last executing test programs:

2.307059509s ago: executing program 1 (id=882):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socket$netlink(0x10, 0x3, 0x0)
r3 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000000000020000000000000000000000000000000100140000000000f7799d882160f5"], 0x68}, 0x1, 0x7}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0)

2.180018554s ago: executing program 0 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x22020600)
syz_open_dev$loop(0x0, 0x4e, 0x101240)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00')
preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)

1.540401359s ago: executing program 2 (id=887):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r2=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x1fff})

1.540014462s ago: executing program 2 (id=888):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfff, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r4, r2)
splice(r0, 0x0, r1, 0x0, 0x1100000000f336, 0x0)

1.399210328s ago: executing program 1 (id=889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x8042)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

1.398991173s ago: executing program 0 (id=890):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/7, 0x7}, 0x9}], 0x1, 0x40000102, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0)

1.39879162s ago: executing program 1 (id=891):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='io_uring_create\x00', r0, 0x0, 0x1}, 0x18)
syz_io_uring_setup(0x445e, &(0x7f0000000080)={0x0, 0x70da, 0x1000, 0x0, 0x10000000}, &(0x7f0000000100), &(0x7f0000000240))

1.3007505s ago: executing program 1 (id=892):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x64f015fd58a9b8d5)

1.300648522s ago: executing program 1 (id=893):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000380000/0x14000)=nil, &(0x7f00006f0000/0x3000)=nil, 0x14000, 0x1, 0x2})

1.271121072s ago: executing program 1 (id=894):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0xa94, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001ab00)=""/102400, 0x19000)
socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x3, 0x200, &(0x7f0000003c40)="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"})

608.562466ms ago: executing program 2 (id=895):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0x13}, 0x94)

547.270215ms ago: executing program 2 (id=896):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)

470.404232ms ago: executing program 0 (id=897):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
write$dsp(r0, &(0x7f0000000100)="04", 0x1)
r1 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2de7, 0x4000, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

399.53528ms ago: executing program 2 (id=898):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {0xffdd}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0xb})

399.191557ms ago: executing program 2 (id=899):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008c0, &(0x7f0000000080)={[{@data_ordered}, {@heartbeat_none}, {@usrquota}, {@user_xattr}, {@err_cont}, {@data_writeback}, {@journal_async_commit}, {@noacl}]}, 0x1, 0x4431, &(0x7f00000088c0)="$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")

300.744376ms ago: executing program 0 (id=900):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10405, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nouid32}, {@quota}]}, 0x3, 0x434, &(0x7f0000000d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

120.681768ms ago: executing program 0 (id=901):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x98}}, 0x0)

0s ago: executing program 0 (id=902):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @etimer_thresh={0x8, 0xc, 0xca1e}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

kernel console output (not intermixed with test programs):

eth0_vlan: entered promiscuous mode
[   72.545006][ T5934] veth1_vlan: entered promiscuous mode
[   72.598949][ T5927] veth0_macvtap: entered promiscuous mode
[   72.605939][ T5934] veth0_macvtap: entered promiscuous mode
[   72.622637][ T5927] veth1_macvtap: entered promiscuous mode
[   72.627368][ T5934] veth1_macvtap: entered promiscuous mode
[   72.647951][  T243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.650982][  T243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.665793][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.688704][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.703554][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.712184][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.714824][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.717997][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.721105][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.722528][  T243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.727949][  T243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.736336][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.758283][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.775651][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.788366][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.791772][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.793502][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.887128][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.891736][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.911486][  T243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.914322][  T243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.930225][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.932935][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.956733][  T243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.962952][  T243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.172121][ T6003] warning: `syz.2.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.536836][ T6035] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   73.549868][ T5933] Bluetooth: hci2: Malformed LE Event: 0x0d
[   73.731034][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'.
[   74.056953][ T6064] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.152030][ T6067] loop1: detected capacity change from 0 to 1024
[   74.154868][ T6067] =======================================================
[   74.154868][ T6067] WARNING: The mand mount option has been deprecated and
[   74.154868][ T6067]          and is ignored by this kernel. Remove the mand
[   74.154868][ T6067]          option from the mount to silence this warning.
[   74.154868][ T6067] =======================================================
[   74.186799][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.197890][ T6067] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.227369][ T6067] syz.1.105 (6067) used greatest stack depth: 19448 bytes left
[   74.252100][ T1090] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u10:5: lblock 1 mapped to illegal pblock 1 (length 15)
[   74.259442][ T1090] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[   74.263357][ T1090] EXT4-fs (loop1): This should not happen!! Data will be lost
[   74.263357][ T1090] 
[   74.293455][ T5934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.349909][ T6078] misc userio: The device must be registered before sending interrupts
[   74.358376][ T5933] Bluetooth: hci0: command tx timeout
[   74.438390][ T5236] Bluetooth: hci1: command tx timeout
[   74.440720][ T5933] Bluetooth: hci2: command tx timeout
[   74.632065][ T6096] loop0: detected capacity change from 0 to 1024
[   74.635564][ T6093] loop1: detected capacity change from 0 to 4096
[   74.822552][ T6102] loop1: detected capacity change from 0 to 16
[   74.842492][ T6102] erofs (device loop1): mounted with root inode @ nid 36.
[   75.034195][ T6113] loop1: detected capacity change from 0 to 256
[   75.057148][ T6113] exfat: Deprecated parameter 'namecase'
[   75.068454][ T6113] exfat: Deprecated parameter 'namecase'
[   75.070615][ T6113] exfat: Deprecated parameter 'namecase'
[   75.076042][ T6113] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   75.087947][ T6113] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[   75.300194][   T52] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.501079][   T52] usb 1-1: unable to get BOS descriptor or descriptor too short
[   75.506438][   T52] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.513271][   T52] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   75.517190][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.527261][   T52] usb 1-1: Product: syz
[   75.529051][   T52] usb 1-1: Manufacturer: syz
[   75.530921][   T52] usb 1-1: SerialNumber: syz
[   75.656519][ T6126] loop1: detected capacity change from 0 to 40427
[   75.669082][ T6126] F2FS-fs: heap/no_heap options were deprecated
[   75.689041][ T6126] F2FS-fs (loop1): build fault injection rate: 19
[   75.706621][ T6126] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   75.725257][ T6126] F2FS-fs (loop1): invalid crc value
[   75.771778][ T6126] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   75.796076][   T52] usb 1-1: USB disconnect, device number 2
[   75.874223][ T6126] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[   75.884680][ T6126] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   75.890854][ T6126] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   75.903532][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   75.951847][ T6126] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   75.966653][ T6126] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0
[   75.972387][   T33] audit: type=1800 audit(1755561405.772:2): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.131" name="file1" dev="loop1" ino=10 res=0 errno=0
[   75.983504][ T6126] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_mkdir+0x478/0x570
[   75.994164][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) 
[   75.994198][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.994205][ T6126] Call Trace:
[   75.994210][ T6126]  <TASK>
[   75.994215][ T6126]  dump_stack_lvl+0x189/0x250
[   75.994232][ T6126]  ? preempt_schedule_thunk+0x16/0x30
[   75.994250][ T6126]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.994262][ T6126]  ? __pfx_queue_work_on+0x10/0x10
[   75.994272][ T6126]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   75.994285][ T6126]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   75.994302][ T6126]  ? f2fs_hw_is_readonly+0x39b/0x470
[   75.994323][ T6126]  f2fs_handle_critical_error+0x37c/0x540
[   75.994344][ T6126]  f2fs_balance_fs+0x32d/0x7f0
[   75.994362][ T6126]  ? f2fs_mkdir+0x478/0x570
[   75.994377][ T6126]  ? __pfx_f2fs_balance_fs+0x10/0x10
[   75.994390][ T6126]  ? __pfx_wake_up_var+0x10/0x10
[   75.994432][ T6126]  ? do_raw_spin_unlock+0x4d/0x240
[   75.994449][ T6126]  f2fs_mkdir+0x478/0x570
[   75.994467][ T6126]  ? bpf_lsm_inode_mkdir+0x9/0x20
[   75.994482][ T6126]  vfs_mkdir+0x306/0x510
[   75.994505][ T6126]  do_mkdirat+0x247/0x590
[   75.994522][ T6126]  ? __pfx_do_mkdirat+0x10/0x10
[   75.994533][ T6126]  ? strncpy_from_user+0x150/0x290
[   75.994549][ T6126]  ? getname_flags+0x1e5/0x540
[   75.994561][ T6126]  __x64_sys_mkdir+0x6c/0x80
[   75.994574][ T6126]  do_syscall_64+0xfa/0x3b0
[   75.994589][ T6126]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.994602][ T6126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.994613][ T6126]  ? exc_page_fault+0x9f/0xf0
[   75.994627][ T6126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.994639][ T6126] RIP: 0033:0x7f62a078ebe9
[   75.994649][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.994658][ T6126] RSP: 002b:00007f62a162f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[   75.994672][ T6126] RAX: ffffffffffffffda RBX: 00007f62a09b5fa0 RCX: 00007f62a078ebe9
[   75.994680][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[   75.994687][ T6126] RBP: 00007f62a0811e19 R08: 0000000000000000 R09: 0000000000000000
[   75.994693][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.994706][ T6126] R13: 00007f62a09b6038 R14: 00007f62a09b5fa0 R15: 00007ffcee5b3108
[   75.994724][ T6126]  </TASK>
[   75.994767][ T6126] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[   76.438276][ T5933] Bluetooth: hci0: command tx timeout
[   76.519983][ T5933] Bluetooth: hci2: command tx timeout
[   76.522204][ T5933] Bluetooth: hci1: command tx timeout
[   76.553186][ T6153] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   76.709201][ T6161] loop2: detected capacity change from 0 to 1024
[   76.954816][  T243] hfsplus: b-tree write err: -5, ino 3
[   77.313643][ T6172] loop1: detected capacity change from 0 to 256
[   77.339744][ T6172] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[   77.722575][ T6181] loop2: detected capacity change from 0 to 64
[   78.226105][ T6189] loop0: detected capacity change from 0 to 1024
[   78.299817][ T4407] hfsplus: b-tree write err: -5, ino 4
[   78.382823][ T6197] comedi comedi0: adq12b: I/O port conflict (0xffffffffffffffff,16)
[   78.452462][ T6203] loop1: detected capacity change from 0 to 8
[   78.528137][ T5236] Bluetooth: hci0: command tx timeout
[   78.597748][ T5236] Bluetooth: hci1: command tx timeout
[   78.600003][ T5236] Bluetooth: hci2: command tx timeout
[   78.683817][ T6215] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   78.797766][  T792] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.947729][  T792] usb 2-1: Using ep0 maxpacket: 8
[   78.952794][  T792] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[   78.956598][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   78.961515][  T792] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   78.964744][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.969303][  T792] usb 2-1: config 0 descriptor??
[   78.971861][ T6211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   79.179985][   T95] usb 2-1: USB disconnect, device number 2
[   79.340896][ T6206] overlayfs: statfs failed on './file0'
[   79.391259][   T33] audit: type=1326 audit(1755561409.202:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.414196][   T33] audit: type=1326 audit(1755561409.212:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.442955][   T33] audit: type=1326 audit(1755561409.212:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.464582][   T33] audit: type=1326 audit(1755561409.212:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.475779][   T33] audit: type=1326 audit(1755561409.212:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.486432][   T33] audit: type=1326 audit(1755561409.212:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.511803][   T33] audit: type=1326 audit(1755561409.212:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.522970][ T6236] random: crng reseeded on system resumption
[   79.529216][   T33] audit: type=1326 audit(1755561409.212:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.541840][   T33] audit: type=1326 audit(1755561409.222:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf3f8ebe9 code=0x7ffc0000
[   79.700435][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.908249][ T6256] loop0: detected capacity change from 0 to 512
[   79.912180][ T6256] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.917553][ T6256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   79.970252][ T6256] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.188: invalid indirect mapped block 83886080 (level 1)
[   79.983951][ T6256] EXT4-fs (loop0): Remounting filesystem read-only
[   79.986959][ T6256] EXT4-fs (loop0): 1 orphan inode deleted
[   79.999988][ T6256] EXT4-fs (loop0): 1 truncate cleaned up
[   80.030786][ T6256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.126966][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.482628][ T6271] loop0: detected capacity change from 0 to 16
[   80.489702][ T6271] erofs (device loop0): mounted with root inode @ nid 36.
[   80.521221][   T57] erofs (device loop0): failed to decompress -26 in[46, 0] out[9000]
[   80.528540][ T6271] erofs (device loop0): failed to decompress -26 in[46, 4050] out[8192]
[   80.532077][ T6271] erofs (device loop0): read error -117 @ 1 of nid 89
[   80.637886][ T5989] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.797769][ T5989] usb 3-1: Using ep0 maxpacket: 8
[   80.802851][ T5989] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.807467][ T5989] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.814100][ T5989] usb 3-1: config 0 interface 0 has no altsetting 0
[   80.816885][ T5989] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00
[   80.822165][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.834193][ T5989] usb 3-1: config 0 descriptor??
[   81.430090][   T24] cfg80211: failed to load regulatory.db
[   81.435424][ T5989] logitech 0003:046D:C219.0001: unknown main item tag 0x4
[   81.443326][ T5989] logitech 0003:046D:C219.0001: unknown main item tag 0x0
[   81.465975][ T5989] logitech 0003:046D:C219.0001: unknown main item tag 0x0
[   81.532188][ T5989] logitech 0003:046D:C219.0001: hidraw0: USB HID v0.00 Device [HID 046d:c219] on usb-dummy_hcd.2-1/input0
[   81.536716][ T5989] logitech 0003:046D:C219.0001: no inputs found
[   81.581889][ T5989] usb 3-1: USB disconnect, device number 2
[   82.402297][ T6290] syz.2.201 uses obsolete (PF_INET,SOCK_PACKET)
[   83.227841][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.279442][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.388786][    T9] usb 2-1: Using ep0 maxpacket: 32
[   83.395223][    T9] usb 2-1: config 15 has an invalid interface number: 48 but max is 0
[   83.399907][    T9] usb 2-1: config 15 has no interface number 0
[   83.405691][    T9] usb 2-1: config 15 interface 48 altsetting 5 endpoint 0x6 has an invalid bInterval 0, changing to 7
[   83.410406][    T9] usb 2-1: config 15 interface 48 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0
[   83.415834][    T9] usb 2-1: config 15 interface 48 has no altsetting 0
[   83.422081][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice= 5.ad
[   83.425965][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.429500][    T9] usb 2-1: Product: syz
[   83.431475][    T9] usb 2-1: Manufacturer: syz
[   83.433311][    T9] usb 2-1: SerialNumber: syz
[   83.439969][   T10] usb 3-1: Using ep0 maxpacket: 32
[   83.445632][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.450120][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.454462][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   83.459860][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   83.463757][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.470878][   T10] usb 3-1: config 0 descriptor??
[   83.665026][    T9] usbtest 2-1:15.48: couldn't get endpoints, -22
[   83.670465][    T9] usbtest 2-1:15.48: probe with driver usbtest failed with error -22
[   83.685810][    T9] usb 2-1: USB disconnect, device number 3
[   83.834826][ T6322] loop0: detected capacity change from 0 to 2048
[   83.917003][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0002/input/input5
[   84.008679][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0002/input/input6
[   84.415727][   T10] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[   84.439356][   T10] usb 3-1: USB disconnect, device number 3
[   84.524135][ T6329] loop1: detected capacity change from 0 to 164
[   84.818310][ T6342] netlink: 'syz.2.225': attribute type 1 has an invalid length.
[   84.823054][ T6342] netlink: 224 bytes leftover after parsing attributes in process `syz.2.225'.
[   84.956039][ T6351] evm: overlay not supported
[   85.263644][ T6352] loop1: detected capacity change from 0 to 32768
[   85.277972][  T792] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   85.285440][ T6352] jfs_mount: Mount Failure: superblock is corrupt!
[   85.294091][ T6352] Mount JFS Failure: -22
[   85.295851][ T6352] jfs_mount failed w/return code = -22
[   85.458453][  T792] usb 1-1: Using ep0 maxpacket: 8
[   85.463549][  T792] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[   85.466345][  T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.470493][  T792] usb 1-1: config 0 has no interface number 0
[   85.477676][  T792] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[   85.482707][  T792] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[   85.494110][  T792] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[   85.497933][ T6369] capability: warning: `syz.1.238' uses deprecated v2 capabilities in a way that may be insecure
[   85.498521][   T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   85.502036][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.502057][  T792] usb 1-1: Product: syz
[   85.509217][  T792] usb 1-1: Manufacturer: syz
[   85.511233][  T792] usb 1-1: SerialNumber: syz
[   85.514614][  T792] usb 1-1: config 0 descriptor??
[   85.519535][ T6355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   85.660438][   T10] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[   85.667685][   T10] usb 3-1: config 0 has no interface number 0
[   85.670345][   T10] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   85.685181][   T10] usb 3-1: config 0 interface 11 has no altsetting 0
[   85.688233][   T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   85.692307][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.699261][ T6377] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   85.702340][   T95] IPVS: starting estimator thread 0...
[   85.705770][   T10] usb 3-1: config 0 descriptor??
[   85.711540][ T6359] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   85.714735][ T6359] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   85.722956][   T10] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected
[   85.739256][  T792] usb 1-1: NFC: intf ffff88810ff1b000 id ffffffff8eb53b60
[   85.741347][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81
[   85.748023][  T792] usb 1-1: USB disconnect, device number 3
[   85.752304][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82
[   85.762493][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1
[   85.769486][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2
[   85.779744][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85
[   85.783485][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5
[   85.804627][   T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   85.814437][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83
[   85.817962][ T6379] IPVS: using max 81 ests per chain, 194400 per kthread
[   85.822884][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84
[   85.826346][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3
[   85.837456][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4
[   85.847828][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86
[   85.851359][   T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6
[   85.895631][   T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   85.992810][   T10] usb 3-1: USB disconnect, device number 4
[   86.025663][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   86.036678][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   86.042747][   T10] keyspan 3-1:0.11: device disconnected
[   86.798143][  T792] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   86.957840][  T792] usb 1-1: Using ep0 maxpacket: 16
[   86.967017][  T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.995408][  T792] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   87.004131][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.007503][  T792] usb 1-1: Product: syz
[   87.009553][  T792] usb 1-1: Manufacturer: syz
[   87.011705][  T792] usb 1-1: SerialNumber: syz
[   87.024190][  T792] usb 1-1: config 0 descriptor??
[   87.036005][  T792] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22
[   87.044910][  T792] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22
[   87.140156][ T6393] kAFS: unable to lookup cell '\/'
[   87.240470][  T792] usb 1-1: USB disconnect, device number 4
[   87.326313][ T6401] loop1: detected capacity change from 0 to 4096
[   87.331029][ T6401] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   87.556773][ T6409] loop1: detected capacity change from 0 to 1024
[   87.591436][ T6409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.600155][ T6409] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   87.630866][ T5934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.000416][  T792] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   88.170973][  T792] usb 2-1: Using ep0 maxpacket: 16
[   88.181895][  T792] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   88.189543][  T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.200780][  T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.214033][  T792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.221062][ T6439] loop2: detected capacity change from 0 to 128
[   88.223800][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.233123][  T792] usb 2-1: Product: syz
[   88.240823][ T6439] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   88.242144][  T792] usb 2-1: Manufacturer: syz
[   88.249330][  T792] usb 2-1: SerialNumber: syz
[   88.255257][ T6439] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.276812][ T6439] syz.2.268 (pid 6439) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   88.287026][ T6439] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[   88.291963][ T6439] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[   88.324944][ T5930] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   88.671650][  T792] usb 2-1: 0:2 : does not exist
[   88.907912][ T5988] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   89.057731][ T5988] usb 3-1: Using ep0 maxpacket: 8
[   89.062331][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[   89.066624][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[   89.073608][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   89.080798][ T5988] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[   89.084759][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.089317][ T5988] usb 3-1: Product: syz
[   89.091162][ T5988] usb 3-1: Manufacturer: syz
[   89.093044][ T5988] usb 3-1: SerialNumber: syz
[   89.103519][ T5988] usb 3-1: config 0 descriptor??
[   89.108493][ T5988] radioshark 3-1:0.0: Invalid radioSHARK device
[   89.111738][ T5988] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[   89.115392][ T5988] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   89.312406][ T5988] usb 3-1: USB disconnect, device number 5
[   89.824741][ T6462] loop0: detected capacity change from 0 to 4096
[   90.391839][  T792] usb 2-1: USB disconnect, device number 4
[   90.411255][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.763631][ T6491] loop2: detected capacity change from 0 to 4096
[   91.779946][ T5975] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   91.800214][ T6492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.895668][ T6496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.931218][ T5975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   91.932852][ T6498] loop1: detected capacity change from 0 to 8
[   91.935714][ T5975] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   91.935749][ T5975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   91.935764][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.944714][ T6498] SQUASHFS error: Failed to read block 0x4de: -5
[   91.954893][ T6498] SQUASHFS error: Failed to read block 0x4de: -5
[   91.960458][ T6498] SQUASHFS error: Failed to read block 0x4de: -5
[   91.963627][ T6498] SQUASHFS error: Failed to read block 0x4de: -5
[   91.966577][ T6489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   91.971196][ T6498] SQUASHFS error: Failed to read block 0x4de: -5
[   91.974711][   T33] kauditd_printk_skb: 74 callbacks suppressed
[   91.974722][   T33] audit: type=1800 audit(1755561421.782:86): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.293" name="file1" dev="loop1" ino=5 res=0 errno=0
[   91.988697][ T5975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   92.082798][ T6503] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.148961][ T5988] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   92.200618][ T5975] usb 1-1: USB disconnect, device number 5
[   92.327790][ T5988] usb 3-1: Using ep0 maxpacket: 16
[   92.333464][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.340151][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.344784][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   92.349333][ T5988] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   92.353612][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.359816][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'.
[   92.364928][ T5988] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   92.368894][ T5988] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   92.372141][ T5988] usb 3-1: Manufacturer: syz
[   92.378463][ T5988] usb 3-1: config 0 descriptor??
[   92.469074][ T6517] deleting an unspecified loop device is not supported.
[   92.623488][ T6519] loop1: detected capacity change from 0 to 32768
[   92.638776][ T5988] rc_core: IR keymap rc-hauppauge not found
[   92.641126][ T5988] Registered IR keymap rc-empty
[   92.643286][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.667840][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.691764][ T5988] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   92.697237][ T5988] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[   92.707375][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.729006][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.758948][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.789214][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.831249][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.847754][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.870183][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.887832][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.907793][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.931026][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   92.960822][ T5988] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   92.964634][ T5988] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   93.046009][ T5988] usb 3-1: USB disconnect, device number 6
[   93.124532][ T5859] udevd[5859]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory
[   93.478207][ T6532] loop0: detected capacity change from 0 to 32768
[   93.491599][ T6532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.308 (6532)
[   93.539817][ T6532] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.549396][ T6532] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   93.569449][ T6532] BTRFS info (device loop0): using free-space-tree
[   93.731853][ T6532] BTRFS info (device loop0): rebuilding free space tree
[   93.791980][ T6556] loop1: detected capacity change from 0 to 512
[   93.798299][ T6532] BTRFS info (device loop0): checking UUID tree
[   93.804256][ T6556] EXT4-fs: inline encryption not supported
[   93.829220][ T6556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   93.851124][   T33] audit: type=1800 audit(1755561423.662:87): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="file2" dev="loop0" ino=261 res=0 errno=0
[   93.864218][ T6556] EXT4-fs (loop1): 1 truncate cleaned up
[   93.868384][ T6556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.941035][ T5927] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.955640][ T6552] loop2: detected capacity change from 0 to 32768
[   93.965631][ T5934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.064506][ T6552] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   94.147510][ T6562] loop1: detected capacity change from 0 to 4096
[   94.256651][ T6552] syz.2.311 (6552) used greatest stack depth: 19272 bytes left
[   94.322756][ T5930] ocfs2: Unmounting device (7,2) on (node local)
[   94.343641][ T6569] QAT: Invalid ioctl 21531
[   94.523133][ T6579] loop0: detected capacity change from 0 to 256
[   94.561528][ T6579] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.599291][ T6583] gfs2: path_lookup on GPL returned error -2
[   94.862989][ T6602] loop1: detected capacity change from 0 to 1024
[   94.881903][ T6602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.920068][ T6602] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.331: Abort forced by user
[   94.925135][ T6602] EXT4-fs (loop1): Remounting filesystem read-only
[   94.929062][ T6602] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   94.975157][ T5934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.050518][ T6606] loop1: detected capacity change from 0 to 4096
[   95.071707][ T6607] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.739372][ T6621] loop0: detected capacity change from 0 to 2048
[   95.762603][ T6621] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 98: 0x1f != 0x1e
[   95.767172][ T6621] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[   95.782361][ T6621] UDF-fs: error (device loop0): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (16842752 > 0)
[   95.786642][ T6621] UDF-fs: Scanning with blocksize 512 failed
[   95.801565][ T6621] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   95.804069][ T6621] UDF-fs: Scanning with blocksize 1024 failed
[   95.819746][ T6621] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   95.827375][ T6621] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   95.838825][ T6621] UDF-fs: Scanning with blocksize 2048 failed
[   95.849996][ T6621] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   95.870292][ T6621] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   95.874130][ T6621] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   95.877065][ T6621] UDF-fs: Scanning with blocksize 4096 failed
[   95.893531][ T6621] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[   96.004716][ T6629] atomic_op ffff888030389198 conn xmit_atomic 0000000000000000
[   96.073244][ T6627] loop2: detected capacity change from 0 to 32768
[   96.080100][ T6627] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 9 smaller than btree node size 256
[   96.080100][ T6627] members_v2 (size 152):
[   96.080100][ T6627] Device:                        0
[   96.080100][ T6627]   Label:                       (none)
[   96.080100][ T6627]   UUID:                        7af6772b-00de-4159-84cd-1faead05e13e
[   96.080100][ T6627]   Size:                        589824
[   96.080100][ T6627]   read errors:                 0
[   96.080100][ T6627]   write errors:                0
[   96.080100][ T6627]   checksum errors:             0
[   96.080100][ T6627]   seqread iops:                0
[   96.080100][ T6627]   seqwrite iops:               0
[   96.080100][ T6627]   randread iops:               0
[   96.080100][ T6627]   randwrite iops:              0
[   96.080100][ T6627]   Bucket size:                 4608
[   96.080100][ T6627]   First bucket:                0
[   96.080100][ T6627]   Buckets:                     128
[   96.080100][ T6627]   Last mount:                  1714618368
[   96.080100][ T6627]   Last superblock write:       42
[   96.080100][ T6627]   State:                       rw
[   96.080100][ T6627]   Data allowed:                journal,btree,user
[   96.080100][ T6627]   Has data:                    (none)
[   96.080100][ T6627]   Btree allocated bitmap blocksize:1
[   96.080100][ T6627]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[   96.080100][ T6627]   Durab
[   96.080210][ T6627] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[   96.265022][ T6637] loop2: detected capacity change from 0 to 1764
[   96.288902][   T33] audit: type=1326 audit(1755561426.102:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   96.298413][   T33] audit: type=1326 audit(1755561426.112:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   96.310847][   T33] audit: type=1326 audit(1755561426.112:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   96.324484][   T33] audit: type=1326 audit(1755561426.112:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   96.348936][   T33] audit: type=1326 audit(1755561426.112:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   96.377157][   T33] audit: type=1326 audit(1755561426.112:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   96.400420][   T33] audit: type=1326 audit(1755561426.112:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   96.431468][   T33] audit: type=1326 audit(1755561426.112:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.0.347" exe="/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f92f0b8ebe9 code=0x7ffc0000
[   97.674560][ T6661] loop0: detected capacity change from 0 to 256
[   97.697107][ T6661] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   97.708854][ T6661] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   97.726129][ T6661] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb62de5b7, utbl_chksum : 0xe619d30d)
[   98.133369][ T6671] loop2: detected capacity change from 0 to 32768
[   98.133584][ T6673] loop0: detected capacity change from 0 to 32768
[   98.143969][ T6673] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.361 (6673)
[   98.183294][ T6673] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   98.193418][ T6673] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   98.196697][ T6673] BTRFS info (device loop0): using free-space-tree
[   98.243039][ T6671] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   98.307712][ T6671] XFS (loop2): Ending clean mount
[   98.326011][ T5927] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   98.328436][ T6671] XFS (loop2): Quotacheck needed: Please wait.
[   98.380578][ T6671] XFS (loop2): Quotacheck: Done.
[   98.456464][ T5930] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   99.123180][ T6727] loop2: detected capacity change from 0 to 2048
[   99.145865][ T6727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.157136][ T6727] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.185358][ T5930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.220015][ T6732] netlink: 'syz.1.370': attribute type 2 has an invalid length.
[   99.246392][ T6732] : entered promiscuous mode
[   99.992618][ T6760] netlink: 830 bytes leftover after parsing attributes in process `syz.1.381'.
[  100.283745][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[  100.697735][ T6772] loop2: detected capacity change from 0 to 32768
[  100.786760][ T6772] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  100.934097][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  100.934112][   T33] audit: type=1800 audit(1755561430.742:108): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.387" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  100.960599][   T33] audit: type=1800 audit(1755561430.742:109): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.387" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  101.018275][ T5930] ocfs2: Unmounting device (7,2) on (node local)
[  101.820661][ T6804] loop1: detected capacity change from 0 to 16
[  101.824019][ T6804] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  101.910195][ T6808] netlink: 9 bytes leftover after parsing attributes in process `syz.0.398'.
[  101.917264][ T6808] 0: renamed from hsr0 (while UP)
[  101.923259][ T6808] 0: entered allmulticast mode
[  101.924885][ T6808] hsr_slave_0: entered allmulticast mode
[  101.926873][ T6808] hsr_slave_1: entered allmulticast mode
[  101.931535][ T6808] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  102.454132][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'.
[  102.512533][ T6829] loop2: detected capacity change from 0 to 2048
[  102.715436][ T6829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.896841][ T6834] fuse: Invalid rootmode
[  102.976853][ T6840] netlink: 'syz.2.411': attribute type 21 has an invalid length.
[  102.980621][ T6840] netlink: 156 bytes leftover after parsing attributes in process `syz.2.411'.
[  103.040933][   T33] audit: type=1800 audit(1755561432.842:110): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.413" name="bus" dev="overlay" ino=665 res=0 errno=0
[  103.263838][ T6854] loop2: detected capacity change from 0 to 4096
[  103.280565][ T6854] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  103.343640][ T6854] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  103.647336][ T6859] loop1: detected capacity change from 0 to 32768
[  103.652958][ T6859] XFS: ikeep mount option is deprecated.
[  103.665176][ T6859] XFS (loop1): Invalid superblock magic number
[  103.758879][ T6865] loop2: detected capacity change from 0 to 32768
[  103.764803][ T6865] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.421 (6865)
[  103.779077][ T6865] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  103.800896][ T6865] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  103.804134][ T6865] BTRFS info (device loop2): using free-space-tree
[  103.812096][ T6867] loop0: detected capacity change from 0 to 32768
[  103.819656][ T6867] (syz.0.422,6867,0):ocfs2_get_clusters:616 ERROR: status = -34
[  103.822667][ T6867] (syz.0.422,6867,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -34
[  103.826219][ T6867] (syz.0.422,6867,0):ocfs2_map_slot_buffers:378 ERROR: status = -34
[  103.832463][ T6867] (syz.0.422,6867,0):ocfs2_init_slot_info:426 ERROR: status = -34
[  103.836019][ T6867] (syz.0.422,6867,0):ocfs2_initialize_super:2222 ERROR: status = -34
[  103.840479][ T6867] (syz.0.422,6867,0):ocfs2_fill_super:1177 ERROR: status = -34
[  103.943156][   T33] audit: type=1800 audit(1755561433.742:111): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.421" name="file1" dev="loop2" ino=260 res=0 errno=0
[  104.086626][ T6897] loop1: detected capacity change from 0 to 16
[  104.099100][ T6897] erofs (device loop1): mounted with root inode @ nid 36.
[  104.127106][   T33] audit: type=1800 audit(1755561433.932:112): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.425" name="file1" dev="loop1" ino=86 res=0 errno=0
[  104.162154][ T6895] loop0: detected capacity change from 0 to 4096
[  104.186497][ T6895] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  104.238805][ T6895] ntfs3(loop0): ino=1a, mi_enum_attr
[  104.243334][ T6895] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  104.324233][ T6895] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22.
[  104.387445][ T1089] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22.
[  104.434649][ T5930] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  104.522987][ T6907] loop0: detected capacity change from 0 to 1024
[  104.537886][ T6907] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  104.542083][ T6907] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  104.572186][ T6907] jbd2_journal_init_inode: Cannot locate journal superblock
[  104.575214][ T6907] EXT4-fs (loop0): Could not load journal inode
[  104.699442][ T6905] loop1: detected capacity change from 0 to 32768
[  104.742296][ T6909] loop0: detected capacity change from 0 to 2048
[  104.756442][ T6909] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  104.760966][ T6909] NILFS (loop0): mounting unchecked fs
[  104.773279][ T5916] udevd[5916]: incorrect nilfs2 checksum on /dev/loop0
[  104.779472][ T6909] NILFS (loop0): recovery complete
[  104.799919][ T6913] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.871083][ T6905] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc64,noinodes_32bit,nocow
[  104.871101][ T6905]   allowing incompatible features above 0.0: (unknown version)
[  104.871109][ T6905]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  104.897715][ T6905] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  104.901117][ T6905] bcachefs (loop1): initializing new filesystem
[  104.917914][ T6905] bcachefs (loop1): going read-write
[  104.939756][ T6905] bcachefs (loop1): marking superblocks
[  104.979418][ T6905] bcachefs (loop1): initializing freespace
[  104.993899][ T6905] bcachefs (loop1): done initializing freespace
[  105.017371][ T6905] bcachefs (loop1): reading snapshots table
[  105.023481][ T6905] bcachefs (loop1): reading snapshots done
[  105.032501][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.434'.
[  105.046589][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.434'.
[  105.061808][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.0.434'.
[  105.087796][ T6905] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[  105.096435][ T6905] bcachefs (loop1): done starting filesystem
[  105.234806][ T6905] syz.1.429 (6905) used greatest stack depth: 16632 bytes left
[  105.256180][ T5934] bcachefs (loop1): shutting down
[  105.264733][ T5934] bcachefs (loop1): going read-only
[  105.267405][ T5934] bcachefs (loop1): finished waiting for writes to stop
[  105.329271][ T5934] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  105.365924][ T5934] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  105.374072][ T5934] bcachefs (loop1): clean shutdown complete, journal seq 4
[  105.384963][ T5934] bcachefs (loop1): marking filesystem clean
[  105.598098][ T6943] loop0: detected capacity change from 0 to 1764
[  105.653991][ T6943] iso9660: Corrupted directory entry in block 2 of inode 1920
[  105.661988][ T5934] bcachefs (loop1): shutdown complete
[  105.769452][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.444'.
[  105.772878][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'.
[  105.836182][ T6955] loop2: detected capacity change from 0 to 4096
[  105.850497][ T6956] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.981785][ T6949] loop0: detected capacity change from 0 to 32768
[  105.990253][ T6949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.442 (6949)
[  106.005593][ T6949] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.010910][ T6949] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  106.014511][ T6949] BTRFS info (device loop0): using free-space-tree
[  106.071399][ T6949] BTRFS info (device loop0): rebuilding free space tree
[  106.083429][ T6949] BTRFS info (device loop0): checking UUID tree
[  106.139496][ T5927] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.197777][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  106.364409][   T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  106.373618][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.401212][   T10] usb 3-1: config 0 descriptor??
[  106.406193][   T10] cp210x 3-1:0.0: cp210x converter detected
[  106.438624][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'.
[  106.608342][   T10] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121
[  106.611458][   T10] cp210x 3-1:0.0: querying part number failed
[  106.616443][   T10] usb 3-1: cp210x converter now attached to ttyUSB0
[  106.822183][  T792] usb 3-1: USB disconnect, device number 7
[  106.832689][  T792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  106.836244][  T792] cp210x 3-1:0.0: device disconnected
[  107.024189][ T6990] loop1: detected capacity change from 0 to 32768
[  107.042692][   T33] audit: type=1800 audit(1755561436.852:113): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.453" name="file1" dev="loop1" ino=4 res=0 errno=0
[  107.331257][ T6993] loop1: detected capacity change from 0 to 1024
[  107.338280][ T6993] hfsplus: failed to load catalog file
[  107.417114][ T6999] block nbd0: Unsupported socket: shutdown callout must be supported.
[  107.508956][ T7005] loop0: detected capacity change from 0 to 128
[  107.512145][ T7005] Invalid source name
[  107.520342][ T7005] UBIFS error (pid: 7005): cannot open "/dev/loop0", error -22
[  107.899850][   T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  108.060392][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  108.064923][ T7039] binder: 7038:7039 unknown command 0
[  108.067392][ T7039] binder: 7038:7039 ioctl c0306201 200000000c40 returned -22
[  108.071673][   T10] usb 1-1: config 9 has an invalid interface number: 166 but max is 1
[  108.078973][   T10] usb 1-1: config 9 has an invalid interface number: 224 but max is 1
[  108.084164][   T10] usb 1-1: config 9 has no interface number 0
[  108.087145][   T10] usb 1-1: config 9 has no interface number 1
[  108.094610][   T10] usb 1-1: config 9 interface 166 has no altsetting 0
[  108.097824][   T10] usb 1-1: config 9 interface 224 has no altsetting 0
[  108.104400][   T10] usb 1-1: string descriptor 0 read error: -22
[  108.107059][   T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=d8.0a
[  108.111352][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.353204][   T10] usb 1-1: USB disconnect, device number 6
[  108.962487][ T7051] binder: 7050:7051 ioctl c0306201 200000000680 returned -14
[  109.091180][ T7055] loop2: detected capacity change from 0 to 128
[  109.399055][   T33] audit: type=1800 audit(1755561439.202:114): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.482" name="file1" dev="loop2" ino=1048609 res=0 errno=0
[  109.727846][ T5989] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  109.889914][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  109.894413][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.899875][ T5989] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  109.903519][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.908337][ T5989] usb 2-1: config 0 descriptor??
[  110.331602][ T5989] logitech 0003:046D:C29C.0003: unexpected long global item
[  110.335144][ T5989] logitech 0003:046D:C29C.0003: parse failed
[  110.343751][ T5989] logitech 0003:046D:C29C.0003: probe with driver logitech failed with error -22
[  110.545760][   T10] usb 2-1: USB disconnect, device number 5
[  110.613803][ T7087] loop0: detected capacity change from 0 to 32768
[  110.669162][ T7087] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  110.669175][ T7087]   allowing incompatible features above 0.0: (unknown version)
[  110.669179][ T7087]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  110.683841][ T7087] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  110.686408][ T7087] bcachefs (loop0): initializing new filesystem
[  110.694614][ T7087] bcachefs (loop0): going read-write
[  110.699070][ T7087] bcachefs (loop0): marking superblocks
[  110.706182][ T7087] bcachefs (loop0): initializing freespace
[  110.712408][ T7087] bcachefs (loop0): done initializing freespace
[  110.716593][ T7087] bcachefs (loop0): reading snapshots table
[  110.719176][ T7087] bcachefs (loop0): reading snapshots done
[  110.745408][ T7087] bcachefs (loop0): done starting filesystem
[  111.372315][ T5927] bcachefs (loop0): shutting down
[  111.383125][ T5927] bcachefs (loop0): going read-only
[  111.387541][ T5927] bcachefs (loop0): finished waiting for writes to stop
[  111.404878][ T5927] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  111.509382][ T5927] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  111.513816][ T5927] bcachefs (loop0): clean shutdown complete, journal seq 4
[  111.518843][ T5927] bcachefs (loop0): marking filesystem clean
[  111.596205][ T5927] bcachefs (loop0): shutdown complete
[  112.199305][ T7128] loop2: detected capacity change from 0 to 256
[  112.230320][ T7128] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  112.233777][ T7128] FAT-fs (loop2): bogus number of directory entries (1)
[  112.255583][ T7128] FAT-fs (loop2): Can't find a valid FAT filesystem
[  112.431625][ T7130] Zero length message leads to an empty skb
[  113.054385][ T7146] netlink: 316 bytes leftover after parsing attributes in process `syz.0.505'.
[  113.103987][ T7138] loop1: detected capacity change from 0 to 32768
[  113.122479][ T7138] 
[  113.122479][ T7138]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  113.122479][ T7138] 
[  113.144849][ T7138] ptrace attach of "/syz-executor exec"[5934] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  113.165535][ T5934] 
[  113.165535][ T5934]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  113.165535][ T5934] 
[  113.222006][ T5934] 
[  113.222006][ T5934]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  113.222006][ T5934] 
[  113.279732][ T7153] tipc: Started in network mode
[  113.281527][ T7153] tipc: Node identity fec6a69fc2b9, cluster identity 4711
[  113.285170][ T7153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.291034][ T7152] tipc: Resetting bearer <eth:syzkaller0>
[  113.512941][ T7157] loop1: detected capacity change from 0 to 32768
[  113.988673][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'.
[  114.108897][ T7165] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  114.216784][ T7162] loop2: detected capacity change from 0 to 32768
[  114.317010][ T7162] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc64,noinodes_32bit,nocow
[  114.317022][ T7162]   allowing incompatible features above 0.0: (unknown version)
[  114.317026][ T7162]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  114.332383][ T7162] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  114.335780][ T7162] bcachefs (loop2): initializing new filesystem
[  114.345754][ T7162] bcachefs (loop2): going read-write
[  114.362432][ T7162] bcachefs (loop2): marking superblocks
[  114.387249][ T7162] bcachefs (loop2): initializing freespace
[  114.412886][ T5988] tipc: Node number set to 1014998687
[  114.424737][ T7162] bcachefs (loop2): done initializing freespace
[  114.431842][ T7162] bcachefs (loop2): reading snapshots table
[  114.434082][ T7162] bcachefs (loop2): reading snapshots done
[  114.471993][ T7162] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  114.477730][ T7162] bcachefs (loop2): done starting filesystem
[  114.565914][ T5930] bcachefs (loop2): shutting down
[  114.568160][ T5930] bcachefs (loop2): going read-only
[  114.570072][ T5930] bcachefs (loop2): finished waiting for writes to stop
[  114.574511][ T5930] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  114.703777][ T5930] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  114.714493][ T5930] bcachefs (loop2): clean shutdown complete, journal seq 4
[  114.718615][ T5930] bcachefs (loop2): marking filesystem clean
[  114.743318][ T7152] tipc: Disabling bearer <eth:syzkaller0>
[  114.768391][ T5930] bcachefs (loop2): shutdown complete
[  114.802325][ T7180] ./file0: Can't open blockdev
[  115.060218][ T7184] loop0: detected capacity change from 0 to 32768
[  115.063718][ T7184] btrfs: Deprecated parameter 'usebackuproot'
[  115.066441][ T7184] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  115.071600][ T7184] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.531 (7184)
[  115.079592][ T7184] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.083886][ T7184] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  115.087546][ T7184] BTRFS info (device loop0): using free-space-tree
[  115.169125][ T7184] BTRFS info (device loop0): rebuilding free space tree
[  115.256021][   T33] audit: type=1800 audit(1755561445.062:115): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.531" name="file1" dev="loop0" ino=260 res=0 errno=0
[  115.308789][ T5927] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.834679][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'.
[  115.840860][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'.
[  116.207936][ T5989] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  116.362904][ T5989] usb 2-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad
[  116.366803][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.388617][ T5989] usb 2-1: config 0 descriptor??
[  116.402103][ T5989] gspca_main: tv8532-2.14.0 probing 0545:808b
[  116.652527][ T5989] usb 2-1: USB disconnect, device number 6
[  116.867841][ T5988] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  117.017841][ T5988] usb 3-1: Using ep0 maxpacket: 16
[  117.030280][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.035075][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  117.043555][ T5988] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  117.047519][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.060014][ T5988] usb 3-1: config 0 descriptor??
[  117.118234][ T7224] netlink: 'syz.0.540': attribute type 3 has an invalid length.
[  117.206699][ T7230] netlink: 156 bytes leftover after parsing attributes in process `syz.0.543'.
[  117.505409][ T7219] raw-gadget.0 gadget.2: fail, usb_ep_set_halt returned -11
[  117.831342][ T5988] usbhid 3-1:0.0: can't add hid device: -71
[  117.834015][ T5988] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  117.849575][ T5988] usb 3-1: USB disconnect, device number 8
[  117.922675][ T7236] loop1: detected capacity change from 0 to 32768
[  117.934917][ T7236] JBD2: Ignoring recovery information on journal
[  117.968683][ T7236] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  117.985568][ T7236] (syz.1.546,7236,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[  117.993280][ T7236] (syz.1.546,7236,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  117.996601][ T7236] (syz.1.546,7236,1):ocfs2_mknod:301 ERROR: status = -2
[  117.999795][ T7236] (syz.1.546,7236,1):ocfs2_mknod:505 ERROR: status = -2
[  118.002961][ T7236] (syz.1.546,7236,1):ocfs2_create:678 ERROR: status = -2
[  118.030864][ T5934] ocfs2: Unmounting device (7,1) on (node local)
[  118.324542][ T7253] mmap: syz.0.552 (7253) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  118.437198][ T7260] loop2: detected capacity change from 0 to 256
[  118.496475][ T7261] loop1: detected capacity change from 0 to 1024
[  118.555588][ T7261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.752541][ T7268] loop2: detected capacity change from 0 to 128
[  119.398851][ T7283] netlink: 'syz.1.564': attribute type 6 has an invalid length.
[  119.489496][ T7280] loop2: detected capacity change from 0 to 32768
[  119.504569][ T7276] loop0: detected capacity change from 0 to 40427
[  119.526415][ T7276] F2FS-fs (loop0): build fault injection rate: 14
[  119.528958][ T7276] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  119.532387][ T7276] F2FS-fs (loop0): invalid crc value
[  119.580880][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  119.592561][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  119.860430][ T7280] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  119.860443][ T7280]   allowing incompatible features above 0.0: (unknown version)
[  119.860447][ T7280]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  119.875647][ T7280] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  119.879724][ T7280] bcachefs (loop2): initializing new filesystem
[  119.885331][ T7276] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  119.886770][ T7280] bcachefs (loop2): going read-write
[  119.888441][ T7276] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  119.896190][ T7276] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  119.901936][ T7280] bcachefs (loop2): marking superblocks
[  119.907378][ T7276] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  119.913240][   T33] audit: type=1800 audit(1755561449.722:116): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.559" name="file2" dev="loop0" ino=10 res=0 errno=0
[  119.918858][ T7280] bcachefs (loop2): initializing freespace
[  119.923624][ T7276] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  119.927235][ T7280] bcachefs (loop2): done initializing freespace
[  119.929847][ T7276] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  119.936238][ T7280] bcachefs (loop2): reading snapshots table
[  119.938818][ T7280] bcachefs (loop2): reading snapshots done
[  119.956049][ T7280] bcachefs (loop2): done starting filesystem
[  119.959140][ T5927] syz-executor: attempt to access beyond end of device
[  119.959140][ T5927] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.971970][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  119.971982][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.971986][ T5927] Call Trace:
[  119.971989][ T5927]  <TASK>
[  119.971992][ T5927]  dump_stack_lvl+0x189/0x250
[  119.972005][ T5927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.972013][ T5927]  ? __pfx_queue_work_on+0x10/0x10
[  119.972019][ T5927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  119.972028][ T5927]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.972040][ T5927]  f2fs_handle_critical_error+0x37c/0x540
[  119.972052][ T5927]  f2fs_write_end_io+0x886/0xb60
[  119.972065][ T5927]  __submit_merged_bio+0x27a/0x6a0
[  119.972076][ T5927]  __submit_merged_write_cond+0x255/0x530
[  119.972088][ T5927]  f2fs_write_data_pages+0x261d/0x3000
[  119.972109][ T5927]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.972143][ T5927]  ? __lock_acquire+0xab9/0xd20
[  119.972155][ T5927]  ? do_raw_spin_lock+0x121/0x290
[  119.972167][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  119.972175][ T5927]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.972184][ T5927]  do_writepages+0x32e/0x550
[  119.972196][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  119.972206][ T5927]  filemap_fdatawrite+0x199/0x240
[  119.972214][ T5927]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  119.972239][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  119.972274][ T5927]  f2fs_sync_dirty_inodes+0x31f/0x830
[  119.972288][ T5927]  f2fs_write_checkpoint+0x95a/0x1df0
[  119.972303][ T5927]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  119.972326][ T5927]  ? kill_f2fs_super+0x298/0x6c0
[  119.972335][ T5927]  kill_f2fs_super+0x2c3/0x6c0
[  119.972343][ T5927]  ? __pfx_kill_f2fs_super+0x10/0x10
[  119.972348][ T5927]  ? radix_tree_delete_item+0x2b6/0x400
[  119.972359][ T5927]  ? shrinker_free+0x2ce/0x3e0
[  119.972368][ T5927]  deactivate_locked_super+0xbc/0x130
[  119.972377][ T5927]  cleanup_mnt+0x425/0x4c0
[  119.972384][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.972411][ T5927]  task_work_run+0x1d4/0x260
[  119.972421][ T5927]  ? __pfx_task_work_run+0x10/0x10
[  119.972429][ T5927]  ? __x64_sys_umount+0x122/0x160
[  119.972439][ T5927]  ? exit_to_user_mode_loop+0x40/0x110
[  119.972450][ T5927]  exit_to_user_mode_loop+0xec/0x110
[  119.972459][ T5927]  do_syscall_64+0x2bd/0x3b0
[  119.972467][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.972475][ T5927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.972481][ T5927]  ? exc_page_fault+0x9f/0xf0
[  119.972490][ T5927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.972497][ T5927] RIP: 0033:0x7f92f0b8ff17
[  119.972504][ T5927] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  119.972509][ T5927] RSP: 002b:00007ffd750eba98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  119.972518][ T5927] RAX: 0000000000000000 RBX: 00007f92f0c11c05 RCX: 00007f92f0b8ff17
[  119.972522][ T5927] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd750ebb50
[  119.972526][ T5927] RBP: 00007ffd750ebb50 R08: 0000000000000000 R09: 0000000000000000
[  119.972530][ T5927] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd750ecbe0
[  119.972534][ T5927] R13: 00007f92f0c11c05 R14: 000000000001d415 R15: 00007ffd750ecc20
[  119.972545][ T5927]  </TASK>
[  119.973687][ T5927] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  119.996796][ T7280] bcachefs (loop2): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  119.996796][ T7280]   set version_upgrade=incompat to enable
[  119.999243][   T33] audit: type=1800 audit(1755561449.802:117): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.563" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  120.228717][ T5930] bcachefs (loop2): shutting down
[  120.230909][ T5930] bcachefs (loop2): going read-only
[  120.233140][ T5930] bcachefs (loop2): finished waiting for writes to stop
[  120.242845][ T5930] bcachefs (loop2): flushing journal and stopping allocators, journal seq 47
[  120.273865][ T5930] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 48
[  120.282343][ T5930] bcachefs (loop2): clean shutdown complete, journal seq 49
[  120.285870][ T5930] bcachefs (loop2): marking filesystem clean
[  120.309650][ T5930] bcachefs (loop2): shutdown complete
[  121.797173][ T7323] loop2: detected capacity change from 0 to 4096
[  123.564505][ T7327] loop0: detected capacity change from 0 to 32768
[  123.700541][ T7327] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc64,noinodes_32bit,nocow
[  123.700556][ T7327]   allowing incompatible features above 0.0: (unknown version)
[  123.700563][ T7327]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  123.716547][ T7327] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  123.720649][ T7327] bcachefs (loop0): initializing new filesystem
[  123.739097][ T7327] bcachefs (loop0): going read-write
[  123.755840][ T7327] bcachefs (loop0): marking superblocks
[  123.768041][ T7327] bcachefs (loop0): initializing freespace
[  123.774140][ T7327] bcachefs (loop0): done initializing freespace
[  123.782441][ T7327] bcachefs (loop0): reading snapshots table
[  123.784686][ T7327] bcachefs (loop0): reading snapshots done
[  123.810187][ T7327] bcachefs (loop0):  loop0: Superblock write was silently dropped! (seq 0 expected 42)
[  123.814602][ T7327] bcachefs (loop0): done starting filesystem
[  123.876383][ T7335] loop2: detected capacity change from 0 to 32768
[  123.892972][ T5927] bcachefs (loop0): shutting down
[  123.900445][ T5927] bcachefs (loop0): going read-only
[  123.902928][ T5927] bcachefs (loop0): finished waiting for writes to stop
[  123.910464][ T5927] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  123.939824][ T5927] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  123.944164][ T5927] bcachefs (loop0): clean shutdown complete, journal seq 4
[  123.945842][ T7335] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  123.947320][ T5927] bcachefs (loop0): marking filesystem clean
[  123.959834][ T7335]   allowing incompatible features above 0.0: (unknown version)
[  123.963139][ T7335]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  123.970529][ T7335] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  123.974127][ T7335] bcachefs (loop2): initializing new filesystem
[  123.984942][ T7335] bcachefs (loop2): going read-write
[  123.985431][ T5927] bcachefs (loop0): shutdown complete
[  123.991818][ T7335] bcachefs (loop2): marking superblocks
[  124.013774][ T7335] bcachefs (loop2): initializing freespace
[  124.029786][ T7335] bcachefs (loop2): done initializing freespace
[  124.033733][ T7335] bcachefs (loop2): reading snapshots table
[  124.036081][ T7335] bcachefs (loop2): reading snapshots done
[  124.059338][ T7335] bcachefs (loop2): done starting filesystem
[  124.293677][ T5930] bcachefs (loop2): shutting down
[  124.295889][ T5930] bcachefs (loop2): going read-only
[  124.299083][ T5930] bcachefs (loop2): finished waiting for writes to stop
[  124.302989][ T5930] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[  124.335424][ T5930] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5
[  124.340772][ T5930] bcachefs (loop2): clean shutdown complete, journal seq 6
[  124.344480][ T5930] bcachefs (loop2): marking filesystem clean
[  124.376879][ T5930] bcachefs (loop2): shutdown complete
[  124.455626][ T7364] loop0: detected capacity change from 0 to 32768
[  124.842487][ T7364] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  124.842498][ T7364]   allowing incompatible features above 0.0: (unknown version)
[  124.842503][ T7364]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  124.858905][ T7364] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  124.861615][ T7364] bcachefs (loop0): initializing new filesystem
[  124.868483][ T7364] bcachefs (loop0): going read-write
[  124.872068][ T7364] bcachefs (loop0): marking superblocks
[  124.883158][ T7364] bcachefs (loop0): initializing freespace
[  124.887821][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  124.891094][ T7364] bcachefs (loop0): done initializing freespace
[  124.908969][ T7364] bcachefs (loop0): reading snapshots table
[  124.911632][ T7364] bcachefs (loop0): reading snapshots done
[  124.949037][ T7364] bcachefs (loop0): done starting filesystem
[  125.019821][ T5927] bcachefs (loop0): shutting down
[  125.022056][ T5927] bcachefs (loop0): going read-only
[  125.024508][ T5927] bcachefs (loop0): finished waiting for writes to stop
[  125.030615][ T5927] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  125.047835][    T9] usb 2-1: Using ep0 maxpacket: 8
[  125.059808][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.073038][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  125.083133][ T5927] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  125.083307][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  125.088248][ T5927] bcachefs (loop0): clean shutdown complete, journal seq 4
[  125.091282][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  125.094217][ T5927] bcachefs (loop0): marking filesystem clean
[  125.098414][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  125.124698][ T5927] bcachefs (loop0): shutdown complete
[  125.139413][    T9] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  125.143344][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.146706][    T9] usb 2-1: Product: syz
[  125.155794][    T9] usb 2-1: Manufacturer: syz
[  125.159408][    T9] usb 2-1: SerialNumber: syz
[  125.163703][    T9] usb 2-1: config 0 descriptor??
[  125.172720][    T9] redrat3 2-1:0.0: Couldn't find all endpoints
[  125.371199][    T9] usb 2-1: USB disconnect, device number 7
[  125.578089][ T7388] loop2: detected capacity change from 0 to 8
[  125.589303][ T7388] Page size > filesystem block size (0).  This is currently not supported!
[  125.669767][ T7387] block device autoloading is deprecated and will be removed.
[  126.001749][ T7393] loop1: detected capacity change from 0 to 1024
[  126.033872][ T7393] syz.1.591: attempt to access beyond end of device
[  126.033872][ T7393] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  126.424423][ T7407] loop1: detected capacity change from 0 to 256
[  126.457799][   T95] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  126.495663][ T7411] loop0: detected capacity change from 0 to 512
[  126.508306][ T7411] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.600: casefold flag without casefold feature
[  126.519955][ T7411] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.600: couldn't read orphan inode 15 (err -117)
[  126.530616][ T7411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.582630][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.619017][   T95] usb 3-1: Using ep0 maxpacket: 8
[  126.629953][   T95] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  126.633402][   T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.636129][   T95] usb 3-1: Product: syz
[  126.637551][   T95] usb 3-1: Manufacturer: syz
[  126.657972][   T95] usb 3-1: SerialNumber: syz
[  126.669014][   T95] usb 3-1: config 0 descriptor??
[  126.672335][   T95] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  126.731073][ T7413] loop1: detected capacity change from 0 to 32768
[  126.741038][ T7413] process 'syz.1.599' launched './file1' with NULL argv: empty string added
[  127.017786][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  127.188570][    T9] usb 1-1: Using ep0 maxpacket: 16
[  127.210418][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.227827][    T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  127.234596][    T9] usb 1-1: config 1 has no interface number 1
[  127.237543][    T9] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  127.242770][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.248270][    T9] usb 1-1: config 1 interface 2 has no altsetting 0
[  127.259090][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.263440][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.267466][    T9] usb 1-1: Product: syz
[  127.269923][    T9] usb 1-1: Manufacturer: syz
[  127.272285][    T9] usb 1-1: SerialNumber: syz
[  127.549919][    T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  127.561665][    T9] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  127.565571][    T9] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes
[  127.569006][    T9] usb 1-1: selecting invalid altsetting 0
[  127.668856][    T9] usb 1-1: USB disconnect, device number 7
[  127.710265][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.896266][   T95] gspca_sonixj: reg_w1 err -71
[  127.977892][   T95] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  128.000308][   T95] usb 3-1: USB disconnect, device number 9
[  128.365500][ T7432] loop1: detected capacity change from 0 to 8
[  128.368934][ T7432] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  128.479662][ T7437] loop2: detected capacity change from 0 to 512
[  128.492790][ T7437] EXT4-fs: Ignoring removed orlov option
[  128.509268][ T7437] EXT4-fs (loop2): Test dummy encryption mode enabled
[  128.511555][ T7437] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size
[  128.580978][ T7435] loop1: detected capacity change from 0 to 4096
[  129.235737][ T7455] netlink: 'syz.2.618': attribute type 9 has an invalid length.
[  129.610145][ T7461] loop2: detected capacity change from 0 to 256
[  129.651121][ T7461] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  130.328884][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'.
[  130.397529][ T7473] netlink: 'syz.1.626': attribute type 30 has an invalid length.
[  132.485056][ T7484] loop1: detected capacity change from 0 to 32768
[  132.789126][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  133.080708][ T7503] loop2: detected capacity change from 0 to 32768
[  133.139617][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  133.139630][ T7503]   allowing incompatible features above 0.0: (unknown version)
[  133.139634][ T7503]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  133.139639][ T7503]   with devices loop2
[  133.165608][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  133.169459][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  133.181881][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  133.189224][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  133.203147][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  133.210734][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  133.218501][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  133.221823][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  133.242632][ T7503] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  133.267546][ T7521] loop1: detected capacity change from 0 to 4096
[  133.314086][ T7503] syz.2.635 (7503) used greatest stack depth: 16584 bytes left
[  133.338835][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  133.341701][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  133.344314][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  133.361286][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  133.392113][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  133.398192][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  133.401894][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  133.425911][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  133.611912][ T7538] loop1: detected capacity change from 0 to 1024
[  133.644698][ T7538] hfsplus: xattr search failed
[  133.673833][  T243] hfsplus: b-tree write err: -5, ino 3
[  133.790372][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'.
[  134.308171][  T792] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  134.478479][  T792] usb 2-1: Using ep0 maxpacket: 16
[  134.483595][  T792] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  134.491757][  T792] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  134.495190][ T7558] loop2: detected capacity change from 0 to 256
[  134.497800][  T792] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.503854][  T792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.509027][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.516790][  T792] usb 2-1: Product: syz
[  134.521151][  T792] usb 2-1: Manufacturer: syz
[  134.523972][  T792] usb 2-1: SerialNumber: syz
[  134.745091][  T792] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  134.749387][  T792] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  134.793794][  T792] usb 2-1: USB disconnect, device number 8
[  134.823227][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.481443][ T7595] loop1: detected capacity change from 0 to 32768
[  135.489859][ T7595] bcachefs: bch2_fs_parse_param() Error parsing option metadata_replicas_required: option_value
[  135.552715][ T7599] loop0: detected capacity change from 0 to 32768
[  135.644967][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  135.644980][ T7599]   allowing incompatible features above 0.0: (unknown version)
[  135.644985][ T7599]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  135.644990][ T7599]   with devices loop0
[  135.663769][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  135.667491][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  135.676651][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  135.686320][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  135.710925][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  135.715808][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  135.722537][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  135.725388][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  135.734453][ T7595] loop1: detected capacity change from 0 to 32768
[  135.746819][ T7599] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  135.805451][ T7595] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,compression=lz4,background_compression=gzip,erasure_code,prjquota,degraded=yes,no_splitbrain_check,nojournal_transaction_names,noexcl,reconstruct_alloc
[  135.805464][ T7595]   allowing incompatible features above 0.0: (unknown version)
[  135.805468][ T7595]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  135.828460][ T7595] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  135.831228][ T7595] bcachefs (loop1): initializing new filesystem
[  135.843061][ T7595] bcachefs (loop1): going read-write
[  135.848828][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  135.851666][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  135.854229][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  135.854362][ T7595] bcachefs (loop1): marking superblocks
[  135.865840][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  135.875246][ T7595] bcachefs (loop1): initializing freespace
[  135.893043][ T7595] bcachefs (loop1): done initializing freespace
[  135.902034][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  135.902284][ T7595] bcachefs (loop1): reading snapshots table
[  135.910537][ T7595] bcachefs (loop1): reading snapshots done
[  135.911269][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  135.916842][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  135.936599][ T5927] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  135.945028][ T7595] bcachefs (loop1): done starting filesystem
[  136.029216][ T5934] bcachefs (loop1): shutting down
[  136.031039][ T5934] bcachefs (loop1): going read-only
[  136.032811][ T5934] bcachefs (loop1): finished waiting for writes to stop
[  136.039587][ T5934] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  136.075655][ T5934] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  136.083415][ T5934] bcachefs (loop1): clean shutdown complete, journal seq 4
[  136.086091][ T5934] bcachefs (loop1): marking filesystem clean
[  136.122598][ T5934] bcachefs (loop1): shutdown complete
[  136.172782][ T7628] tmpfs: Group quota inode hardlimit too large.
[  136.457956][ T5975] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  136.607801][ T5975] usb 3-1: Using ep0 maxpacket: 16
[  136.614109][ T5975] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[  136.619590][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.622753][ T5975] usb 3-1: Product: syz
[  136.624460][ T5975] usb 3-1: Manufacturer: syz
[  136.626394][ T5975] usb 3-1: SerialNumber: syz
[  136.631234][ T5975] usb 3-1: config 0 descriptor??
[  136.635737][ T5975] ems_usb 3-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  136.643698][ T5975] ems_usb 3-1:0.0: probe with driver ems_usb failed with error -22
[  136.841847][    T9] usb 3-1: USB disconnect, device number 10
[  137.514944][ T7638] loop1: detected capacity change from 0 to 32768
[  137.663232][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  137.663251][ T7638]   allowing incompatible features above 0.0: (unknown version)
[  137.663259][ T7638]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  137.663268][ T7638]   with devices loop1
[  137.689793][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  137.694290][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  137.694925][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.694'.
[  137.704739][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  137.732404][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  137.761456][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'.
[  137.764854][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  137.781521][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  137.799446][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  137.817912][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  137.858676][ T7638] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  137.953338][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  137.957504][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  137.963215][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  138.148082][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 2
[  138.252382][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  138.258899][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  138.263649][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  138.315416][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  138.493253][ T7693] syzkaller1: entered promiscuous mode
[  138.496712][ T7693] syzkaller1: entered allmulticast mode
[  138.770527][ T7698] loop0: detected capacity change from 0 to 128
[  138.875901][ T7699] syz.2.706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  139.203962][ T7706] loop0: detected capacity change from 0 to 8192
[  139.289029][ T7710] wireguard: wg1: Could not create IPv4 socket
[  139.379376][ T5236] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  139.379405][ T5236] Bluetooth: hci0: Unknown advertising packet type: 0x5d
[  139.381940][ T5236] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  139.383913][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'.
[  139.384225][ T5236] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  139.419207][ T5236] Bluetooth: hci0: Malformed LE Event: 0x0d
[  139.971638][   T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  139.993348][ T7723] vlan2: entered promiscuous mode
[  139.995496][ T7723] dummy0: entered promiscuous mode
[  140.000083][ T7723] vlan2: entered allmulticast mode
[  140.001962][ T7723] dummy0: entered allmulticast mode
[  140.136313][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.142328][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  140.159496][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  140.167340][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  140.175794][   T24] usb 3-1: SerialNumber: syz
[  140.205066][   T24] usb 3-1: bad CDC descriptors
[  140.207005][   T24] usb-storage 3-1:1.0: USB Mass Storage device detected
[  140.246485][   T24] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  140.407831][   T24] usb 3-1: USB disconnect, device number 11
[  140.429587][ T7737] loop1: detected capacity change from 0 to 32768
[  140.450906][ T7737] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.464691][ T7737] XFS (loop1): Ending clean mount
[  140.471089][ T7737] XFS (loop1): Quotacheck needed: Please wait.
[  140.495391][ T7737] XFS (loop1): Quotacheck: Done.
[  140.782881][ T5934] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.795039][ T7747] loop0: detected capacity change from 0 to 4096
[  140.814669][ T7748] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.826765][   T33] audit: type=1800 audit(1755561726.632:118): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.724" name="file1" dev="loop0" ino=15 res=0 errno=0
[  140.836021][   T33] audit: type=1800 audit(1755561726.642:119): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.724" name="file1" dev="loop0" ino=15 res=0 errno=0
[  141.307035][ T7752] loop1: detected capacity change from 0 to 40427
[  141.324573][ T7752] F2FS-fs (loop1): build fault injection rate: 14
[  141.327321][ T7752] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  141.360260][ T7752] F2FS-fs (loop1): invalid crc value
[  141.373714][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  141.397440][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  141.462418][ T7752] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.466258][ T7752] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  141.471931][ T7752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  141.484362][ T7752] syz.1.725: attempt to access beyond end of device
[  141.484362][ T7752] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  141.492144][ T7752] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  141.496955][ T7752] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3f4/0x430
[  141.501445][ T7752] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  141.505346][ T7752] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:14, node_footer[nid:14,ino:10,ofs:3,cpver:0,blkaddr:0]
[  141.514524][ T7752] F2FS-fs (loop1): truncate node fail, ino:10, nid:14, offset[0]:926, offset[1]:29, nofs:1022
[  141.540553][ T5934] syz-executor: attempt to access beyond end of device
[  141.540553][ T5934] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.547845][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  141.547862][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.547868][ T5934] Call Trace:
[  141.547872][ T5934]  <TASK>
[  141.547875][ T5934]  dump_stack_lvl+0x189/0x250
[  141.547894][ T5934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.547906][ T5934]  ? __pfx_queue_work_on+0x10/0x10
[  141.547917][ T5934]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.547930][ T5934]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.547951][ T5934]  f2fs_handle_critical_error+0x37c/0x540
[  141.547971][ T5934]  f2fs_write_end_io+0x886/0xb60
[  141.547986][ T5934]  __submit_merged_bio+0x27a/0x6a0
[  141.548004][ T5934]  __submit_merged_write_cond+0x255/0x530
[  141.548022][ T5934]  f2fs_write_data_pages+0x261d/0x3000
[  141.548036][ T5934]  ? __lock_acquire+0xab9/0xd20
[  141.548072][ T5934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.548108][ T5934]  ? __mod_zone_page_state+0xd7/0x140
[  141.548130][ T5934]  ? folios_put_refs+0x560/0x640
[  141.548148][ T5934]  ? __pfx_folios_put_refs+0x10/0x10
[  141.548158][ T5934]  ? rcu_is_watching+0x15/0xb0
[  141.548200][ T5934]  ? __lock_acquire+0xab9/0xd20
[  141.548222][ T5934]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.548238][ T5934]  do_writepages+0x32e/0x550
[  141.548259][ T5934]  ? do_raw_spin_unlock+0x4d/0x240
[  141.548275][ T5934]  filemap_fdatawrite+0x199/0x240
[  141.548289][ T5934]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  141.548326][ T5934]  ? do_raw_spin_unlock+0x4d/0x240
[  141.548341][ T5934]  f2fs_sync_dirty_inodes+0x31f/0x830
[  141.548361][ T5934]  f2fs_write_checkpoint+0x95a/0x1df0
[  141.548387][ T5934]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  141.548426][ T5934]  ? kill_f2fs_super+0x298/0x6c0
[  141.548437][ T5934]  kill_f2fs_super+0x2c3/0x6c0
[  141.548451][ T5934]  ? __pfx_kill_f2fs_super+0x10/0x10
[  141.548459][ T5934]  ? radix_tree_delete_item+0x2b6/0x400
[  141.548477][ T5934]  ? shrinker_free+0x2ce/0x3e0
[  141.548490][ T5934]  deactivate_locked_super+0xbc/0x130
[  141.548511][ T5934]  cleanup_mnt+0x425/0x4c0
[  141.548519][ T5934]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.548533][ T5934]  task_work_run+0x1d4/0x260
[  141.548549][ T5934]  ? __pfx_task_work_run+0x10/0x10
[  141.548561][ T5934]  ? __x64_sys_umount+0x122/0x160
[  141.548575][ T5934]  ? exit_to_user_mode_loop+0x40/0x110
[  141.548591][ T5934]  exit_to_user_mode_loop+0xec/0x110
[  141.548604][ T5934]  do_syscall_64+0x2bd/0x3b0
[  141.548616][ T5934]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.548628][ T5934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.548638][ T5934]  ? exc_page_fault+0x9f/0xf0
[  141.548655][ T5934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.548665][ T5934] RIP: 0033:0x7f62a078ff17
[  141.548676][ T5934] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  141.548684][ T5934] RSP: 002b:00007ffcee5b2398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  141.548698][ T5934] RAX: 0000000000000000 RBX: 00007f62a0811c05 RCX: 00007f62a078ff17
[  141.548705][ T5934] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcee5b2450
[  141.548712][ T5934] RBP: 00007ffcee5b2450 R08: 0000000000000000 R09: 0000000000000000
[  141.548718][ T5934] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcee5b34e0
[  141.548725][ T5934] R13: 00007f62a0811c05 R14: 000000000002285f R15: 00007ffcee5b3520
[  141.548743][ T5934]  </TASK>
[  141.548748][ T5934] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  141.574335][ T7769] loop0: detected capacity change from 0 to 32768
[  141.727805][ T7769] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  141.735690][ T7769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  141.736735][ T7777] tmpfs: Bad value for 'mpol'
[  141.826395][ T5927] ocfs2: Unmounting device (7,0) on (node local)
[  141.978490][ T7786] batadv0: entered promiscuous mode
[  142.239904][ T7794] loop2: detected capacity change from 0 to 32768
[  142.247802][ T7794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.742 (7794)
[  142.273645][ T7794] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.278616][ T7794] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  142.281449][ T7794] BTRFS info (device loop2): using free-space-tree
[  142.297971][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.350155][ T7794] BTRFS info (device loop2): rebuilding free space tree
[  142.393077][ T7800] loop1: detected capacity change from 0 to 40427
[  142.397392][ T7800] F2FS-fs: heap/no_heap options were deprecated
[  142.432482][   T33] audit: type=1804 audit(1755561728.232:120): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.742" name="/newroot/243/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  142.445990][ T7800] F2FS-fs (loop1): Image doesn't support compression
[  142.451921][ T7800] F2FS-fs (loop1): build fault injection rate: 690
[  142.456248][   T33] audit: type=1804 audit(1755561728.242:121): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.742" name="/newroot/243/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  142.465152][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.471140][ T7800] F2FS-fs (loop1): invalid crc value
[  142.474967][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  142.480041][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  142.484822][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.498334][    T9] usb 1-1: config 0 descriptor??
[  142.574126][ T7800] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  142.589422][ T7800] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  142.613282][   T33] audit: type=1800 audit(1755561728.422:122): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.745" name="file1" dev="loop1" ino=10 res=0 errno=0
[  142.623757][ T7800] syz.1.745: attempt to access beyond end of device
[  142.623757][ T7800] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  142.650354][ T5930] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.655042][   T33] audit: type=1800 audit(1755561728.462:123): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.745" name="bus" dev="loop1" ino=14 res=0 errno=0
[  142.656554][ T7800] syz.1.745: attempt to access beyond end of device
[  142.656554][ T7800] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  142.673722][ T7800] CPU: 0 UID: 0 PID: 7800 Comm: syz.1.745 Not tainted syzkaller #0 PREEMPT(full) 
[  142.673738][ T7800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.673744][ T7800] Call Trace:
[  142.673747][ T7800]  <TASK>
[  142.673751][ T7800]  dump_stack_lvl+0x189/0x250
[  142.673766][ T7800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.673773][ T7800]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  142.673783][ T7800]  ? __pfx_queue_work_on+0x10/0x10
[  142.673790][ T7800]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  142.673797][ T7800]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.673829][ T7800]  f2fs_handle_critical_error+0x37c/0x540
[  142.673842][ T7800]  f2fs_write_end_io+0x886/0xb60
[  142.673856][ T7800]  __submit_merged_bio+0x27a/0x6a0
[  142.673868][ T7800]  __submit_merged_write_cond+0x255/0x530
[  142.673881][ T7800]  f2fs_write_data_pages+0x261d/0x3000
[  142.673905][ T7800]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.673932][ T7800]  ? check_path+0x21/0x40
[  142.673938][ T7800]  ? check_noncircular+0xe0/0x160
[  142.673965][ T7800]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.673976][ T7800]  do_writepages+0x32e/0x550
[  142.673990][ T7800]  ? do_raw_spin_unlock+0x4d/0x240
[  142.673999][ T7800]  filemap_fdatawrite+0x199/0x240
[  142.674009][ T7800]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  142.674036][ T7800]  ? do_raw_spin_unlock+0x4d/0x240
[  142.674045][ T7800]  f2fs_sync_dirty_inodes+0x31f/0x830
[  142.674058][ T7800]  f2fs_write_checkpoint+0x95a/0x1df0
[  142.674074][ T7800]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  142.674095][ T7800]  ? down_write+0x162/0x1f0
[  142.674101][ T7800]  ? __pfx_down_write+0x10/0x10
[  142.674115][ T7800]  f2fs_issue_checkpoint+0x3ac/0x570
[  142.674123][ T7800]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  142.674132][ T7800]  ? mnt_get_write_access+0x68/0x2a0
[  142.674150][ T7800]  ? f2fs_sync_fs+0x200/0x3d0
[  142.674159][ T7800]  __f2fs_ioctl+0x3d63/0xb610
[  142.674193][ T7800]  ? 0xffffffffff600000
[  142.674201][ T7800]  ? file_ioctl+0x22d/0x780
[  142.674212][ T7800]  ? __pfx_file_ioctl+0x10/0x10
[  142.674225][ T7800]  ? kasan_quarantine_put+0xdd/0x220
[  142.674237][ T7800]  ? __pfx___f2fs_ioctl+0x10/0x10
[  142.674246][ T7800]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  142.674257][ T7800]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  142.674268][ T7800]  ? do_vfs_ioctl+0xb33/0x1430
[  142.674276][ T7800]  ? 0xffffffffff600000
[  142.674282][ T7800]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  142.674296][ T7800]  ? __lock_acquire+0xab9/0xd20
[  142.674315][ T7800]  ? __fget_files+0x2a/0x420
[  142.674323][ T7800]  ? __fget_files+0x2a/0x420
[  142.674329][ T7800]  ? __fget_files+0x3a0/0x420
[  142.674334][ T7800]  ? __fget_files+0x2a/0x420
[  142.674341][ T7800]  ? f2fs_ioctl+0x135/0x250
[  142.674346][ T7800]  ? 0xffffffffff600000
[  142.674352][ T7800]  ? __pfx_f2fs_ioctl+0x10/0x10
[  142.674358][ T7800]  ? 0xffffffffff600000
[  142.674363][ T7800]  __se_sys_ioctl+0xfc/0x170
[  142.674372][ T7800]  do_syscall_64+0xfa/0x3b0
[  142.674382][ T7800]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.674390][ T7800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.674397][ T7800]  ? exc_page_fault+0x9f/0xf0
[  142.674406][ T7800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.674412][ T7800] RIP: 0033:0x7f62a078ebe9
[  142.674419][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.674426][ T7800] RSP: 002b:00007f62a162f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.674434][ T7800] RAX: ffffffffffffffda RBX: 00007f62a09b5fa0 RCX: 00007f62a078ebe9
[  142.674445][ T7800] RDX: ffffffffff600000 RSI: 000000000000f507 RDI: 000000000000000a
[  142.674449][ T7800] RBP: 00007f62a0811e19 R08: 0000000000000000 R09: 0000000000000000
[  142.674454][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.674457][ T7800] R13: 00007f62a09b6038 R14: 00007f62a09b5fa0 R15: 00007ffcee5b3108
[  142.674466][ T7800]  ? 0xffffffffff600000
[  142.674474][ T7800]  </TASK>
[  142.674527][ T7800] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  142.826958][ T7800] CPU: 0 UID: 0 PID: 7800 Comm: syz.1.745 Not tainted syzkaller #0 PREEMPT(full) 
[  142.826971][ T7800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.826975][ T7800] Call Trace:
[  142.826979][ T7800]  <TASK>
[  142.826982][ T7800]  dump_stack_lvl+0x189/0x250
[  142.826996][ T7800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.827005][ T7800]  ? __pfx_queue_work_on+0x10/0x10
[  142.827013][ T7800]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  142.827022][ T7800]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.827036][ T7800]  f2fs_handle_critical_error+0x37c/0x540
[  142.827079][ T7800]  f2fs_write_end_io+0x886/0xb60
[  142.827099][ T7800]  __submit_merged_bio+0x27a/0x6a0
[  142.827112][ T7800]  __submit_merged_write_cond+0x255/0x530
[  142.827126][ T7800]  f2fs_write_data_pages+0x261d/0x3000
[  142.827152][ T7800]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.827202][ T7800]  ? check_path+0x21/0x40
[  142.827211][ T7800]  ? check_noncircular+0xe0/0x160
[  142.827242][ T7800]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.827253][ T7800]  do_writepages+0x32e/0x550
[  142.827268][ T7800]  ? do_raw_spin_unlock+0x4d/0x240
[  142.827279][ T7800]  filemap_fdatawrite+0x199/0x240
[  142.827289][ T7800]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  142.827321][ T7800]  ? do_raw_spin_unlock+0x4d/0x240
[  142.827332][ T7800]  f2fs_sync_dirty_inodes+0x31f/0x830
[  142.827347][ T7800]  f2fs_write_checkpoint+0x95a/0x1df0
[  142.827367][ T7800]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  142.827393][ T7800]  ? down_write+0x162/0x1f0
[  142.827400][ T7800]  ? __pfx_down_write+0x10/0x10
[  142.827415][ T7800]  f2fs_issue_checkpoint+0x3ac/0x570
[  142.827425][ T7800]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  142.827434][ T7800]  ? mnt_get_write_access+0x68/0x2a0
[  142.827459][ T7800]  ? f2fs_sync_fs+0x200/0x3d0
[  142.827470][ T7800]  __f2fs_ioctl+0x3d63/0xb610
[  142.827485][ T7800]  ? 0xffffffffff600000
[  142.827492][ T7800]  ? file_ioctl+0x22d/0x780
[  142.827501][ T7800]  ? __pfx_file_ioctl+0x10/0x10
[  142.827516][ T7800]  ? kasan_quarantine_put+0xdd/0x220
[  142.827526][ T7800]  ? __pfx___f2fs_ioctl+0x10/0x10
[  142.827536][ T7800]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  142.827548][ T7800]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  142.827559][ T7800]  ? do_vfs_ioctl+0xb33/0x1430
[  142.827568][ T7800]  ? 0xffffffffff600000
[  142.827574][ T7800]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  142.827589][ T7800]  ? __lock_acquire+0xab9/0xd20
[  142.827609][ T7800]  ? __fget_files+0x2a/0x420
[  142.827617][ T7800]  ? __fget_files+0x2a/0x420
[  142.827622][ T7800]  ? __fget_files+0x3a0/0x420
[  142.827627][ T7800]  ? __fget_files+0x2a/0x420
[  142.827635][ T7800]  ? f2fs_ioctl+0x135/0x250
[  142.827640][ T7800]  ? 0xffffffffff600000
[  142.827646][ T7800]  ? __pfx_f2fs_ioctl+0x10/0x10
[  142.827653][ T7800]  ? 0xffffffffff600000
[  142.827658][ T7800]  __se_sys_ioctl+0xfc/0x170
[  142.827667][ T7800]  do_syscall_64+0xfa/0x3b0
[  142.827677][ T7800]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.827686][ T7800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.827693][ T7800]  ? exc_page_fault+0x9f/0xf0
[  142.827704][ T7800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.827710][ T7800] RIP: 0033:0x7f62a078ebe9
[  142.827717][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.827723][ T7800] RSP: 002b:00007f62a162f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.827732][ T7800] RAX: ffffffffffffffda RBX: 00007f62a09b5fa0 RCX: 00007f62a078ebe9
[  142.827737][ T7800] RDX: ffffffffff600000 RSI: 000000000000f507 RDI: 000000000000000a
[  142.827741][ T7800] RBP: 00007f62a0811e19 R08: 0000000000000000 R09: 0000000000000000
[  142.827745][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.827749][ T7800] R13: 00007f62a09b6038 R14: 00007f62a09b5fa0 R15: 00007ffcee5b3108
[  142.827759][ T7800]  ? 0xffffffffff600000
[  142.827767][ T7800]  </TASK>
[  142.965813][    T9] usb 1-1: string descriptor 0 read error: -71
[  142.969343][    T9] usb 1-1: USB disconnect, device number 8
[  143.085416][ T7800] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  145.117712][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  145.267768][    T9] usb 2-1: Using ep0 maxpacket: 16
[  145.271502][    T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  145.274962][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.279125][    T9] usb 2-1: config 0 has no interface number 0
[  145.284478][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  145.288147][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.291557][    T9] usb 2-1: Product: syz
[  145.293424][    T9] usb 2-1: Manufacturer: syz
[  145.295490][    T9] usb 2-1: SerialNumber: syz
[  145.300316][    T9] usb 2-1: config 0 descriptor??
[  145.514118][    T9] usb 2-1: USB disconnect, device number 9
[  145.801023][ T7897] loop2: detected capacity change from 0 to 256
[  145.804540][ T7897] vfat: Bad value for 'time_offset'
[  145.904763][ T7899] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  145.904902][    T9] IPVS: starting estimator thread 0...
[  145.997724][ T7901] IPVS: using max 43 ests per chain, 103200 per kthread
[  146.283666][ T7909] loop2: detected capacity change from 0 to 40427
[  146.288925][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  146.299713][ T7909] F2FS-fs (loop2): Image doesn't support compression
[  146.302582][ T7909] F2FS-fs (loop2): build fault injection rate: 6
[  146.305182][ T7909] F2FS-fs (loop2): build fault injection type: 0x83
[  146.309900][ T7909] F2FS-fs (loop2): invalid crc value
[  146.312203][ T7909] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x716/0x49f0
[  146.316328][ T7909] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  146.327833][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  146.447750][    T9] usb 1-1: Using ep0 maxpacket: 8
[  146.452012][    T9] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  146.455786][    T9] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  146.459988][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.475566][    T9] hub 1-1:32.0: bad descriptor, ignoring hub
[  146.478269][   T10] usb 2-1: Using ep0 maxpacket: 16
[  146.488067][    T9] hub 1-1:32.0: probe with driver hub failed with error -5
[  146.490985][   T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  146.494435][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.506843][   T10] usb 2-1: config 0 has no interface number 0
[  146.512487][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  146.516474][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.523015][   T10] usb 2-1: Product: syz
[  146.524411][   T10] usb 2-1: Manufacturer: syz
[  146.525885][   T10] usb 2-1: SerialNumber: syz
[  146.548714][   T10] usb 2-1: config 0 descriptor??
[  146.568477][   T10] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  146.576730][   T10] usb 2-1: No valid video chain found.
[  146.667311][ T7916] loop2: detected capacity change from 0 to 4096
[  146.678267][ T7916] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  146.721849][ T7916] ntfs3(loop2): ino=19, mi_enum_attr
[  146.759628][    T9] usb 2-1: USB disconnect, device number 10
[  146.950544][   T10] usb 1-1: reset high-speed USB device number 9 using dummy_hcd
[  147.086250][ T7923] netlink: 512 bytes leftover after parsing attributes in process `syz.2.782'.
[  147.213606][ T7929] loop2: detected capacity change from 0 to 128
[  147.222066][ T7929] EXT4-fs (loop2): Test dummy encryption mode enabled
[  147.235065][ T7929] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.242595][ T7929] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.324362][ T7929] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  147.355825][ T7929] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.382903][ T5930] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.807722][  T792] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  147.937927][   T24] usb 1-1: USB disconnect, device number 9
[  147.973678][  T792] usb 2-1: unable to get BOS descriptor or descriptor too short
[  147.980642][  T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.984772][  T792] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  147.995231][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  148.002835][  T792] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  148.010086][  T792] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  148.013904][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.030536][  T792] usb 2-1: Product: syz
[  148.032368][  T792] usb 2-1: Manufacturer: syz
[  148.034350][  T792] usb 2-1: SerialNumber: syz
[  148.044069][  T792] usb 2-1: config 0 descriptor??
[  148.046714][ T7948] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  148.058272][    C1] usb 2-1: NFC: Urb failure (status -71)
[  148.069918][  T792] usb 2-1: NFC: Unable to get FW version
[  148.073262][  T792] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90
[  148.257695][   T10] usb 2-1: USB disconnect, device number 11
[  148.317392][ T7962] loop2: detected capacity change from 0 to 512
[  148.323279][ T7962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  148.327046][ T7962] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048)
[  148.400067][ T7966] loop2: detected capacity change from 0 to 256
[  148.403616][ T7966] exfat: Deprecated parameter 'utf8'
[  148.422471][ T7966] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  148.483372][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'.
[  148.495513][ T7968] ipvlan2: entered promiscuous mode
[  149.045618][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'.
[  149.068669][ T7992] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  149.071726][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  149.092010][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  149.095680][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  149.100762][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  150.066336][   T33] audit: type=1326 audit(1755561735.872:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.0.814" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f0b8ebe9 code=0x7fc00000
[  150.268135][ T8014] input: syz1 as /devices/virtual/input/input9
[  150.880369][ T8030] loop0: detected capacity change from 0 to 512
[  150.897226][ T8030] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.826: corrupted in-inode xattr: invalid ea_ino
[  150.905514][ T8030] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.826: couldn't read orphan inode 15 (err -117)
[  150.910711][ T8030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.924306][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.095876][ T8036] dlm: non-version read from control device 4
[  151.154425][ T8040] loop1: detected capacity change from 0 to 128
[  151.166202][ T8040] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  151.181400][ T8040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.451422][ T8075] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  154.608606][ T8091] loop0: detected capacity change from 0 to 32768
[  154.612644][ T8091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.848 (8091)
[  155.002262][ T8091] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.018703][ T8091] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  155.026002][ T8091] BTRFS info (device loop0): using free-space-tree
[  155.234001][ T5927] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.487360][ T8136] loop2: detected capacity change from 0 to 16
[  155.521108][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.865'.
[  155.553045][ T8136] erofs (device loop2): mounted with root inode @ nid 36.
[  155.835375][ T8168] loop1: detected capacity change from 0 to 256
[  155.849462][ T8168] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  155.871473][ T8169] loop0: detected capacity change from 0 to 4096
[  155.873963][ T8171] loop2: detected capacity change from 0 to 128
[  155.876982][ T8171] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  155.891623][ T8171] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  155.929508][ T8169] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  155.958298][ T8169] ntfs3(loop0): Failed to load $Extend (-22).
[  155.960230][ T8169] ntfs3(loop0): Failed to initialize $Extend.
[  157.831374][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'.
[  158.032262][ T8223] loop0: detected capacity change from 0 to 512
[  158.042243][ T8223] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  158.069711][ T8223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  158.072423][ T8223] System zones: 1-12
[  158.074062][ T8223] EXT4-fs (loop0): orphan cleanup on readonly fs
[  158.088779][ T8223] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  158.097095][ T8223] EXT4-fs (loop0): 1 truncate cleaned up
[  158.108199][ T8223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.160271][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.246632][ T8221] loop2: detected capacity change from 0 to 32768
[  158.272931][ T8221] (syz.2.899,8221,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  158.305949][ T8221] (syz.2.899,8221,0):ocfs2_fill_super:1177 ERROR: status = -22
[  158.348346][ T8229] ==================================================================
[  158.351575][ T8229] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  158.354594][ T8229] Read of size 4 at addr ffff888024c749c4 by task syz.0.902/8229
[  158.359053][ T8229] 
[  158.360064][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.0.902 Not tainted syzkaller #0 PREEMPT(full) 
[  158.360082][ T8229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.360090][ T8229] Call Trace:
[  158.360097][ T8229]  <TASK>
[  158.360103][ T8229]  dump_stack_lvl+0x189/0x250
[  158.360147][ T8229]  ? __kasan_check_byte+0x12/0x40
[  158.360165][ T8229]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.360180][ T8229]  ? lock_release+0x4b/0x3e0
[  158.360199][ T8229]  ? __virt_addr_valid+0x4a5/0x5c0
[  158.360214][ T8229]  print_report+0xca/0x240
[  158.360225][ T8229]  ? xfrm_alloc_spi+0x570/0xf30
[  158.360237][ T8229]  kasan_report+0x118/0x150
[  158.360254][ T8229]  ? xfrm_alloc_spi+0x570/0xf30
[  158.360268][ T8229]  xfrm_alloc_spi+0x570/0xf30
[  158.360280][ T8229]  ? xfrm_alloc_spi+0x2a0/0xf30
[  158.360296][ T8229]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  158.360307][ T8229]  ? xfrm_find_acq+0x87/0xa0
[  158.360320][ T8229]  xfrm_alloc_userspi+0x70b/0xc90
[  158.360338][ T8229]  ? apparmor_capable+0x137/0x1b0
[  158.360351][ T8229]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  158.360365][ T8229]  ? __nla_parse+0x40/0x60
[  158.360383][ T8229]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.360406][ T8229]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  158.360430][ T8229]  ? __pfx___mutex_trylock_common+0x10/0x10
[  158.360446][ T8229]  ? rcu_is_watching+0x15/0xb0
[  158.360459][ T8229]  ? trace_contention_end+0x39/0x120
[  158.360471][ T8229]  ? __mutex_lock+0x335/0x1360
[  158.360490][ T8229]  netlink_rcv_skb+0x208/0x470
[  158.360507][ T8229]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  158.360521][ T8229]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  158.360540][ T8229]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.360555][ T8229]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.360571][ T8229]  xfrm_netlink_rcv+0x79/0x90
[  158.360584][ T8229]  netlink_unicast+0x82f/0x9e0
[  158.360600][ T8229]  ? __pfx_netlink_unicast+0x10/0x10
[  158.360615][ T8229]  ? netlink_sendmsg+0x642/0xb30
[  158.360630][ T8229]  ? skb_put+0x11b/0x210
[  158.360641][ T8229]  netlink_sendmsg+0x805/0xb30
[  158.360658][ T8229]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.360675][ T8229]  ? aa_sock_msg_perm+0xf1/0x1d0
[  158.360690][ T8229]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.360702][ T8229]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.360718][ T8229]  __sock_sendmsg+0x21c/0x270
[  158.360732][ T8229]  ____sys_sendmsg+0x505/0x830
[  158.360744][ T8229]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.360758][ T8229]  ? import_iovec+0x74/0xa0
[  158.360772][ T8229]  ___sys_sendmsg+0x21f/0x2a0
[  158.360784][ T8229]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.360804][ T8229]  ? __fget_files+0x2a/0x420
[  158.360813][ T8229]  ? __fget_files+0x3a0/0x420
[  158.360825][ T8229]  __x64_sys_sendmsg+0x19b/0x260
[  158.360837][ T8229]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.360851][ T8229]  ? rcu_is_watching+0x15/0xb0
[  158.360862][ T8229]  ? do_syscall_64+0xbe/0x3b0
[  158.360879][ T8229]  do_syscall_64+0xfa/0x3b0
[  158.360892][ T8229]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.360906][ T8229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.360915][ T8229]  ? exc_page_fault+0x9f/0xf0
[  158.360928][ T8229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.360939][ T8229] RIP: 0033:0x7f92f0b8ebe9
[  158.360951][ T8229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.360961][ T8229] RSP: 002b:00007f92f19d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.360974][ T8229] RAX: ffffffffffffffda RBX: 00007f92f0db5fa0 RCX: 00007f92f0b8ebe9
[  158.360983][ T8229] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000003
[  158.360991][ T8229] RBP: 00007f92f0c11e19 R08: 0000000000000000 R09: 0000000000000000
[  158.360998][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.361005][ T8229] R13: 00007f92f0db6038 R14: 00007f92f0db5fa0 R15: 00007ffd750ec808
[  158.361016][ T8229]  </TASK>
[  158.361020][ T8229] 
[  158.500823][ T8229] Allocated by task 7146:
[  158.502232][ T8229]  kasan_save_track+0x3e/0x80
[  158.503964][ T8229]  __kasan_slab_alloc+0x6c/0x80
[  158.505827][ T8229]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  158.508058][ T8229]  xfrm_state_alloc+0x24/0x2f0
[  158.509966][ T8229]  __find_acq_core+0x8a7/0x1c00
[  158.511872][ T8229]  xfrm_find_acq+0x78/0xa0
[  158.513682][ T8229]  xfrm_alloc_userspi+0x6b3/0xc90
[  158.515643][ T8229]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.517621][ T8229]  netlink_rcv_skb+0x208/0x470
[  158.519550][ T8229]  xfrm_netlink_rcv+0x79/0x90
[  158.521391][ T8229]  netlink_unicast+0x82f/0x9e0
[  158.523050][ T8229]  netlink_sendmsg+0x805/0xb30
[  158.524910][ T8229]  __sock_sendmsg+0x21c/0x270
[  158.526801][ T8229]  ____sys_sendmsg+0x505/0x830
[  158.528725][ T8229]  ___sys_sendmsg+0x21f/0x2a0
[  158.530620][ T8229]  __x64_sys_sendmsg+0x19b/0x260
[  158.532632][ T8229]  do_syscall_64+0xfa/0x3b0
[  158.534460][ T8229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.536534][ T8229] 
[  158.537351][ T8229] Freed by task 95:
[  158.538642][ T8229]  kasan_save_track+0x3e/0x80
[  158.540345][ T8229]  kasan_save_free_info+0x46/0x50
[  158.542076][ T8229]  __kasan_slab_free+0x5b/0x80
[  158.543677][ T8229]  kmem_cache_free+0x18f/0x400
[  158.545354][ T8229]  xfrm_state_gc_task+0x52d/0x6b0
[  158.546953][ T8229]  process_scheduled_works+0xae1/0x17b0
[  158.548751][ T8229]  worker_thread+0x8a0/0xda0
[  158.550229][ T8229]  kthread+0x711/0x8a0
[  158.551551][ T8229]  ret_from_fork+0x3fc/0x770
[  158.553070][ T8229]  ret_from_fork_asm+0x1a/0x30
[  158.554657][ T8229] 
[  158.555483][ T8229] The buggy address belongs to the object at ffff888024c74900
[  158.555483][ T8229]  which belongs to the cache xfrm_state of size 928
[  158.559959][ T8229] The buggy address is located 196 bytes inside of
[  158.559959][ T8229]  freed 928-byte region [ffff888024c74900, ffff888024c74ca0)
[  158.564752][ T8229] 
[  158.565563][ T8229] The buggy address belongs to the physical page:
[  158.567610][ T8229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024c74900 pfn:0x24c74
[  158.570937][ T8229] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  158.573623][ T8229] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  158.576173][ T8229] page_type: f5(slab)
[  158.577499][ T8229] raw: 00fff00000000040 ffff88810550c8c0 dead000000000122 0000000000000000
[  158.580322][ T8229] raw: ffff888024c74900 00000000800e000b 00000000f5000000 0000000000000000
[  158.583075][ T8229] head: 00fff00000000040 ffff88810550c8c0 dead000000000122 0000000000000000
[  158.585896][ T8229] head: ffff888024c74900 00000000800e000b 00000000f5000000 0000000000000000
[  158.588699][ T8229] head: 00fff00000000002 ffffea0000931d01 00000000ffffffff 00000000ffffffff
[  158.591511][ T8229] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  158.594303][ T8229] page dumped because: kasan: bad access detected
[  158.596400][ T8229] page_owner tracks the page as allocated
[  158.598312][ T8229] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6361, tgid 6360 (syz.1.234), ts 85359998056, free_ts 85270263024
[  158.604879][ T8229]  post_alloc_hook+0x240/0x2a0
[  158.606728][ T8229]  get_page_from_freelist+0x21e4/0x22c0
[  158.608757][ T8229]  __alloc_frozen_pages_noprof+0x181/0x370
[  158.610769][ T8229]  alloc_pages_mpol+0x232/0x4a0
[  158.612444][ T8229]  allocate_slab+0x8a/0x370
[  158.613982][ T8229]  ___slab_alloc+0xbeb/0x1410
[  158.615491][ T8229]  kmem_cache_alloc_noprof+0x283/0x3c0
[  158.617264][ T8229]  xfrm_state_alloc+0x24/0x2f0
[  158.618839][ T8229]  xfrm_add_sa+0x17d1/0x4070
[  158.620336][ T8229]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.621953][ T8229]  netlink_rcv_skb+0x208/0x470
[  158.623581][ T8229]  xfrm_netlink_rcv+0x79/0x90
[  158.625214][ T8229]  netlink_unicast+0x82f/0x9e0
[  158.626830][ T8229]  netlink_sendmsg+0x805/0xb30
[  158.628371][ T8229]  __sock_sendmsg+0x21c/0x270
[  158.629942][ T8229]  ____sys_sendmsg+0x505/0x830
[  158.631490][ T8229] page last free pid 5295 tgid 5295 stack trace:
[  158.633556][ T8229]  __free_frozen_pages+0xbc4/0xd30
[  158.635380][ T8229]  __slab_free+0x303/0x3c0
[  158.636918][ T8229]  qlist_free_all+0x97/0x140
[  158.638462][ T8229]  kasan_quarantine_reduce+0x148/0x160
[  158.640230][ T8229]  __kasan_slab_alloc+0x22/0x80
[  158.641886][ T8229]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  158.643881][ T8229]  __alloc_skb+0x112/0x2d0
[  158.645673][ T8229]  netlink_sendmsg+0x5c6/0xb30
[  158.647280][ T8229]  __sock_sendmsg+0x21c/0x270
[  158.648885][ T8229]  ____sys_sendmsg+0x505/0x830
[  158.650524][ T8229]  ___sys_sendmsg+0x21f/0x2a0
[  158.652141][ T8229]  __x64_sys_sendmsg+0x19b/0x260
[  158.653801][ T8229]  do_syscall_64+0xfa/0x3b0
[  158.655601][ T8229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.657609][ T8229] 
[  158.658447][ T8229] Memory state around the buggy address:
[  158.660314][ T8229]  ffff888024c74880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  158.662993][ T8229]  ffff888024c74900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.665911][ T8229] >ffff888024c74980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.668636][ T8229]                                            ^
[  158.670657][ T8229]  ffff888024c74a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.673238][ T8229]  ffff888024c74a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.675975][ T8229] ==================================================================
[  158.678787][ T8229] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  158.681092][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.0.902 Not tainted syzkaller #0 PREEMPT(full) 
[  158.684088][ T8229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.687711][ T8229] Call Trace:
[  158.688840][ T8229]  <TASK>
[  158.689866][ T8229]  dump_stack_lvl+0x99/0x250
[  158.691371][ T8229]  ? __asan_memcpy+0x40/0x70
[  158.692916][ T8229]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.694752][ T8229]  ? __pfx__printk+0x10/0x10
[  158.696358][ T8229]  vpanic+0x281/0x750
[  158.697676][ T8229]  ? __pfx_vpanic+0x10/0x10
[  158.699170][ T8229]  ? irqentry_exit+0x74/0x90
[  158.700691][ T8229]  panic+0xb9/0xc0
[  158.701935][ T8229]  ? __pfx_panic+0x10/0x10
[  158.703454][ T8229]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  158.705687][ T8229]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.707820][ T8229]  ? xfrm_alloc_spi+0x570/0xf30
[  158.709875][ T8229]  check_panic_on_warn+0x89/0xb0
[  158.711962][ T8229]  ? xfrm_alloc_spi+0x570/0xf30
[  158.713531][ T8229]  end_report+0x78/0x160
[  158.714991][ T8229]  kasan_report+0x129/0x150
[  158.716467][ T8229]  ? xfrm_alloc_spi+0x570/0xf30
[  158.718016][ T8229]  xfrm_alloc_spi+0x570/0xf30
[  158.719576][ T8229]  ? xfrm_alloc_spi+0x2a0/0xf30
[  158.721396][ T8229]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  158.723325][ T8229]  ? xfrm_find_acq+0x87/0xa0
[  158.724977][ T8229]  xfrm_alloc_userspi+0x70b/0xc90
[  158.726988][ T8229]  ? apparmor_capable+0x137/0x1b0
[  158.728817][ T8229]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  158.730624][ T8229]  ? __nla_parse+0x40/0x60
[  158.732353][ T8229]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.734136][ T8229]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  158.735997][ T8229]  ? __pfx___mutex_trylock_common+0x10/0x10
[  158.737883][ T8229]  ? rcu_is_watching+0x15/0xb0
[  158.739717][ T8229]  ? trace_contention_end+0x39/0x120
[  158.741725][ T8229]  ? __mutex_lock+0x335/0x1360
[  158.743524][ T8229]  netlink_rcv_skb+0x208/0x470
[  158.745177][ T8229]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  158.747016][ T8229]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  158.748817][ T8229]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.750519][ T8229]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.752615][ T8229]  xfrm_netlink_rcv+0x79/0x90
[  158.754227][ T8229]  netlink_unicast+0x82f/0x9e0
[  158.755903][ T8229]  ? __pfx_netlink_unicast+0x10/0x10
[  158.757679][ T8229]  ? netlink_sendmsg+0x642/0xb30
[  158.759362][ T8229]  ? skb_put+0x11b/0x210
[  158.760822][ T8229]  netlink_sendmsg+0x805/0xb30
[  158.762642][ T8229]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.764411][ T8229]  ? aa_sock_msg_perm+0xf1/0x1d0
[  158.766066][ T8229]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.767815][ T8229]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.769615][ T8229]  __sock_sendmsg+0x21c/0x270
[  158.771186][ T8229]  ____sys_sendmsg+0x505/0x830
[  158.773036][ T8229]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.774930][ T8229]  ? import_iovec+0x74/0xa0
[  158.776724][ T8229]  ___sys_sendmsg+0x21f/0x2a0
[  158.778244][ T8229]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.779925][ T8229]  ? __fget_files+0x2a/0x420
[  158.781489][ T8229]  ? __fget_files+0x3a0/0x420
[  158.782984][ T8229]  __x64_sys_sendmsg+0x19b/0x260
[  158.784592][ T8229]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.786348][ T8229]  ? rcu_is_watching+0x15/0xb0
[  158.787893][ T8229]  ? do_syscall_64+0xbe/0x3b0
[  158.789460][ T8229]  do_syscall_64+0xfa/0x3b0
[  158.790936][ T8229]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.792940][ T8229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.795245][ T8229]  ? exc_page_fault+0x9f/0xf0
[  158.796884][ T8229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.798817][ T8229] RIP: 0033:0x7f92f0b8ebe9
[  158.800315][ T8229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.806446][ T8229] RSP: 002b:00007f92f19d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.809128][ T8229] RAX: ffffffffffffffda RBX: 00007f92f0db5fa0 RCX: 00007f92f0b8ebe9
[  158.811690][ T8229] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000003
[  158.814253][ T8229] RBP: 00007f92f0c11e19 R08: 0000000000000000 R09: 0000000000000000
[  158.816768][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.819335][ T8229] R13: 00007f92f0db6038 R14: 00007f92f0db5fa0 R15: 00007ffd750ec808
[  158.822059][ T8229]  </TASK>
[  158.823801][ T8229] Kernel Offset: disabled
[  158.825298][ T8229] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:58:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888114a55700 RCX=0000000000000084 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888023e81cc0 RBP=0000000000000000 RSP=ffffc90003dbf508
R8 =0000000000000000 R9 =ffffffff81f611a0 R10=dffffc0000000000 R11=fffff9400019e381
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888023e827b0
RIP=ffffffff819d6a21 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6569a8fc80 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555559bf0808 CR3=000000010eade000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f62a0812ee7 XMM09=0000000000000000 00007f62a0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010d6 RDI=00000000000010d7 RBP=00000000000003f8 RSP=ffffc9000273e9f0
R8 =ffff888106ae0237 R9 =1ffff11020d5c046 R10=dffffc0000000000 R11=ffffffff854f0c30
R12=dffffc0000000000 R13=ffffffff99af98fa R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0cac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f92f19d66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8bf4ce56c0 CR3=0000000022744000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f92f0d87498 00007f92f0d87470 XMM03=00007f92f0d874a8 00007f92f0d874a0
XMM04=00007f92f18ed100 00007f92f0d87460 XMM05=00007f92f0d87478 00007f92f0d874c0
XMM06=00007f92f0d874b8 00007f92f0d874b0 XMM07=00007f92f0d874a8 00007f92f0d874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f92f0c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
