T5848] usb 3-1: USB disconnect, device number 7
[   92.037814][ T5237] Bluetooth: hci2: command tx timeout
[   92.149956][ T6785] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.174231][ T6785] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.187914][ T6785] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.199044][ T6785] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.445902][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.455991][ T6881] loop1: detected capacity change from 0 to 262144
[   92.461301][ T6881] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.313 (6881)
[   92.468498][ T6881] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   92.472033][ T6881] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   92.475208][ T6881] BTRFS info (device loop1): using free-space-tree
[   92.529196][ T6785] 8021q: adding VLAN 0 to HW filter on device team0
[   92.591273][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.594334][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.623990][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.626628][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.688904][ T5849] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   92.974693][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.043986][ T6943] comedi comedi0: Minor -2147450880 is invalid!
[   93.160334][ T6785] veth0_vlan: entered promiscuous mode
[   93.192527][ T6785] veth1_vlan: entered promiscuous mode
[   93.254533][ T6954] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   93.254851][ T6785] veth0_macvtap: entered promiscuous mode
[   93.276690][ T6954] cramfs: wrong magic
[   93.285400][ T6785] veth1_macvtap: entered promiscuous mode
[   93.313254][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.340747][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.372179][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.411476][ T5681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.440631][ T5681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.464895][ T5681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.647849][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.656228][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.769296][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.772860][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.118619][ T5237] Bluetooth: hci2: command tx timeout
[   94.524965][ T6985] loop1: detected capacity change from 0 to 1024
[   94.591548][ T6985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.829441][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.833734][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.848099][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.868268][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.873391][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.889789][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.909271][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.932606][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.951941][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   94.975491][ T5849] EXT4-fs warning (device loop1): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   95.315441][ T7000] tipc: Started in network mode
[   95.320872][ T7000] tipc: Node identity ac14140f, cluster identity 4711
[   95.332335][ T7000] tipc: New replicast peer: 255.255.255.255
[   95.344727][ T7000] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.351513][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.442043][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.558984][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.692892][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.803304][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.011292][ T7010] loop3: detected capacity change from 0 to 1024
[   96.064891][   T12] bridge_slave_1: left allmulticast mode
[   96.072743][   T12] bridge_slave_1: left promiscuous mode
[   96.084166][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.094663][   T12] bridge_slave_0: left allmulticast mode
[   96.103154][   T12] bridge_slave_0: left promiscuous mode
[   96.107181][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.120019][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.125570][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.126901][   T32] hfsplus: b-tree write err: -5, ino 4
[   96.137728][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.145890][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.151739][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.196319][ T5858] Bluetooth: hci2: command tx timeout
[   96.327464][   T47] tipc: Node number set to 2886997007
[   96.368318][ T7020] netlink: 34 bytes leftover after parsing attributes in process `syz.2.345'.
[   96.391747][ T7020] loop2: detected capacity change from 0 to 512
[   96.430985][ T7020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   96.487272][ T7020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.507648][ T7020] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.662855][ T7018] loop3: detected capacity change from 0 to 40427
[   96.674308][ T7018] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   96.682035][ T7018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   96.689570][ T7018] F2FS-fs (loop3): invalid crc value
[   96.693740][ T7018] F2FS-fs (loop3): invalid journal entries nats 26624 sits 6
[   96.698403][ T7018] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-22)
[   96.913218][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.923349][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.933997][   T12] bond0 (unregistering): Released all slaves
[   97.301326][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.952363][ T7057] loop2: detected capacity change from 0 to 2048
[   98.018842][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.021963][ T7011] chnl_net:caif_netlink_parms(): no params data found
[   98.054963][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.204040][ T5858] Bluetooth: hci1: command tx timeout
[   98.419367][   T12] hsr_slave_0: left promiscuous mode
[   98.426611][   T12] hsr_slave_1: left promiscuous mode
[   98.429695][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.432905][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.444021][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.456394][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.473596][   T12] veth1_macvtap: left promiscuous mode
[   98.486326][   T12] veth0_macvtap: left promiscuous mode
[   98.489222][   T12] veth1_vlan: left promiscuous mode
[   98.491551][   T12] veth0_vlan: left promiscuous mode
[   98.556919][ T7065] infiniband syz0: set down
[   98.560075][ T7065] infiniband syz0: added ipvlan1
[   98.624728][ T7065] RDS/IB: syz0: added
[   98.629549][ T7065] smc: adding ib device syz0 with port count 1
[   98.632743][ T7065] smc:    ib device syz0 port 1 has pnetid 
[   98.778212][ T7071] loop3: detected capacity change from 0 to 32768
[   98.786972][ T7071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.355 (7071)
[   98.812854][ T7071] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.820425][ T7071] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   98.824332][ T7071] BTRFS info (device loop3): using free-space-tree
[   99.088296][ T6785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.243716][   T12] team0 (unregistering): Port device team_slave_1 removed
[   99.357506][   T12] team0 (unregistering): Port device team_slave_0 removed
[  100.051952][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.055230][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.062157][ T7011] bridge_slave_0: entered allmulticast mode
[  100.077449][ T7011] bridge_slave_0: entered promiscuous mode
[  100.098769][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.102999][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.105451][ T7011] bridge_slave_1: entered allmulticast mode
[  100.122535][ T7011] bridge_slave_1: entered promiscuous mode
[  100.240551][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.270150][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.277057][ T5858] Bluetooth: hci1: command tx timeout
[  100.445344][ T7011] team0: Port device team_slave_0 added
[  100.457336][ T7011] team0: Port device team_slave_1 added
[  100.570638][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.573560][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.616236][ T7011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.628117][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.631004][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.686419][ T7011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.881716][ T7011] hsr_slave_0: entered promiscuous mode
[  100.897552][ T7011] hsr_slave_1: entered promiscuous mode
[  100.902379][ T7011] debugfs: 'hsr0' already exists in 'hsr'
[  100.905107][ T7011] Cannot create hsr debugfs directory
[  101.564372][ T7011] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.623818][ T7011] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.632892][ T7011] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.645026][ T7011] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.735659][ T7108] loop3: detected capacity change from 0 to 32768
[  101.761063][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.764133][ T7108] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.785043][ T7011] 8021q: adding VLAN 0 to HW filter on device team0
[  101.793334][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.797291][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.813107][ T7108] XFS (loop3): Ending clean mount
[  101.832183][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.835512][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.849495][ T7108] XFS (loop3): Quotacheck needed: Please wait.
[  101.928825][ T7108] XFS (loop3): Quotacheck: Done.
[  101.975943][ T6785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.152154][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.217760][ T7146] netlink: 'syz.3.359': attribute type 16 has an invalid length.
[  102.220991][ T7146] netlink: 'syz.3.359': attribute type 17 has an invalid length.
[  102.526017][ T7159] loop3: detected capacity change from 0 to 4096
[  102.534358][ T7154] loop2: detected capacity change from 0 to 40427
[  102.537921][ T7154] f2fs: Unknown parameter '?cYt<SsBpL-<Si4`o+T2zo}K0 lCGr>r7X7ė}%'
[  102.570291][ T7159] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  102.613884][ T7159] ntfs3(loop3): ino=19, mi_enum_attr
[  102.623540][ T7159] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  102.634400][ T5858] Bluetooth: hci1: command tx timeout
[  102.873158][ T7011] veth0_vlan: entered promiscuous mode
[  103.026663][ T7168] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  103.259342][ T7011] veth1_vlan: entered promiscuous mode
[  103.373328][ T7011] veth0_macvtap: entered promiscuous mode
[  103.392719][ T7011] veth1_macvtap: entered promiscuous mode
[  103.457720][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.482106][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.516971][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.520592][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.580279][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.606550][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.640533][ T7181] loop2: detected capacity change from 0 to 32768
[  103.644228][ T7181] XFS: ikeep mount option is deprecated.
[  103.689933][ T7181] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.736471][ T7181] XFS (loop2): Ending clean mount
[  103.742830][ T7181] XFS (loop2): Quotacheck needed: Please wait.
[  103.773362][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.774844][ T7181] XFS (loop2): Quotacheck: Done.
[  103.799124][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.852344][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.864906][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.958677][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.056304][ T7201] No control pipe specified
[  104.452404][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.486208][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  104.507605][ T5915] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  104.520969][ T5915] usb 4-1: config 0 has no interface number 0
[  104.523707][ T5915] usb 4-1: config 0 interface 184 has no altsetting 0
[  104.711432][ T5858] Bluetooth: hci1: command tx timeout
[  104.718246][ T5915] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  104.741341][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.755260][ T5915] usb 4-1: Product: syz
[  104.757743][ T5915] usb 4-1: Manufacturer: syz
[  104.759695][ T5915] usb 4-1: SerialNumber: syz
[  104.785940][ T5915] usb 4-1: config 0 descriptor??
[  104.800108][ T5915] smsc75xx v1.0.0
[  104.948888][ T7214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.369'.
[  105.022945][ T7219] loop2: detected capacity change from 0 to 2048
[  105.080782][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.085689][ T7219] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.176818][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.255468][ T7228] netlink: 'syz.4.373': attribute type 11 has an invalid length.
[  105.715656][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  105.726266][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  105.739245][ T7239] loop4: detected capacity change from 0 to 4096
[  105.753233][ T7239] ntfs3(loop4): It is recommened to use chkdsk.
[  105.761952][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  105.764832][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  105.772431][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  105.775220][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  105.778690][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00
[  105.781291][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00
[  105.784082][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00
[  105.789758][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00
[  105.792373][ T7239] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00
[  105.939993][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  105.953554][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  105.961335][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  105.969030][ T5915] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  105.979189][ T5915] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  106.001410][ T5915] usb 4-1: USB disconnect, device number 2
[  106.028571][ T7249] netlink: 'syz.4.379': attribute type 1 has an invalid length.
[  106.039819][ T7249] netlink: 224 bytes leftover after parsing attributes in process `syz.4.379'.
[  106.275906][ T7259] loop4: detected capacity change from 0 to 128
[  106.616493][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  106.795457][ T5915] usb 5-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70
[  106.803483][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.818125][ T5915] usb 5-1: config 0 descriptor??
[  106.830234][ T7285] loop2: detected capacity change from 0 to 2048
[  106.896545][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  107.039541][ T5915] usb 5-1: USB disconnect, device number 2
[  107.097666][ T5913] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  107.101529][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.105849][ T5913] usb 4-1: config 0 descriptor??
[  107.111686][ T5913] gspca_main: spca508-2.14.0 probing 8086:0110
[  107.316228][ T5913] gspca_spca508: reg_read err -32
[  107.319123][ T5913] gspca_spca508: reg_read err -32
[  107.522419][ T5913] gspca_spca508: reg_read err -71
[  107.525169][ T5913] gspca_spca508: reg_read err -71
[  107.528964][ T5913] gspca_spca508: reg write: error -71
[  107.531534][ T5913] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[  107.537187][ T5913] usb 4-1: USB disconnect, device number 3
[  107.816383][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  107.845730][ T5858] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  107.967573][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  107.971954][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.977631][ T5915] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  107.981560][ T5915] usb 5-1: config 1 has no interface number 1
[  107.984012][ T5915] usb 5-1: too many endpoints for config 1 interface 2 altsetting 252: 65, using maximum allowed: 30
[  107.988836][ T5915] usb 5-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  107.994876][ T5915] usb 5-1: config 1 interface 2 has no altsetting 0
[  108.000504][ T5915] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.005072][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.008715][ T5915] usb 5-1: Product: syz
[  108.010723][ T5915] usb 5-1: Manufacturer: syz
[  108.012707][ T5915] usb 5-1: SerialNumber: syz
[  108.106456][ T5848] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.245770][ T5915] usb 5-1: USB disconnect, device number 3
[  108.267160][ T5848] usb 3-1: Using ep0 maxpacket: 16
[  108.278102][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.285887][ T5848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.290732][ T5848] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  108.305680][ T5848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.314153][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  108.321740][ T5848] usb 3-1: SerialNumber: syz
[  108.367302][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  108.522219][   T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  108.525467][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.532619][   T24] usb 4-1: Product: syz
[  108.533994][   T24] usb 4-1: Manufacturer: syz
[  108.537836][   T24] usb 4-1: SerialNumber: syz
[  108.540398][  T793] usb 3-1: USB disconnect, device number 8
[  108.549371][   T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  108.578117][ T5913] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  109.093418][ T7333] loop2: detected capacity change from 0 to 512
[  109.230142][  T793] usb 4-1: USB disconnect, device number 4
[  109.399345][ T7346] netlink: 'syz.2.403': attribute type 27 has an invalid length.
[  109.882839][ T5913] usb 4-1: Service connection timeout for: 256
[  109.885558][ T5913] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  109.900162][ T5913] ath9k_htc: Failed to initialize the device
[  109.905521][  T793] usb 4-1: ath9k_htc: USB layer deinitialized
[  110.279243][ T7374] loop3: detected capacity change from 0 to 32768
[  110.282628][ T7374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.415 (7374)
[  110.314295][ T7374] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.324574][ T7374] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  110.334831][ T7374] BTRFS info (device loop3): using free-space-tree
[  110.469275][ T7374] BTRFS info (device loop3): rebuilding free space tree
[  110.745668][ T6785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.959766][ T7397] loop3: detected capacity change from 0 to 8
[  110.967156][ T7397] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  111.040357][ T7397] process 'syz.3.416' launched './file2' with NULL argv: empty string added
[  111.060902][ T7397] cramfs: bad data blocksize 4159700568
[  111.072269][ T7397] cramfs: bad data blocksize 4159700568
[  111.259677][ T7403] loop3: detected capacity change from 0 to 512
[  111.290730][ T7403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.294955][ T7403] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.333803][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.940591][ T7364] bond0: default FDB implementation only supports local addresses
[  112.173870][ T7426] dummy0: entered allmulticast mode
[  112.182804][ T7426] dummy0: left allmulticast mode
[  112.694765][ T7438] loop3: detected capacity change from 0 to 32768
[  112.724517][ T7438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.432 (7438)
[  112.801436][ T7438] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.806272][ T7438] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  112.809699][ T7438] BTRFS info (device loop3): using free-space-tree
[  112.849361][   T33] audit: type=1800 audit(1755555177.748:9): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.432" name="file1" dev="loop3" ino=260 res=0 errno=0
[  112.911744][ T6785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.052502][ T7463] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.435'.
[  113.565585][ T7467] loop4: detected capacity change from 0 to 32768
[  113.636382][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'.
[  113.868752][ T7492] loop4: detected capacity change from 0 to 32768
[  113.890447][ T7492] jfs_mount: Failed to read FILESYSTEM_I
[  113.903631][ T7492] Mount JFS Failure: -5
[  113.911148][ T7492] jfs_mount failed w/return code = -5
[  114.244387][ T7509] loop4: detected capacity change from 0 to 1024
[  114.252631][ T7509] EXT4-fs (loop4): first meta block group too large: 33024 (group descriptor block count 1)
[  114.796503][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  114.992504][    T9] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25
[  115.004119][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.016689][    T9] usb 3-1: Product: syz
[  115.023100][    T9] usb 3-1: Manufacturer: syz
[  115.046312][    T9] usb 3-1: SerialNumber: syz
[  115.066758][    T9] usb 3-1: config 0 descriptor??
[  115.349897][ T5900] usb 3-1: USB disconnect, device number 9
[  116.164039][ T7552] loop3: detected capacity change from 0 to 4096
[  116.204529][ T7552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.260238][ T7552] fs-verity (loop3, inode 16): Unknown hash algorithm number: 0
[  116.309038][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.425403][ T7567] loop2: detected capacity change from 0 to 164
[  116.451742][ T7535] loop4: detected capacity change from 0 to 65536
[  116.511362][ T7535] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel.
[  116.988530][ T7603] loop4: detected capacity change from 0 to 8192
[  117.004653][ T7603] FAT-fs (loop4): error, corrupted file size (i_pos 2194, 1024)
[  117.009129][ T7603] FAT-fs (loop4): Filesystem has been set read-only
[  117.012472][ T7603] FAT-fs (loop4): error, corrupted file size (i_pos 2194, 1024)
[  117.224420][ T7620] loop4: detected capacity change from 0 to 1024
[  117.792251][ T7648] loop2: detected capacity change from 0 to 256
[  117.813395][ T7648] FAT-fs (loop2): Directory bread(block 64) failed
[  117.815811][ T7648] FAT-fs (loop2): Directory bread(block 65) failed
[  117.819331][ T7648] FAT-fs (loop2): Directory bread(block 66) failed
[  117.822231][ T7648] FAT-fs (loop2): Directory bread(block 67) failed
[  117.825406][ T7648] FAT-fs (loop2): Directory bread(block 68) failed
[  117.825474][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.496'.
[  117.829065][ T7648] FAT-fs (loop2): Directory bread(block 69) failed
[  117.834048][ T7648] FAT-fs (loop2): Directory bread(block 70) failed
[  117.837424][ T7648] FAT-fs (loop2): Directory bread(block 71) failed
[  117.838520][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.496'.
[  117.839937][ T7648] FAT-fs (loop2): Directory bread(block 72) failed
[  117.847433][ T7648] FAT-fs (loop2): Directory bread(block 73) failed
[  117.926574][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  117.944452][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.499'.
[  117.947914][ T7654] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  118.086299][ T5913] usb 5-1: Using ep0 maxpacket: 16
[  118.101318][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.103503][ T7662] loop2: detected capacity change from 0 to 256
[  118.109446][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.127122][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  118.130984][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.146691][ T5913] usb 5-1: config 0 descriptor??
[  118.169430][ T7662] FAT-fs (loop2): Directory bread(block 64) failed
[  118.181087][ T7662] FAT-fs (loop2): Directory bread(block 65) failed
[  118.184494][ T7662] FAT-fs (loop2): Directory bread(block 66) failed
[  118.191965][ T7662] FAT-fs (loop2): Directory bread(block 67) failed
[  118.194490][ T7662] FAT-fs (loop2): Directory bread(block 68) failed
[  118.198199][ T7662] FAT-fs (loop2): Directory bread(block 69) failed
[  118.201807][ T7662] FAT-fs (loop2): Directory bread(block 70) failed
[  118.204213][ T7662] FAT-fs (loop2): Directory bread(block 71) failed
[  118.207028][ T7662] FAT-fs (loop2): Directory bread(block 72) failed
[  118.209447][ T7662] FAT-fs (loop2): Directory bread(block 73) failed
[  118.230882][   T33] audit: type=1800 audit(1755555183.128:10): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.503" name="file2" dev="loop2" ino=1048622 res=0 errno=0
[  118.350429][ T7669] 
[  118.431614][ T7667] loop2: detected capacity change from 0 to 32768
[  118.578541][ T5913] apple 0003:05AC:024B.0004: unknown main item tag 0x6
[  118.814663][ T5913] apple 0003:05AC:024B.0004: ignoring exceeding usage max
[  118.820737][ T5913] apple 0003:05AC:024B.0004: invalid report_size 16640
[  118.823729][ T5913] apple 0003:05AC:024B.0004: item 0 2 1 7 parsing failed
[  118.828287][ T5913] apple 0003:05AC:024B.0004: parse failed
[  118.831061][ T5913] apple 0003:05AC:024B.0004: probe with driver apple failed with error -22
[  118.839452][ T5913] usb 5-1: USB disconnect, device number 4
[  119.114045][ T7688] Driver unsupported XDP return value 0 on prog  (id 34) dev N/A, expect packet loss!
[  119.169525][ T7690] bridge: RTM_NEWNEIGH with invalid ether address
[  119.459657][ T7707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.521'.
[  119.466321][ T7707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.521'.
[  119.559861][ T7711] loop3: detected capacity change from 0 to 2048
[  119.581408][ T7711] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  119.584058][ T7711] UDF-fs: Scanning with blocksize 512 failed
[  119.589235][ T7711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.775351][ T7722] IPv6: sit1: Disabled Multicast RS
[  119.926259][ T5900] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  120.133879][ T7732] syz_tun: entered allmulticast mode
[  120.420133][ T5900] usb 3-1: config index 0 descriptor too short (expected 149, got 148)
[  120.424041][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.428846][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.434444][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  120.438819][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.442128][ T5900] usb 3-1: SerialNumber: syz
[  120.466593][ T5900] usb 3-1: 0:2 : does not exist
[  120.646986][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.533'.
[  120.669540][ T5900] usb 3-1: USB disconnect, device number 10
[  120.703647][ T7729] syz_tun: left allmulticast mode
[  121.628092][ T7759] bridge0: entered promiscuous mode
[  121.630827][ T7759] macvlan2: entered promiscuous mode
[  121.719465][ T7763] syz.2.545 uses obsolete (PF_INET,SOCK_PACKET)
[  121.958071][ T7771] loop2: detected capacity change from 0 to 8
[  121.975957][ T7771] SQUASHFS error: Failed to read block 0x33c: -5
[  121.980095][ T7771] SQUASHFS error: Unable to read metadata cache entry [33a]
[  121.983323][ T7771] SQUASHFS error: Unable to read inode 0xa7
[  122.283845][ T7789] loop3: detected capacity change from 0 to 4096
[  122.289383][ T7789] ntfs3(loop3): Primary boot: invalid bytes per MFT record 4 (-2).
[  122.292494][ T7789] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  122.456206][ T5900] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  122.619643][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short
[  122.623996][ T5900] usb 3-1: config 13 has an invalid interface number: 50 but max is 3
[  122.627076][ T5900] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  122.630837][ T5900] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4
[  122.634678][ T5900] usb 3-1: config 13 has no interface number 0
[  122.638059][ T5900] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  122.643443][ T5900] usb 3-1: config 13 interface 50 has no altsetting 0
[  122.647971][ T5900] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8
[  122.650878][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.654188][ T5900] usb 3-1: Product: syz
[  122.655481][ T5900] usb 3-1: Manufacturer: syz
[  122.657388][ T5900] usb 3-1: SerialNumber: syz
[  122.852070][ T7800] loop4: detected capacity change from 0 to 1024
[  122.869673][   T33] audit: type=1800 audit(1755555187.768:11): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.563" name="file1" dev="loop4" ino=20 res=0 errno=0
[  122.913137][ T5900] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  122.919979][ T5869] usb 3-1: Failed to submit usb control message: -71
[  122.922832][ T5869] usb 3-1: unable to send the bmi data to the device: -71
[  122.925451][ T5869] usb 3-1: unable to get target info from device
[  122.935335][ T5869] usb 3-1: could not get target info (-71)
[  122.939202][ T5900] usb 3-1: USB disconnect, device number 11
[  122.941566][ T5869] usb 3-1: could not probe fw (-71)
[  123.348598][ T7814] loop3: detected capacity change from 0 to 40427
[  123.360219][ T7814] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  123.363699][ T7814] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  123.369339][ T7814] F2FS-fs (loop3): invalid crc value
[  123.411211][ T7814] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  123.429945][ T7814] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  123.432607][ T7814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  123.512787][ T7822] loop2: detected capacity change from 0 to 256
[  124.301651][ T7827] netlink: 156 bytes leftover after parsing attributes in process `syz.4.572'.
[  124.427451][ T7814] F2FS-fs: heap/no_heap options were deprecated
[  124.438825][ T7814] F2FS-fs (loop3): Start checkpoint disabled!
[  124.462537][ T7831] overlayfs: failed to clone upperpath
[  125.163728][ T7845] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  125.220921][ T7849] loop2: detected capacity change from 0 to 1024
[  125.235677][ T7849] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  125.249134][ T7849] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  125.260962][ T7849] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  125.272645][ T7849] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.582: unexpected bad inode w/o EXT4_IGET_BAD
[  125.280097][ T7849] EXT4-fs (loop2): no journal found
[  125.282462][ T7849] EXT4-fs (loop2): can't get journal size
[  125.295931][ T7849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  125.463944][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.763558][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'.
[  127.305428][ T7880] tipc: Started in network mode
[  127.311544][ T7880] tipc: Node identity c, cluster identity 4711
[  127.314737][ T7880] tipc: Node number set to 12
[  127.845316][ T7889] loop3: detected capacity change from 0 to 32768
[  127.860064][ T7889] (syz.3.599,7889,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.869226][ T7889] (syz.3.599,7889,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.900793][ T7889] JBD2: Ignoring recovery information on journal
[  127.967198][ T7889] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  128.045778][ T6785] ocfs2: Unmounting device (7,3) on (node local)
[  128.446300][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  128.484861][ T7910] loop2: detected capacity change from 0 to 32768
[  128.526611][ T7910] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.554790][ T7910] XFS (loop2): Ending clean mount
[  128.606516][   T24] usb 4-1: Using ep0 maxpacket: 8
[  128.613412][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.626967][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  128.635400][   T33] audit: type=1800 audit(2000000001.550:12): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.608" name="file1" dev="overlay" ino=6150 res=0 errno=0
[  128.654583][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.663260][   T24] usb 4-1: config 0 descriptor??
[  128.711099][ T5845] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.139217][   T24] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  129.304752][   T24] usb 4-1: USB disconnect, device number 5
[  130.090239][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'.
[  130.123170][ T7966] Dead loop on virtual device ip6_vti0, fix it urgently!
[  130.184418][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'.
[  130.479368][ T7995] loop3: detected capacity change from 0 to 2048
[  130.497078][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  130.507593][ T7995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.533435][ T6785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.617737][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'.
[  130.647607][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.651458][   T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  130.665096][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.675049][   T24] usb 3-1: config 0 descriptor??
[  131.093734][   T24] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  131.111487][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input8
[  131.481470][   T24] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  131.653768][ T5915] usb 3-1: USB disconnect, device number 12
[  132.229492][ T8059] overlayfs: failed to clone upperpath
[  132.618507][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.621404][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.316008][ T8071] loop3: detected capacity change from 0 to 32768
[  133.321781][ T8076] loop2: detected capacity change from 0 to 32768
[  133.349349][ T8076] bcachefs: bch2_fs_open() bch_fs_open err opening /dev/loop2: erofs_nochanges
[  133.353485][ T8076] bcachefs: bch2_fs_get_tree() error: erofs_nochanges
[  133.719949][ T8071] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  133.719968][ T8071]   allowing incompatible features above 0.0: (unknown version)
[  133.720049][ T8071]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  133.740955][ T8071] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  133.744478][ T8071] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  133.748158][ T8071] bcachefs (loop3): Version upgrade required:
[  133.748158][ T8071] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  133.748158][ T8071] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  133.748158][ T8071]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  133.784131][ T8071] bcachefs (loop3): dropping and reconstructing all alloc info
[  133.802490][ T8071] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0: (unpack error)
[  133.802588][ T8071]   invalid variable length fields, deleting
[  133.827964][ T8071] bcachefs (loop3): accounting_read... done
[  133.844401][ T8071] bcachefs (loop3): alloc_read... done
[  133.849871][ T8071] bcachefs (loop3): snapshots_read... done
[  133.856671][ T8071] bcachefs (loop3): check_allocations... done
[  133.999588][ T8071] bcachefs (loop3): going read-write
[  134.068780][ T8071] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  134.097681][ T8071] bcachefs (loop3): done starting filesystem
[  134.105462][ T4061] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  134.105493][ T4061]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  134.158156][ T4061] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  134.158174][ T4061]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  134.170705][ T4061] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  134.170719][ T4061]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  134.255176][ T6785] bcachefs (loop3): shutting down
[  134.260911][ T6785] bcachefs (loop3): going read-only
[  134.263485][ T6785] bcachefs (loop3): finished waiting for writes to stop
[  134.287488][ T6785] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12
[  134.311588][ T1089] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  134.311602][ T1089]   u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing
[  134.332943][ T6785] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12
[  134.350031][ T6785] bcachefs (loop3): unclean shutdown complete, journal seq 13
[  134.379383][ T6785] bcachefs (loop3): done going read-only, filesystem not clean
[  134.500016][ T6785] bcachefs (loop3): shutdown complete
[  134.629586][ T8120] netlink: 'syz.4.696': attribute type 12 has an invalid length.
[  134.632146][ T8120] netlink: 'syz.4.696': attribute type 29 has an invalid length.
[  134.634780][ T8120] netlink: 148 bytes leftover after parsing attributes in process `syz.4.696'.
[  134.639567][ T8120] netlink: 51 bytes leftover after parsing attributes in process `syz.4.696'.
[  134.826214][ T5915] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  134.979175][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  134.984446][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  134.989714][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  134.998269][ T5915] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  135.002729][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.007015][ T5915] usb 3-1: Product: syz
[  135.008998][ T5915] usb 3-1: Manufacturer: syz
[  135.011130][ T5915] usb 3-1: SerialNumber: syz
[  135.015505][ T5915] usb 3-1: config 0 descriptor??
[  135.022093][ T5915] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  135.235962][ T5915] usb 3-1: USB disconnect, device number 13
[  135.672289][ T8135] bond_slave_0: entered promiscuous mode
[  135.675319][ T8135] bond_slave_1: entered promiscuous mode
[  135.678374][ T8135] vlan2: entered promiscuous mode
[  135.680412][ T8135] bond0: entered promiscuous mode
[  135.978685][ T8139] loop2: detected capacity change from 0 to 40427
[  135.995990][ T8139] F2FS-fs (loop2): Image doesn't support compression
[  136.001484][ T8139] F2FS-fs (loop2): build fault injection rate: 690
[  136.013096][ T8139] F2FS-fs (loop2): invalid crc value
[  136.085113][ T8139] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  136.106886][ T8139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.714277][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'.
[  136.873487][ T8175] fuse: Bad value for 'fd'
[  136.949003][ T8178] syzkaller0: entered promiscuous mode
[  136.951242][ T8178] syzkaller0: entered allmulticast mode
[  137.308967][ T8183] loop3: detected capacity change from 0 to 32768
[  137.313088][ T8183] (syz.3.722,8183,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.320653][ T8183] (syz.3.722,8183,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.364274][ T8183] JBD2: Ignoring recovery information on journal
[  137.406788][ T8183] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  137.665500][ T6785] ocfs2: Unmounting device (7,3) on (node local)
[  137.848020][ T8201] loop3: detected capacity change from 0 to 1024
[  137.917663][   T33] audit: type=1800 audit(2000000010.840:13): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.728" name="file1" dev="loop3" ino=20 res=0 errno=0
[  138.515871][ T8215] loop3: detected capacity change from 0 to 4096
[  138.529225][ T8215] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  138.566322][ T8215] ntfs3(loop3): Inode r=19 is not in use!
[  138.568752][ T8215] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  138.581554][ T8215] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  139.986401][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  140.123753][   T33] audit: type=1800 audit(2000000013.040:14): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.743" name="nullb0" dev="tmpfs" ino=818 res=0 errno=0
[  140.137415][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  140.141254][ T5900] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  140.144816][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.151508][ T5900] usb 4-1: config 0 has no interface number 0
[  140.156326][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  140.159762][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.163450][ T5900] usb 4-1: Product: syz
[  140.172829][ T5900] usb 4-1: Manufacturer: syz
[  140.174648][ T5900] usb 4-1: SerialNumber: syz
[  140.180086][ T5900] usb 4-1: config 0 descriptor??
[  140.189850][ T5900] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  140.192531][ T5900] usb 4-1: No valid video chain found.
[  140.203485][ T8238] usb usb8: usbfs: process 8238 (syz.2.744) did not claim interface 0 before use
[  140.262336][ T8241] netlink: 'syz.4.746': attribute type 6 has an invalid length.
[  140.265439][ T8241] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.746'.
[  140.277889][ T8242] loop2: detected capacity change from 0 to 2048
[  140.296627][ T8242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.358743][ T8242] loop2: detected capacity change from 2048 to 0
[  140.367777][ T8242] syz.2.745: attempt to access beyond end of device
[  140.367777][ T8242] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0
[  140.397556][ T5845] syz-executor: attempt to access beyond end of device
[  140.397556][ T5845] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0
[  140.406280][ T5900] usb 4-1: USB disconnect, device number 6
[  140.450526][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.455693][ T5845] syz-executor: attempt to access beyond end of device
[  140.455693][ T5845] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0
[  140.462525][ T5845] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  140.470694][ T5845] EXT4-fs (loop2): I/O error while writing superblock
[  140.477940][ T8243] kmmpd-loop2: attempt to access beyond end of device
[  140.477940][ T8243] loop2: rw=14337, sector=256, nr_sectors = 4 limit=0
[  140.486547][ T8243] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  140.589416][ T5869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.733754][ T5869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.758426][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'.
[  140.766669][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'.
[  140.767465][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.773400][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.792871][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.810100][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.850510][ T5869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.948027][ T5869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.991386][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  140.998746][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  141.002191][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  141.018529][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  141.023657][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  141.122462][ T8266] loop3: detected capacity change from 0 to 8192
[  141.188831][ T5847]  loop3: p1 p2 p3
[  141.192009][ T5847] loop3: partition table partially beyond EOD, truncated
[  141.200844][ T5847] loop3: p1 start 51379968 is beyond EOD, truncated
[  141.217148][ T5847] loop3: p3 size 100663552 extends beyond EOD, truncated
[  141.231513][ T5869] bridge_slave_1: left allmulticast mode
[  141.241569][ T5869] bridge_slave_1: left promiscuous mode
[  141.256602][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.284909][ T8266]  loop3: p1 p2 p3
[  141.290609][ T8266] loop3: partition table partially beyond EOD, truncated
[  141.298232][ T8266] loop3: p1 start 51379968 is beyond EOD, truncated
[  141.301701][ T5869] bridge_slave_0: left allmulticast mode
[  141.304362][ T5869] bridge_slave_0: left promiscuous mode
[  141.370405][ T8266] loop3: p3 size 100663552 extends beyond EOD, truncated
[  141.377045][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.509883][ T6126] udevd[6126]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  141.511184][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  141.565830][ T6042] udevd[6042]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  141.575037][ T6126] udevd[6126]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  141.755512][ T8282] fuse: Bad value for 'fd'
[  141.786841][ T5900] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  141.947569][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.960290][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  141.974237][ T5900] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  141.983944][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.026970][ T5900] usb 4-1: config 0 descriptor??
[  142.030360][ T8279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  142.069050][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.073098][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.077861][ T5869] bond0 (unregistering): Released all slaves
[  142.371054][ T8267] chnl_net:caif_netlink_parms(): no params data found
[  142.458945][ T5900] hid-rmi 0003:0461:4E72.0007: item fetching failed at offset 2/5
[  142.462399][ T5900] hid-rmi 0003:0461:4E72.0007: parse failed
[  142.472717][ T5900] hid-rmi 0003:0461:4E72.0007: probe with driver hid-rmi failed with error -22
[  142.613315][ T5869] hsr_slave_0: left promiscuous mode
[  142.618269][ T5869] hsr_slave_1: left promiscuous mode
[  142.621240][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.625088][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.631886][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.635716][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.655299][ T5869] veth1_macvtap: left promiscuous mode
[  142.657816][ T5900] usb 4-1: USB disconnect, device number 7
[  142.660147][ T5869] veth0_macvtap: left promiscuous mode
[  142.662413][ T5869] veth1_vlan: left promiscuous mode
[  142.666873][ T5869] veth0_vlan: left promiscuous mode
[  142.825189][ T1089] smc: removing ib device syz0
[  143.086316][ T5237] Bluetooth: hci0: command tx timeout
[  143.152682][ T5869] team0 (unregistering): Port device team_slave_1 removed
[  143.230027][ T5869] team0 (unregistering): Port device team_slave_0 removed
[  143.619606][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.623032][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.628236][ T8267] bridge_slave_0: entered allmulticast mode
[  143.632923][ T8267] bridge_slave_0: entered promiscuous mode
[  143.644632][ T5848] ==================================================================
[  143.647542][ T5848] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  143.650535][ T5848] Read of size 8 at addr ffff88803852c2e8 by task kworker/0:3/5848
[  143.654155][ T5848] 
[  143.655087][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: kworker/0:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  143.655108][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.655114][ T5848] Workqueue: events smc_ib_port_event_work
[  143.655127][ T5848] Call Trace:
[  143.655132][ T5848]  <TASK>
[  143.655136][ T5848]  dump_stack_lvl+0x189/0x250
[  143.655148][ T5848]  ? rcu_is_watching+0x15/0xb0
[  143.655155][ T5848]  ? __kasan_check_byte+0x12/0x40
[  143.655164][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.655171][ T5848]  ? rcu_is_watching+0x15/0xb0
[  143.655177][ T5848]  ? lock_release+0x4b/0x3e0
[  143.655187][ T5848]  ? __virt_addr_valid+0x1c8/0x5c0
[  143.655196][ T5848]  ? __virt_addr_valid+0x4a5/0x5c0
[  143.655204][ T5848]  print_report+0xca/0x240
[  143.655212][ T5848]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  143.655223][ T5848]  kasan_report+0x118/0x150
[  143.655236][ T5848]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  143.655248][ T5848]  __ethtool_get_link_ksettings+0x6e/0x190
[  143.655260][ T5848]  ib_get_eth_speed+0x15e/0x7b0
[  143.655272][ T5848]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  143.655285][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  143.655300][ T5848]  rxe_query_port+0x93/0x3b0
[  143.655312][ T5848]  ib_query_port+0x170/0x830
[  143.655320][ T5848]  smc_ib_port_event_work+0x15a/0x940
[  143.655329][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.655340][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[  143.655346][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[  143.655353][ T5848]  process_scheduled_works+0xae1/0x17b0
[  143.655364][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[  143.655372][ T5848]  worker_thread+0x8a0/0xda0
[  143.655383][ T5848]  kthread+0x711/0x8a0
[  143.655392][ T5848]  ? __pfx_worker_thread+0x10/0x10
[  143.655398][ T5848]  ? __pfx_kthread+0x10/0x10
[  143.655410][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.655417][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.655426][ T5848]  ? __pfx_kthread+0x10/0x10
[  143.655433][ T5848]  ret_from_fork+0x3fc/0x770
[  143.655441][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[  143.655448][ T5848]  ? __switch_to_asm+0x39/0x70
[  143.655456][ T5848]  ? __switch_to_asm+0x33/0x70
[  143.655464][ T5848]  ? __pfx_kthread+0x10/0x10
[  143.655471][ T5848]  ret_from_fork_asm+0x1a/0x30
[  143.655501][ T5848]  </TASK>
[  143.655504][ T5848] 
[  143.738008][ T5848] Allocated by task 5845:
[  143.739467][ T5848]  kasan_save_track+0x3e/0x80
[  143.741112][ T5848]  __kasan_kmalloc+0x93/0xb0
[  143.742665][ T5848]  __kvmalloc_node_noprof+0x30d/0x5f0
[  143.744665][ T5848]  alloc_netdev_mqs+0xa3/0x1170
[  143.746524][ T5848]  rtnl_create_link+0x31f/0xd10
[  143.748819][ T5848]  rtnl_newlink_create+0x25c/0xb00
[  143.750808][ T5848]  rtnl_newlink+0x16d6/0x1c70
[  143.752461][ T5848]  rtnetlink_rcv_msg+0x7cf/0xb70
[  143.754228][ T5848]  netlink_rcv_skb+0x208/0x470
[  143.756037][ T5848]  netlink_unicast+0x82f/0x9e0
[  143.757952][ T5848]  netlink_sendmsg+0x805/0xb30
[  143.759740][ T5848]  __sock_sendmsg+0x21c/0x270
[  143.761484][ T5848]  __sys_sendto+0x3bd/0x520
[  143.763479][ T5848]  __x64_sys_sendto+0xde/0x100
[  143.765413][ T5848]  do_syscall_64+0xfa/0x3b0
[  143.767474][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.770001][ T5848] 
[  143.771029][ T5848] Freed by task 5869:
[  143.772748][ T5848]  kasan_save_track+0x3e/0x80
[  143.774652][ T5848]  kasan_save_free_info+0x46/0x50
[  143.776879][ T5848]  __kasan_slab_free+0x5b/0x80
[  143.778628][ T5848]  kfree+0x18e/0x440
[  143.780050][ T5848]  device_release+0x9c/0x1c0
[  143.781557][ T5848]  kobject_put+0x22b/0x480
[  143.783062][ T5848]  netdev_run_todo+0xd2e/0xea0
[  143.784689][ T5848]  default_device_exit_batch+0x81e/0x890
[  143.786718][ T5848]  ops_undo_list+0x525/0x990
[  143.788324][ T5848]  cleanup_net+0x4c5/0x800
[  143.789924][ T5848]  process_scheduled_works+0xae1/0x17b0
[  143.792121][ T5848]  worker_thread+0x8a0/0xda0
[  143.793999][ T5848]  kthread+0x711/0x8a0
[  143.795518][ T5848]  ret_from_fork+0x3fc/0x770
[  143.797102][ T5848]  ret_from_fork_asm+0x1a/0x30
[  143.798728][ T5848] 
[  143.799543][ T5848] The buggy address belongs to the object at ffff88803852c000
[  143.799543][ T5848]  which belongs to the cache kmalloc-cg-4k of size 4096
[  143.804220][ T5848] The buggy address is located 744 bytes inside of
[  143.804220][ T5848]  freed 4096-byte region [ffff88803852c000, ffff88803852d000)
[  143.808663][ T5848] 
[  143.809506][ T5848] The buggy address belongs to the physical page:
[  143.811825][ T5848] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38528
[  143.814946][ T5848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  143.818036][ T5848] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  143.821116][ T5848] page_type: f5(slab)
[  143.822782][ T5848] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  143.826248][ T5848] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  143.829512][ T5848] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  143.832995][ T5848] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  143.836502][ T5848] head: 00fff00000000003 ffffea0000e14a01 00000000ffffffff 00000000ffffffff
[  143.839932][ T5848] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  143.843405][ T5848] page dumped because: kasan: bad access detected
[  143.845988][ T5848] page_owner tracks the page as allocated
[  143.848272][ T5848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5845, tgid 5845 (syz-executor), ts 55986563975, free_ts 0
[  143.855319][ T5848]  post_alloc_hook+0x240/0x2a0
[  143.856944][ T5848]  get_page_from_freelist+0x21e4/0x22c0
[  143.858834][ T5848]  __alloc_frozen_pages_noprof+0x181/0x370
[  143.860773][ T5848]  alloc_pages_mpol+0x232/0x4a0
[  143.862433][ T5848]  allocate_slab+0x8a/0x370
[  143.863902][ T5848]  ___slab_alloc+0xbeb/0x1410
[  143.865573][ T5848]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  143.867704][ T5848]  kmemdup_noprof+0x2b/0x70
[  143.869268][ T5848]  __addrconf_sysctl_register+0x9e/0x4c0
[  143.871149][ T5848]  addrconf_sysctl_register+0x168/0x1c0
[  143.873057][ T5848]  ipv6_add_dev+0xd46/0x1370
[  143.874615][ T5848]  addrconf_notify+0x794/0x1010
[  143.876314][ T5848]  notifier_call_chain+0x1b6/0x3e0
[  143.878036][ T5848]  register_netdevice+0x1608/0x1ae0
[  143.879799][ T5848]  virt_wifi_newlink+0x428/0x860
[  143.881466][ T5848]  rtnl_newlink_create+0x310/0xb00
[  143.883350][ T5848] page_owner free stack trace missing
[  143.885168][ T5848] 
[  143.886056][ T5848] Memory state around the buggy address:
[  143.887999][ T5848]  ffff88803852c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.890527][ T5848]  ffff88803852c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.893194][ T5848] >ffff88803852c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.895875][ T5848]                                                           ^
[  143.898474][ T5848]  ffff88803852c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.901116][ T5848]  ffff88803852c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.904055][ T5848] ==================================================================
[  143.915659][ T5848] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  143.918889][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: kworker/0:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  143.923950][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.927813][ T5848] Workqueue: events smc_ib_port_event_work
[  143.929927][ T5848] Call Trace:
[  143.931116][ T5848]  <TASK>
[  143.932254][ T5848]  dump_stack_lvl+0x99/0x250
[  143.933911][ T5848]  ? __asan_memcpy+0x40/0x70
[  143.935670][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.937548][ T5848]  ? __pfx__printk+0x10/0x10
[  143.939084][ T5848]  vpanic+0x281/0x750
[  143.940488][ T5848]  ? preempt_schedule+0xae/0xc0
[  143.942287][ T5848]  ? __pfx_vpanic+0x10/0x10
[  143.943950][ T5848]  ? preempt_schedule_common+0x83/0xd0
[  143.945904][ T5848]  ? preempt_schedule+0xae/0xc0
[  143.947488][ T5848]  ? __pfx_preempt_schedule+0x10/0x10
[  143.949323][ T5848]  panic+0xb9/0xc0
[  143.950616][ T5848]  ? __pfx_panic+0x10/0x10
[  143.952102][ T5848]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  143.954054][ T5848]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  143.956074][ T5848]  check_panic_on_warn+0x89/0xb0
[  143.957862][ T5848]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  143.960269][ T5848]  end_report+0x78/0x160
[  143.961872][ T5848]  kasan_report+0x129/0x150
[  143.963613][ T5848]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  143.966049][ T5848]  __ethtool_get_link_ksettings+0x6e/0x190
[  143.967993][ T5848]  ib_get_eth_speed+0x15e/0x7b0
[  143.969509][ T5848]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  143.971309][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  143.973163][ T5848]  rxe_query_port+0x93/0x3b0
[  143.975053][ T5848]  ib_query_port+0x170/0x830
[  143.976732][ T5848]  smc_ib_port_event_work+0x15a/0x940
[  143.978675][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.980435][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[  143.982343][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[  143.984257][ T5848]  process_scheduled_works+0xae1/0x17b0
[  143.986187][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[  143.988556][ T5848]  worker_thread+0x8a0/0xda0
[  143.990252][ T5848]  kthread+0x711/0x8a0
[  143.991663][ T5848]  ? __pfx_worker_thread+0x10/0x10
[  143.993348][ T5848]  ? __pfx_kthread+0x10/0x10
[  143.994892][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.996570][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.998245][ T5848]  ? __pfx_kthread+0x10/0x10
[  144.000014][ T5848]  ret_from_fork+0x3fc/0x770
[  144.001648][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[  144.003406][ T5848]  ? __switch_to_asm+0x39/0x70
[  144.005175][ T5848]  ? __switch_to_asm+0x33/0x70
[  144.006942][ T5848]  ? __pfx_kthread+0x10/0x10
[  144.008557][ T5848]  ret_from_fork_asm+0x1a/0x30
[  144.010213][ T5848]  </TASK>
[  144.011964][ T5848] Kernel Offset: disabled
[  144.013390][ T5848] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:13:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900036270b0
R8 =ffff88801b338237 R9 =1ffff11003667046 R10=dffffc0000000000 R11=ffffffff854efc70
R12=dffffc0000000000 R13=ffffffff99af98fb R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efcec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f95a282bd58 CR3=000000010e5f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000ffff00000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7d5aa53240328a00 RBX=ffffffff81968308 RCX=7d5aa53240328a00 RDX=0000000000000001
RSI=ffffffff8d9b6d50 RDI=ffffffff8be33280 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37d30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556435b5c8 CR3=0000000041e42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff82345972 ffffffff823459ba
XMM02=00007f95a1b87498 ffffffff823459ba XMM03=00007f95a1b874a8 00007f95a1b874a0
XMM04=00007f95a26ed100 00007f95a1b87460 XMM05=00007f95a1b87478 00007f95a1b874c0
XMM06=00007f95a1b874b8 00007f95a1b874b0 XMM07=00007f95a1b874a8 00007f95a1b874a0
XMM08=0000000000000000 00007f95a1a12ee7 XMM09=0000000000000000 00007f95a1a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
