last executing test programs:

2.790826246s ago: executing program 0 (id=1269):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x60700}, 0x94)

2.728618371s ago: executing program 0 (id=1270):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0xf4240}], 0xb, 0x0, 0x0, 0x0)

2.621299402s ago: executing program 0 (id=1272):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100008200040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='cachefiles_ondemand_read\x00', r0, 0x0, 0x12000000}, 0x18)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
syz_io_uring_complete(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getgroups(0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000"], 0x48)

1.637390361s ago: executing program 0 (id=1275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

1.156399072s ago: executing program 1 (id=1280):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

1.058407345s ago: executing program 1 (id=1281):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x1, '\x00', @a})
chdir(&(0x7f0000000600)='mnt/encrypted_dir\x00')
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

899.966928ms ago: executing program 1 (id=1283):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x88, 0x1, &(0x7f0000000140), 0x4)

790.906273ms ago: executing program 1 (id=1285):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '$wf\xdf\x13\x9f\xc0\xf2/` 6\xeb?\xbcI6\x1d\xd9\xe2\t\xd5\xd3\b\xbb0>1\xa0\xd1;\xba\xeb/\x9a\xf2,\xdd?\xb8\xed\xce\x11\xe8<\x02\xbdU\xbe\x95u\xc7#\xc3\xce\x98h\xc8\x9c\xc7\xfa\xe7r\xc1\x01\x9a\xf2\xf7\xc5\xc9\xfb\xc2q\x9f\x99\x13\xab\x10\xd2\xf9\x1a\xb0\xbd->\xa8\x1b\xb6\xc6y\x15\xea~w\xec\xb2%\x88\xca\x81;t\xba4\xdc\xf9\xf8\xec:\xd8\x84nP\xfb\"\x8f\xdb\xd2\xc2!eS\x984\x8a@\xd3N\xf9\'\x90\xec0\xfaR\x88\xcc\x9a\xc2\xa8\xda\xfc\x0f`\x9c`\xa1\xa5\x1d\xcb\xfe\xd8\xcc>\xda\xb1\xa7\xb2$\x82\x9b\xe4\xd7g\xea\xb4\\\xd1\x93z{\xd2\xc6J\x860\x10`,\xbf\xfbvZ\xd0L\xf6\bFs\xcc\xcd\xc1\xa9\xc6U\xfd\xbcC\xd9!\xeb\xb0\x88'}]}, 0xd7)

740.776933ms ago: executing program 2 (id=1286):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[<r1=>0x0]})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x1, r1, 0xfffffffd, 0x4, 0x80000000, 0x2, 0x56afe045})

675.759502ms ago: executing program 2 (id=1287):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)

675.318516ms ago: executing program 2 (id=1288):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4)

580.501102ms ago: executing program 2 (id=1289):
r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x6)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x7, &(0x7f0000000100)={0x0, "fd6d44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300"}})

520.829106ms ago: executing program 0 (id=1290):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4440, &(0x7f00000088c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40942, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x700000000000000)
truncate(&(0x7f0000000900)='./file1\x00', 0xbf39)

520.552071ms ago: executing program 2 (id=1291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

459.949368ms ago: executing program 1 (id=1292):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r2, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)

459.631084ms ago: executing program 2 (id=1293):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000a00000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
write$P9_RSTATu(r7, 0x0, 0x5a)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

280.628052ms ago: executing program 1 (id=1294):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/13, 0xd}, 0xe0000003}], 0x1, 0x102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

0s ago: executing program 0 (id=1295):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)

kernel console output (not intermixed with test programs):

81][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   76.132879][   T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   76.135732][   T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   76.138444][   T24] usb 2-1: Product: syz
[   76.139874][   T24] usb 2-1: Manufacturer: syz
[   76.141453][   T24] usb 2-1: SerialNumber: syz
[   76.145175][   T24] usb 2-1: config 0 descriptor??
[   76.203435][  T792] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[   76.459020][ T5876] usb 2-1: USB disconnect, device number 3
[   76.623674][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   76.755225][ T5876] usb 1-1: USB disconnect, device number 2
[   76.827393][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   76.832162][ T5898] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   76.837410][ T5898] usb 3-1: USB disconnect, device number 3
[   77.525280][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'.
[   78.272816][ T6231] loop0: detected capacity change from 0 to 32768
[   78.307975][ T6231] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   78.343097][ T5846] (syz-executor,5846,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   78.367771][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   78.377328][ T6235] IPVS: Unknown mcast interface: pimreg0
[   78.632909][ T6248] 9pnet: p9_errstr2errno: server reported unknown error @0xffffffffffffffff
[   78.759012][ T6257] loop2: detected capacity change from 0 to 1764
[   78.762595][ T6257] iso9660: Unexpected value for 'overriderockperm'
[   78.943252][ T6267] loop2: detected capacity change from 0 to 2048
[   78.978004][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.986306][ T6267] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   79.025970][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.057721][ T6275] loop0: detected capacity change from 0 to 4096
[   79.063833][ T6275] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   79.074647][ T6275] ntfs3(loop0): $AttrDef is corrupted.
[   79.122622][ T6277] vivid-007: =================  START STATUS  =================
[   79.125870][ T6277] vivid-007: Generate PTS: true
[   79.127594][ T6277] vivid-007: Generate SCR: true
[   79.130516][ T6277] tpg source WxH: 320x240 (Y'CbCr)
[   79.132299][ T6277] tpg field: 1
[   79.133765][ T6277] tpg crop: (0,0)/320x240
[   79.135523][ T6277] tpg compose: (0,0)/320x240
[   79.137300][ T6277] tpg colorspace: 8
[   79.138901][ T6277] tpg transfer function: 0/0
[   79.140440][ T6277] tpg Y'CbCr encoding: 0/0
[   79.141885][ T6277] tpg quantization: 0/0
[   79.143255][ T6277] tpg RGB range: 0/2
[   79.144696][ T6277] vivid-007: ==================  END STATUS  ==================
[   79.150246][ T6277] Bluetooth: MGMT ver 1.23
[   79.152616][ T6277] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET)
[   79.158156][ T6277] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[   79.160984][ T6277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   79.165423][ T6277] vhci_hcd vhci_hcd.0: Device attached
[   79.171327][ T6279] vhci_hcd: connection closed
[   79.176981][ T5877] vhci_hcd: stop threads
[   79.181315][ T6281] loop0: detected capacity change from 0 to 512
[   79.187390][ T5877] vhci_hcd: release socket
[   79.192013][ T5877] vhci_hcd: disconnect device
[   79.196388][ T6281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   79.227797][ T6281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.243470][ T6273] loop1: detected capacity change from 0 to 32768
[   79.245977][ T6281] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.255223][ T6273] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   79.261911][ T6273] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[   79.262780][ T6281] EXT4-fs: Cannot change quota options when quota turned on
[   79.267789][ T6273] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   79.273971][ T6273] OCFS2: Returning error to the calling process.
[   79.276076][ T6273] (syz.1.126,6273,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[   79.279475][ T6273] (syz.1.126,6273,1):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[   79.283390][ T6273] (syz.1.126,6273,1):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[   79.283711][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.286251][ T6273] (syz.1.126,6273,1):ocfs2_mknod:309 ERROR: status = -5
[   79.296813][ T6273] (syz.1.126,6273,1):ocfs2_mknod:505 ERROR: status = -5
[   79.299736][ T6273] (syz.1.126,6273,1):ocfs2_mkdir:661 ERROR: status = -5
[   79.333091][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[   79.341895][ T6287] netlink: 80 bytes leftover after parsing attributes in process `syz.0.130'.
[   79.444335][ T6291] overlayfs: statfs failed on './file0'
[   79.617757][ T6304] loop1: detected capacity change from 0 to 512
[   79.623721][ T6304] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.650941][ T6304] EXT4-fs (loop1): 1 orphan inode deleted
[   79.654307][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.658948][ T6304] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.666715][ T6304] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks
[   79.670405][ T6304] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted
[   79.686150][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.730968][ T6300] loop0: detected capacity change from 0 to 32768
[   79.763078][ T6308] loop2: detected capacity change from 0 to 512
[   79.778796][ T6308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   79.802335][ T6308] EXT4-fs (loop2): 1 truncate cleaned up
[   79.805909][ T6308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.876376][ T6310] loop1: detected capacity change from 0 to 4096
[   79.880185][ T6310] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   79.895479][ T6310] ntfs3(loop1): ino=4, mi_enum_attr
[   79.897260][ T6310] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   79.900427][ T6310] ntfs3(loop1): Failed to load $AttrDef (-22)
[   80.076917][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.187718][ T6316] loop1: detected capacity change from 0 to 32768
[   80.221497][ T6316] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.250249][ T6316] XFS (loop1): Ending clean mount
[   80.271486][ T6330] loop2: detected capacity change from 0 to 128
[   80.276388][ T6330] ubifs: Bad value for 'compr'
[   80.306271][ T6316] syz.1.142 (6316) used greatest stack depth: 20040 bytes left
[   80.322052][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.363065][ T6334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.443725][ T6337] loop2: detected capacity change from 0 to 2048
[   80.457006][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'.
[   80.462613][ T6337] NILFS (loop2): invalid segment: Inconsistency found
[   80.464889][ T6337] NILFS (loop2): trying rollback from an earlier position
[   80.481003][ T6337] NILFS (loop2): recovery complete
[   80.602956][ T6353] unknown channel width for channel at 909000KHz?
[   80.605361][ T6353] unknown channel width for channel at 909000KHz?
[   80.607498][ T6353] unknown channel width for channel at 909000KHz?
[   81.097100][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   81.248268][ T5876] usb 1-1: Using ep0 maxpacket: 32
[   81.251588][ T5876] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   81.254430][ T5876] usb 1-1: config 0 has no interface number 0
[   81.256464][ T5876] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   81.259960][ T5876] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   81.265170][ T5876] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   81.268247][  T792] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   81.268687][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.274018][ T5876] usb 1-1: Product: syz
[   81.275720][ T5876] usb 1-1: Manufacturer: syz
[   81.277545][ T5876] usb 1-1: SerialNumber: syz
[   81.281114][ T5876] usb 1-1: config 0 descriptor??
[   81.284597][ T5876] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   81.418322][  T792] usb 2-1: Using ep0 maxpacket: 32
[   81.426250][  T792] usb 2-1: config 0 has an invalid interface number: 58 but max is 27
[   81.432485][  T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.437056][  T792] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 28
[   81.441424][  T792] usb 2-1: config 0 has no interface number 0
[   81.443760][  T792] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x6 has invalid maxpacket 56166, setting to 64
[   81.447533][  T792] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x7 has invalid maxpacket 64800, setting to 64
[   81.452035][  T792] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   81.456739][  T792] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[   81.460711][  T792] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[   81.465083][  T792] usb 2-1: config 0 interface 58 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[   81.473282][  T792] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=5c.24
[   81.477252][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.480873][  T792] usb 2-1: Product: syz
[   81.482868][  T792] usb 2-1: Manufacturer: syz
[   81.486978][  T792] usb 2-1: SerialNumber: syz
[   81.487203][ T5876] usb 1-1: qt2_setup_urbs - submit read urb failed -90
[   81.492191][ T5876] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90
[   81.509288][  T792] usb 2-1: config 0 descriptor??
[   81.709717][ T5878] usb 1-1: USB disconnect, device number 3
[   81.729066][  T792] appletouch 2-1:0.58: Could not find int-in endpoint
[   81.731988][  T792] appletouch 2-1:0.58: probe with driver appletouch failed with error -5
[   81.736134][  T792] usbhid 2-1:0.58: couldn't find an input interrupt endpoint
[   81.750725][  T792] usb 2-1: USB disconnect, device number 4
[   82.254889][ T6373] raw_sendmsg: syz.0.164 forgot to set AF_INET. Fix it!
[   82.353424][ T6379] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.167'.
[   82.958747][ T5876] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   83.278293][ T5876] usb 1-1: Using ep0 maxpacket: 32
[   83.282610][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   83.290686][ T5876] usb 1-1: language id specifier not provided by device, defaulting to English
[   83.296303][ T5876] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40
[   83.301958][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.304874][ T5876] usb 1-1: Product: syz
[   83.306420][ T5876] usb 1-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳
[   83.313543][ T5876] usb 1-1: SerialNumber: syz
[   83.324693][ T5876] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[   83.538432][ T5876] usb 1-1: USB disconnect, device number 4
[   83.544701][ T6407] loop1: detected capacity change from 0 to 32768
[   83.552368][ T6407] jfs: Unknown parameter ''
[   83.976597][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'.
[   84.051949][ T6409] loop2: detected capacity change from 0 to 32768
[   84.055690][ T6415] bridge0: entered promiscuous mode
[   84.058655][ T6415] macvlan4: entered promiscuous mode
[   84.106011][ T6409] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,read_only,version_upgrade=none
[   84.106024][ T6409]   allowing incompatible features above 0.0: (unknown version)
[   84.106029][ T6409]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   84.122279][ T6409] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   84.125261][ T6409] bcachefs (loop2): recovering from clean shutdown, journal seq 13
[   84.150201][ T6409] bcachefs (loop2): accounting_read... done
[   84.164672][ T6409] bcachefs (loop2): alloc_read... done
[   84.177285][ T6409] bcachefs (loop2): snapshots_read... done
[   84.181774][ T6409] bcachefs (loop2): journal_replay... done
[   84.184716][ T6409] bcachefs (loop2): resume_logged_ops... done
[   84.187094][ T6409] bcachefs (loop2): delete_dead_inodes... done
[   84.203835][ T6409] bcachefs (loop2): done starting filesystem
[   84.273345][ T6418] loop1: detected capacity change from 0 to 32768
[   84.298152][ T5855] bcachefs (loop2): shutting down
[   84.326164][ T6418] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only
[   84.326176][ T6418]   allowing incompatible features above 0.0: (unknown version)
[   84.326180][ T6418]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   84.326199][ T5855] bcachefs (loop2): shutdown complete
[   84.339635][ T6418] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   84.345553][ T6418] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   84.359038][ T6418] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   84.359038][ T6418]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   84.394084][ T6418] bcachefs (loop1): btree node read error at btree lru level 0/0
[   84.394112][ T6418]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[   84.394118][ T6418]   loop1 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[   84.394123][ T6418]   loop1 btree validate error
[   84.394126][ T6418]   flagging btree lru lost data
[   84.394130][ T6418]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[   84.394135][ T6418]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[   84.394139][ T6418]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[   84.394143][ T6418]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[   84.394148][ T6418]   ret btree_node_read_err_bad_node
[   84.459534][ T6418] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[   84.474253][ T6418] bcachefs (loop1): btree node read error at btree freespace level 0/0
[   84.474267][ T6418]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[   84.474282][ T6418]   loop1 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[   84.474290][ T6418]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[   84.474297][ T6418]   loop1 btree validate error
[   84.474303][ T6418]   flagging btree freespace lost data
[   84.474309][ T6418]   ret btree_node_read_err_bad_node
[   84.508829][ T6418] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[   84.516543][ T6418] bcachefs (loop1): check_topology... done
[   84.520396][ T6418] bcachefs (loop1): accounting_read... done
[   84.523549][ T6418] bcachefs (loop1): alloc_read... done
[   84.526215][ T6418] bcachefs (loop1): snapshots_read... done
[   84.531117][ T6418] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   84.535408][ T6418] bcachefs (loop1): done starting filesystem
[   84.545120][ T6426] loop0: detected capacity change from 0 to 32768
[   84.558026][ T6426] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[   84.580551][ T6431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.190'.
[   84.592190][ T6418] bcachefs (loop1): inode 4099:4294967295 has wrong backpointer:
[   84.592219][ T6418]   got       8977922886548783724:0
[   84.592227][ T6418]   should be 4098:8977922886548783724, fixing
[   84.671923][ T5850] bcachefs (loop1): shutting down
[   84.705807][ T6435] loop2: detected capacity change from 0 to 64
[   84.715676][ T5850] bcachefs (loop1): shutdown complete
[   85.631702][ T6461] loop0: detected capacity change from 0 to 32768
[   85.636439][ T6461] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 []
[   85.636439][ T6461] replicas (size 24):
[   85.636439][ T6461] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0]
[   85.636439][ T6461] 
[   85.657043][ T6461] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[   85.867765][ T6466] loop2: detected capacity change from 0 to 32768
[   85.874088][ T6466] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 206): 1/13 [0 0 0 0 0 0 0 0 0 0 1 6 108]
[   85.874088][ T6466] replicas_v0 (size 24):
[   85.874088][ T6466] btree: 1 [0] journal: 1 [0] user: 1 [0] (unknown data_type 206): 13 [0 0 0 0 0 108 1 0 0 6 0 0 0]
[   85.874088][ T6466] 
[   85.886427][ T6466] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[   86.532011][ T6484] netlink: 'syz.1.192': attribute type 1 has an invalid length.
[   86.597705][ T6484] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.634188][ T6489] bond2: (slave geneve2): making interface the new active one
[   86.641303][ T6489] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   87.032040][  T791] cfg80211: failed to load regulatory.db
[   87.096477][ T6494] loop1: detected capacity change from 0 to 2048
[   87.132952][ T6494] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   87.148948][ T6494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.560771][ T6524] netlink: 'syz.2.229': attribute type 7 has an invalid length.
[   87.603082][ T6524] : entered promiscuous mode
[   87.881157][ T6537] IPVS: Error connecting to the multicast addr
[   88.933702][ T6555] syz_tun: entered promiscuous mode
[   88.954428][ T6555] syz_tun: left promiscuous mode
[   89.410519][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'.
[   89.417041][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'.
[   89.983694][ T6597] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[   90.127458][ T6607] loop2: detected capacity change from 0 to 512
[   90.176925][ T6607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   90.196861][ T6607] EXT4-fs (loop2): 1 truncate cleaned up
[   90.203852][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.234033][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.333342][ T6617] bridge2: the hash_elasticity option has been deprecated and is always 16
[   90.368321][    T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   90.418388][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   90.522483][    T9] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[   90.530989][    T9] usb 1-1: config 0 has no interface number 0
[   90.535671][    T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[   90.543862][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.547574][    T9] usb 1-1: Product: syz
[   90.549167][    T9] usb 1-1: Manufacturer: syz
[   90.550710][    T9] usb 1-1: SerialNumber: syz
[   90.558793][    T9] usb 1-1: config 0 descriptor??
[   90.568717][ T5876] usb 2-1: Using ep0 maxpacket: 32
[   90.573505][ T5876] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   90.577110][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.590008][ T5876] usb 2-1: config 0 descriptor??
[   90.766105][    T9] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[   90.772058][    T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[   90.776503][    T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[   90.779403][    T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[   90.784682][    T9] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   90.796133][    T9] usb 1-1: USB disconnect, device number 5
[   90.801154][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   90.805331][    T9] keyspan 1-1:0.133: device disconnected
[   90.805921][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   90.819727][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   90.831369][ T5876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   90.834375][ T5876] usb 2-1: media controller created
[   90.848516][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   90.888512][  T791] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   91.015070][ T5876] az6027: usb out operation failed. (-71)
[   91.018867][ T5876] az6027: usb out operation failed. (-71)
[   91.021709][ T5876] stb0899_attach: Driver disabled by Kconfig
[   91.023856][ T5876] az6027: no front-end attached
[   91.023856][ T5876] 
[   91.026486][ T5876] az6027: usb out operation failed. (-71)
[   91.028481][ T5876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   91.032289][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[   91.038316][  T791] usb 3-1: Using ep0 maxpacket: 32
[   91.042077][ T5876] dvb-usb: schedule remote query interval to 400 msecs.
[   91.044365][ T5876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   91.050405][  T791] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   91.053248][  T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.058265][ T5876] usb 2-1: USB disconnect, device number 5
[   91.061621][  T791] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   91.065142][  T791] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[   91.080489][  T791] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.083826][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.086484][  T791] usb 3-1: Product: syz
[   91.087926][  T791] usb 3-1: Manufacturer: syz
[   91.093897][  T791] usb 3-1: SerialNumber: syz
[   91.105841][ T5876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   91.330943][  T791] usb 3-1: USB disconnect, device number 4
[   91.456534][ T6350] udevd[6350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.830329][ T6640] loop1: detected capacity change from 0 to 128
[   91.840753][ T6640] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   91.845178][ T6640] FAT-fs (loop1): bogus number of directory entries (203)
[   91.851130][ T6640] FAT-fs (loop1): Can't find a valid FAT filesystem
[   92.090953][ T6655] netlink: 'syz.2.282': attribute type 2 has an invalid length.
[   92.094364][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[   92.318083][ T6659] loop2: detected capacity change from 0 to 4096
[   92.347172][ T6666] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.376299][   T33] audit: type=1800 audit(1755054173.751:2): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.284" name="file1" dev="loop2" ino=15 res=0 errno=0
[   92.387809][   T33] audit: type=1800 audit(1755054173.761:3): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.284" name="file1" dev="loop2" ino=15 res=0 errno=0
[   92.598493][    T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   92.599794][ T6663] loop0: detected capacity change from 0 to 32768
[   92.622780][ T6663] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.653669][ T6663] XFS (loop0): Ending clean mount
[   92.704571][   T33] audit: type=1800 audit(1755054174.081:4): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.287" name="file1" dev="loop0" ino=6150 res=0 errno=0
[   92.751646][    T9] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[   92.755203][    T9] usb 2-1: config 0 has no interface number 0
[   92.766243][    T9] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[   92.772496][    T9] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[   92.781529][ T5846] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.785452][    T9] usb 2-1: config 0 interface 113 has no altsetting 0
[   92.791074][    T9] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[   92.794198][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.797705][    T9] usb 2-1: Product: syz
[   92.803305][    T9] usb 2-1: Manufacturer: syz
[   92.805513][    T9] usb 2-1: SerialNumber: syz
[   92.814026][ T6686] loop2: detected capacity change from 0 to 8192
[   92.817530][    T9] usb 2-1: config 0 descriptor??
[   92.835952][    T9] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[   92.837786][ T6686] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   92.862416][ T6686] FAT-fs (loop2): Filesystem has been set read-only
[   93.043925][  T791] usb 2-1: USB disconnect, device number 6
[   93.765898][ T6715] loop1: detected capacity change from 0 to 1024
[   93.780380][ T6715] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[   93.793362][ T6715] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   93.802432][ T6715] EXT4-fs (loop1): orphan cleanup on readonly fs
[   93.819343][ T6715] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.306: Invalid inode table block 0 in block_group 0
[   93.826792][ T6720] loop2: detected capacity change from 0 to 1024
[   93.828541][ T6715] EXT4-fs (loop1): Remounting filesystem read-only
[   93.833637][ T6720] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   93.842119][ T6720] JBD2: no valid journal superblock found
[   93.844684][ T6720] EXT4-fs (loop2): Could not load journal inode
[   93.844684][ T6715] Quota error (device loop1): write_blk: dquota write failed
[   93.844825][ T6715] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   93.856122][ T6715] EXT4-fs (loop1): 1 truncate cleaned up
[   93.865372][ T6715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.970507][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.197614][ T6722] loop2: detected capacity change from 0 to 40427
[   94.201053][ T6722] F2FS-fs: heap/no_heap options were deprecated
[   94.203723][ T6722] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   94.206247][ T6722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   94.209992][ T6722] F2FS-fs (loop2): build fault injection type: 0x0
[   94.215023][ T6722] F2FS-fs (loop2): invalid crc value
[   94.252378][ T6722] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.256990][ T6722] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[   94.260368][ T6722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   94.398464][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   94.550282][ T5878] usb 1-1: Using ep0 maxpacket: 32
[   94.559985][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short
[   94.566180][ T5878] usb 1-1: config 255 has an invalid interface number: 81 but max is 0
[   94.578525][ T5878] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[   94.583539][ T5878] usb 1-1: config 255 has no interface number 0
[   94.586117][ T5878] usb 1-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83
[   94.592602][ T5878] usb 1-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   94.597535][ T6747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.321'.
[   94.602014][ T5878] usb 1-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0
[   94.606568][ T5878] usb 1-1: config 255 interface 81 has no altsetting 0
[   94.614433][ T5878] usb 1-1: string descriptor 0 read error: -22
[   94.617123][ T5878] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac
[   94.628315][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.645625][ T5878] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.81/input/input6
[   94.902239][  T792] usb 1-1: USB disconnect, device number 6
[   97.052295][ T6769] netlink: 'syz.0.326': attribute type 1 has an invalid length.
[   97.363699][ T6785] loop0: detected capacity change from 0 to 4096
[   97.368836][ T6785] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   97.399997][   T33] audit: type=1326 audit(1755054178.781:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.1.331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7fc00000
[   97.436118][ T6790] bridge0: port 3(syz_tun) entered blocking state
[   97.439701][ T6790] bridge0: port 3(syz_tun) entered disabled state
[   97.443038][ T6790] syz_tun: entered allmulticast mode
[   97.446712][ T6790] syz_tun: entered promiscuous mode
[   97.452528][ T6790] bridge0: port 3(syz_tun) entered blocking state
[   97.455536][ T6790] bridge0: port 3(syz_tun) entered forwarding state
[   97.738295][  T792] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   97.828371][  T791] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   97.890504][  T792] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[   97.895155][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   97.899693][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[   97.906858][  T792] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   97.910491][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.913556][  T792] usb 1-1: Product: syz
[   97.915251][  T792] usb 1-1: Manufacturer: syz
[   97.917199][  T792] usb 1-1: SerialNumber: syz
[   97.922253][  T792] usb 1-1: config 0 descriptor??
[   97.982416][  T791] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.986994][  T791] usb 3-1: config 0 interface 0 has no altsetting 0
[   97.990486][  T791] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[   97.994575][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.000885][  T791] usb 3-1: config 0 descriptor??
[   98.101553][   T33] audit: type=1326 audit(1755054179.481:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.1.331" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d1f785ba7 code=0x7fc00000
[   98.440488][  T791] aquacomputer_d5next 0003:0C70:F003.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0
[   98.629412][    T9] usb 3-1: USB disconnect, device number 5
[   98.715899][ T6812] loop0: detected capacity change from 0 to 256
[   98.801475][  T791] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   98.943891][ T6818] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   98.953871][  T791] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[   98.961575][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.975696][  T791] usb 2-1: config 0 descriptor??
[   99.378852][ T6830] tap0: tun_chr_ioctl cmd 1074025677
[   99.381488][ T6830] tap0: linktype set to 780
[   99.403894][  T791] viewsonic 0003:2133:0018.0003: unknown main item tag 0x0
[   99.413907][  T791] viewsonic 0003:2133:0018.0003: item fetching failed at offset 3/5
[   99.423454][  T791] viewsonic 0003:2133:0018.0003: probe with driver viewsonic failed with error -22
[   99.540198][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.357'.
[   99.582083][ T6840] vti0: entered promiscuous mode
[   99.957468][ T6859] loop2: detected capacity change from 0 to 4096
[  100.768117][ T6865] loop0: detected capacity change from 0 to 2048
[  100.810632][ T6865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.815590][ T6865] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.905771][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.951509][ T6873] sp0: Synchronizing with TNC
[  101.146852][ T6882] loop2: detected capacity change from 0 to 256
[  101.232001][ T6882] FAT-fs (loop2): Directory bread(block 64) failed
[  101.235173][ T6882] FAT-fs (loop2): Directory bread(block 65) failed
[  101.238156][ T6882] FAT-fs (loop2): Directory bread(block 66) failed
[  101.244353][ T6882] FAT-fs (loop2): Directory bread(block 67) failed
[  101.247490][ T6882] FAT-fs (loop2): Directory bread(block 68) failed
[  101.251799][ T6882] FAT-fs (loop2): Directory bread(block 69) failed
[  101.254847][ T6882] FAT-fs (loop2): Directory bread(block 70) failed
[  101.262898][ T6882] FAT-fs (loop2): Directory bread(block 71) failed
[  101.289747][ T6882] FAT-fs (loop2): Directory bread(block 72) failed
[  101.302756][ T6882] FAT-fs (loop2): Directory bread(block 73) failed
[  101.630921][ T5876] usb 2-1: USB disconnect, device number 7
[  101.843973][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'.
[  101.863395][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'.
[  102.704293][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'.
[  103.101967][ T6922] netlink: 'syz.0.388': attribute type 5 has an invalid length.
[  103.824957][ T6951] loop2: detected capacity change from 0 to 8
[  103.855066][ T6951] unable to read xattr id index table
[  103.921216][ T6954] loop2: detected capacity change from 0 to 512
[  103.941299][ T6954] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  103.945480][ T6954] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.402: invalid indirect mapped block 2683928664 (level 1)
[  103.957742][ T6954] EXT4-fs (loop2): Remounting filesystem read-only
[  103.961417][ T6954] EXT4-fs (loop2): 1 truncate cleaned up
[  103.965378][ T6954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.996541][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.115218][ T6962] sit1: entered promiscuous mode
[  104.117026][ T6962] sit1: entered allmulticast mode
[  104.394749][ T6973] loop1: detected capacity change from 0 to 512
[  104.405241][ T6973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  104.439597][ T6973] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  104.456718][ T6973] EXT4-fs (loop1): 1 truncate cleaned up
[  104.461918][ T6973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.563383][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.261882][ T6984] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  105.818094][ T7000] loop0: detected capacity change from 0 to 1024
[  105.852187][ T7000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.991268][ T7008] loop1: detected capacity change from 0 to 64
[  106.063358][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.213693][ T7017] loop0: detected capacity change from 0 to 64
[  106.647578][ T7032] loop1: detected capacity change from 0 to 512
[  106.663849][ T7032] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.436: iget: bogus i_mode (0)
[  106.679249][ T7032] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.436: couldn't read orphan inode 17 (err -117)
[  106.693984][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.738701][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.067324][ T7054] loop1: detected capacity change from 0 to 64
[  107.083793][ T7054] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  107.126315][ T7056] loop2: detected capacity change from 0 to 256
[  107.233408][ T7060] trusted_key: syz.2.449 sent an empty control message without MSG_MORE.
[  107.295174][ T7064] loop2: detected capacity change from 0 to 64
[  107.500056][ T7067] syz.2.451: attempt to access beyond end of device
[  107.500056][ T7067] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  107.552190][ T7067] Buffer I/O error on dev loop2, logical block 8388608, async page read
[  107.595379][ T7067] syz.2.451: attempt to access beyond end of device
[  107.595379][ T7067] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  107.638680][ T7067] Buffer I/O error on dev loop2, logical block 8388608, async page read
[  107.893173][ T7076] loop1: detected capacity change from 0 to 256
[  107.923292][ T7076] FAT-fs (loop1): Directory bread(block 64) failed
[  107.926448][ T7076] FAT-fs (loop1): Directory bread(block 65) failed
[  107.935213][ T7076] FAT-fs (loop1): Directory bread(block 66) failed
[  107.944592][ T7076] FAT-fs (loop1): Directory bread(block 67) failed
[  107.947994][ T7076] FAT-fs (loop1): Directory bread(block 68) failed
[  107.952495][ T7076] FAT-fs (loop1): Directory bread(block 69) failed
[  107.961144][ T7076] FAT-fs (loop1): Directory bread(block 70) failed
[  107.967763][ T7076] FAT-fs (loop1): Directory bread(block 71) failed
[  107.988560][ T7076] FAT-fs (loop1): Directory bread(block 72) failed
[  107.991427][ T7076] FAT-fs (loop1): Directory bread(block 73) failed
[  108.621697][ T7084] veth1_vlan: entered allmulticast mode
[  108.640297][ T7084] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  109.226826][ T7095] ubi31: attaching mtd0
[  109.236606][ T7095] ubi31: scanning is finished
[  109.236775][ T7095] ubi31: empty MTD device detected
[  109.518081][ T7095] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  109.521255][ T7095] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  109.524161][ T7095] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  109.527154][ T7095] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  109.530778][ T7095] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  109.533819][ T7095] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  109.537465][ T7095] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1260707987
[  109.541917][ T7095] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  109.546306][ T7100] ubi31: background thread "ubi_bgt31d" started, PID 7100
[  109.735140][ T7106] loop0: detected capacity change from 0 to 256
[  109.738374][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  109.761172][ T7106] FAT-fs (loop0): Directory bread(block 64) failed
[  109.763716][ T7106] FAT-fs (loop0): Directory bread(block 65) failed
[  109.766447][ T7106] FAT-fs (loop0): Directory bread(block 66) failed
[  109.768970][ T7106] FAT-fs (loop0): Directory bread(block 67) failed
[  109.771438][ T7106] FAT-fs (loop0): Directory bread(block 68) failed
[  109.774176][ T7106] FAT-fs (loop0): Directory bread(block 69) failed
[  109.776936][ T7106] FAT-fs (loop0): Directory bread(block 70) failed
[  109.781221][ T7106] FAT-fs (loop0): Directory bread(block 71) failed
[  109.784456][ T7106] FAT-fs (loop0): Directory bread(block 72) failed
[  109.787339][ T7106] FAT-fs (loop0): Directory bread(block 73) failed
[  109.899069][    T9] usb 3-1: Using ep0 maxpacket: 32
[  109.907737][    T9] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[  109.911150][    T9] usb 3-1: config 0 has no interface number 0
[  109.913334][    T9] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  109.916703][    T9] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  109.924056][    T9] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  109.934309][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.937823][    T9] usb 3-1: Product: syz
[  109.939963][    T9] usb 3-1: Manufacturer: syz
[  109.941889][    T9] usb 3-1: SerialNumber: syz
[  109.951794][    T9] usb 3-1: config 0 descriptor??
[  109.955496][ T7099] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  109.965372][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  109.968905][    T9] usb 3-1: invalid MIDI in EP 0
[  110.056529][    T9] snd-usb-audio 3-1:0.16: probe with driver snd-usb-audio failed with error -22
[  110.094058][ T7115] udevd[7115]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.216036][ T5876] usb 3-1: USB disconnect, device number 6
[  110.888874][ T7125] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  111.116165][ T7133] loop2: detected capacity change from 0 to 4096
[  111.129584][ T7133] ntfs3(loop2): ino=0, ni_load_mi_ex
[  111.152041][ T7133] ntfs3(loop2): ino=0, ni_load_mi_ex
[  111.154591][ T7133] ntfs3(loop2): Failed to load $MFT (-22).
[  111.258038][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[  111.379659][ T7148] loop2: detected capacity change from 0 to 512
[  111.385662][ T7148] FAT-fs (loop2): bogus sectors per cluster 69
[  111.392243][ T7148] FAT-fs (loop2): Can't find a valid FAT filesystem
[  111.641627][ T7162] Illegal XDP return value 4143016227 on prog  (id 42) dev syz_tun, expect packet loss!
[  111.838613][ T7171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.496'.
[  112.181375][ T7182] syz.2.502 (7182) used greatest stack depth: 19992 bytes left
[  112.478156][ T7193] loop1: detected capacity change from 0 to 512
[  112.536521][ T7193] EXT4-fs (loop1): 1 orphan inode deleted
[  112.536947][ T7189] loop2: detected capacity change from 0 to 32768
[  112.543439][ T7193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.543559][ T7189] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.504 (7189)
[  112.557256][ T7193] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.560631][ T3630] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  112.566626][ T3630] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u9:6: Failed to release dquot type 1
[  112.573678][ T7189] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.590431][ T7189] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  112.593875][ T7189] BTRFS info (device loop2): using free-space-tree
[  112.630844][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.638745][ T1088] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  112.642051][ T1088] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u10:3: Failed to release dquot type 1
[  112.774217][   T33] audit: type=1800 audit(1755054194.151:7): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.504" name="file0" dev="loop2" ino=258 res=0 errno=0
[  112.797306][ T7189] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  112.806882][   T33] audit: type=1800 audit(1755054194.181:8): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.504" name="file0" dev="loop2" ino=258 res=0 errno=0
[  112.959160][ T5855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.046997][ T7217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.508'.
[  113.327414][ T7229] input: syz1 as /devices/virtual/input/input8
[  114.070697][ T7253] netlink: 64 bytes leftover after parsing attributes in process `syz.2.523'.
[  114.434083][ T7266] tmpfs: Bad value for 'mpol'
[  114.581291][ T7270] loop1: detected capacity change from 0 to 128
[  114.584759][ T7270] EXT4-fs: Ignoring removed nobh option
[  114.620907][ T7270] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  114.627081][ T7270] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.646307][   T33] audit: type=1800 audit(1755054196.021:9): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.531" name="file1" dev="loop1" ino=12 res=0 errno=0
[  114.732805][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.017410][ T7284] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.537'.
[  115.041217][ T7284] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  115.055787][ T7284] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  115.483515][ T7304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.640059][ T7308] loop1: detected capacity change from 0 to 4096
[  115.647475][ T7308] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  115.701757][ T7308] ntfs3(loop1): ino=0, attr_set_size
[  115.703796][ T7308] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  115.920291][   T33] audit: type=1326 audit(1755054197.301:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  115.938366][   T33] audit: type=1326 audit(1755054197.311:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.551" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  115.946270][   T33] audit: type=1326 audit(1755054197.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  115.957200][   T33] audit: type=1326 audit(1755054197.311:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  116.452409][   T33] audit: type=1326 audit(1755054197.831:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.2.558" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff91858ebe9 code=0x0
[  116.613071][ T7322] loop1: detected capacity change from 0 to 32768
[  116.617443][ T7322] btrfs: Deprecated parameter 'usebackuproot'
[  116.620252][ T7322] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  116.626347][ T7322] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.556 (7322)
[  116.651210][ T7322] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  116.655685][ T7322] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  116.659814][ T7322] BTRFS info (device loop1): using free-space-tree
[  116.762979][ T7322] BTRFS info (device loop1): rebuilding free space tree
[  116.990392][ T5850] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.189239][ T7352] loop0: detected capacity change from 0 to 128
[  117.380657][ T7360] Device name not specified.
[  117.380657][ T7360] 
[  117.549972][ T7364] vivid-000: disconnect
[  117.554648][ T7363] vivid-000: reconnect
[  118.671360][  T792] iguanair 1-1:0.0: failed to get version
[  118.689483][  T792] iguanair 1-1:0.0: probe with driver iguanair failed with error -110
[  118.710725][  T792] usb 1-1: USB disconnect, device number 7
[  118.874146][ T7373] loop2: detected capacity change from 0 to 256
[  118.905272][ T7362] loop1: detected capacity change from 0 to 262144
[  118.912584][ T7362] F2FS-fs (loop1): invalid crc value
[  118.981583][ T7362] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  118.985852][ T7362] F2FS-fs (loop1): Start checkpoint disabled!
[  118.998337][ T7362] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  119.078360][  T792] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  119.269686][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.274419][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.284919][  T792] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  119.289246][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.300827][  T792] usb 1-1: config 0 descriptor??
[  119.538374][ T7387] loop2: detected capacity change from 0 to 32768
[  119.581961][ T7387] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  119.646466][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  119.721226][  T792] stadia 0003:18D1:9400.0004: item fetching failed at offset 2/5
[  119.724014][  T792] stadia 0003:18D1:9400.0004: parse failed
[  119.725902][  T792] stadia 0003:18D1:9400.0004: probe with driver stadia failed with error -22
[  119.904207][ T7395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.919568][ T5876] usb 1-1: USB disconnect, device number 8
[  120.203235][ T7397] loop1: detected capacity change from 0 to 40427
[  120.213851][ T7397] F2FS-fs (loop1): invalid crc value
[  120.268378][ T7397] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  120.273772][ T7397] F2FS-fs (loop1): Start checkpoint disabled!
[  120.279515][ T7397] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  120.333856][ T7397] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  120.390196][   T26] kworker/u9:0: attempt to access beyond end of device
[  120.390196][   T26] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.400141][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  120.400154][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.400159][   T26] Workqueue: writeback wb_workfn (flush-7:1)
[  120.400173][   T26] Call Trace:
[  120.400177][   T26]  <TASK>
[  120.400180][   T26]  dump_stack_lvl+0x189/0x250
[  120.400192][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.400201][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  120.400208][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.400217][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.400229][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  120.400241][   T26]  f2fs_write_end_io+0x886/0xb60
[  120.400258][   T26]  __submit_merged_bio+0x27a/0x6a0
[  120.400269][   T26]  __submit_merged_write_cond+0x255/0x530
[  120.400280][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  120.400302][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.400341][   T26]  ? f2fs_write_meta_pages+0x357/0x450
[  120.400354][   T26]  ? __lock_acquire+0xab9/0xd20
[  120.400366][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.400376][   T26]  do_writepages+0x32e/0x550
[  120.400387][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  120.400394][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  120.400406][   T26]  __writeback_single_inode+0x145/0xff0
[  120.400416][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  120.400426][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  120.400445][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  120.400490][   T26]  ? rcu_is_watching+0x15/0xb0
[  120.400504][   T26]  wb_writeback+0x43b/0xaf0
[  120.400516][   T26]  ? queue_io+0x391/0x590
[  120.400525][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  120.400538][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.400547][   T26]  wb_workfn+0x409/0xef0
[  120.400560][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  120.400570][   T26]  ? __lock_acquire+0xab9/0xd20
[  120.400584][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  120.400594][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.400601][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  120.400607][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  120.400614][   T26]  process_scheduled_works+0xae1/0x17b0
[  120.400632][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  120.400650][   T26]  worker_thread+0x8a0/0xda0
[  120.400667][   T26]  kthread+0x711/0x8a0
[  120.400677][   T26]  ? __pfx_worker_thread+0x10/0x10
[  120.400684][   T26]  ? __pfx_kthread+0x10/0x10
[  120.400693][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.400700][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.400708][   T26]  ? __pfx_kthread+0x10/0x10
[  120.400717][   T26]  ret_from_fork+0x3fc/0x770
[  120.400725][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  120.400735][   T26]  ? __switch_to_asm+0x39/0x70
[  120.400743][   T26]  ? __switch_to_asm+0x33/0x70
[  120.400752][   T26]  ? __pfx_kthread+0x10/0x10
[  120.400761][   T26]  ret_from_fork_asm+0x1a/0x30
[  120.400776][   T26]  </TASK>
[  120.400779][   T26] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  120.593418][ T7402] netlink: 'syz.0.582': attribute type 1 has an invalid length.
[  120.832590][ T7410] netlink: 'syz.0.585': attribute type 1 has an invalid length.
[  120.835754][ T7410] netlink: 'syz.0.585': attribute type 4 has an invalid length.
[  120.852503][ T7410] netlink: 212 bytes leftover after parsing attributes in process `syz.0.585'.
[  121.354582][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  121.354596][   T33] audit: type=1326 audit(1755054202.731:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.0.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4df8ebe9 code=0x7fc00000
[  121.479418][ T7435] loop1: detected capacity change from 0 to 8192
[  121.973856][   T33] audit: type=1326 audit(1755054203.351:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.0.591" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f4df8ebe9 code=0x7fc00000
[  122.338662][  T791] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  122.488272][  T791] usb 1-1: Using ep0 maxpacket: 32
[  122.494931][  T791] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  122.497897][  T791] usb 1-1: config 0 has no interface number 0
[  122.500481][  T791] usb 1-1: config 0 interface 184 has no altsetting 0
[  122.512109][  T791] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  122.515432][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.522304][  T791] usb 1-1: Product: syz
[  122.526006][  T791] usb 1-1: Manufacturer: syz
[  122.531514][  T791] usb 1-1: SerialNumber: syz
[  122.547929][  T791] usb 1-1: config 0 descriptor??
[  122.567648][  T791] smsc75xx v1.0.0
[  122.773925][  T791] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  122.783495][  T791] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  122.804463][  T791] usb 1-1: USB disconnect, device number 9
[  123.196156][ T7451] loop1: detected capacity change from 0 to 2048
[  123.216632][ T7451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.476831][ T7461] loop2: detected capacity change from 0 to 256
[  123.490820][ T7461] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x0aeab83c, utbl_chksum : 0xe619d30d)
[  123.513683][ T7461] exFAT-fs (loop2): valid_size(10) is greater than size(0)
[  123.823323][ T7481] loop1: detected capacity change from 0 to 512
[  123.865268][ T7481] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.615: corrupted inode contents
[  123.875371][ T7481] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.615: mark_inode_dirty error
[  123.883617][ T7481] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.615: corrupted inode contents
[  123.889035][ T7481] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.615: mark_inode_dirty error
[  123.895882][ T7481] Quota error (device loop1): write_blk: dquota write failed
[  123.900326][ T7481] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  123.904086][ T7481] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.615: Failed to acquire dquot type 0
[  123.913958][ T7481] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.615: corrupted inode contents
[  123.918627][ T7481] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.615: mark_inode_dirty error
[  123.922790][ T7481] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.615: corrupted inode contents
[  123.926940][ T7481] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.615: mark_inode_dirty error
[  123.932187][ T7481] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.615: corrupted inode contents
[  123.937513][ T7481] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  123.940749][ T7481] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.615: corrupted inode contents
[  123.945259][ T7481] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.615: mark_inode_dirty error
[  123.960055][ T7481] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  123.964178][ T7481] EXT4-fs (loop1): 1 truncate cleaned up
[  123.966829][ T7481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.972401][ T7481] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.986099][ T7479] loop2: detected capacity change from 0 to 32768
[  123.989361][ T7479] btrfs: Deprecated parameter 'usebackuproot'
[  123.991523][ T7479] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  123.995559][ T7479] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.614 (7479)
[  123.996653][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.019819][ T7479] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.030244][ T7479] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  124.038440][ T7479] BTRFS info (device loop2): using free-space-tree
[  124.072802][   T26] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  124.084942][ T7479] BTRFS warning (device loop2): couldn't read tree root
[  124.088143][ T7479] BTRFS warning (device loop2): try to load backup roots slot 1
[  124.092486][   T26] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  124.098061][ T7479] BTRFS warning (device loop2): couldn't read tree root
[  124.108870][ T7479] BTRFS warning (device loop2): try to load backup roots slot 2
[  124.113070][   T69] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  124.117653][ T7479] BTRFS warning (device loop2): couldn't read tree root
[  124.122105][ T7479] BTRFS warning (device loop2): try to load backup roots slot 3
[  124.139188][ T7479] BTRFS info (device loop2): rebuilding free space tree
[  124.179566][ T7479] BTRFS info (device loop2): checking UUID tree
[  124.252338][ T5855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.124833][ T7538] netlink: 'syz.2.631': attribute type 3 has an invalid length.
[  125.128570][ T7538] netlink: 'syz.2.631': attribute type 3 has an invalid length.
[  125.591480][ T7547] loop0: detected capacity change from 0 to 1024
[  125.612140][ T7547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.656429][ T7547] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.635: reserved inode found cleared - inode=1
[  125.666353][ T7547] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  125.693109][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.550318][ T7574] loop2: detected capacity change from 0 to 512
[  126.567720][ T7574] EXT4-fs (loop2): invalid inodes per group: 0
[  126.567720][ T7574] 
[  126.804475][ T7580] loop2: detected capacity change from 0 to 128
[  128.807816][ T7616] loop2: detected capacity change from 0 to 256
[  128.920508][ T7616] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  129.131733][ T7614] loop0: detected capacity change from 0 to 131072
[  129.136484][ T7614] F2FS-fs (loop0): Test dummy encryption mode enabled
[  129.194369][ T7614] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.200524][ T7614] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  129.923430][ T7644] loop1: detected capacity change from 0 to 512
[  129.942430][ T7644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.946587][ T7644] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.954764][ T7648] tipc: Started in network mode
[  129.956729][ T7648] tipc: Node identity 6e4ff78de513, cluster identity 4711
[  129.959250][   T33] audit: type=1800 audit(1755054211.331:18): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.675" name="file1" dev="loop1" ino=15 res=0 errno=0
[  129.967596][ T7648] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  130.049472][ T7644] syz.1.675 (7644) used greatest stack depth: 19736 bytes left
[  130.089783][   T33] audit: type=1800 audit(1755054211.401:19): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.675" name="file2" dev="loop1" ino=16 res=0 errno=0
[  130.092072][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.440040][ T7662] loop1: detected capacity change from 0 to 2048
[  130.452318][ T7662] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  130.466279][ T7665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.471186][ T7662] syz.1.680: attempt to access beyond end of device
[  130.471186][ T7662] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  130.492173][ T7662] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  130.502168][ T7662] Remounting filesystem read-only
[  130.504729][ T7662] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  130.513595][ T7662] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  130.518628][   T33] audit: type=1800 audit(1755054211.891:20): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.680" name="file3" dev="loop1" ino=16 res=0 errno=0
[  130.836487][ T7683] loop1: detected capacity change from 0 to 1764
[  130.867690][ T7683] iso9660: Corrupted directory entry in block 0 of inode 1792
[  130.923644][ T5237] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  130.927929][ T5237] CPU: 0 UID: 0 PID: 5237 Comm: kworker/u11:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  130.927959][ T5237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.927967][ T5237] Workqueue: hci2 hci_rx_work
[  130.927984][ T5237] Call Trace:
[  130.927990][ T5237]  <TASK>
[  130.927995][ T5237]  dump_stack_lvl+0x189/0x250
[  130.928016][ T5237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.928031][ T5237]  ? __pfx__printk+0x10/0x10
[  130.928054][ T5237]  ? kernfs_path_from_node+0x250/0x290
[  130.928068][ T5237]  ? kernfs_path_from_node+0x2f/0x290
[  130.928084][ T5237]  sysfs_create_dir_ns+0x259/0x280
[  130.928099][ T5237]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  130.928114][ T5237]  ? do_raw_spin_unlock+0x4d/0x240
[  130.928135][ T5237]  kobject_add_internal+0x59f/0xb40
[  130.928160][ T5237]  kobject_add+0x155/0x220
[  130.928203][ T5237]  ? __pfx_kobject_add+0x10/0x10
[  130.928221][ T5237]  ? _raw_spin_unlock+0x28/0x50
[  130.928237][ T5237]  ? get_device_parent+0x366/0x3a0
[  130.928260][ T5237]  device_add+0x408/0xb50
[  130.928281][ T5237]  hci_conn_add_sysfs+0xd5/0x1e0
[  130.928301][ T5237]  le_conn_complete_evt+0xc3a/0x1220
[  130.928352][ T5237]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  130.928370][ T5237]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  130.928385][ T5237]  ? __asan_memcpy+0x40/0x70
[  130.928403][ T5237]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  130.928417][ T5237]  ? skb_pull_data+0xfb/0x200
[  130.928433][ T5237]  hci_le_conn_complete_evt+0x187/0x450
[  130.928453][ T5237]  hci_event_packet+0x78f/0x1200
[  130.928475][ T5237]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  130.928492][ T5237]  ? __pfx_hci_event_packet+0x10/0x10
[  130.928513][ T5237]  ? kcov_remote_start+0x4d3/0x7f0
[  130.928530][ T5237]  ? lockdep_hardirqs_on+0x90/0x150
[  130.928547][ T5237]  ? hci_send_to_monitor+0xe2/0x570
[  130.928565][ T5237]  hci_rx_work+0x46a/0xe80
[  130.928584][ T5237]  ? process_scheduled_works+0x9ef/0x17b0
[  130.928598][ T5237]  process_scheduled_works+0xae1/0x17b0
[  130.928633][ T5237]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.928663][ T5237]  worker_thread+0x8a0/0xda0
[  130.928692][ T5237]  kthread+0x711/0x8a0
[  130.928709][ T5237]  ? __pfx_worker_thread+0x10/0x10
[  130.928722][ T5237]  ? __pfx_kthread+0x10/0x10
[  130.928737][ T5237]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.928749][ T5237]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.928760][ T5237]  ? __pfx_kthread+0x10/0x10
[  130.928775][ T5237]  ret_from_fork+0x3fc/0x770
[  130.928790][ T5237]  ? __pfx_ret_from_fork+0x10/0x10
[  130.928807][ T5237]  ? __switch_to_asm+0x39/0x70
[  130.928823][ T5237]  ? __switch_to_asm+0x33/0x70
[  130.928838][ T5237]  ? __pfx_kthread+0x10/0x10
[  130.928855][ T5237]  ret_from_fork_asm+0x1a/0x30
[  130.928885][ T5237]  </TASK>
[  131.043652][  T792] tipc: Node number set to 2338125709
[  131.046620][ T5237] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  131.053199][ T5237] Bluetooth: hci2: failed to register connection device
[  131.228473][ T7686] loop1: detected capacity change from 0 to 32768
[  131.716240][ T7707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.698'.
[  132.568284][  T791] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  132.718284][  T791] usb 2-1: Using ep0 maxpacket: 8
[  132.722751][  T791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  132.732421][  T791] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  132.736982][  T791] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  132.740885][  T791] usb 2-1: Product: syz
[  132.742908][  T791] usb 2-1: Manufacturer: syz
[  132.745006][  T791] usb 2-1: SerialNumber: syz
[  132.752619][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.755335][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.888401][ T5885] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  132.961660][  T791] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  132.964600][  T791] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  132.967164][  T791] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  133.062540][ T5237] Bluetooth: hci2: Malformed LE Event: 0x0d
[  133.064488][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short
[  133.073403][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -71
[  133.076120][ T5885] usb 3-1: can't read configurations, error -71
[  133.164454][  T791] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  133.170431][  T791] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  133.177458][  T791] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  133.185087][  T791] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  133.191277][  T791] usb 2-1: USB disconnect, device number 8
[  133.201974][  T791] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  133.209386][  T791] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  133.214113][  T791] visor 2-1:1.0: device disconnected
[  133.806934][ T7735] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.711'.
[  134.226097][ T7737] loop1: detected capacity change from 0 to 32768
[  134.258480][ T7737] jfs_mount: Failed to read AGGREGATE_I
[  134.260987][ T7737] Mount JFS Failure: -5
[  134.262791][ T7737] jfs_mount failed w/return code = -5
[  134.313429][ T7763] IPVS: Scheduler module ip_vs_ not found
[  134.513938][ T7773] loop0: detected capacity change from 0 to 512
[  134.533893][ T7773] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.727: iget: bad extended attribute block 1
[  134.539838][ T7773] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.727: couldn't read orphan inode 15 (err -117)
[  134.550511][ T7773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.581647][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.604191][ T7786] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  136.294952][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'.
[  136.303591][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'.
[  136.759197][ T7829] loop0: detected capacity change from 0 to 128
[  136.763895][ T7829] adfs: Bad value for 'uid'
[  136.765520][ T7829] adfs: Bad value for 'uid'
[  136.941638][ T5237] Bluetooth: hci0: command 0x0401 tx timeout
[  137.070315][ T7827] loop0: detected capacity change from 0 to 1024
[  137.485528][   T64] hfsplus: b-tree write err: -5, ino 4
[  137.976003][ T5297] udevd[5297]: worker [6350] terminated by signal 33 (Unknown signal 33)
[  138.034521][ T5297] udevd[5297]: worker [6350] failed while handling '/devices/virtual/block/loop1'
[  138.160529][   T33] audit: type=1326 audit(1755054219.541:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  138.179889][   T33] audit: type=1326 audit(1755054219.551:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  138.193697][   T33] audit: type=1326 audit(1755054219.551:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.754" exe="/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  138.205714][   T33] audit: type=1326 audit(1755054219.551:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  138.216030][   T33] audit: type=1326 audit(1755054219.551:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1f78ebe9 code=0x7ffc0000
[  138.558351][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  138.783348][ T7875] netlink: 160 bytes leftover after parsing attributes in process `syz.0.761'.
[  138.793356][ T7875] netlink: 'syz.0.761': attribute type 1 has an invalid length.
[  138.802265][ T7875] netlink: 'syz.0.761': attribute type 2 has an invalid length.
[  138.813602][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'.
[  139.248762][ T7881] loop0: detected capacity change from 0 to 2048
[  139.292694][ T7882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.330086][ T7881] tmpfs: Unknown parameter 'usrquota0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.330086][ T7881] 0
[  139.438265][ T5878] usb 3-1: Using ep0 maxpacket: 32
[  139.454593][ T5878] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  139.457592][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.480716][ T7868] syz.1.758 (7868): drop_caches: 2
[  139.484524][ T5878] usb 3-1: config 0 descriptor??
[  139.691624][ T5878] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  139.696991][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  139.704535][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  139.706878][ T5878] usb 3-1: media controller created
[  139.716856][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.799118][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  139.842985][ T7888] loop0: detected capacity change from 0 to 32768
[  139.864569][ T7888] (syz.0.766,7888,1):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[  139.896992][ T7888] (syz.0.766,7888,1):ocfs2_fill_super:1177 ERROR: status = -22
[  139.904199][ T5878] az6027: usb out operation failed. (-71)
[  139.907865][ T5878] az6027: usb out operation failed. (-71)
[  139.916425][ T5878] stb0899_attach: Driver disabled by Kconfig
[  139.920859][ T5878] az6027: no front-end attached
[  139.920859][ T5878] 
[  139.923898][ T5878] az6027: usb out operation failed. (-71)
[  139.926781][ T5878] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  139.938593][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10
[  139.946190][ T5878] dvb-usb: schedule remote query interval to 400 msecs.
[  139.952066][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.955139][ T5878] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  139.956336][ T5876] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  139.965837][ T5878] usb 3-1: USB disconnect, device number 9
[  139.973758][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.003294][ T5876] usb 2-1: config 0 descriptor??
[  140.051083][ T5878] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  140.103471][ T7888] syz.0.766: attempt to access beyond end of device
[  140.103471][ T7888] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  140.108938][ T7888] exFAT-fs (loop0): unable to read boot sector
[  140.111320][ T7888] exFAT-fs (loop0): failed to read boot sector
[  140.113895][ T7888] exFAT-fs (loop0): failed to recognize exfat type
[  140.216374][ T7895] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  140.447813][ T5876] waltop 0003:172F:0501.0005: item fetching failed at offset 5/7
[  140.451399][ T5876] waltop 0003:172F:0501.0005: probe with driver waltop failed with error -22
[  140.719361][ T5878] usb 2-1: USB disconnect, device number 9
[  140.789840][ T7911] loop2: detected capacity change from 0 to 512
[  140.804969][ T7911] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.775: corrupted in-inode xattr: invalid ea_ino
[  140.810999][ T7911] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.775: couldn't read orphan inode 15 (err -117)
[  140.820910][ T7911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.844802][ T7911] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  140.870255][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.961060][ T7915] loop2: detected capacity change from 0 to 256
[  141.029344][ T7917] unsupported nla_type 52263
[  141.034380][ T7917] loop2: detected capacity change from 0 to 65
[  141.044622][ T7917] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  141.047779][ T7917] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  141.594505][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'.
[  141.606701][ T7928] vlan0: entered promiscuous mode
[  141.887737][ T7936] bridge1: entered allmulticast mode
[  142.479935][ T5878] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  142.584506][ T7958] loop2: detected capacity change from 0 to 512
[  142.587910][ T7958] EXT4-fs: Ignoring removed nobh option
[  142.614200][ T7958] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.797: bg 0: block 393: padding at end of block bitmap is not set
[  142.624433][ T7958] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  142.629577][ T7958] EXT4-fs (loop2): 2 truncates cleaned up
[  142.633898][ T7958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.639523][ T5878] usb 2-1: Using ep0 maxpacket: 8
[  142.643092][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  142.649449][ T5878] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  142.651095][ T7958] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz.2.797: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  142.658907][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.667025][ T7958] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  142.671263][ T5878] usb 2-1: config 0 descriptor??
[  142.714701][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.896624][ T5878] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  142.922577][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[  142.999319][ T7977] loop0: detected capacity change from 0 to 8
[  143.048705][ T7977] SQUASHFS error: xz decompression failed, data probably corrupt
[  143.051853][ T7977] SQUASHFS error: Failed to read block 0x108: -5
[  143.054462][ T7977] SQUASHFS error: Unable to read metadata cache entry [106]
[  143.065641][ T7977] SQUASHFS error: Unable to read inode 0x11f
[  143.096276][ T5878] usb 2-1: USB disconnect, device number 10
[  143.221208][ T7990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.812'.
[  143.458327][  T791] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  143.494637][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  143.536646][   T33] audit: type=1326 audit(1755054224.911:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.2.819" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91858ebe9 code=0x7ffc0000
[  143.547945][   T33] audit: type=1326 audit(1755054224.911:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.2.819" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91858ebe9 code=0x7ffc0000
[  143.561037][   T33] audit: type=1326 audit(1755054224.931:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.2.819" exe="/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff91858ebe9 code=0x7ffc0000
[  143.570735][   T33] audit: type=1326 audit(1755054224.931:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.2.819" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91858ebe9 code=0x7ffc0000
[  143.580357][   T33] audit: type=1326 audit(1755054224.931:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.2.819" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91858ebe9 code=0x7ffc0000
[  143.621548][  T791] usb 1-1: Using ep0 maxpacket: 16
[  143.631259][  T791] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.638116][  T791] usb 1-1: config 9 has an invalid interface number: 111 but max is 0
[  143.643813][  T791] usb 1-1: config 9 has no interface number 0
[  143.646527][  T791] usb 1-1: config 9 interface 111 has no altsetting 0
[  143.660687][  T791] usb 1-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[  143.664746][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.667828][  T791] usb 1-1: Product: syz
[  143.670048][  T791] usb 1-1: Manufacturer: syz
[  143.672037][  T791] usb 1-1: SerialNumber: syz
[  143.899969][  T791] usb 1-1: USB disconnect, device number 10
[  144.198451][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  144.348844][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  144.355326][ T5876] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  144.360815][ T5876] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.366222][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0
[  144.369436][ T5876] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  144.373590][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.383490][ T5876] usb 2-1: config 0 descriptor??
[  144.613268][ T8026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.796576][ T5876] cypress 0003:04B4:BCA1.0006: item fetching failed at offset 4/5
[  144.801822][ T5876] cypress 0003:04B4:BCA1.0006: parse failed
[  144.810567][ T5876] cypress 0003:04B4:BCA1.0006: probe with driver cypress failed with error -22
[  145.000030][ T5876] usb 2-1: USB disconnect, device number 11
[  145.576507][ T8065] wireguard: wg1: Could not create IPv4 socket
[  145.729838][ T5878] IPVS: starting estimator thread 0...
[  145.829372][   T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  145.832985][ T8085] loop2: detected capacity change from 0 to 736
[  145.852427][ T8079] IPVS: using max 79 ests per chain, 189600 per kthread
[  145.973829][ T8096] loop0: detected capacity change from 0 to 128
[  146.081297][   T10] usb 2-1: config 2 has an invalid interface number: 211 but max is 0
[  146.084440][   T10] usb 2-1: config 2 has no interface number 0
[  146.086550][   T10] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  146.090714][   T10] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  146.097228][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[  146.102387][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.105375][   T10] usb 2-1: Product: syz
[  146.108957][   T10] usb 2-1: Manufacturer: syz
[  146.110963][   T10] usb 2-1: SerialNumber: syz
[  146.121428][ T8067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  146.134848][   T10] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[  146.139581][   T10] em28xx 2-1:2.211: Device initialization failed.
[  146.142707][   T10] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[  146.429174][   T10] usb 2-1: USB disconnect, device number 12
[  146.958894][   T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  147.113251][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.147679][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  147.152222][   T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  147.156135][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.162511][   T10] usb 1-1: config 0 descriptor??
[  147.177538][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  147.180761][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  147.186198][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  147.192707][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  147.195736][   T10] usb 1-1: media controller created
[  147.271213][ T8126] overlayfs: missing 'lowerdir'
[  147.580042][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  147.603035][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  147.612198][ T8127] loop1: detected capacity change from 0 to 4096
[  147.616613][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  147.620786][ T8127] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  147.627257][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  147.643975][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  147.646857][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  147.806159][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  147.811404][   T10] dvb-usb: error while querying for an remote control event.
[  147.918932][  T791] usb 1-1: USB disconnect, device number 11
[  147.955091][  T791] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  148.062167][ T8130] loop1: detected capacity change from 0 to 32768
[  148.410136][ T8140] netlink: 88 bytes leftover after parsing attributes in process `syz.1.880'.
[  148.625755][ T8144] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.715440][ T8193] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  150.719707][ T8193] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  150.911387][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.904'.
[  151.060983][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  151.064843][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.908'.
[  151.076990][ T8206] geneve2: entered promiscuous mode
[  151.093547][ T8206] geneve2: entered allmulticast mode
[  151.280747][ T8214] binder: 8213:8214 ioctl c0306201 200000000040 returned -14
[  151.554675][ T8226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.557271][ T8226] IPv6: NLM_F_CREATE should be set when creating new route
[  151.576417][ T8226] lo: entered allmulticast mode
[  151.602947][ T8226] tunl0: entered allmulticast mode
[  151.611284][ T8226] gre0: entered allmulticast mode
[  151.626247][ T8226] gretap0: entered allmulticast mode
[  151.632770][ T8226] erspan0: entered allmulticast mode
[  151.638000][ T8226] ip_vti0: entered allmulticast mode
[  151.643460][ T8226] ip6_vti0: entered allmulticast mode
[  151.647562][ T8226] sit0: entered allmulticast mode
[  151.658993][ T8226] ip6tnl0: entered allmulticast mode
[  151.669633][ T8226] ip6gre0: entered allmulticast mode
[  151.678925][ T8226] syz_tun: entered allmulticast mode
[  151.695518][ T8226] ip6gretap0: entered allmulticast mode
[  151.704701][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.708780][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.715214][ T8226] bridge0: entered allmulticast mode
[  151.721634][ T8226] vcan0: entered allmulticast mode
[  151.727107][ T8226] bond0: entered allmulticast mode
[  151.729807][ T8226] bond_slave_0: entered allmulticast mode
[  151.732435][ T8226] bond_slave_1: entered allmulticast mode
[  151.741841][ T8226] team0: entered allmulticast mode
[  151.744174][ T8226] team_slave_0: entered allmulticast mode
[  151.746878][ T8226] team_slave_1: entered allmulticast mode
[  151.754071][ T8226] dummy0: entered allmulticast mode
[  151.762621][ T8226] nlmon0: entered allmulticast mode
[  151.766724][ T8226] caif0: entered allmulticast mode
[  151.769854][ T8226] batadv0: entered allmulticast mode
[  151.774115][ T8226] vxcan0: entered allmulticast mode
[  151.776934][ T8226] vxcan1: entered allmulticast mode
[  151.780548][ T8226] veth0: entered allmulticast mode
[  151.783965][ T8226] veth1: entered allmulticast mode
[  151.789800][ T8226] wg0: entered allmulticast mode
[  151.794550][ T8226] wg1: entered allmulticast mode
[  151.797928][ T8226] wg2: entered allmulticast mode
[  151.804832][ T8226] veth0_to_bridge: entered allmulticast mode
[  151.809926][ T8226] veth1_to_bridge: entered allmulticast mode
[  151.814702][ T8226] veth0_to_bond: entered allmulticast mode
[  151.824146][ T8234] loop0: detected capacity change from 0 to 32768
[  151.824715][ T8226] veth1_to_bond: entered allmulticast mode
[  151.837974][ T8226] veth0_to_team: entered allmulticast mode
[  151.841890][ T8234] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.844453][ T8226] veth1_to_team: entered allmulticast mode
[  151.851343][ T8226] veth0_to_batadv: entered allmulticast mode
[  151.855015][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.861344][ T8226] batadv_slave_0: entered allmulticast mode
[  151.865550][ T8226] veth1_to_batadv: entered allmulticast mode
[  151.870639][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.874513][ T8226] batadv_slave_1: entered allmulticast mode
[  151.881085][ T8226] xfrm0: entered allmulticast mode
[  151.884618][ T8226] veth0_to_hsr: entered allmulticast mode
[  151.889098][ T8226] hsr_slave_0: entered allmulticast mode
[  151.892001][ T8226] veth1_to_hsr: entered allmulticast mode
[  151.895388][ T8226] hsr_slave_1: entered allmulticast mode
[  151.900181][ T8226] hsr0: entered allmulticast mode
[  151.904218][ T8226] veth1_virt_wifi: entered allmulticast mode
[  151.913442][ T8226] veth0_virt_wifi: entered allmulticast mode
[  151.916935][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[  151.916966][ T8226] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  151.923096][ T8226] veth0_vlan: entered allmulticast mode
[  151.940416][ T8226] vlan0: entered allmulticast mode
[  151.942227][ T8226] vlan1: entered allmulticast mode
[  151.950085][ T8226] macvlan0: entered allmulticast mode
[  151.953822][ T8226] macvlan1: entered allmulticast mode
[  151.957323][ T8226] ipvlan0: entered allmulticast mode
[  151.961115][ T8226] ipvlan1: entered allmulticast mode
[  151.963523][ T8226] veth1_macvtap: entered allmulticast mode
[  151.967535][ T8226] veth0_macvtap: entered allmulticast mode
[  151.973092][ T8226] macvtap0: entered allmulticast mode
[  151.979226][ T8226] macsec0: entered allmulticast mode
[  151.985406][ T8226] geneve0: entered allmulticast mode
[  151.994775][ T8226] geneve1: entered allmulticast mode
[  152.000497][ T8226] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  152.003618][ T8226] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  152.007729][ T8226] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  152.017243][ T8226] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  152.025597][ T8226] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  152.047233][ T8226] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  152.063341][ T8226] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  152.073529][ T8226] macvlan2: entered allmulticast mode
[  152.079331][ T8226] macvlan3: entered allmulticast mode
[  152.085879][ T8226] bond1: entered allmulticast mode
[  152.094339][ T8226] macvlan4: left promiscuous mode
[  152.096445][ T8226] macvlan4: entered allmulticast mode
[  152.101827][ T8226] bond2: entered allmulticast mode
[  152.104004][ T8226] geneve2: entered allmulticast mode
[  152.115980][ T8226] syztnl0: entered allmulticast mode
[  152.169760][ T5877] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.190028][ T5877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.194328][ T5877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.217505][ T5877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.264169][ T8242] tipc: Enabled bearer <udp:syz2>, priority 7
[  152.455981][ T8258] loop1: detected capacity change from 0 to 512
[  152.486846][ T8258] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  152.504836][ T8258] EXT4-fs (loop1): orphan cleanup on readonly fs
[  152.536519][ T8258] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  152.562322][ T8258] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  152.576623][ T8258] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  152.581097][ T8265] loop2: detected capacity change from 0 to 128
[  152.593457][ T8258] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.927: bg 0: block 40: padding at end of block bitmap is not set
[  152.599127][ T8258] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  152.602801][ T8258] EXT4-fs (loop1): 1 truncate cleaned up
[  152.605822][ T8258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  152.732514][ T8265] qnx6: unable to set blocksize
[  152.800945][ T8275] loop2: detected capacity change from 0 to 4096
[  152.862869][ T8276] 9pnet_virtio: no channels available for device 
[  153.039231][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.079561][ T8277] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.106972][ T8275] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  153.114229][ T8275] Remounting filesystem read-only
[  153.539209][ T8297] Invalid source name
[  153.540701][ T8297] UBIFS error (pid: 8297): cannot open "ubifs", error -22
[  153.600830][ T5876] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  153.836109][ T8301] loop2: detected capacity change from 0 to 32768
[  153.841845][ T8301] (syz.2.940,8301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  153.846406][ T8301] (syz.2.940,8301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  153.855561][ T8301] JBD2: Ignoring recovery information on journal
[  153.868803][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  153.879745][ T8301] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  153.890755][ T8301] (syz.2.940,8301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  153.907903][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'.
[  153.912972][ T5876] usb 2-1: config 0 has an invalid interface number: 102 but max is 0
[  153.923558][ T8301] (syz.2.940,8301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  153.932972][ T8301] (syz.2.940,8301,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  153.937462][ T8301] (syz.2.940,8301,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  153.941826][ T8301] (syz.2.940,8301,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  153.944663][ T8301] (syz.2.940,8301,1):ocfs2_quota_read:201 ERROR: status = -5
[  153.947512][ T8301] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6
[  153.950868][ T8301] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  153.954228][ T8301] (syz.2.940,8301,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  153.958415][ T8301] (syz.2.940,8301,1):ocfs2_mknod:317 ERROR: status = -5
[  153.961093][ T8301] (syz.2.940,8301,1):ocfs2_mknod:505 ERROR: status = -5
[  153.965904][ T5876] usb 2-1: config 0 has no interface number 0
[  153.984978][ T5876] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54
[  153.991035][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.996909][ T5876] usb 2-1: Product: syz
[  154.000274][ T5876] usb 2-1: Manufacturer: syz
[  154.002218][ T5876] usb 2-1: SerialNumber: syz
[  154.006107][ T5876] usb 2-1: config 0 descriptor??
[  154.014252][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  154.025981][ T8310] loop0: detected capacity change from 0 to 512
[  154.058902][ T8310] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.943: invalid indirect mapped block 27 (level 1)
[  154.081243][ T8310] EXT4-fs (loop0): Remounting filesystem read-only
[  154.084113][ T8310] EXT4-fs (loop0): 1 truncate cleaned up
[  154.087829][ T8310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.137504][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.216587][ T5876] snd-usb-audio 2-1:0.102: probe with driver snd-usb-audio failed with error -71
[  154.226105][ T5876] usb 2-1: USB disconnect, device number 13
[  154.498364][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  154.639933][ T8328] loop2: detected capacity change from 0 to 32768
[  154.650454][   T24] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  154.655074][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.660139][   T24] usb 1-1: config 0 has no interface number 0
[  154.662724][   T24] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  154.669848][   T24] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.675683][ T8328] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  154.684895][   T24] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  154.693934][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.697466][   T24] usb 1-1: Product: syz
[  154.702443][ T8328] XFS (loop2): Ending clean mount
[  154.705198][   T24] usb 1-1: Manufacturer: syz
[  154.707160][   T24] usb 1-1: SerialNumber: syz
[  154.711695][   T24] usb 1-1: config 0 descriptor??
[  154.762350][ T5855] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  154.818107][ T8338] loop1: detected capacity change from 0 to 2048
[  154.859868][ T8339] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.921074][ T8339] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  154.926229][ T8339] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  154.946064][ T8339] Remounting filesystem read-only
[  154.965825][ T5850] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  155.174110][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'.
[  155.361816][   T24] usb 1-1: USB disconnect, device number 12
[  156.378917][ T8370] orangefs_mount: mount request failed with -4
[  156.790920][ T8391] pim6reg0: tun_chr_ioctl cmd 1074025677
[  156.793355][ T8391] pim6reg0: linktype set to 805
[  156.861235][ T8393] loop2: detected capacity change from 0 to 1024
[  156.929442][ T3043] hfsplus: b-tree write err: -5, ino 4
[  159.478476][ T8431] loop0: detected capacity change from 0 to 1024
[  159.627333][ T8429] loop2: detected capacity change from 0 to 32768
[  159.631324][ T8429] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.992 (8429)
[  159.639817][ T8429] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.643334][ T8429] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  159.646638][ T8429] BTRFS info (device loop2): using free-space-tree
[  160.413292][ T5855] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.758811][ T8486] dvmrp5: entered allmulticast mode
[  160.770597][ T8486] pimreg: entered allmulticast mode
[  160.819175][ T8488] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  160.966605][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'.
[  160.974655][ T8496] tc_dump_action: action bad kind
[  161.104226][ T8492] loop2: detected capacity change from 0 to 32768
[  161.111139][ T8492] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: i_blkno is 67108929
[  161.117565][ T8492] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  161.122126][ T8492] OCFS2: File system is now read-only.
[  161.124846][ T8492] (syz.2.1014,8492,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[  161.130715][ T8492] (syz.2.1014,8492,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  161.134723][ T8492] (syz.2.1014,8492,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  161.139330][ T8492] (syz.2.1014,8492,0):ocfs2_initialize_super:2198 ERROR: status = -30
[  161.143072][ T8492] (syz.2.1014,8492,0):ocfs2_fill_super:1177 ERROR: status = -30
[  162.545183][ T8536] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1032'.
[  162.581157][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  162.802478][   T10] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  162.808637][   T10] usb 2-1: config 0 has no interface number 0
[  162.812041][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  162.817424][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  162.821647][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  162.825874][   T10] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  162.830942][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.836646][   T10] usb 2-1: config 0 descriptor??
[  162.842961][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[  163.059848][   T10] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  163.064297][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  163.072612][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[  163.136085][   T10] usb 2-1: USB disconnect, device number 14
[  163.357465][ T8545] openvswitch: netlink: IPv4 tun info is not correct
[  163.556325][ T8557] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1043'.
[  163.682122][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  163.863762][   T24] usb 3-1: Using ep0 maxpacket: 16
[  163.872599][   T24] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba
[  163.876834][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.880722][   T24] usb 3-1: Product: syz
[  163.882622][   T24] usb 3-1: Manufacturer: syz
[  163.884744][   T24] usb 3-1: SerialNumber: syz
[  163.890604][   T24] usb 3-1: config 0 descriptor??
[  164.124849][   T24] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  164.342627][ T5878] usb 3-1: USB disconnect, device number 10
[  164.422913][ T8583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1055'.
[  164.427837][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'.
[  164.649746][ T8592] mmap: syz.0.1058 (8592) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  165.757110][ T8599] loop1: detected capacity change from 0 to 256
[  166.856321][ T8612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1067'.
[  167.783426][ T8631] loop1: detected capacity change from 0 to 1024
[  167.818666][   T33] audit: type=1800 audit(1755054248.851:31): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1075" name="file1" dev="loop1" ino=20 res=0 errno=0
[  168.857638][ T8655] loop0: detected capacity change from 0 to 1024
[  168.946735][ T8655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.049609][ T8654] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt.
[  169.137022][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.532546][ T8668] loop2: detected capacity change from 0 to 16
[  169.565442][ T8668] erofs (device loop2): mounted with root inode @ nid 36.
[  170.736713][ T8686] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  170.752001][ T8680] loop2: detected capacity change from 0 to 32768
[  170.768093][ T8680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1093 (8680)
[  170.793510][ T8680] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.807288][ T8680] BTRFS info (device loop2 state S): using crc32c (crc32c-lib) checksum algorithm
[  170.810876][ T8680] BTRFS info (device loop2 state S): using free-space-tree
[  170.841555][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'.
[  170.892362][ T8704] netlink: 'syz.0.1100': attribute type 4 has an invalid length.
[  170.904358][   T36] BTRFS warning (device loop2 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  170.913554][ T1088] BTRFS warning (device loop2 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  170.920777][   T36] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  170.938527][ T8680] BTRFS error (device loop2 state S): failed to load root free space
[  170.961183][ T1088] BTRFS warning (device loop2 state S): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored
[  171.052329][ T5855] BTRFS info (device loop2 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.310598][ T8733] loop2: detected capacity change from 0 to 1024
[  171.347297][ T8733] hfsplus: bad catalog entry type
[  171.397261][ T3043] hfsplus: b-tree write err: -5, ino 4
[  171.418316][ T8739] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1114'.
[  171.473067][ T8747] netlink: 'syz.0.1118': attribute type 21 has an invalid length.
[  171.477156][ T8747] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1118'.
[  171.481505][ T8747] netlink: 'syz.0.1118': attribute type 21 has an invalid length.
[  171.579143][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1122'.
[  171.774817][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  171.970118][ T5876] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  171.984156][ T5876] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  172.003904][ T5876] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  172.016171][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.332632][ T5237] Bluetooth: hci2: Malformed LE Event: 0x0d
[  172.334703][   T24] usb 3-1: USB disconnect, device number 11
[  172.601080][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  172.758265][ T5876] usb 1-1: Using ep0 maxpacket: 32
[  172.762889][ T5876] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  172.766748][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.772863][ T5876] usb 1-1: config 0 descriptor??
[  172.778466][ T5876] gspca_main: sq930x-2.14.0 probing 041e:403c
[  173.061658][ T8784] loop2: detected capacity change from 0 to 512
[  173.075817][ T8784] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  173.078851][ T8784] EXT4-fs (loop2): mount failed
[  173.105782][ T8786] loop1: detected capacity change from 0 to 1024
[  173.870548][   T33] audit: type=1326 audit(1755054254.482:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.2.1143" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff91858ebe9 code=0x0
[  174.177443][ T8809] misc userio: Invalid payload size
[  174.436686][ T5876] gspca_sq930x: reg_w 0105 bc00 failed -71
[  174.439379][ T5876] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  174.452139][ T5876] usb 1-1: USB disconnect, device number 13
[  174.635087][ T8827] loop1: detected capacity change from 0 to 1024
[  174.826874][ T8835] netlink: 'syz.1.1156': attribute type 16 has an invalid length.
[  174.830721][ T8835] netlink: 'syz.1.1156': attribute type 17 has an invalid length.
[  174.923036][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'.
[  175.042544][ T8842] loop0: detected capacity change from 0 to 1024
[  175.095413][ T8842] syz.0.1159: attempt to access beyond end of device
[  175.095413][ T8842] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  175.105830][ T8842] syz.0.1159: attempt to access beyond end of device
[  175.105830][ T8842] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  175.426120][ T8855] could not allocate digest TFM handle sm3
[  175.514214][ T8851] loop0: detected capacity change from 0 to 32768
[  175.584073][ T8851] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.611226][ T8851] XFS (loop0): Ending clean mount
[  175.650385][ T8851] XFS (loop0): Quotacheck needed: Please wait.
[  175.693614][ T8851] XFS (loop0): Quotacheck: Done.
[  175.870985][ T5846] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.906148][ T8895] loop1: detected capacity change from 0 to 2048
[  175.913980][ T8895] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  175.917200][ T8895] UDF-fs: Scanning with blocksize 512 failed
[  175.924965][ T8895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.909744][ T8914] ref_ctr increment failed for inode: 0x7d3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ab3cb40
[  177.107425][ T8925] sctp: [Deprecated]: syz.2.1184 (pid 8925) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.107425][ T8925] Use struct sctp_sack_info instead
[  177.188990][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'.
[  177.339344][ T8916] loop1: detected capacity change from 0 to 32768
[  177.364106][ T8916] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  177.373637][ T8916] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  177.392617][ T8916] XFS (loop1): Ending clean mount
[  177.402472][ T8916] XFS (loop1): Quotacheck needed: Please wait.
[  177.436636][ T8916] XFS (loop1): Quotacheck: Done.
[  177.492013][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  177.624424][ T8951] binder: 8950:8951 ioctl c018620c 200000000040 returned -22
[  177.860456][ T8965] gre1: entered promiscuous mode
[  177.862672][ T8965] gre1: entered allmulticast mode
[  177.978372][ T8971] ieee802154 phy0 wpan0: encryption failed: -22
[  178.091762][ T8979] netlink: 'syz.0.1205': attribute type 2 has an invalid length.
[  178.097551][ T8979] netlink: 'syz.0.1205': attribute type 8 has an invalid length.
[  178.100925][ T8979] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.1205'.
[  178.274802][ T5937] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  178.446151][ T5937] usb 3-1: Using ep0 maxpacket: 32
[  178.451726][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  178.451753][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  178.451784][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  178.451801][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.490102][ T5937] usb 3-1: config 0 descriptor??
[  178.491624][ T8973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  178.502669][ T5937] hub 3-1:0.0: USB hub found
[  178.714482][ T5937] hub 3-1:0.0: 1 port detected
[  180.017167][   T24] usb 3-1: USB disconnect, device number 12
[  180.206161][ T9020] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1223'.
[  180.297892][ T9024] loop0: detected capacity change from 0 to 1024
[  180.319743][ T9024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.958323][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.979086][ T9041] netlink: 'syz.2.1231': attribute type 3 has an invalid length.
[  182.144270][ T9053] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  182.284141][ T9055] loop1: detected capacity change from 0 to 8192
[  182.332214][ T5939]  loop1: p1 p2[DM] p4
[  182.337364][ T5939] loop1: p1 size 196608 extends beyond EOD, truncated
[  182.345708][ T5939] loop1: p2 start 4292936063 is beyond EOD, truncated
[  182.349713][ T5939] loop1: p4 size 50331648 extends beyond EOD, truncated
[  182.362326][ T9055]  loop1: p1 p2[DM] p4
[  182.375128][ T9055] loop1: p1 size 196608 extends beyond EOD, truncated
[  182.380595][ T9055] loop1: p2 start 4292936063 is beyond EOD, truncated
[  182.383021][ T9055] loop1: p4 size 50331648 extends beyond EOD, truncated
[  182.526518][ T9059] loop0: detected capacity change from 0 to 40427
[  182.555385][ T9059] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  182.558018][ T9059] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  182.562882][ T9065] loop2: detected capacity change from 0 to 32768
[  182.568207][ T9065] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1241 (9065)
[  182.615648][ T9059] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  182.621915][ T9065] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  182.625296][ T9065] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  182.644757][ T9065] BTRFS info (device loop2): using free-space-tree
[  182.665107][ T9059] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.671149][ T9059] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  182.673696][ T9059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  182.678946][ T5939] udevd[5939]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  182.825873][ T5855] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  182.964392][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'.
[  182.983540][ T9091] syz.0.1238: attempt to access beyond end of device
[  182.983540][ T9091] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  183.005420][ T9091] syz.0.1238: attempt to access beyond end of device
[  183.005420][ T9091] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  183.042362][ T9059] syz.0.1238: attempt to access beyond end of device
[  183.042362][ T9059] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  183.120843][ T9091] syz.0.1238 (9091) used greatest stack depth: 17304 bytes left
[  183.249875][ T9110] loop1: detected capacity change from 0 to 512
[  183.268139][ T9111] netlink: 'syz.2.1254': attribute type 4 has an invalid length.
[  183.287477][ T9110] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  183.296032][ T9111] netlink: 'syz.2.1254': attribute type 4 has an invalid length.
[  183.304118][ T9110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  183.307037][ T9110] System zones: 0-1, 15-15, 18-18, 34-34
[  183.312113][ T9110] EXT4-fs (loop1): orphan cleanup on readonly fs
[  183.314471][ T9110] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  183.318123][ T9110] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  183.331874][ T9110] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  183.344409][ T9110] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1252: bg 0: block 40: padding at end of block bitmap is not set
[  183.352317][ T9110] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  183.355668][ T9110] EXT4-fs (loop1): 1 truncate cleaned up
[  183.358168][ T9110] EXT4-fs (loop1): mounted filesystem 00000000-0000-5000-0000-000000000000 ro without journal. Quota mode: writeback.
[  183.378658][ T9110] EXT4-fs (loop1): shut down requested (2)
[  183.422572][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-5000-0000-000000000000.
[  183.672880][ T9130] loop2: detected capacity change from 0 to 256
[  183.674702][ T9132] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  183.716356][ T9130] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  183.721020][ T9130] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  183.755069][ T9130] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  183.998914][   T33] audit: type=1800 audit(1755054263.967:33): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1261" name="file1" dev="loop2" ino=1048627 res=0 errno=0
[  184.047737][ T5878] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  184.220382][ T9142] loop0: detected capacity change from 0 to 64
[  184.250994][ T5878] usb 2-1: Using ep0 maxpacket: 16
[  184.258106][ T5878] usb 2-1: config 8 has an invalid interface number: 39 but max is 0
[  184.262346][ T5878] usb 2-1: config 8 has no interface number 0
[  184.265125][ T5878] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  184.271203][ T5878] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  184.282295][ T5878] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[  184.290368][ T5878] usb 2-1: config 8 interface 39 has no altsetting 0
[  184.300559][ T5878] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  184.311732][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.316235][ T5878] usb 2-1: Product: syz
[  184.319367][ T5878] usb 2-1: Manufacturer: syz
[  184.323721][ T5878] usb 2-1: SerialNumber: syz
[  184.694889][ T9152] loop0: detected capacity change from 0 to 512
[  184.706944][ T9152] EXT4-fs: Ignoring removed bh option
[  184.739825][ T9152] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  184.781097][ T9152] EXT4-fs (loop0): 1 truncate cleaned up
[  184.788131][ T9152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.815807][ T5878] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  184.823130][ T5878] ipheth 2-1:8.39: probe with driver ipheth failed with error -22
[  185.085315][   T24] usb 2-1: USB disconnect, device number 15
[  185.601090][ T9160] loop2: detected capacity change from 0 to 40427
[  185.610556][ T9160] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9)
[  185.614010][ T9160] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  185.635536][ T9160] F2FS-fs (loop2): invalid crc value
[  185.693098][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.862543][ T9160] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  185.866732][ T9160] F2FS-fs (loop2): Start checkpoint disabled!
[  185.873331][ T9160] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  185.875937][ T9160] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  186.229686][ T9180] loop1: detected capacity change from 0 to 128
[  186.265567][ T9180] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.297710][ T9180] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  186.414786][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.920333][ T9202] loop0: detected capacity change from 0 to 32768
[  186.949116][ T9202] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  187.010333][   T33] audit: type=1800 audit(1755054266.811:34): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1290" name="file1" dev="loop0" ino=17059 res=0 errno=0
[  187.214292][ T9216] tipc: Started in network mode
[  187.216423][ T9216] tipc: Node identity ac14140f, cluster identity 4711
[  187.219401][ T9216] tipc: New replicast peer: 255.255.255.255
[  187.222454][ T9216] tipc: Enabled bearer <udp:syz2>, priority 7
[  187.298222][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[  187.362306][    C0] ==================================================================
[  187.365885][    C0] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  187.369468][    C0] Read of size 1 at addr ffff88803b4f5e30 by task syz-executor/5846
[  187.373582][    C0] 
[  187.374647][    C0] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  187.374663][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.374671][    C0] Call Trace:
[  187.374678][    C0]  <IRQ>
[  187.374685][    C0]  dump_stack_lvl+0x189/0x250
[  187.374702][    C0]  ? __kasan_check_byte+0x12/0x40
[  187.374719][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.374731][    C0]  ? lock_release+0x4b/0x3e0
[  187.374750][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  187.374765][    C0]  print_report+0xca/0x240
[  187.374777][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  187.374791][    C0]  kasan_report+0x118/0x150
[  187.374808][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  187.374824][    C0]  xfrm_state_find+0x2cf2/0x5400
[  187.374837][    C0]  ? ipv6_get_saddr_eval+0xb85/0xee0
[  187.374855][    C0]  ? ipv6_dev_get_saddr+0x143/0xb70
[  187.374872][    C0]  ? xfrm_state_find+0x1da/0x5400
[  187.374887][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  187.374905][    C0]  ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80
[  187.374918][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  187.374937][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  187.374951][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  187.374963][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  187.374975][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  187.374997][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  187.375011][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  187.375035][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  187.375054][    C0]  ? dst_cache_get+0x10e/0x5b0
[  187.375068][    C0]  xfrm_lookup_route+0x3c/0x1c0
[  187.375088][    C0]  tipc_udp_xmit+0x1c3/0xaa0
[  187.375104][    C0]  ? tipc_udp_xmit+0xa4/0xaa0
[  187.375120][    C0]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  187.375136][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  187.375153][    C0]  ? __asan_memcpy+0x40/0x70
[  187.375166][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  187.375187][    C0]  tipc_udp_send_msg+0x27f/0x3f0
[  187.375205][    C0]  tipc_bearer_xmit_skb+0x2b3/0x400
[  187.375219][    C0]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  187.375233][    C0]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  187.375250][    C0]  tipc_disc_timeout+0x580/0x6d0
[  187.375266][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  187.375284][    C0]  call_timer_fn+0x17e/0x5f0
[  187.375301][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  187.375313][    C0]  ? call_timer_fn+0xbe/0x5f0
[  187.375328][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  187.375345][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.375357][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.375370][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  187.375384][    C0]  __run_timer_base+0x61a/0x860
[  187.375398][    C0]  ? ktime_get+0x3e/0x1f0
[  187.375413][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  187.375426][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  187.375445][    C0]  run_timer_softirq+0xb7/0x180
[  187.375460][    C0]  handle_softirqs+0x286/0x870
[  187.375473][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  187.375485][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  187.375500][    C0]  __irq_exit_rcu+0xca/0x1f0
[  187.375510][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  187.375524][    C0]  irq_exit_rcu+0x9/0x30
[  187.375533][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  187.375547][    C0]  </IRQ>
[  187.375552][    C0]  <TASK>
[  187.375556][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  187.375595][    C0] RIP: 0010:__asan_memset+0x8/0x50
[  187.375609][    C0] Code: 00 e9 bc e4 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 <48> 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8
[  187.375618][    C0] RSP: 0018:ffffc900043cf0d8 EFLAGS: 00000246
[  187.375631][    C0] RAX: 1ffff92000879e4c RBX: ffffc900043cf260 RCX: 1ffff92000879e01
[  187.375639][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900043cf278
[  187.375647][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: ffffffff8172c195
[  187.375656][    C0] R10: ffffc900043cf278 R11: fffff52000879e51 R12: ffffc900043cf2c0
[  187.375665][    C0] R13: ffffc900043cf278 R14: ffffc900043cf228 R15: ffffc900043cf270
[  187.375677][    C0]  ? unwind_next_frame+0xa5/0x2390
[  187.375694][    C0]  ? rcu_is_watching+0x15/0xb0
[  187.375705][    C0]  unwind_next_frame+0xc98/0x2390
[  187.375720][    C0]  ? unwind_next_frame+0xa5/0x2390
[  187.375733][    C0]  ? arch_stack_walk+0xe4/0x150
[  187.375749][    C0]  __unwind_start+0x5b9/0x760
[  187.375762][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  187.375777][    C0]  arch_stack_walk+0xe4/0x150
[  187.375792][    C0]  ? stack_trace_save+0x9c/0xe0
[  187.375807][    C0]  stack_trace_save+0x9c/0xe0
[  187.375819][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  187.375834][    C0]  save_stack+0xf5/0x1f0
[  187.375849][    C0]  ? __pfx_save_stack+0x10/0x10
[  187.375867][    C0]  ? page_ext_put+0x97/0xc0
[  187.375882][    C0]  __reset_page_owner+0x71/0x1f0
[  187.375897][    C0]  free_unref_folios+0xdbd/0x1520
[  187.375918][    C0]  ? folios_put_refs+0x299/0x640
[  187.375932][    C0]  folios_put_refs+0x559/0x640
[  187.375946][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[  187.375960][    C0]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[  187.375975][    C0]  shmem_undo_range+0x49e/0x14b0
[  187.375993][    C0]  ? __pfx_shmem_undo_range+0x10/0x10
[  187.376014][    C0]  ? kernel_text_address+0xa5/0xe0
[  187.376029][    C0]  ? __kernel_text_address+0xd/0x40
[  187.376051][    C0]  ? stack_depot_save_flags+0x40/0x860
[  187.376067][    C0]  ? kasan_save_stack+0x4d/0x60
[  187.376085][    C0]  ? kasan_save_stack+0x3e/0x60
[  187.376097][    C0]  ? call_rcu+0x157/0x9c0
[  187.376109][    C0]  shmem_evict_inode+0x272/0xa70
[  187.376127][    C0]  ? inode_wait_for_writeback+0xf9/0x290
[  187.376140][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[  187.376157][    C0]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  187.376171][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  187.376184][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[  187.376201][    C0]  evict+0x504/0x9c0
[  187.376217][    C0]  ? __pfx_evict+0x10/0x10
[  187.376230][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  187.376243][    C0]  ? _raw_spin_unlock+0x28/0x50
[  187.376255][    C0]  ? iput+0x6d8/0x9d0
[  187.376273][    C0]  __dentry_kill+0x209/0x660
[  187.376283][    C0]  ? dput+0x37/0x2b0
[  187.376299][    C0]  dput+0x19f/0x2b0
[  187.376314][    C0]  __fput+0x68e/0xa70
[  187.376330][    C0]  task_work_run+0x1d4/0x260
[  187.376346][    C0]  ? __pfx_task_work_run+0x10/0x10
[  187.376362][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  187.376377][    C0]  exit_to_user_mode_loop+0xec/0x110
[  187.376394][    C0]  do_syscall_64+0x2bd/0x3b0
[  187.376408][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.376420][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.376431][    C0]  ? exc_page_fault+0x9f/0xf0
[  187.376444][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.376456][    C0] RIP: 0033:0x7f9f4df8d84a
[  187.376467][    C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24
[  187.376475][    C0] RSP: 002b:00007ffcbbc4c260 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  187.376487][    C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f9f4df8d84a
[  187.376494][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  187.376500][    C0] RBP: 00007ffcbbc4c2bc R08: 0000000000000000 R09: 00007ffcbbc4bfc7
[  187.376508][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001a7
[  187.376516][    C0] R13: 00000000000927c0 R14: 000000000002d407 R15: 00007ffcbbc4c310
[  187.376530][    C0]  </TASK>
[  187.376534][    C0] 
[  187.684534][    C0] Allocated by task 8003:
[  187.686312][    C0]  kasan_save_track+0x3e/0x80
[  187.688221][    C0]  __kasan_slab_alloc+0x6c/0x80
[  187.690293][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  187.692498][    C0]  xfrm_state_alloc+0x24/0x2f0
[  187.694442][    C0]  __find_acq_core+0x8a7/0x1c00
[  187.696479][    C0]  xfrm_find_acq+0x78/0xa0
[  187.698264][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  187.700368][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  187.702364][    C0]  netlink_rcv_skb+0x208/0x470
[  187.704289][    C0]  xfrm_netlink_rcv+0x79/0x90
[  187.706161][    C0]  netlink_unicast+0x82f/0x9e0
[  187.708045][    C0]  netlink_sendmsg+0x805/0xb30
[  187.709939][    C0]  __sock_sendmsg+0x21c/0x270
[  187.711907][    C0]  ____sys_sendmsg+0x505/0x830
[  187.713919][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  187.715845][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  187.717899][    C0]  do_syscall_64+0xfa/0x3b0
[  187.719713][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.722172][    C0] 
[  187.723156][    C0] Freed by task 792:
[  187.724795][    C0]  kasan_save_track+0x3e/0x80
[  187.726740][    C0]  kasan_save_free_info+0x46/0x50
[  187.728867][    C0]  __kasan_slab_free+0x5b/0x80
[  187.730787][    C0]  kmem_cache_free+0x18f/0x400
[  187.732806][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  187.734909][    C0]  process_scheduled_works+0xae1/0x17b0
[  187.737346][    C0]  worker_thread+0x8a0/0xda0
[  187.739030][    C0]  kthread+0x711/0x8a0
[  187.740427][    C0]  ret_from_fork+0x3fc/0x770
[  187.741976][    C0]  ret_from_fork_asm+0x1a/0x30
[  187.743581][    C0] 
[  187.744386][    C0] The buggy address belongs to the object at ffff88803b4f5b00
[  187.744386][    C0]  which belongs to the cache xfrm_state of size 928
[  187.749405][    C0] The buggy address is located 816 bytes inside of
[  187.749405][    C0]  freed 928-byte region [ffff88803b4f5b00, ffff88803b4f5ea0)
[  187.753739][    C0] 
[  187.754526][    C0] The buggy address belongs to the physical page:
[  187.756685][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b4f5680 pfn:0x3b4f4
[  187.760757][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  187.764345][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  187.767548][    C0] page_type: f5(slab)
[  187.769295][    C0] raw: 00fff00000000040 ffff88801c38db40 dead000000000122 0000000000000000
[  187.772787][    C0] raw: ffff88803b4f5680 00000000800e000c 00000000f5000000 0000000000000000
[  187.776486][    C0] head: 00fff00000000040 ffff88801c38db40 dead000000000122 0000000000000000
[  187.780210][    C0] head: ffff88803b4f5680 00000000800e000c 00000000f5000000 0000000000000000
[  187.783766][    C0] head: 00fff00000000002 ffffea0000ed3d01 00000000ffffffff 00000000ffffffff
[  187.787310][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  187.790796][    C0] page dumped because: kasan: bad access detected
[  187.793466][    C0] page_owner tracks the page as allocated
[  187.796026][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6165, tgid 6164 (syz.0.78), ts 74351827086, free_ts 66040982891
[  187.803649][    C0]  post_alloc_hook+0x240/0x2a0
[  187.805816][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  187.808362][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  187.810899][    C0]  alloc_pages_mpol+0x232/0x4a0
[  187.812964][    C0]  allocate_slab+0x8a/0x370
[  187.814898][    C0]  ___slab_alloc+0xbeb/0x1410
[  187.816958][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  187.819327][    C0]  xfrm_state_alloc+0x24/0x2f0
[  187.821413][    C0]  pfkey_add+0x6e4/0x2e00
[  187.823346][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  187.825475][    C0]  __sock_sendmsg+0x21c/0x270
[  187.827418][    C0]  ____sys_sendmsg+0x505/0x830
[  187.829254][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  187.830868][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  187.832822][    C0]  do_syscall_64+0xfa/0x3b0
[  187.834492][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.836610][    C0] page last free pid 5297 tgid 5297 stack trace:
[  187.838773][    C0]  __free_frozen_pages+0xbc4/0xd30
[  187.840502][    C0]  __slab_free+0x303/0x3c0
[  187.842030][    C0]  qlist_free_all+0x97/0x140
[  187.843802][    C0]  kasan_quarantine_reduce+0x148/0x160
[  187.845829][    C0]  __kasan_slab_alloc+0x22/0x80
[  187.847715][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  187.850093][    C0]  getname_flags+0xb8/0x540
[  187.851951][    C0]  do_readlinkat+0xbc/0x500
[  187.853816][    C0]  __x64_sys_readlink+0x7f/0x90
[  187.855766][    C0]  do_syscall_64+0xfa/0x3b0
[  187.857314][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.859514][    C0] 
[  187.860388][    C0] Memory state around the buggy address:
[  187.862317][    C0]  ffff88803b4f5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.865259][    C0]  ffff88803b4f5d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.868605][    C0] >ffff88803b4f5e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.871345][    C0]                                      ^
[  187.873219][    C0]  ffff88803b4f5e80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  187.876257][    C0]  ffff88803b4f5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  187.879051][    C0] ==================================================================
[  187.882414][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  187.885399][    C0] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  187.890612][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.894935][    C0] Call Trace:
[  187.896086][    C0]  <IRQ>
[  187.897278][    C0]  dump_stack_lvl+0x99/0x250
[  187.899217][    C0]  ? __asan_memcpy+0x40/0x70
[  187.901105][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.903321][    C0]  ? __pfx__printk+0x10/0x10
[  187.905375][    C0]  vpanic+0x281/0x750
[  187.907146][    C0]  ? __pfx_vpanic+0x10/0x10
[  187.909136][    C0]  ? irqentry_exit+0x74/0x90
[  187.911148][    C0]  panic+0xb9/0xc0
[  187.912721][    C0]  ? __pfx_panic+0x10/0x10
[  187.914636][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  187.917102][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.919647][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  187.921865][    C0]  check_panic_on_warn+0x89/0xb0
[  187.923968][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  187.926297][    C0]  end_report+0x78/0x160
[  187.928148][    C0]  kasan_report+0x129/0x150
[  187.930096][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  187.932225][    C0]  xfrm_state_find+0x2cf2/0x5400
[  187.934363][    C0]  ? ipv6_get_saddr_eval+0xb85/0xee0
[  187.936345][    C0]  ? ipv6_dev_get_saddr+0x143/0xb70
[  187.938182][    C0]  ? xfrm_state_find+0x1da/0x5400
[  187.940102][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  187.942316][    C0]  ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80
[  187.944990][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  187.947590][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  187.950211][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  187.953156][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  187.955667][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  187.958157][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  187.960376][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  187.962667][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  187.965208][    C0]  ? dst_cache_get+0x10e/0x5b0
[  187.967343][    C0]  xfrm_lookup_route+0x3c/0x1c0
[  187.969458][    C0]  tipc_udp_xmit+0x1c3/0xaa0
[  187.971436][    C0]  ? tipc_udp_xmit+0xa4/0xaa0
[  187.973474][    C0]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  187.975720][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  187.978048][    C0]  ? __asan_memcpy+0x40/0x70
[  187.980158][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  187.982461][    C0]  tipc_udp_send_msg+0x27f/0x3f0
[  187.984643][    C0]  tipc_bearer_xmit_skb+0x2b3/0x400
[  187.986876][    C0]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  187.989111][    C0]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  187.991416][    C0]  tipc_disc_timeout+0x580/0x6d0
[  187.993390][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  187.995812][    C0]  call_timer_fn+0x17e/0x5f0
[  187.997751][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  188.000002][    C0]  ? call_timer_fn+0xbe/0x5f0
[  188.001933][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  188.003929][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.006084][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.008256][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  188.010367][    C0]  __run_timer_base+0x61a/0x860
[  188.012083][    C0]  ? ktime_get+0x3e/0x1f0
[  188.013490][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  188.015214][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  188.017223][    C0]  run_timer_softirq+0xb7/0x180
[  188.019009][    C0]  handle_softirqs+0x286/0x870
[  188.020789][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  188.022866][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  188.024697][    C0]  __irq_exit_rcu+0xca/0x1f0
[  188.026255][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  188.028008][    C0]  irq_exit_rcu+0x9/0x30
[  188.029341][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  188.031163][    C0]  </IRQ>
[  188.032156][    C0]  <TASK>
[  188.033151][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.035148][    C0] RIP: 0010:__asan_memset+0x8/0x50
[  188.036855][    C0] Code: 00 e9 bc e4 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 <48> 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8
[  188.042962][    C0] RSP: 0018:ffffc900043cf0d8 EFLAGS: 00000246
[  188.045096][    C0] RAX: 1ffff92000879e4c RBX: ffffc900043cf260 RCX: 1ffff92000879e01
[  188.047960][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900043cf278
[  188.051114][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: ffffffff8172c195
[  188.054379][    C0] R10: ffffc900043cf278 R11: fffff52000879e51 R12: ffffc900043cf2c0
[  188.057291][    C0] R13: ffffc900043cf278 R14: ffffc900043cf228 R15: ffffc900043cf270
[  188.060267][    C0]  ? unwind_next_frame+0xa5/0x2390
[  188.062333][    C0]  ? rcu_is_watching+0x15/0xb0
[  188.064500][    C0]  unwind_next_frame+0xc98/0x2390
[  188.066604][    C0]  ? unwind_next_frame+0xa5/0x2390
[  188.068579][    C0]  ? arch_stack_walk+0xe4/0x150
[  188.070348][    C0]  __unwind_start+0x5b9/0x760
[  188.072006][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  188.074258][    C0]  arch_stack_walk+0xe4/0x150
[  188.076194][    C0]  ? stack_trace_save+0x9c/0xe0
[  188.078319][    C0]  stack_trace_save+0x9c/0xe0
[  188.080399][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  188.082484][    C0]  save_stack+0xf5/0x1f0
[  188.083920][    C0]  ? __pfx_save_stack+0x10/0x10
[  188.085566][    C0]  ? page_ext_put+0x97/0xc0
[  188.087150][    C0]  __reset_page_owner+0x71/0x1f0
[  188.088956][    C0]  free_unref_folios+0xdbd/0x1520
[  188.090820][    C0]  ? folios_put_refs+0x299/0x640
[  188.092508][    C0]  folios_put_refs+0x559/0x640
[  188.094141][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[  188.095905][    C0]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[  188.098379][    C0]  shmem_undo_range+0x49e/0x14b0
[  188.100580][    C0]  ? __pfx_shmem_undo_range+0x10/0x10
[  188.102452][    C0]  ? kernel_text_address+0xa5/0xe0
[  188.104195][    C0]  ? __kernel_text_address+0xd/0x40
[  188.106122][    C0]  ? stack_depot_save_flags+0x40/0x860
[  188.107964][    C0]  ? kasan_save_stack+0x4d/0x60
[  188.109609][    C0]  ? kasan_save_stack+0x3e/0x60
[  188.111469][    C0]  ? call_rcu+0x157/0x9c0
[  188.113351][    C0]  shmem_evict_inode+0x272/0xa70
[  188.115513][    C0]  ? inode_wait_for_writeback+0xf9/0x290
[  188.117962][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[  188.120433][    C0]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  188.123037][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  188.125273][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[  188.127284][    C0]  evict+0x504/0x9c0
[  188.128743][    C0]  ? __pfx_evict+0x10/0x10
[  188.130680][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  188.132910][    C0]  ? _raw_spin_unlock+0x28/0x50
[  188.134981][    C0]  ? iput+0x6d8/0x9d0
[  188.136675][    C0]  __dentry_kill+0x209/0x660
[  188.138638][    C0]  ? dput+0x37/0x2b0
[  188.140383][    C0]  dput+0x19f/0x2b0
[  188.142095][    C0]  __fput+0x68e/0xa70
[  188.143594][    C0]  task_work_run+0x1d4/0x260
[  188.145233][    C0]  ? __pfx_task_work_run+0x10/0x10
[  188.147479][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  188.149787][    C0]  exit_to_user_mode_loop+0xec/0x110
[  188.152073][    C0]  do_syscall_64+0x2bd/0x3b0
[  188.154092][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.156389][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.159089][    C0]  ? exc_page_fault+0x9f/0xf0
[  188.161098][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.163642][    C0] RIP: 0033:0x7f9f4df8d84a
[  188.165230][    C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24
[  188.172994][    C0] RSP: 002b:00007ffcbbc4c260 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  188.176669][    C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f9f4df8d84a
[  188.180431][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  188.183979][    C0] RBP: 00007ffcbbc4c2bc R08: 0000000000000000 R09: 00007ffcbbc4bfc7
[  188.187341][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001a7
[  188.190726][    C0] R13: 00000000000927c0 R14: 000000000002d407 R15: 00007ffcbbc4c310
[  188.194231][    C0]  </TASK>
[  188.196416][    C0] Kernel Offset: disabled
[  188.198430][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:04:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006990
R8 =ffff888107480237 R9 =1ffff11020e90046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18f2 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555733ff500 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555573422608 CR3=0000000028fb2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff918787498 00007ff918787470 XMM03=00007ff9187874a8 00007ff9187874a0
XMM04=00007ff9192ed100 00007ff918787460 XMM05=00007ff918787478 00007ff9187874c0
XMM06=00007ff9187874b8 00007ff9187874b0 XMM07=00007ff9187874a8 00007ff9187874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007ff918612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=98e6f97837ddc600 RBX=ffffffff81968308 RCX=98e6f97837ddc600 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcbbc4afb8 CR3=000000003d0dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6d1f987498 00007f6d1f987470 XMM03=00007f6d1f9874a8 00007f6d1f9874a0
XMM04=00007f6d204ed100 00007f6d1f987460 XMM05=00007f6d1f987478 00007f6d1f9874c0
XMM06=00007f6d1f9874b8 00007f6d1f9874b0 XMM07=00007f6d1f9874a8 00007f6d1f9874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6d1f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
