last executing test programs:

1m12.010563046s ago: executing program 2 (id=59):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}})

1m12.010428889s ago: executing program 2 (id=60):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1m11.836048942s ago: executing program 2 (id=61):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000})
r5 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

1m10.888149787s ago: executing program 2 (id=64):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x20, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

1m10.717860678s ago: executing program 2 (id=65):
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000100)=ANY=[], 0x3, 0x7c9, &(0x7f0000000200)="$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")
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file1\x00', 0x0, 0x8}, 0x18)

1m10.120763282s ago: executing program 2 (id=69):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c0009050202000202000009058202"], 0x0)

1m9.935109929s ago: executing program 32 (id=69):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c0009050202000202000009058202"], 0x0)

5.148430587s ago: executing program 0 (id=684):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0)
sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}], 0x1}, 0x2}], 0x1, 0x100, 0x0)

5.096928135s ago: executing program 0 (id=685):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0x6, "05f11032"}]}}, 0x0}, 0x0)

3.429186621s ago: executing program 0 (id=708):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000100)={[{@grpquota}, {@bsdgroups}]}, 0xff, 0x9882, &(0x7f000001c800)="$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")
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')

2.650542089s ago: executing program 0 (id=715):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffc4c, &(0x7f0000000080)=ANY=[])

2.114241192s ago: executing program 1 (id=720):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.269693416s ago: executing program 1 (id=724):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000200)=""/26, 0x1a}], 0x2}, 0x40)

1.168885425s ago: executing program 1 (id=725):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000100)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

574.071593ms ago: executing program 0 (id=726):
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)

496.106516ms ago: executing program 0 (id=727):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x8, {0x8, 0x6, "a7ea3163fd3b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

494.85392ms ago: executing program 1 (id=728):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x0, 0x1b3, &(0x7f00000009c0)="$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")

379.479895ms ago: executing program 1 (id=729):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc3})
link(&(0x7f00000000c0)='./file2\x00', &(0x7f00000002c0)='./bus/file0\x00')

379.24228ms ago: executing program 3 (id=730):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

306.650035ms ago: executing program 3 (id=731):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x80)

304.52353ms ago: executing program 1 (id=732):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="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", 0x14f}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815)
recvmmsg(r1, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x2100, 0x0)

258.928994ms ago: executing program 3 (id=733):
pipe(&(0x7f0000000040))
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

117.428624ms ago: executing program 3 (id=734):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81, 0x20000009}]}}}}}}}, 0x0)

117.140196ms ago: executing program 3 (id=735):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})

0s ago: executing program 3 (id=736):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

kernel console output (not intermixed with test programs):

new high-speed USB device number 2 using dummy_hcd
[   60.720020][ T5962] bcachefs (loop2): going read-write
[   60.727673][ T5962] bcachefs (loop2): marking superblocks
[   60.745811][ T5962] bcachefs (loop2): initializing freespace
[   60.752682][ T5962] bcachefs (loop2): done initializing freespace
[   60.760436][ T5962] bcachefs (loop2): reading snapshots table
[   60.762845][ T5962] bcachefs (loop2): reading snapshots done
[   60.786448][ T5962] bcachefs (loop2): done starting filesystem
[   60.797568][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   60.855193][ T5962] syz.2.16 (5962) used greatest stack depth: 16200 bytes left
[   60.862109][ T5845] bcachefs (loop2): shutting down
[   60.864525][ T5845] bcachefs (loop2): going read-only
[   60.869914][ T5845] bcachefs (loop2): finished waiting for writes to stop
[   60.872388][ T5912] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.876924][ T5912] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.884865][ T5845] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[   60.888894][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0
[   60.891798][ T5912] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   60.904317][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.924051][ T5912] usb 1-1: config 0 descriptor??
[   60.933272][ T5845] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   60.946218][ T5845] bcachefs (loop2): clean shutdown complete, journal seq 4
[   60.954879][ T5845] bcachefs (loop2): marking filesystem clean
[   60.967908][ T5911] usb 2-1: Using ep0 maxpacket: 32
[   60.977129][ T5911] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[   60.985128][ T5911] usb 2-1: config 0 has no interface number 0
[   60.996012][ T5911] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[   61.003781][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.011033][ T5911] usb 2-1: Product: syz
[   61.013423][ T5911] usb 2-1: Manufacturer: syz
[   61.015643][ T5911] usb 2-1: SerialNumber: syz
[   61.018557][ T5845] bcachefs (loop2): shutdown complete
[   61.029195][ T5911] usb 2-1: config 0 descriptor??
[   61.053648][ T5911] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[   61.057217][ T5911] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[   61.244441][ T5911] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[   61.249236][ T5911] usbhid 2-1:0.35: couldn't find an input interrupt endpoint
[   61.451311][ T5911] usb 2-1: USB disconnect, device number 2
[   61.544543][ T5912] usb 1-1: string descriptor 0 read error: -22
[   61.750384][ T5912] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input4
[   61.833522][ T5912] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5
[   61.879569][ T5912] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6
[   61.912526][ T5912] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input7
[   61.957529][ T5852] Bluetooth: hci1: command tx timeout
[   62.026513][ T5912] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   62.036110][ T5912] usb 1-1: USB disconnect, device number 2
[   62.039210][ T5852] Bluetooth: hci0: command tx timeout
[   62.039863][ T5843] Bluetooth: hci2: command tx timeout
[   62.286390][ T5989] loop2: detected capacity change from 0 to 32768
[   62.291449][ T5997] loop1: detected capacity change from 0 to 512
[   62.299406][ T5989] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.18 (5989)
[   62.311095][ T5997] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   62.315740][ T5997] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.329539][ T5997] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   62.336566][ T5997] EXT4-fs (loop1): 1 truncate cleaned up
[   62.340072][ T5989] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   62.343470][ T5997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.352678][   T33] audit: type=1804 audit(1755558040.124:3): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.23" name="/newroot/12/bus/bus" dev="loop1" ino=18 res=1 errno=0
[   62.363414][ T5989] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   62.366654][ T5989] BTRFS info (device loop2): using free-space-tree
[   62.405449][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.541304][ T6019] loop1: detected capacity change from 0 to 512
[   62.566204][ T6019] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   62.622482][ T6019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.630064][ T6019] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.640239][ T6019] capability: warning: `syz.1.25' uses deprecated v2 capabilities in a way that may be insecure
[   62.708615][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.830312][ T5912] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   62.908539][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   62.990944][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short
[   63.018167][ T5912] usb 1-1: config 1 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 8
[   63.023238][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0
[   63.043254][ T5912] usb 1-1: string descriptor 0 read error: -22
[   63.046079][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40
[   63.050581][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.063803][ T6021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   63.074482][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8
[   63.312290][ T6033] loop2: detected capacity change from 0 to 32768
[   63.319546][ T6033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.29 (6033)
[   63.339874][ T6033] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   63.343407][ T6033] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   63.346339][ T6033] BTRFS info (device loop2): using free-space-tree
[   63.410658][ T5845] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   63.489127][ T5912] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   63.640635][ T5912] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   63.645459][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.650916][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.654722][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   63.661614][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   63.664570][ T5912] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   63.667286][ T5912] usb 2-1: Manufacturer: syz
[   63.671803][ T5912] usb 2-1: config 0 descriptor??
[   63.702208][ T5279] bcm5974 1-1:1.0: could not read from device
[   63.705493][    T9] usb 1-1: USB disconnect, device number 3
[   63.710836][ T5279] bcm5974 1-1:1.0: could not read from device
[   63.722682][ T6057] loop2: detected capacity change from 0 to 32768
[   63.754379][ T6057] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   63.774805][ T6057] XFS (loop2): Ending clean mount
[   63.806637][ T5845] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   64.049807][ T5843] Bluetooth: hci1: command tx timeout
[   64.083547][ T5912] appleir 0003:05AC:8243.0002: item fetching failed at offset 0/1
[   64.086885][ T5912] appleir 0003:05AC:8243.0002: parse failed
[   64.097992][ T5912] appleir 0003:05AC:8243.0002: probe with driver appleir failed with error -22
[   64.117653][ T5843] Bluetooth: hci2: command tx timeout
[   64.118084][ T5852] Bluetooth: hci0: command tx timeout
[   64.228216][ T6077] loop2: detected capacity change from 0 to 32768
[   64.232476][ T6077] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.39 (6077)
[   64.263473][ T6077] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   64.283067][ T6077] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   64.286861][ T6077] BTRFS info (device loop2): using free-space-tree
[   64.295497][    T9] usb 2-1: USB disconnect, device number 3
[   64.450720][ T5845] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   64.454661][ T6100] loop0: detected capacity change from 0 to 512
[   64.460219][ T6100] =======================================================
[   64.460219][ T6100] WARNING: The mand mount option has been deprecated and
[   64.460219][ T6100]          and is ignored by this kernel. Remove the mand
[   64.460219][ T6100]          option from the mount to silence this warning.
[   64.460219][ T6100] =======================================================
[   64.480242][ T6100] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   64.533111][ T6100] netlink: 260 bytes leftover after parsing attributes in process `syz.0.42'.
[   64.684432][ T5852] Bluetooth: hci1: Malformed LE Event: 0x1b
[   64.951720][ T6113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.966745][ T6111] loop0: detected capacity change from 0 to 4096
[   65.125464][ T6114] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.225366][ T6111] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   65.262755][ T6111] Remounting filesystem read-only
[   65.464963][ T6120] loop1: detected capacity change from 0 to 128
[   65.535145][ T6124] loop0: detected capacity change from 0 to 1024
[   65.629225][   T27] hfsplus: b-tree write err: -5, ino 4
[   65.709922][ T6132] Zero length message leads to an empty skb
[   65.714219][ T6134] loop0: detected capacity change from 0 to 2048
[   65.742816][ T6134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.876877][ T6145] loop2: detected capacity change from 0 to 512
[   65.886498][ T6145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.894208][ T6134] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   65.914280][ T6134] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 786 with error 28
[   65.914864][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.922508][ T6134] EXT4-fs (loop0): This should not happen!! Data will be lost
[   65.922508][ T6134] 
[   65.925163][ T6145] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.930060][ T6134] EXT4-fs (loop0): Total free blocks count 0
[   65.936735][ T6134] EXT4-fs (loop0): Free/Dirty block details
[   65.940968][ T6134] EXT4-fs (loop0): free_blocks=2415919504
[   65.943567][ T6134] EXT4-fs (loop0): dirty_blocks=800
[   65.945870][ T6134] EXT4-fs (loop0): Block reservation details
[   65.953913][ T6134] EXT4-fs (loop0): i_reserved_data_blocks=50
[   65.960507][ T6145] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   65.977563][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   65.990033][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.045843][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.090168][ T6151] loop0: detected capacity change from 0 to 512
[   66.092897][ T6151] EXT4-fs: Ignoring removed oldalloc option
[   66.105551][ T6151] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.131914][ T6151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   66.137721][    T9] usb 2-1: Using ep0 maxpacket: 32
[   66.143731][    T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   66.149226][ T6151] EXT4-fs (loop0): orphan cleanup on readonly fs
[   66.153710][ T6151] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[   66.155090][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.157889][ T6151] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   66.164070][ T6151] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.62: Failed to acquire dquot type 1
[   66.172152][ T6151] EXT4-fs (loop0): 1 truncate cleaned up
[   66.200200][    T9] usb 2-1: config 0 descriptor??
[   66.210576][ T6151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   66.237751][ T6151] EXT4-fs: Ignoring removed orlov option
[   66.241716][ T6151] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   66.246289][ T6151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   66.251516][ T6151] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   66.261788][ T6151] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.62: Abort forced by user
[   66.266575][ T6151] EXT4-fs (loop0): Remounting filesystem read-only
[   66.271375][ T6151] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   66.276098][ T6151] ext4 filesystem being remounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   66.312459][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.441615][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   66.456431][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   66.466343][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   66.470761][    T9] usb 2-1: media controller created
[   66.518902][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   66.648000][    T9] az6027: usb out operation failed. (-71)
[   66.658358][    T9] az6027: usb out operation failed. (-71)
[   66.662904][    T9] stb0899_attach: Driver disabled by Kconfig
[   66.665435][    T9] az6027: no front-end attached
[   66.665435][    T9] 
[   66.672377][    T9] az6027: usb out operation failed. (-71)
[   66.674778][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   66.684362][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[   66.704083][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[   66.712028][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   66.730880][    T9] usb 2-1: USB disconnect, device number 4
[   66.812881][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   67.019368][ T6159] loop2: detected capacity change from 0 to 4096
[   67.046789][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.076539][ T6159] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only
[   67.115149][ T5845] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /24/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.131158][ T5845] EXT4-fs error (device loop2): ext4_empty_dir:3100: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.131391][ T6157] loop0: detected capacity change from 0 to 131072
[   67.145783][ T6157] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[   67.148976][ T6157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   67.152203][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.153292][ T5845] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /24/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.161688][ T6157] F2FS-fs (loop0): invalid crc value
[   67.171150][ T5845] EXT4-fs error (device loop2): ext4_empty_dir:3100: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.179871][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.185476][ T5845] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /24/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.220422][ T5845] EXT4-fs error (device loop2): ext4_empty_dir:3100: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.228674][ T6157] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.238351][ T6157] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   67.241953][ T6157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   67.243673][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.261042][ T5845] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /24/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.277789][ T5845] EXT4-fs error (device loop2): ext4_empty_dir:3100: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.284311][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.288706][ T5845] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /24/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.298155][ T5845] EXT4-fs error (device loop2): ext4_empty_dir:3100: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   67.305994][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.311549][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.316559][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.327091][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.334175][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.360269][ T5845] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz-executor: directory missing '..'
[   67.607531][ T5912] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   67.678619][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.739885][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.772905][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.792727][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.796882][ T5912] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   67.807892][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.822894][ T5912] usb 2-1: config 0 descriptor??
[   67.894006][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.960938][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.055176][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.221425][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.227715][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.231087][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.236144][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.241606][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.250710][ T5912] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   68.259955][ T5912] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   68.279906][ T5912] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   68.282515][ T5912] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   68.285001][ T5912] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   68.301978][   T12] bridge_slave_1: left allmulticast mode
[   68.304140][   T12] bridge_slave_1: left promiscuous mode
[   68.311962][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.316363][ T5912] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   68.323770][ T5912] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   68.329265][   T12] bridge_slave_0: left allmulticast mode
[   68.331260][   T12] bridge_slave_0: left promiscuous mode
[   68.334399][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.352855][ T5912] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[   68.447072][ T5912] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[   69.081137][ T5912] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71
[   69.093753][ T5912] usb 2-1: USB disconnect, device number 5
[   69.099323][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.114325][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.121164][   T12] bond0 (unregistering): Released all slaves
[   69.528548][ T6179] chnl_net:caif_netlink_parms(): no params data found
[   69.559749][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   69.650773][   T12] hsr_slave_0: left promiscuous mode
[   69.661123][   T12] hsr_slave_1: left promiscuous mode
[   69.668424][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.670973][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.678939][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.682305][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.701581][   T12] veth1_macvtap: left promiscuous mode
[   69.703560][   T12] veth0_macvtap: left promiscuous mode
[   69.705498][   T12] veth1_vlan: left promiscuous mode
[   69.707544][   T12] veth0_vlan: left promiscuous mode
[   69.707816][    T9] usb 1-1: Using ep0 maxpacket: 8
[   69.718833][    T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0
[   69.730398][    T9] usb 1-1: config 2 has no interface number 0
[   69.744356][    T9] usb 1-1: config 2 interface 31 has no altsetting 0
[   69.757520][    T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[   69.766667][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.776874][    T9] usb 1-1: Product: syz
[   69.779297][    T9] usb 1-1: Manufacturer: syz
[   69.781417][    T9] usb 1-1: SerialNumber: syz
[   69.854564][ T6209] loop1: detected capacity change from 0 to 164
[   69.869359][ T6209] Unable to read rock-ridge attributes
[   69.883369][ T6209] iso9660: Corrupted directory entry in block 4 of inode 1792
[   70.152021][   T12] team0 (unregistering): Port device team_slave_1 removed
[   70.186447][   T12] team0 (unregistering): Port device team_slave_0 removed
[   70.187594][ T5911] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   70.219042][    T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22
[   70.233156][    T9] usb 1-1: USB disconnect, device number 4
[   70.291685][ T5852] Bluetooth: hci1: command tx timeout
[   70.351832][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.356385][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.361487][ T5911] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   70.365483][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.375717][ T5911] usb 2-1: config 0 descriptor??
[   70.578284][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.585957][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.589038][ T6179] bridge_slave_0: entered allmulticast mode
[   70.592926][ T6179] bridge_slave_0: entered promiscuous mode
[   70.605466][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.608722][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.612363][ T6179] bridge_slave_1: entered allmulticast mode
[   70.624737][ T6179] bridge_slave_1: entered promiscuous mode
[   70.666881][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.672777][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.712715][ T6179] team0: Port device team_slave_0 added
[   70.721264][ T6179] team0: Port device team_slave_1 added
[   70.761780][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.771231][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.791570][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.794960][ T5911] hid-thrustmaster 0003:044F:B65D.0004: collection stack underflow
[   70.809840][ T5911] hid-thrustmaster 0003:044F:B65D.0004: item 0 4 0 12 parsing failed
[   70.811185][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.814079][ T5911] hid-thrustmaster 0003:044F:B65D.0004: parse failed with error -22
[   70.825526][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.825535][ T5911] hid-thrustmaster 0003:044F:B65D.0004: probe with driver hid-thrustmaster failed with error -22
[   70.825551][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.877842][ T6219] loop0: detected capacity change from 0 to 128
[   70.973693][ T6179] hsr_slave_0: entered promiscuous mode
[   70.977049][ T6179] hsr_slave_1: entered promiscuous mode
[   71.001592][ T5911] usb 2-1: USB disconnect, device number 6
[   71.081165][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.085031][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.212523][ T6223] loop0: detected capacity change from 0 to 32768
[   71.241106][ T6223] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   71.274779][ T6223] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   71.317131][ T6179] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.326197][ T6179] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.333432][ T6179] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.341906][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   71.342122][ T6179] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.398504][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.402084][ T6179] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.445154][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.455872][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.468785][ T6179] 8021q: adding VLAN 0 to HW filter on device team0
[   71.485621][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.488919][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.497078][ T6243] loop0: detected capacity change from 0 to 256
[   71.506420][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.509098][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.696238][ T6250] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   71.711708][ T6250] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   71.986319][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.047184][ T6179] veth0_vlan: entered promiscuous mode
[   72.063787][ T6179] veth1_vlan: entered promiscuous mode
[   72.112767][ T6179] veth0_macvtap: entered promiscuous mode
[   72.124044][ T6179] veth1_macvtap: entered promiscuous mode
[   72.160596][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.175225][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.197524][   T51] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   72.203441][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.212631][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.216631][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.234830][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.314965][ T6247] loop1: detected capacity change from 0 to 131072
[   72.320642][ T6247] F2FS-fs (loop1): Test dummy encryption mode enabled
[   72.328555][ T6247] F2FS-fs (loop1): invalid crc value
[   72.372475][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.375922][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.380449][ T5852] Bluetooth: hci1: command tx timeout
[   72.385632][   T51] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   72.389497][ T6247] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.405767][ T6247] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.416379][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.438123][   T51] usb 1-1: Product: syz
[   72.456070][   T51] usb 1-1: Manufacturer: syz
[   72.461084][   T51] usb 1-1: SerialNumber: syz
[   72.478794][  T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.483666][   T51] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   72.483856][  T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.545985][ T1271] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   72.567074][ T6247] fscrypt (loop1, inode 10): Error allocating 'xts(aes)' transform: -4
[   73.001299][   T51] usb 1-1: USB disconnect, device number 5
[   73.467498][ T5911] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   73.493038][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'.
[   73.633046][ T5911] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   73.633069][ T5911] usb 2-1: config 0 has no interface number 0
[   73.633094][ T5911] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.633108][ T5911] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.633131][ T5911] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[   73.633144][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.635499][ T5911] usb 2-1: config 0 descriptor??
[   73.651087][ T1271] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   73.651475][ T1271] ath9k_htc: Failed to initialize the device
[   73.655463][   T51] usb 1-1: ath9k_htc: USB layer deinitialized
[   73.698633][ T6315] loop3: detected capacity change from 0 to 1024
[   73.776762][ T1176] hfsplus: b-tree write err: -5, ino 4
[   74.092161][ T5911] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0005/input/input10
[   74.187495][ T5841] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   74.198759][ T6320] loop3: detected capacity change from 0 to 40427
[   74.199169][ T5911] holtek_kbd 0003:04D9:A055.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[   74.206924][ T6320] F2FS-fs (loop3): invalid crc value
[   74.264537][ T6320] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   74.268067][ T6320] F2FS-fs (loop3): Start checkpoint disabled!
[   74.275342][ T6320] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   74.315074][ T5911] usb 2-1: USB disconnect, device number 7
[   74.377725][ T5841] usb 1-1: Using ep0 maxpacket: 8
[   74.385075][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short
[   74.389100][ T5841] usb 1-1: config 7 has an invalid interface number: 142 but max is 0
[   74.392035][ T5841] usb 1-1: config 7 has no interface number 0
[   74.396631][ T5841] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[   74.408500][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.411746][ T5841] usb 1-1: Product: syz
[   74.413374][ T5841] usb 1-1: Manufacturer: syz
[   74.425716][ T5841] usb 1-1: SerialNumber: syz
[   74.440073][ T5852] Bluetooth: hci1: command tx timeout
[   74.649567][ T5841] usb 1-1: USB disconnect, device number 6
[   74.767622][   T51] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   74.920808][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.925013][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.929843][   T51] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[   74.933834][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.940711][   T51] usb 4-1: config 0 descriptor??
[   75.353517][ T6344] Bluetooth: MGMT ver 1.23
[   75.360062][   T51] elo 0003:04E7:0030.0006: unknown main item tag 0x0
[   75.375753][   T51] elo 0003:04E7:0030.0006: unknown main item tag 0x0
[   75.381099][   T51] elo 0003:04E7:0030.0006: unknown main item tag 0x0
[   75.384250][   T51] elo 0003:04E7:0030.0006: unknown main item tag 0x0
[   75.389803][   T51] elo 0003:04E7:0030.0006: unknown main item tag 0x0
[   75.392911][   T51] elo 0003:04E7:0030.0006: unknown main item tag 0x0
[   75.396253][   T51] elo 0003:04E7:0030.0006: unknown main item tag 0x0
[   75.432993][   T51] elo 0003:04E7:0030.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0
[   75.495168][ T6348] overlayfs: failed to resolve './file2:/': -2
[   75.570402][ T5911] usb 4-1: USB disconnect, device number 2
[   75.784127][ T6354] loop0: detected capacity change from 0 to 32768
[   75.817428][ T6354] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   75.891468][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   76.517566][ T5852] Bluetooth: hci1: command tx timeout
[   76.785767][ T6379] loop3: detected capacity change from 0 to 2048
[   76.814013][ T6379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   76.968617][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   77.142749][ T5841] usb 2-1: Using ep0 maxpacket: 8
[   77.154306][ T5841] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[   77.160631][ T5841] usb 2-1: config 0 has no interface number 0
[   77.163415][ T5841] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   77.168416][ T5841] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   77.174293][ T5841] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   77.179185][ T5841] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   77.185458][ T5841] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   77.190573][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.209702][ T5841] usb 2-1: config 0 descriptor??
[   77.266669][ T5841] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   77.347834][   T51] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   77.475786][   T24] usb 2-1: USB disconnect, device number 8
[   77.475938][    C1] ldusb 2-1:0.55: usb_submit_urb failed (-19)
[   77.499028][   T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[   77.508259][   T51] usb 4-1: Using ep0 maxpacket: 32
[   77.527202][   T51] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.540305][   T51] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.549948][   T51] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   77.553874][   T51] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   77.558023][   T51] usb 4-1: Product: syz
[   77.560006][   T51] usb 4-1: Manufacturer: syz
[   77.599412][   T51] hub 4-1:4.0: USB hub found
[   77.843242][ T6385] trusted_key: encrypted_key: insufficient parameters specified
[   78.208457][   T51] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19)
[   78.231457][   T51] usb 4-1: USB disconnect, device number 3
[   78.676048][ T6391] loop1: detected capacity change from 0 to 1024
[   78.719233][ T6391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.810216][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.058036][   T51] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   79.360399][ T6412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'.
[   79.603324][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.607956][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.612196][   T51] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   79.619847][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.633605][   T51] usb 1-1: config 0 descriptor??
[   79.778426][ T6426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   79.782287][ T6426] IPv6: NLM_F_CREATE should be set when creating new route
[   79.793526][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   79.800645][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   79.932077][ T6439] befs: Bad value for 'gid'
[   79.933816][ T6439] befs: Bad value for 'gid'
[   80.062392][   T51] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[   80.064925][   T51] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[   80.068862][   T51] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[   80.086839][   T51] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[   80.237383][ T1271] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   80.471915][   T51] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device
[   80.476722][   T51] pyra 0003:1E7D:2CF6.0007: couldn't install mouse
[   80.481591][   T51] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71
[   80.488131][   T51] usb 1-1: USB disconnect, device number 7
[   80.548893][ T1271] usb 4-1: Using ep0 maxpacket: 8
[   80.552655][ T1271] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   80.557973][ T1271] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.560460][ T1271] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.00
[   80.563865][ T1271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.568983][ T1271] usb 4-1: config 0 descriptor??
[   80.581366][ T1271] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[   80.781168][ T5279] bcm5974 4-1:0.0: could not read from device
[   80.785953][ T5983] bcm5974 4-1:0.0: could not read from device
[   80.787579][   T10] usb 4-1: USB disconnect, device number 4
[   80.791081][ T5279] bcm5974 4-1:0.0: could not read from device
[   80.799908][ T5279] bcm5974 4-1:0.0: could not read from device
[   80.938900][ T6451] warning: `syz.1.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.045423][ T6455] loop0: detected capacity change from 0 to 128
[   81.054717][ T6455] qnx6: unable to set blocksize
[   81.134710][ T6459] loop0: detected capacity change from 0 to 512
[   81.138732][ T6459] EXT4-fs: Ignoring removed orlov option
[   81.141583][ T6459] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   81.149945][ T6459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   81.155367][ T6459] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.146: corrupted in-inode xattr: e_value size too large
[   81.165441][ T6459] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.146: couldn't read orphan inode 15 (err -117)
[   81.172048][ T6459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.204368][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.218348][ T1271] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   81.253934][ T6462] loop0: detected capacity change from 0 to 256
[   81.268322][ T6462] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   81.274359][ T6462] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   81.309308][ T6462] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   81.367480][ T1271] usb 2-1: Using ep0 maxpacket: 16
[   81.375100][ T1271] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[   81.382671][ T1271] usb 2-1: config 0 has no interface number 0
[   81.385106][ T1271] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[   81.390808][ T1271] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[   81.407890][ T1271] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[   81.413681][ T6468] netlink: 52 bytes leftover after parsing attributes in process `syz.0.150'.
[   81.418708][ T1271] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[   81.422248][ T1271] usb 2-1: Manufacturer: syz
[   81.431876][ T1271] usb 2-1: SerialNumber: syz
[   81.436565][ T1271] usb 2-1: config 0 descriptor??
[   81.440019][ T6453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   81.554263][ T5911] hid_parser_main: 4 callbacks suppressed
[   81.554284][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.567857][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.571979][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.575117][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.579192][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.582904][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.586192][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.591431][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.595030][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.601895][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0
[   81.613520][ T5911] hid-generic 0000:007F:FFFFFFFE.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   81.858559][ T1271] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[   81.876902][ T1271] usb 2-1: USB disconnect, device number 9
[   82.869422][ T6490] loop3: detected capacity change from 0 to 128
[   82.890423][   T33] audit: type=1800 audit(1755558060.664:4): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.159" name="file2" dev="loop3" ino=1048600 res=0 errno=0
[   82.901103][ T6486] loop1: detected capacity change from 0 to 32768
[   82.918357][ T6486] (syz.1.157,6486,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x12eb5780. Applying ECC.
[   82.924845][ T6486] (syz.1.157,6486,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xfaa975d8, computed 0x12eb5780
[   82.929950][ T6486] (syz.1.157,6486,1):ocfs2_verify_volume:2331 ERROR: status = -5
[   82.933110][ T6486] (syz.1.157,6486,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   82.936368][ T6486] (syz.1.157,6486,1):ocfs2_fill_super:1177 ERROR: status = -5
[   83.117741][ T5912] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   83.132669][ T6496] loop3: detected capacity change from 0 to 4096
[   83.142152][ T6496] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   83.168182][ T6496] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[   83.266537][ T6501] loop3: detected capacity change from 0 to 64
[   83.267434][ T5912] usb 1-1: Using ep0 maxpacket: 16
[   83.290986][ T6501] syz.3.163: attempt to access beyond end of device
[   83.290986][ T6501] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[   83.310488][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.313058][ T6501] Buffer I/O error on dev loop3, logical block 134217734, async page read
[   83.314407][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   83.327489][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   83.330646][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   83.333987][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   83.337633][ T6501] syz.3.163: attempt to access beyond end of device
[   83.337633][ T6501] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[   83.349547][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   83.353435][ T5912] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   83.356650][ T6501] Buffer I/O error on dev loop3, logical block 134217734, async page read
[   83.360360][ T5912] usb 1-1: Manufacturer: syz
[   83.374661][ T5912] usb 1-1: config 0 descriptor??
[   83.639078][ T5912] rc_core: IR keymap rc-hauppauge not found
[   83.645777][ T5912] Registered IR keymap rc-empty
[   83.653486][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.677668][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.701655][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   83.710380][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[   83.723501][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.747803][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.777468][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.798900][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.817528][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.839996][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.857777][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.882838][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.907751][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.932270][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   83.950785][ T5912] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[   83.954322][ T5912] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   84.116907][ T5912] usb 1-1: USB disconnect, device number 8
[   84.526573][ T6532] loop3: detected capacity change from 0 to 32768
[   84.585588][ T6532] o2cb: This node has not been configured.
[   84.593708][ T6532] o2cb: Cluster check failed. Fix errors before retrying.
[   84.597184][ T6532] (syz.3.171,6532,1):ocfs2_dlm_init:3354 ERROR: status = -22
[   84.601131][ T6532] (syz.3.171,6532,1):ocfs2_mount_volume:1735 ERROR: status = -22
[   84.609034][ T6532] (syz.3.171,6532,1):ocfs2_fill_super:1177 ERROR: status = -22
[   84.838017][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   85.009764][   T10] usb 2-1: Using ep0 maxpacket: 16
[   85.021214][   T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   85.029047][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.040980][   T10] usb 2-1: config 0 descriptor??
[   85.055149][   T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   85.217429][ T5841] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   85.256302][   T10] usb 2-1: Detected FT232B
[   85.390045][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.394779][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[   85.403166][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[   85.420441][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   85.430077][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   85.450250][ T5841] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[   85.454157][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[   85.461411][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   85.464540][ T5841] usb 1-1: Product: syz
[   85.466482][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   85.471989][ T5841] usb 1-1: Manufacturer: syz
[   85.474815][ T5841] usb 1-1: SerialNumber: syz
[   85.480794][   T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   85.483951][ T5841] usb 1-1: config 0 descriptor??
[   85.519918][   T10] usb 2-1: USB disconnect, device number 10
[   85.542273][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   85.546373][   T10] ftdi_sio 2-1:0.0: device disconnected
[   85.694824][ T5841] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[   85.705983][ T5841] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[   85.807755][ T6606] loop3: detected capacity change from 0 to 2048
[   85.846803][ T6608] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.851865][ T6606] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   85.861009][ T6606] Remounting filesystem read-only
[   85.895716][ T5841] radio-si470x 1-1:0.0: software version 0, hardware version 0
[   85.907399][ T5841] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[   85.911757][ T5841] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[   86.100646][ T5841] radio-si470x 1-1:0.0: submitting int urb failed (-90)
[   86.261626][ T6615] loop1: detected capacity change from 0 to 32768
[   86.288133][ T6615] find_entry called with index = 0
[   86.291849][ T6615] read_mapping_page failed!
[   86.294502][ T6615] ERROR: (device loop1): txCommit: 
[   86.294502][ T6615] 
[   86.440457][    T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   86.447028][  T791] cfg80211: failed to load regulatory.db
[   86.602556][    T9] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[   86.606495][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.610130][    T9] usb 4-1: Product: syz
[   86.611983][    T9] usb 4-1: Manufacturer: syz
[   86.613969][    T9] usb 4-1: SerialNumber: syz
[   86.625776][    T9] usb 4-1: config 0 descriptor??
[   86.633481][    T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[   86.687766][ T1271] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   86.836267][ T5912] usb 4-1: USB disconnect, device number 5
[   86.838894][ T1271] usb 2-1: Using ep0 maxpacket: 32
[   86.842566][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.846370][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.851921][ T1271] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   86.856536][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.864153][ T1271] usb 2-1: config 0 descriptor??
[   87.108115][ T5841] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71
[   87.114886][ T5841] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71
[   87.125169][ T5841] usb 1-1: USB disconnect, device number 9
[   87.283290][ T1271] hid_parser_main: 33 callbacks suppressed
[   87.283316][ T1271] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[   87.290596][ T1271] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[   87.293685][ T1271] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[   87.296637][ T1271] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[   87.299787][ T1271] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[   87.305367][ T1271] kone 0003:1E7D:2CED.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0
[   87.486419][ T1271] kone 0003:1E7D:2CED.0009: couldn't init struct kone_device
[   87.494715][ T1271] kone 0003:1E7D:2CED.0009: couldn't install mouse
[   87.500731][ T1271] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -5
[   87.505884][ T1271] usb 2-1: USB disconnect, device number 11
[   87.853371][ T6657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   87.894390][ T6661] netlink: 'syz.0.214': attribute type 49 has an invalid length.
[   88.227625][ T5912] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   88.267533][  T791] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   88.327676][ T1271] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[   88.377489][ T5912] usb 1-1: Using ep0 maxpacket: 8
[   88.385451][ T5912] usb 1-1: config 0 has an invalid interface number: 186 but max is 0
[   88.389828][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.395460][ T5912] usb 1-1: config 0 has no interface number 0
[   88.399793][ T5912] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   88.404458][ T5912] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   88.411898][ T5912] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[   88.415898][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.420451][ T5912] usb 1-1: Product: syz
[   88.422384][ T5912] usb 1-1: Manufacturer: syz
[   88.424415][ T5912] usb 1-1: SerialNumber: syz
[   88.429110][ T5912] usb 1-1: config 0 descriptor??
[   88.434155][ T5912] iowarrior 1-1:0.186: no interrupt-in endpoint found
[   88.438537][  T791] usb 4-1: Using ep0 maxpacket: 8
[   88.453869][  T791] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[   88.465058][  T791] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   88.469222][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.472973][  T791] usb 4-1: Product: syz
[   88.475516][  T791] usb 4-1: Manufacturer: syz
[   88.479627][  T791] usb 4-1: SerialNumber: syz
[   88.480034][ T1271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.486330][ T1271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.488309][  T791] usb 4-1: config 0 descriptor??
[   88.497097][  T791] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   88.497116][ T1271] usb 2-1: string descriptor 0 read error: -22
[   88.503970][ T1271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.508256][  T791] usb 4-1: setting power ON
[   88.508353][ T1271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.511228][  T791] dvb-usb: bulk message failed: -22 (2/0)
[   88.521808][ T1271] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   88.525425][ T1271] usb 2-1: MIDIStreaming interface descriptor not found
[   88.531271][  T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   88.540894][  T791] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   88.558772][  T791] usb 4-1: media controller created
[   88.585329][  T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.631199][  T791] usb 4-1: selecting invalid altsetting 6
[   88.637002][  T791] usb 4-1: digital interface selection failed (-22)
[   88.639948][  T791] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   88.643661][ T5912] usb 1-1: USB disconnect, device number 10
[   88.645402][  T791] usb 4-1: setting power OFF
[   88.656497][  T791] dvb-usb: bulk message failed: -22 (2/0)
[   88.662395][  T791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   88.666978][  T791] (NULL device *): no alternate interface
[   88.696206][  T791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   88.730367][ T1271] usb 2-1: USB disconnect, device number 12
[   89.254243][ T5912] usb 4-1: USB disconnect, device number 6
[   89.341974][ T6685] openvswitch: netlink: Key 4 has unexpected len 0 expected 12
[   89.386162][ T6689] loop1: detected capacity change from 0 to 1024
[   89.406880][ T6689] journal_path: not usable as path
[   89.409425][ T6689] EXT4-fs: error: could not find journal device path
[   89.545550][ T6695] loop0: detected capacity change from 0 to 256
[   89.560791][ T6695] exfat: Deprecated parameter 'utf8'
[   89.573738][ T6695] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   89.692148][ T6705] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.234'.
[   90.049027][ T6719] loop1: detected capacity change from 0 to 32768
[   90.121603][ T5841] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   90.213528][ T6725] loop0: detected capacity change from 0 to 32768
[   90.235167][ T6725] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.266388][ T6725] XFS (loop0): Ending clean mount
[   90.287910][ T5841] usb 4-1: Using ep0 maxpacket: 8
[   90.292821][ T5841] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[   90.297122][ T5841] usb 4-1: config 0 has no interface number 0
[   90.301928][ T5841] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   90.302365][ T5846] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.306404][ T5841] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[   90.315391][ T5841] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   90.328804][ T5841] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   90.354216][ T5841] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[   90.358580][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.361867][ T5841] usb 4-1: Product: syz
[   90.363542][ T5841] usb 4-1: Manufacturer: syz
[   90.365473][ T5841] usb 4-1: SerialNumber: syz
[   90.418563][ T5841] usb 4-1: config 0 descriptor??
[   90.630457][ T5841] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[   90.651171][ T6741] process 'syz.1.248' launched '/dev/fd/3' with NULL argv: empty string added
[   90.661958][ T6737] loop0: detected capacity change from 0 to 32768
[   90.694787][ T6737] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   90.751730][ T6747] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.250'.
[   90.752156][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   90.836319][ T5912] usb 4-1: USB disconnect, device number 7
[   90.873424][ T6754] loop0: detected capacity change from 0 to 512
[   90.886633][ T6754] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent
[   91.011276][   T33] audit: type=1326 audit(1755558068.784:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2318ebe9 code=0x7ffc0000
[   91.020747][   T33] audit: type=1326 audit(1755558068.784:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2318ebe9 code=0x7ffc0000
[   91.031285][   T33] audit: type=1326 audit(1755558068.784:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.259" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7c2318ebe9 code=0x7ffc0000
[   91.044166][   T33] audit: type=1326 audit(1755558068.784:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2318ebe9 code=0x7ffc0000
[   91.054036][   T33] audit: type=1326 audit(1755558068.784:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2318ebe9 code=0x7ffc0000
[   91.064965][   T33] audit: type=1326 audit(1755558068.784:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.259" exe="/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f7c2318ebe9 code=0x7ffc0000
[   91.074823][   T33] audit: type=1326 audit(1755558068.784:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.0.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2318ebe9 code=0x7ffc0000
[   91.367476][ T5841] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[   91.385990][ T6774] loop3: detected capacity change from 0 to 1024
[   91.435677][ T6774] hfsplus: invalid xattr key length: 0
[   91.460962][ T1090] hfsplus: b-tree write err: -5, ino 8
[   91.540028][ T5841] usb 1-1: config 0 has an invalid interface number: 147 but max is 0
[   91.543800][ T5841] usb 1-1: config 0 has no interface number 0
[   91.546728][ T5841] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   91.562639][ T5841] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03
[   91.571653][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.575126][ T5841] usb 1-1: Product: syz
[   91.576764][ T5841] usb 1-1: Manufacturer: syz
[   91.587390][ T5841] usb 1-1: SerialNumber: syz
[   91.590706][ T5841] usb 1-1: config 0 descriptor??
[   91.595680][ T6772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   91.607951][ T5841] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   91.682848][ T6776] loop3: detected capacity change from 0 to 32768
[   91.819538][   T13] usb 1-1: Failed to submit usb control message: -71
[   91.819857][   T51] usb 1-1: USB disconnect, device number 11
[   91.823214][   T13] usb 1-1: unable to send the bmi data to the device: -71
[   91.830958][   T13] usb 1-1: unable to get target info from device
[   91.833177][   T13] usb 1-1: could not get target info (-71)
[   91.835476][   T13] usb 1-1: could not probe fw (-71)
[   91.966326][ T6785] loop1: detected capacity change from 0 to 512
[   91.977786][ T6785] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.266: corrupted in-inode xattr: invalid ea_ino
[   91.984273][ T6785] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.266: couldn't read orphan inode 15 (err -117)
[   92.008583][ T6785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.184073][ T6792] loop3: detected capacity change from 0 to 128
[   92.330458][ T6794] input: syz1 as /devices/virtual/input/input14
[   93.519211][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.592980][ T6813] input: syz1 as /devices/virtual/input/input15
[   93.597180][ T6815] netlink: 'syz.3.278': attribute type 8 has an invalid length.
[   93.696762][ T6817] loop3: detected capacity change from 0 to 4096
[   93.710279][ T6817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.740103][ T6179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.881934][ T6828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   93.918160][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   93.991322][ T6834] loop3: detected capacity change from 0 to 16
[   93.994178][ T6834] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   94.080782][    T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   94.084628][    T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   94.088699][    T9] usb 2-1: config 220 has an invalid descriptor of length 184, skipping remainder of the config
[   94.093564][    T9] usb 2-1: config 220 has no interface number 2
[   94.096215][    T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   94.105378][    T9] usb 2-1: config 220 interface 0 has no altsetting 0
[   94.108135][    T9] usb 2-1: config 220 interface 76 has no altsetting 0
[   94.110927][    T9] usb 2-1: config 220 interface 1 has no altsetting 0
[   94.124789][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   94.131828][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.135526][    T9] usb 2-1: Product: syz
[   94.137159][    T9] usb 2-1: Manufacturer: syz
[   94.151670][    T9] usb 2-1: SerialNumber: syz
[   94.325828][ T6842] loop3: detected capacity change from 0 to 128
[   94.373889][    T9] usb 2-1: selecting invalid altsetting 0
[   94.376333][    T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[   94.382973][ T6842] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   94.386421][    T9] usb 2-1: No valid video chain found.
[   94.391391][ T6842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.400500][    T9] usb 2-1: selecting invalid altsetting 0
[   94.412702][    T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[   94.429053][    T9] usb 2-1: USB disconnect, device number 13
[   94.746339][ T6859] loop3: detected capacity change from 0 to 64
[   95.128567][ T6863] loop1: detected capacity change from 0 to 128
[   95.144744][ T6863] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   95.175960][ T6863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.228662][ T1271] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   95.303834][ T6868] loop1: detected capacity change from 0 to 8
[   95.333368][ T6868] SQUASHFS error: Failed to read block 0x2d7: -5
[   95.336566][ T6868] SQUASHFS error: Unable to read metadata cache entry [2d5]
[   95.342446][ T6868] SQUASHFS error: Failed to read block 0x8f: -5
[   95.346096][   T33] audit: type=1800 audit(1755558073.114:12): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.302" name="file1" dev="loop1" ino=5 res=0 errno=0
[   95.388301][ T1271] usb 4-1: Using ep0 maxpacket: 8
[   95.401495][ T1271] usb 4-1: unable to get BOS descriptor or descriptor too short
[   95.412102][ T1271] usb 4-1: config 35 has an invalid interface number: 238 but max is 1
[   95.427242][ T1271] usb 4-1: config 35 has an invalid interface number: 194 but max is 1
[   95.441014][ T1271] usb 4-1: config 35 has no interface number 0
[   95.443764][ T1271] usb 4-1: config 35 has no interface number 1
[   95.446630][ T1271] usb 4-1: config 35 interface 238 altsetting 64 has an endpoint descriptor with address 0x9B, changing to 0x8B
[   95.455294][ T1271] usb 4-1: config 35 interface 238 has no altsetting 0
[   95.459259][ T1271] usb 4-1: config 35 interface 194 has no altsetting 0
[   95.548875][ T1271] usb 4-1: New USB device found, idVendor=1385, idProduct=4251, bcdDevice=5e.d6
[   95.551923][ T1271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.554797][ T1271] usb 4-1: Product: syz
[   95.556342][ T1271] usb 4-1: Manufacturer: syz
[   95.558454][ T1271] usb 4-1: SerialNumber: syz
[   95.666965][ T6882] loop1: detected capacity change from 0 to 128
[   95.833796][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   95.847821][ T6886] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[   95.860004][ T1271] usb 4-1: Could not find all expected endpoints
[   95.864967][ T1271] usb 4-1: Could not find all expected endpoints
[   95.872622][ T1271] usb 4-1: USB disconnect, device number 8
[   96.328281][ T1271] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   96.489848][ T1271] usb 2-1: Using ep0 maxpacket: 16
[   96.502178][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.507114][ T1271] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   96.515540][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.525647][ T1271] usb 2-1: config 0 descriptor??
[   96.557520][ T6898] loop3: detected capacity change from 0 to 164
[   96.847599][ T6901] loop0: detected capacity change from 0 to 32768
[   96.855643][ T6901] JBD2: Ignoring recovery information on journal
[   96.885051][ T6901] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   96.910154][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   96.928317][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   97.047953][ T1271] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[   97.091181][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   97.097974][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[   97.104570][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   97.114298][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.118178][    T9] usb 4-1: Product: syz
[   97.119846][    T9] usb 4-1: Manufacturer: syz
[   97.121443][    T9] usb 4-1: SerialNumber: syz
[   97.128151][    T9] usb 4-1: config 0 descriptor??
[   97.382557][    T9] usb 4-1: USB disconnect, device number 9
[   97.421716][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.432777][ T6919] program syz.0.325 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.439943][   T51] usb 2-1: USB disconnect, device number 14
[   97.682177][ T6929] loop0: detected capacity change from 0 to 4096
[   98.029439][   T51] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   98.179653][   T51] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[   98.184653][   T51] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184
[   98.207906][   T51] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[   98.211787][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.240831][   T51] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[   98.251883][ T6949] loop1: detected capacity change from 0 to 128
[   98.296198][ T1271] Process accounting resumed
[   98.300298][ T1271] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512)
[   98.304437][ T1271] FAT-fs (loop1): Filesystem has been set read-only
[   98.447712][   T51] gspca_sn9c2028: read1 error -71
[   98.449837][   T51] gspca_sn9c2028: read1 error -71
[   98.455453][   T51] gspca_sn9c2028: read1 error -71
[   98.460875][   T51] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71
[   98.468905][   T51] usb 1-1: USB disconnect, device number 12
[   98.521918][ T6962] loop3: detected capacity change from 0 to 512
[   98.627624][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.347'.
[   98.956661][ T6979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.127762][ T6987] loop3: detected capacity change from 0 to 4096
[   99.202352][ T6987] ntfs3(loop3): ino=1f, mi_enum_attr
[   99.203219][ T6991] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.204538][ T6987] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   99.219097][ T6987] ntfs3(loop3): ino=9, attr_set_size
[   99.227210][ T6991] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   99.431308][ T6999] Bluetooth: MGMT ver 1.23
[   99.583164][ T6996] loop0: detected capacity change from 0 to 32768
[   99.724959][ T6996] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   99.724981][ T6996]   allowing incompatible features above 0.0: (unknown version)
[   99.724988][ T6996]   features: 
[   99.759833][ T6996] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   99.763844][ T6996] bcachefs (loop0): initializing new filesystem
[   99.781435][ T6996] bcachefs (loop0): going read-write
[   99.801018][ T6996] bcachefs (loop0): marking superblocks
[   99.833554][ T6996] bcachefs (loop0): initializing freespace
[   99.845953][ T6996] bcachefs (loop0): done initializing freespace
[   99.855311][ T6996] bcachefs (loop0): reading snapshots table
[   99.861762][ T6996] bcachefs (loop0): reading snapshots done
[   99.924504][ T6996] bcachefs (loop0): done starting filesystem
[  100.041274][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'.
[  100.048045][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.053297][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.178617][ T5846] bcachefs (loop0): shutting down
[  100.196147][ T5846] bcachefs (loop0): going read-only
[  100.199368][ T5846] bcachefs (loop0): finished waiting for writes to stop
[  100.204424][ T5846] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  100.242178][ T5846] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  100.253212][ T5846] bcachefs (loop0): clean shutdown complete, journal seq 5
[  100.260572][ T5846] bcachefs (loop0): marking filesystem clean
[  100.346868][ T5846] bcachefs (loop0): shutdown complete
[  102.453115][    T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  102.645704][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  102.657822][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  102.662605][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.675744][    T9] usb 4-1: config 0 descriptor??
[  102.690418][ T7079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  102.931448][    T9] ath6kl: Failed to submit usb control message: -71
[  102.942167][    T9] ath6kl: unable to send the bmi data to the device: -71
[  102.945380][    T9] ath6kl: Unable to send get target info: -71
[  102.964997][    T9] ath6kl: Failed to init ath6kl core: -71
[  102.970705][    T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  102.979710][    T9] usb 4-1: USB disconnect, device number 10
[  103.572668][ T7095] loop3: detected capacity change from 0 to 2048
[  103.610387][ T7095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.719313][   T33] audit: type=1800 audit(1755558081.494:13): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.400" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1436 res=0 errno=0
[  105.466154][ T7114] loop0: detected capacity change from 0 to 32768
[  105.488297][ T7114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.409 (7114)
[  105.503354][ T7114] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.510115][ T7114] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  105.513397][ T7114] BTRFS info (device loop0): disk space caching is enabled
[  105.516363][ T7114] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  105.617249][ T7114] BTRFS info (device loop0): rebuilding free space tree
[  105.642624][ T7114] BTRFS info (device loop0): disabling free space tree
[  105.645028][ T7114] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  105.650680][ T7114] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.050854][ T5846] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.659023][ T7161] loop0: detected capacity change from 0 to 8
[  106.701755][ T7161] SQUASHFS error: xz decompression failed, data probably corrupt
[  106.705506][ T7161] SQUASHFS error: Failed to read block 0x108: -5
[  106.717816][ T7161] SQUASHFS error: Unable to read metadata cache entry [106]
[  106.727072][ T7161] SQUASHFS error: Unable to read inode 0x11f
[  106.838510][ T7155] loop3: detected capacity change from 0 to 32768
[  106.843332][ T7155] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.418 (7155)
[  106.863345][ T7167] loop0: detected capacity change from 0 to 136
[  106.895810][ T7155] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  106.896073][ T7167] Symlink component flag not implemented
[  106.908281][ T7155] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  106.912578][ T7155] BTRFS info (device loop3): disk space caching is enabled
[  106.915898][ T7155] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  106.923669][ T7167] Symlink component flag not implemented (108)
[  107.024121][ T7155] BTRFS info (device loop3): rebuilding free space tree
[  107.052507][ T7155] BTRFS info (device loop3): disabling free space tree
[  107.055888][ T7155] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.067664][ T7155] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.135396][ T6179] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  107.260191][  T791] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  107.403251][ T7202] loop3: detected capacity change from 0 to 128
[  107.408906][  T791] usb 1-1: Using ep0 maxpacket: 16
[  107.415874][  T791] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  107.420586][  T791] usb 1-1: config 0 has no interface number 0
[  107.428230][  T791] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.434600][  T791] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.441404][ T7202] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.449698][  T791] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  107.454093][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.459967][ T7202] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.460815][  T791] usb 1-1: config 0 descriptor??
[  107.504446][ T6179] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.821925][ T7206] loop3: detected capacity change from 0 to 32768
[  107.825680][ T7206] XFS: attr2 mount option is deprecated.
[  107.855078][ T7206] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  107.886292][ T7206] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.922680][ T7206] XFS (loop3): Ending clean mount
[  107.953214][ T7206] XFS (loop3): Quotacheck needed: Please wait.
[  108.010035][ T7206] XFS (loop3): Quotacheck: Done.
[  108.066471][ T6179] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.086719][  T791] uclogic 0003:28BD:0071.000B: pen parameters not found
[  108.101276][  T791] uclogic 0003:28BD:0071.000B: interface is invalid, ignoring
[  108.126700][ T7228] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.441'.
[  108.138839][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.441'.
[  108.252805][ T7230] sctp: [Deprecated]: syz.3.442 (pid 7230) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.252805][ T7230] Use struct sctp_sack_info instead
[  108.309898][  T791] usb 1-1: USB disconnect, device number 13
[  108.373269][ T7232] loop3: detected capacity change from 0 to 4096
[  108.379123][ T7232] ntfs3(loop3): It is recommened to use chkdsk.
[  108.383119][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  108.389743][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  108.393437][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  108.396991][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  108.401071][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  108.404409][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  108.408045][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  108.412622][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  108.416295][ T7232] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  108.498869][ T7234] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.820577][ T7239] loop3: detected capacity change from 0 to 4096
[  108.828432][ T7239] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  108.875523][ T7239] ntfs3(loop3): ino=1a, mi_enum_attr
[  108.880209][ T7239] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  108.957445][   T33] audit: type=1800 audit(1755558086.724:14): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.446" name="file1" dev="loop3" ino=30 res=0 errno=0
[  109.213634][ T7241] loop0: detected capacity change from 0 to 32768
[  109.248598][ T7241] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  109.299243][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[  109.475902][ T7249] loop3: detected capacity change from 0 to 40427
[  109.481877][ T7249] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  109.484691][ T7249] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  109.595835][ T7249] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.609104][ T7249] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  109.612043][ T7249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  109.626635][ T7249] syz.3.451: attempt to access beyond end of device
[  109.626635][ T7249] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  109.660250][ T6179] syz-executor: attempt to access beyond end of device
[  109.660250][ T6179] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  109.677757][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  109.677771][ T6179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.677777][ T6179] Call Trace:
[  109.677780][ T6179]  <TASK>
[  109.677784][ T6179]  dump_stack_lvl+0x189/0x250
[  109.677799][ T6179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.677809][ T6179]  ? __pfx_queue_work_on+0x10/0x10
[  109.677826][ T6179]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.677842][ T6179]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.677862][ T6179]  f2fs_handle_critical_error+0x37c/0x540
[  109.677875][ T6179]  f2fs_write_end_io+0x886/0xb60
[  109.677889][ T6179]  __submit_merged_bio+0x27a/0x6a0
[  109.677901][ T6179]  __submit_merged_write_cond+0x255/0x530
[  109.677913][ T6179]  f2fs_write_data_pages+0x261d/0x3000
[  109.677981][ T6179]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.678016][ T6179]  ? check_path+0x21/0x40
[  109.678024][ T6179]  ? check_noncircular+0xe0/0x160
[  109.678049][ T6179]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.678059][ T6179]  do_writepages+0x32e/0x550
[  109.678073][ T6179]  ? do_raw_spin_unlock+0x4d/0x240
[  109.678084][ T6179]  filemap_fdatawrite+0x199/0x240
[  109.678095][ T6179]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.678121][ T6179]  ? do_raw_spin_unlock+0x4d/0x240
[  109.678131][ T6179]  f2fs_sync_dirty_inodes+0x31f/0x830
[  109.678144][ T6179]  f2fs_write_checkpoint+0x95a/0x1df0
[  109.678160][ T6179]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.678182][ T6179]  ? call_rcu+0x6ff/0x9c0
[  109.678190][ T6179]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.678199][ T6179]  ? kill_f2fs_super+0x298/0x6c0
[  109.678208][ T6179]  kill_f2fs_super+0x2c3/0x6c0
[  109.678217][ T6179]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.678223][ T6179]  ? radix_tree_delete_item+0x2b6/0x400
[  109.678234][ T6179]  ? shrinker_free+0x2ce/0x3e0
[  109.678242][ T6179]  deactivate_locked_super+0xbc/0x130
[  109.678252][ T6179]  cleanup_mnt+0x425/0x4c0
[  109.678267][ T6179]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.678277][ T6179]  task_work_run+0x1d4/0x260
[  109.678288][ T6179]  ? __pfx_task_work_run+0x10/0x10
[  109.678295][ T6179]  ? __x64_sys_umount+0x122/0x160
[  109.678306][ T6179]  ? exit_to_user_mode_loop+0x40/0x110
[  109.678317][ T6179]  exit_to_user_mode_loop+0xec/0x110
[  109.678326][ T6179]  do_syscall_64+0x2bd/0x3b0
[  109.678336][ T6179]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.678344][ T6179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.678351][ T6179]  ? exc_page_fault+0x9f/0xf0
[  109.678361][ T6179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.678367][ T6179] RIP: 0033:0x7f7c4418ff17
[  109.678376][ T6179] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  109.678382][ T6179] RSP: 002b:00007fffaf980cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.678391][ T6179] RAX: 0000000000000000 RBX: 00007f7c44211c05 RCX: 00007f7c4418ff17
[  109.678396][ T6179] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaf980db0
[  109.678400][ T6179] RBP: 00007fffaf980db0 R08: 0000000000000000 R09: 0000000000000000
[  109.678404][ T6179] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffaf981e40
[  109.678408][ T6179] R13: 00007f7c44211c05 R14: 000000000001abd6 R15: 00007fffaf981e80
[  109.678420][ T6179]  </TASK>
[  109.678423][ T6179] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  109.928303][ T7253] loop0: detected capacity change from 0 to 32768
[  109.939661][ T7253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.452 (7253)
[  109.975520][ T7253] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.981505][ T7253] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  109.985270][ T7253] BTRFS info (device loop0): using free-space-tree
[  110.141534][ T5846] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.027122][ T7298] loop0: detected capacity change from 0 to 32768
[  111.055083][ T7298] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  111.079417][ T7298] XFS (loop0): Ending clean mount
[  111.173406][ T5846] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.195050][ T7339] Illegal XDP return value 3411987535 on prog  (id 35) dev N/A, expect packet loss!
[  112.606246][ T7349] loop3: detected capacity change from 0 to 40427
[  112.625616][ T7349] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  112.635325][ T7349] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  112.777116][ T7349] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.790956][ T7349] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  112.794005][ T7349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  113.091378][ T7358] loop0: detected capacity change from 0 to 32768
[  113.094980][ T7358] XFS: noikeep mount option is deprecated.
[  113.159605][ T7358] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.201251][ T7358] XFS (loop0): Ending clean mount
[  113.214211][ T7358] XFS (loop0): Quotacheck needed: Please wait.
[  113.253095][ T7358] XFS (loop0): Quotacheck: Done.
[  113.313823][ T7381] syzkaller0: entered promiscuous mode
[  113.316093][ T7381] syzkaller0: entered allmulticast mode
[  113.356700][ T7385] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  113.656254][ T5846] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.553960][ T7414] o2cb: This node has not been configured.
[  114.559053][ T7414] o2cb: Cluster check failed. Fix errors before retrying.
[  114.561798][ T7414] (syz.0.503,7414,0):user_dlm_register:674 ERROR: status = -22
[  114.564729][ T7414] (syz.0.503,7414,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  116.307508][  T791] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  116.556103][  T791] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  116.562892][  T791] usb 4-1: config 0 has an invalid interface number: 255 but max is 2
[  116.565735][  T791] usb 4-1: config 0 has no interface number 0
[  116.568530][  T791] usb 4-1: config 0 has no interface number 1
[  116.571702][  T791] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  116.576615][  T791] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  116.581346][  T791] usb 4-1: config 0 interface 255 has no altsetting 0
[  116.583977][  T791] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  116.587036][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.595620][  T791] usb 4-1: config 0 descriptor??
[  116.837569][  T791] usb 4-1: Could not set interface, error -71
[  116.890624][  T791] usb 4-1: selecting invalid altsetting 0
[  116.893508][  T791] usb 4-1: Could not set interface, error -22
[  116.922814][  T791] usb 4-1: USB disconnect, device number 11
[  117.117601][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'.
[  117.120821][ T7430] loop0: detected capacity change from 0 to 256
[  117.124648][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'.
[  117.135191][ T7430] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  117.819150][ T7443] loop3: detected capacity change from 0 to 256
[  117.826451][ T7443] exfat: Deprecated parameter 'namecase'
[  117.842144][ T7443] exfat: Deprecated parameter 'utf8'
[  117.872787][ T7443] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  117.910320][ T7445] loop0: detected capacity change from 0 to 4096
[  118.019637][ T7447] loop3: detected capacity change from 0 to 2048
[  118.092303][ T7448] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.126597][ T7447] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  118.129160][ T7451] netlink: 'syz.0.519': attribute type 1 has an invalid length.
[  118.157761][ T7447] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16)
[  118.175060][ T7447] Remounting filesystem read-only
[  118.180848][ T7447] NILFS (loop3): error -5 truncating bmap (ino=16)
[  118.258081][ T6179] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  118.548062][ T5912] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  118.597972][  T791] psmouse serio2: Failed to reset mouse on : -5
[  118.697477][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  118.702812][ T5912] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.717460][ T5912] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.721930][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0
[  118.725299][ T5912] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  118.730236][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.736027][ T5912] usb 1-1: config 0 descriptor??
[  119.160536][ T5912] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  119.355148][ T5912] usb 1-1: USB disconnect, device number 14
[  120.291508][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.295679][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.299378][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.302576][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.305732][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.309255][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.312994][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.316553][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.320134][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  120.323784][ T7481] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  121.268533][ T7491] loop0: detected capacity change from 0 to 256
[  121.289159][ T7491] FAT-fs (loop0): Directory bread(block 64) failed
[  121.291672][ T7491] FAT-fs (loop0): Directory bread(block 65) failed
[  121.299252][ T7491] FAT-fs (loop0): Directory bread(block 66) failed
[  121.306140][ T7491] FAT-fs (loop0): Directory bread(block 67) failed
[  121.312538][ T7491] FAT-fs (loop0): Directory bread(block 68) failed
[  121.315310][ T7491] FAT-fs (loop0): Directory bread(block 69) failed
[  121.319227][ T7491] FAT-fs (loop0): Directory bread(block 70) failed
[  121.322185][ T7491] FAT-fs (loop0): Directory bread(block 71) failed
[  121.325516][ T7491] FAT-fs (loop0): Directory bread(block 72) failed
[  121.329402][ T7491] FAT-fs (loop0): Directory bread(block 73) failed
[  121.472216][ T7502] loop0: detected capacity change from 0 to 2048
[  121.482927][ T7502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.766349][ T7509] loop0: detected capacity change from 0 to 32768
[  121.820663][   T33] audit: type=1326 audit(1755558099.594:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d78ebe9 code=0x7ffc0000
[  121.833893][ T7509] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.840956][   T33] audit: type=1326 audit(1755558099.594:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d78ebe9 code=0x7ffc0000
[  121.850517][   T33] audit: type=1326 audit(1755558099.604:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f645d78d550 code=0x7ffc0000
[  121.864685][   T33] audit: type=1326 audit(1755558099.604:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f645d78d550 code=0x7ffc0000
[  121.877582][   T33] audit: type=1326 audit(1755558099.604:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d78ebe9 code=0x7ffc0000
[  121.886426][   T33] audit: type=1326 audit(1755558099.604:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d78ebe9 code=0x7ffc0000
[  121.890286][ T7509] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  121.911242][ T7509] XFS (loop0): Starting recovery (logdev: internal)
[  121.917263][   T33] audit: type=1326 audit(1755558099.604:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f645d78ebe9 code=0x7ffc0000
[  121.924531][ T7509] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8 
[  121.931567][ T7509] XFS (loop0): Unmount and run xfs_repair
[  121.934395][ T7509] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  121.937795][ T7509] 00000000: 41 42 54 42 00 00 00 02 ff ff ff ff ff ff ff ff  ABTB............
[  121.941536][ T7509] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  121.944783][ T7509] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  121.944898][   T33] audit: type=1326 audit(1755558099.604:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d78ebe9 code=0x7ffc0000
[  121.948577][ T7509] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  121.948595][ T7509] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  121.948604][ T7509] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  121.948613][ T7509] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  121.948622][ T7509] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  121.949597][ T7509] XFS (loop0): Filesystem has been shut down due to log error (0x2).
[  121.979700][   T33] audit: type=1326 audit(1755558099.604:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645d78ebe9 code=0x7ffc0000
[  121.982147][ T7509] XFS (loop0): Please unmount the filesystem and rectify the problem(s).
[  121.995394][ T7509] XFS (loop0): log mount/recovery failed: error -74
[  122.006632][ T7509] XFS (loop0): log mount failed
[  122.392251][ T7529] loop0: detected capacity change from 0 to 32768
[  122.407089][ T7529] bcachefs (/dev/loop0): error validating superblock: Filesystem has incompatible version 1.7: mi_btree_bitmap, current version 1.28: inode_has_case_insensitive
[  122.414932][ T7529] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  122.494957][ T7531] loop0: detected capacity change from 0 to 256
[  122.500111][ T7531] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  122.504655][ T7531] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  122.515005][ T7531] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  122.830235][ T7535] loop0: detected capacity change from 0 to 32768
[  122.857881][  T791] misc userio: Buffer overflowed, userio client isn't keeping up
[  122.865595][ T7535] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  122.886088][   T33] audit: type=1800 audit(1755558100.654:24): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.554" name="file3" dev="loop0" ino=17058 res=0 errno=0
[  122.941063][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[  123.082749][ T7541] loop0: detected capacity change from 0 to 512
[  123.108420][ T7541] EXT4-fs (loop0): orphan cleanup on readonly fs
[  123.111510][ T7541] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  123.115780][ T7541] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  123.128284][ T7541] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.556: attempt to clear invalid blocks 2 len 1
[  123.140574][ T7541] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.556: invalid indirect mapped block 1819239214 (level 0)
[  123.157891][ T7541] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.556: invalid indirect mapped block 1819239214 (level 1)
[  123.173116][ T7541] EXT4-fs (loop0): 1 truncate cleaned up
[  123.176973][ T7541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.187452][ T7541] EXT4-fs (loop0): shut down requested (1)
[  123.227726][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.683747][ T7555] syz.0.561 uses obsolete (PF_INET,SOCK_PACKET)
[  123.985453][  T791] input: PS/2 Generic Mouse as /devices/serio2/input/input16
[  124.224010][  T791] psmouse serio2: Failed to enable mouse on 
[  124.450079][ T7565] loop0: detected capacity change from 0 to 64
[  124.499982][ T7565] BFS-fs: bfs_fill_super(): Impossible last inode number 1183 > 513 on loop0
[  124.603301][ T7573] loop0: detected capacity change from 0 to 16
[  124.614195][ T7573] erofs (device loop0): mounted with root inode @ nid 36.
[  124.625753][ T7573] syz.0.570: attempt to access beyond end of device
[  124.625753][ T7573] loop0: rw=524288, sector=128, nr_sectors = 8 limit=16
[  124.645998][ T7573] syz.0.570: attempt to access beyond end of device
[  124.645998][ T7573] loop0: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  124.658092][ T7573] erofs (device loop0): read error -95 @ 1 of nid 89
[  124.717020][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  124.747839][  T791] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  124.909160][  T791] usb 4-1: Using ep0 maxpacket: 32
[  124.914854][  T791] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  124.924132][  T791] usb 4-1: config 0 has no interface number 0
[  124.930380][  T791] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  124.933397][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.936794][  T791] usb 4-1: Product: syz
[  124.943585][  T791] usb 4-1: Manufacturer: syz
[  124.945681][  T791] usb 4-1: SerialNumber: syz
[  124.963452][  T791] usb 4-1: config 0 descriptor??
[  125.155050][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[  125.160261][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[  125.184630][  T791] radio-si470x 4-1:0.35: this is not a si470x device.
[  125.218617][  T791] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  125.226842][  T791] usb 4-1: USB disconnect, device number 12
[  125.269287][ T5852] Bluetooth: hci0: Malformed Event: 0x02
[  125.368615][ T1271] kernel write not supported for file /382/net/fib_triestat (pid: 1271 comm: kworker/1:2)
[  126.178500][  T791] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  126.338263][  T791] usb 4-1: Using ep0 maxpacket: 16
[  126.343452][  T791] usb 4-1: unable to get BOS descriptor or descriptor too short
[  126.352949][  T791] usb 4-1: config 3 has an invalid interface number: 200 but max is 0
[  126.360594][  T791] usb 4-1: config 3 has no interface number 0
[  126.363424][  T791] usb 4-1: config 3 interface 200 altsetting 128 bulk endpoint 0xF has invalid maxpacket 32
[  126.386786][  T791] usb 4-1: config 3 interface 200 has no altsetting 0
[  126.403295][  T791] usb 4-1: New USB device found, idVendor=294b, idProduct=7b59, bcdDevice=52.61
[  126.411964][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.414851][  T791] usb 4-1: Product: syz
[  126.416450][  T791] usb 4-1: Manufacturer: syz
[  126.421585][  T791] usb 4-1: SerialNumber: syz
[  126.430764][ T7623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.620423][ T7627] loop0: detected capacity change from 0 to 32768
[  126.657656][  T791] usb 4-1: USB disconnect, device number 13
[  126.855041][ T7651] loop0: detected capacity change from 0 to 128
[  126.937133][ T7655] loop0: detected capacity change from 0 to 1024
[  126.959693][ T7655] hfsplus: request for non-existent node 33423360 in B*Tree
[  126.962570][ T7655] hfsplus: request for non-existent node 33423360 in B*Tree
[  127.331598][ T7668] loop0: detected capacity change from 0 to 2048
[  127.359670][ T7670] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.385481][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  127.385495][   T33] audit: type=1800 audit(1755558105.154:27): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.615" name="file1" dev="loop0" ino=15 res=0 errno=0
[  127.422450][ T7663] loop3: detected capacity change from 0 to 32768
[  127.443131][ T7663] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  127.621653][ T5852] Bluetooth: hci2: link tx timeout
[  127.624622][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.653881][ T6179] ocfs2: Unmounting device (7,3) on (node local)
[  128.131421][ T7704] loop0: detected capacity change from 0 to 8
[  128.149578][ T7704] SQUASHFS error: Unable to read inode 0xa7
[  128.304536][ T7710] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  128.310225][ T7710] netlink: 172 bytes leftover after parsing attributes in process `syz.0.634'.
[  128.317450][ T7710] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  128.451878][ T7715] loop0: detected capacity change from 0 to 4096
[  128.474098][ T7715] NILFS (loop0): invalid segment: Checksum error in segment payload
[  128.486438][ T7715] NILFS (loop0): trying rollback from an earlier position
[  128.509496][ T7715] NILFS (loop0): recovery complete
[  128.513535][ T7718] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.837005][ T7731] loop0: detected capacity change from 0 to 512
[  128.842693][ T7731] EXT4-fs (loop0): unsupported inode size: 269
[  128.845020][ T7731] EXT4-fs (loop0): blocksize: 1024
[  128.865008][ T7692] loop3: detected capacity change from 0 to 131072
[  128.888346][ T7692] F2FS-fs (loop3): invalid crc value
[  128.933737][ T7738] loop0: detected capacity change from 0 to 512
[  128.954677][ T7738] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.644: attempt to clear invalid blocks 1 len 1
[  128.979323][ T7692] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.983146][ T7738] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.644: bg 0: block 343: padding at end of block bitmap is not set
[  128.988534][ T7738] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  128.991501][ T7692] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  129.007031][ T7738] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.644: invalid indirect mapped block 1819239214 (level 0)
[  129.013195][ T7738] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.644: invalid indirect mapped block 1819239214 (level 1)
[  129.019251][ T7738] EXT4-fs (loop0): 1 truncate cleaned up
[  129.022938][ T7738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.066564][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.432756][ T7748] syzkaller1: entered promiscuous mode
[  129.435822][ T7748] syzkaller1: entered allmulticast mode
[  129.650247][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  129.686160][ T7756] loop3: detected capacity change from 0 to 32768
[  129.721228][ T7756] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  129.759268][ T6179] ocfs2: Unmounting device (7,3) on (node local)
[  129.978413][ T7761] loop3: detected capacity change from 0 to 32768
[  129.982812][ T7761] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.652 (7761)
[  130.003955][ T7761] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  130.011027][ T7761] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  130.014736][ T7761] BTRFS info (device loop3): disk space caching is enabled
[  130.027629][ T7761] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  130.057081][ T7772] loop0: detected capacity change from 0 to 128
[  130.093745][ T7761] BTRFS info (device loop3): rebuilding free space tree
[  130.116816][ T7761] BTRFS info (device loop3): disabling free space tree
[  130.125005][ T7761] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  130.135113][ T7761] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  130.210098][ T7761] BTRFS info (device loop3): balance: start -susage=10..4095,devid=0,limit=0,stripes=0..0
[  130.213542][ T7761] BTRFS info (device loop3): balance: ended with status: 0
[  130.292287][ T6179] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  130.991077][ T7824] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20004
[  131.331672][ T7831] loop3: detected capacity change from 0 to 40427
[  131.338980][ T7831] F2FS-fs (loop3): build fault injection rate: 771
[  131.351965][ T7831] F2FS-fs (loop3): invalid crc value
[  131.397638][ T1271] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  131.413935][ T7831] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.420014][ T7831] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  131.453582][ T6179] syz-executor: attempt to access beyond end of device
[  131.453582][ T6179] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  131.459597][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  131.459616][ T6179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.459624][ T6179] Call Trace:
[  131.459629][ T6179]  <TASK>
[  131.459634][ T6179]  dump_stack_lvl+0x189/0x250
[  131.459658][ T6179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.459671][ T6179]  ? __pfx_queue_work_on+0x10/0x10
[  131.459684][ T6179]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.459698][ T6179]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.459722][ T6179]  f2fs_handle_critical_error+0x37c/0x540
[  131.459743][ T6179]  f2fs_write_end_io+0x886/0xb60
[  131.459796][ T6179]  __submit_merged_bio+0x27a/0x6a0
[  131.459818][ T6179]  __submit_merged_write_cond+0x255/0x530
[  131.459841][ T6179]  f2fs_write_data_pages+0x261d/0x3000
[  131.459891][ T6179]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.459963][ T6179]  ? __lock_acquire+0xab9/0xd20
[  131.459986][ T6179]  ? do_raw_spin_lock+0x121/0x290
[  131.460010][ T6179]  ? do_raw_spin_unlock+0x4d/0x240
[  131.460023][ T6179]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.460042][ T6179]  do_writepages+0x32e/0x550
[  131.460066][ T6179]  ? do_raw_spin_unlock+0x4d/0x240
[  131.460084][ T6179]  filemap_fdatawrite+0x199/0x240
[  131.460099][ T6179]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  131.460151][ T6179]  ? do_raw_spin_unlock+0x4d/0x240
[  131.460168][ T6179]  f2fs_sync_dirty_inodes+0x31f/0x830
[  131.460193][ T6179]  f2fs_write_checkpoint+0x95a/0x1df0
[  131.460223][ T6179]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  131.460268][ T6179]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  131.460280][ T6179]  ? kfree+0x18e/0x440
[  131.460295][ T6179]  ? kill_f2fs_super+0x298/0x6c0
[  131.460314][ T6179]  kill_f2fs_super+0x2c3/0x6c0
[  131.460330][ T6179]  ? __pfx_kill_f2fs_super+0x10/0x10
[  131.460340][ T6179]  ? radix_tree_delete_item+0x2b6/0x400
[  131.460360][ T6179]  ? shrinker_free+0x2ce/0x3e0
[  131.460375][ T6179]  deactivate_locked_super+0xbc/0x130
[  131.460390][ T6179]  cleanup_mnt+0x425/0x4c0
[  131.460402][ T6179]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.460420][ T6179]  task_work_run+0x1d4/0x260
[  131.460436][ T6179]  ? __pfx_task_work_run+0x10/0x10
[  131.460450][ T6179]  ? __x64_sys_umount+0x122/0x160
[  131.460468][ T6179]  ? exit_to_user_mode_loop+0x40/0x110
[  131.460488][ T6179]  exit_to_user_mode_loop+0xec/0x110
[  131.460502][ T6179]  do_syscall_64+0x2bd/0x3b0
[  131.460517][ T6179]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.460531][ T6179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.460540][ T6179]  ? exc_page_fault+0x9f/0xf0
[  131.460557][ T6179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.460567][ T6179] RIP: 0033:0x7f7c4418ff17
[  131.460580][ T6179] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  131.460589][ T6179] RSP: 002b:00007fffaf980cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  131.460602][ T6179] RAX: 0000000000000000 RBX: 00007f7c44211c05 RCX: 00007f7c4418ff17
[  131.460610][ T6179] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaf980db0
[  131.460617][ T6179] RBP: 00007fffaf980db0 R08: 0000000000000000 R09: 0000000000000000
[  131.460623][ T6179] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffaf981e40
[  131.460630][ T6179] R13: 00007f7c44211c05 R14: 00000000000200f9 R15: 00007fffaf981e80
[  131.460651][ T6179]  </TASK>
[  131.460657][ T6179] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  131.677534][ T1271] usb 1-1: Using ep0 maxpacket: 32
[  131.697455][ T1271] usb 1-1: config 0 has an invalid interface number: 225 but max is 0
[  131.700599][ T1271] usb 1-1: config 0 has no interface number 0
[  131.704931][ T1271] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[  131.709051][ T1271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.712253][ T1271] usb 1-1: Product: syz
[  131.714050][ T1271] usb 1-1: Manufacturer: syz
[  131.716168][ T1271] usb 1-1: SerialNumber: syz
[  131.729500][ T1271] usb 1-1: config 0 descriptor??
[  132.091077][   T51] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  132.143110][ T1271] mos7840 1-1:0.225: required endpoints missing
[  132.155643][ T1271] usb 1-1: USB disconnect, device number 15
[  132.247537][   T51] usb 4-1: Using ep0 maxpacket: 32
[  132.252169][   T51] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  132.256864][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.267514][   T51] usb 4-1: config 0 descriptor??
[  132.475712][   T51] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  132.481427][   T51] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  132.486936][   T51] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  132.490985][   T51] usb 4-1: media controller created
[  132.510076][   T51] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  132.523547][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.526464][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.676649][   T51] az6027: usb out operation failed. (-71)
[  132.688590][   T51] az6027: usb out operation failed. (-71)
[  132.691364][   T51] stb0899_attach: Driver disabled by Kconfig
[  132.694238][   T51] az6027: no front-end attached
[  132.694238][   T51] 
[  132.702184][   T51] az6027: usb out operation failed. (-71)
[  132.704931][   T51] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  132.712775][   T51] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  132.730733][   T51] dvb-usb: schedule remote query interval to 400 msecs.
[  132.738282][   T51] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  132.763716][   T51] usb 4-1: USB disconnect, device number 14
[  132.815677][   T51] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  133.047491][ T1271] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  133.202661][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.212454][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.216570][ T1271] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  133.221394][ T1271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.241401][ T1271] usb 1-1: config 0 descriptor??
[  133.609909][ T7890] loop3: detected capacity change from 0 to 256
[  133.636877][ T7890] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  133.670184][ T1271] konepure 0003:1E7D:2DBE.000D: unbalanced collection at end of report description
[  133.681609][ T1271] konepure 0003:1E7D:2DBE.000D: parse failed
[  133.688904][ T1271] konepure 0003:1E7D:2DBE.000D: probe with driver konepure failed with error -22
[  133.821961][ T7894] loop3: detected capacity change from 0 to 2048
[  133.832438][ T7894] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.841716][   T33] audit: type=1800 audit(1755558111.614:28): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.699" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  133.870907][  T791] usb 1-1: USB disconnect, device number 16
[  133.916729][   T33] audit: type=1800 audit(1755558111.684:29): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.699" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  134.174972][ T7902] loop3: detected capacity change from 0 to 8
[  134.183851][ T7902] unable to read fragment index table
[  134.596829][ T7911] loop3: detected capacity change from 0 to 32768
[  134.610421][ T7911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.707 (7911)
[  134.620456][ T7911] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.624145][ T7911] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  134.629192][ T7911] BTRFS info (device loop3): using free-space-tree
[  134.759697][ T6179] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.881551][ T7913] loop0: detected capacity change from 0 to 32768
[  134.951572][ T7913] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.010089][ T7913] XFS (loop0): Ending clean mount
[  135.021109][ T7913] XFS (loop0): Quotacheck needed: Please wait.
[  135.055981][ T7913] XFS (loop0): Quotacheck: Done.
[  135.091723][ T7913] XFS (loop0): User initiated shutdown received.
[  135.095939][ T7913] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  135.132210][ T7913] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  135.192265][ T5846] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.195890][ T7950] overlayfs: failed to resolve './file0': -2
[  135.266187][ T7933] loop3: detected capacity change from 0 to 40427
[  135.290789][ T7933] F2FS-fs (loop3): Image doesn't support compression
[  135.294852][ T7933] F2FS-fs (loop3): build fault injection rate: 690
[  135.312309][ T7933] F2FS-fs (loop3): invalid crc value
[  135.402985][ T7933] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.413334][ T7933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.671651][ T7966] loop3: detected capacity change from 0 to 8
[  135.681904][ T7966] SQUASHFS error: Failed to read block 0x4de: -5
[  135.684849][ T7966] SQUASHFS error: Failed to read block 0x4de: -5
[  135.691137][ T7966] SQUASHFS error: Failed to read block 0x4de: -5
[  135.694630][ T7966] SQUASHFS error: Failed to read block 0x4de: -5
[  135.698047][ T7966] SQUASHFS error: Failed to read block 0x4de: -5
[  135.719882][   T33] audit: type=1800 audit(1755558113.474:30): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="file1" dev="loop3" ino=5 res=0 errno=0
[  135.747822][ T1271] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  136.279487][ T1271] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  136.282980][ T1271] usb 1-1: config 0 has no interface number 0
[  136.285654][ T1271] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  136.290717][ T1271] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  136.300542][ T1271] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  136.304923][ T1271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.308967][ T1271] usb 1-1: Product: syz
[  136.310716][ T1271] usb 1-1: Manufacturer: syz
[  136.312604][ T1271] usb 1-1: SerialNumber: syz
[  136.317875][ T1271] usb 1-1: config 0 descriptor??
[  136.321750][ T7957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  136.326339][ T1271] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  136.336167][ T1271] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  136.467491][  T791] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  136.699545][  T791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.705355][  T791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.725636][  T791] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  136.728828][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.731301][  T791] usb 4-1: Product: syz
[  136.732846][  T791] usb 4-1: Manufacturer: syz
[  136.734711][  T791] usb 4-1: SerialNumber: syz
[  136.742866][ T1271] usb 1-1: USB disconnect, device number 17
[  136.753946][ T1271] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  136.762293][ T1271] cyberjack 1-1:0.69: device disconnected
[  136.956364][  T791] usb 4-1: 0:2 : does not exist
[  136.963908][  T791] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  136.991368][  T791] usb 4-1: USB disconnect, device number 15
[  137.015605][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.587553][  T791] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  137.750868][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.758302][  T791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  137.764463][  T791] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  137.771167][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.784608][  T791] usb 1-1: config 0 descriptor??
[  137.988308][ T8006] loop3: detected capacity change from 0 to 32768
[  137.998133][ T8006] (syz.3.736,8006,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.012515][ T8006] (syz.3.736,8006,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.024591][ T8006] JBD2: Ignoring recovery information on journal
[  138.059017][ T8006] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  138.099365][ T8006] 
[  138.100393][ T8006] ======================================================
[  138.102903][ T8006] WARNING: possible circular locking dependency detected
[  138.105270][ T8006] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  138.108616][ T8006] ------------------------------------------------------
[  138.111570][ T8006] syz.3.736/8006 is trying to acquire lock:
[  138.113784][ T8006] ffff88810f550618 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_setattr+0x969/0x1b40
[  138.117374][ T8006] 
[  138.117374][ T8006] but task is already holding lock:
[  138.120136][ T8006] ffff888123eeb1e0 (&oi->ip_alloc_sem){++++}-{4:4}, at: ocfs2_setattr+0x95a/0x1b40
[  138.123213][ T8006] 
[  138.123213][ T8006] which lock already depends on the new lock.
[  138.123213][ T8006] 
[  138.126937][ T8006] 
[  138.126937][ T8006] the existing dependency chain (in reverse order) is:
[  138.130902][ T8006] 
[  138.130902][ T8006] -> #4 (&oi->ip_alloc_sem){++++}-{4:4}:
[  138.134185][ T8006]        lock_acquire+0x120/0x360
[  138.136164][ T8006]        down_write+0x96/0x1f0
[  138.137753][ T8006]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  138.140263][ T8006]        ocfs2_xattr_set+0x595/0x11f0
[  138.142596][ T8006]        ocfs2_set_acl+0x701/0x7b0
[  138.144696][ T8006]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  138.146895][ T8006]        vfs_remove_acl+0x48c/0x700
[  138.148833][ T8006]        ovl_workdir_create+0x594/0x8b0
[  138.150973][ T8006]        ovl_get_workdir+0x32f/0x17c0
[  138.153254][ T8006]        ovl_fill_super+0x1365/0x35b0
[  138.155401][ T8006]        get_tree_nodev+0xbb/0x150
[  138.157350][ T8006]        vfs_get_tree+0x92/0x2b0
[  138.159142][ T8006]        do_new_mount+0x2a2/0x9e0
[  138.160940][ T8006]        __se_sys_mount+0x317/0x410
[  138.162794][ T8006]        do_syscall_64+0xfa/0x3b0
[  138.164732][ T8006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.167217][ T8006] 
[  138.167217][ T8006] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  138.170112][ T8006]        lock_acquire+0x120/0x360
[  138.171849][ T8006]        down_read+0x46/0x2e0
[  138.173488][ T8006]        ocfs2_init_acl+0x2f9/0x720
[  138.175280][ T8006]        ocfs2_mknod+0x1321/0x2050
[  138.177158][ T8006]        ocfs2_create+0x1a5/0x440
[  138.179073][ T8006]        path_openat+0x14f4/0x3830
[  138.180871][ T8006]        do_filp_open+0x1fa/0x410
[  138.182613][ T8006]        do_sys_openat2+0x121/0x1c0
[  138.184440][ T8006]        __x64_sys_open+0x11e/0x150
[  138.186474][ T8006]        do_syscall_64+0xfa/0x3b0
[  138.188381][ T8006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.190584][ T8006] 
[  138.190584][ T8006] -> #2 (jbd2_handle){++++}-{0:0}:
[  138.193375][ T8006]        lock_acquire+0x120/0x360
[  138.195274][ T8006]        start_this_handle+0x1fa7/0x21c0
[  138.197559][ T8006]        jbd2__journal_start+0x2c1/0x5b0
[  138.199658][ T8006]        jbd2_journal_start+0x2a/0x40
[  138.201676][ T8006]        ocfs2_start_trans+0x376/0x6d0
[  138.203684][ T8006]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  138.206057][ T8006]        ocfs2_dismount_volume+0x201/0x8d0
[  138.208290][ T8006]        generic_shutdown_super+0x135/0x2c0
[  138.210617][ T8006]        kill_block_super+0x44/0x90
[  138.212864][ T8006]        deactivate_locked_super+0xbc/0x130
[  138.215059][ T8006]        cleanup_mnt+0x425/0x4c0
[  138.217665][ T8006]        task_work_run+0x1d4/0x260
[  138.220043][ T8006]        exit_to_user_mode_loop+0xec/0x110
[  138.222624][ T8006]        do_syscall_64+0x2bd/0x3b0
[  138.224525][ T8006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.226759][ T8006] 
[  138.226759][ T8006] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  138.230176][ T8006]        lock_acquire+0x120/0x360
[  138.231938][ T8006]        down_read+0x46/0x2e0
[  138.233552][ T8006]        ocfs2_start_trans+0x36a/0x6d0
[  138.235463][ T8006]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  138.238213][ T8006]        ocfs2_dismount_volume+0x201/0x8d0
[  138.240414][ T8006]        generic_shutdown_super+0x135/0x2c0
[  138.242635][ T8006]        kill_block_super+0x44/0x90
[  138.244846][ T8006]        deactivate_locked_super+0xbc/0x130
[  138.247139][ T8006]        cleanup_mnt+0x425/0x4c0
[  138.249074][ T8006]        task_work_run+0x1d4/0x260
[  138.251217][ T8006]        exit_to_user_mode_loop+0xec/0x110
[  138.253379][ T8006]        do_syscall_64+0x2bd/0x3b0
[  138.255404][ T8006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.257885][ T8006] 
[  138.257885][ T8006] -> #0 (sb_internal#4){.+.+}-{0:0}:
[  138.260621][ T8006]        validate_chain+0xb9b/0x2140
[  138.262939][ T8006]        __lock_acquire+0xab9/0xd20
[  138.264794][ T8006]        lock_acquire+0x120/0x360
[  138.266745][ T8006]        ocfs2_start_trans+0x26b/0x6d0
[  138.268815][ T8006]        ocfs2_setattr+0x969/0x1b40
[  138.270696][ T8006]        notify_change+0xb36/0xe40
[  138.272662][ T8006]        ovl_workdir_create+0x722/0x8b0
[  138.274600][ T8006]        ovl_get_workdir+0x32f/0x17c0
[  138.276398][ T8006]        ovl_fill_super+0x1365/0x35b0
[  138.278270][ T8006]        get_tree_nodev+0xbb/0x150
[  138.280034][ T8006]        vfs_get_tree+0x92/0x2b0
[  138.282164][ T8006]        do_new_mount+0x2a2/0x9e0
[  138.284098][ T8006]        __se_sys_mount+0x317/0x410
[  138.286145][ T8006]        do_syscall_64+0xfa/0x3b0
[  138.288258][ T8006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.291258][ T8006] 
[  138.291258][ T8006] other info that might help us debug this:
[  138.291258][ T8006] 
[  138.295671][ T8006] Chain exists of:
[  138.295671][ T8006]   sb_internal#4 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem
[  138.295671][ T8006] 
[  138.300984][ T8006]  Possible unsafe locking scenario:
[  138.300984][ T8006] 
[  138.304051][ T8006]        CPU0                    CPU1
[  138.306342][ T8006]        ----                    ----
[  138.308408][ T8006]   lock(&oi->ip_alloc_sem);
[  138.310043][ T8006]                                lock(&oi->ip_xattr_sem);
[  138.312733][ T8006]                                lock(&oi->ip_alloc_sem);
[  138.315427][ T8006]   rlock(sb_internal#4);
[  138.317485][ T8006] 
[  138.317485][ T8006]  *** DEADLOCK ***
[  138.317485][ T8006] 
[  138.320937][ T8006] 4 locks held by syz.3.736/8006:
[  138.322826][ T8006]  #0: ffff888039b440e0 (&type->s_umount_key#87/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970
[  138.326416][ T8006]  #1: ffff88810f550428 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  138.330310][ T8006]  #2: ffff888123eeb540 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: ovl_workdir_create+0x6a8/0x8b0
[  138.335154][ T8006]  #3: ffff888123eeb1e0 (&oi->ip_alloc_sem){++++}-{4:4}, at: ocfs2_setattr+0x95a/0x1b40
[  138.338736][ T8006] 
[  138.338736][ T8006] stack backtrace:
[  138.340887][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.3.736 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  138.340902][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.340908][ T8006] Call Trace:
[  138.340914][ T8006]  <TASK>
[  138.340919][ T8006]  dump_stack_lvl+0x189/0x250
[  138.340935][ T8006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.340946][ T8006]  ? __pfx__printk+0x10/0x10
[  138.340957][ T8006]  ? print_lock_name+0xde/0x100
[  138.340969][ T8006]  print_circular_bug+0x2ee/0x310
[  138.340979][ T8006]  check_noncircular+0x134/0x160
[  138.340989][ T8006]  validate_chain+0xb9b/0x2140
[  138.340998][ T8006]  ? lockdep_unlock+0x89/0x120
[  138.341011][ T8006]  __lock_acquire+0xab9/0xd20
[  138.341022][ T8006]  ? ocfs2_setattr+0x969/0x1b40
[  138.341032][ T8006]  lock_acquire+0x120/0x360
[  138.341042][ T8006]  ? ocfs2_setattr+0x969/0x1b40
[  138.341052][ T8006]  ? do_raw_spin_unlock+0x4d/0x240
[  138.341060][ T8006]  ocfs2_start_trans+0x26b/0x6d0
[  138.341068][ T8006]  ? ocfs2_setattr+0x969/0x1b40
[  138.341078][ T8006]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  138.341086][ T8006]  ? setattr_prepare+0x1e7/0xac0
[  138.341096][ T8006]  ocfs2_setattr+0x969/0x1b40
[  138.341109][ T8006]  ? __pfx_ocfs2_setattr+0x10/0x10
[  138.341121][ T8006]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  138.341131][ T8006]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  138.341141][ T8006]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  138.341151][ T8006]  ? current_time+0x222/0x370
[  138.341157][ T8006]  ? evm_inode_setattr+0x1bd/0x7d0
[  138.341165][ T8006]  ? __pfx_current_time+0x10/0x10
[  138.341173][ T8006]  ? try_break_deleg+0x79/0x130
[  138.341180][ T8006]  ? __pfx_ocfs2_setattr+0x10/0x10
[  138.341190][ T8006]  notify_change+0xb36/0xe40
[  138.341199][ T8006]  ovl_workdir_create+0x722/0x8b0
[  138.341212][ T8006]  ? __pfx_ovl_workdir_create+0x10/0x10
[  138.341222][ T8006]  ? mnt_get_write_access+0x223/0x2a0
[  138.341231][ T8006]  ovl_get_workdir+0x32f/0x17c0
[  138.341241][ T8006]  ? __pfx_ovl_get_workdir+0x10/0x10
[  138.341250][ T8006]  ? __lock_acquire+0xab9/0xd20
[  138.341261][ T8006]  ? do_raw_spin_lock+0x121/0x290
[  138.341270][ T8006]  ? do_raw_spin_unlock+0x4d/0x240
[  138.341278][ T8006]  ? _raw_spin_unlock+0x28/0x50
[  138.341287][ T8006]  ? ovl_inuse_trylock+0xae/0xf0
[  138.341296][ T8006]  ovl_fill_super+0x1365/0x35b0
[  138.341306][ T8006]  ? rcu_is_watching+0x15/0xb0
[  138.341315][ T8006]  ? __pfx_ovl_fill_super+0x10/0x10
[  138.341323][ T8006]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  138.341334][ T8006]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  138.341344][ T8006]  ? __raw_spin_lock_init+0x45/0x100
[  138.341353][ T8006]  ? sget_fc+0x962/0xa40
[  138.341361][ T8006]  ? __pfx_set_anon_super_fc+0x10/0x10
[  138.341369][ T8006]  ? __pfx_ovl_fill_super+0x10/0x10
[  138.341378][ T8006]  get_tree_nodev+0xbb/0x150
[  138.341388][ T8006]  vfs_get_tree+0x92/0x2b0
[  138.341399][ T8006]  do_new_mount+0x2a2/0x9e0
[  138.341409][ T8006]  ? ns_capable+0x8a/0xf0
[  138.341416][ T8006]  ? __pfx_do_new_mount+0x10/0x10
[  138.341425][ T8006]  ? path_mount+0x61c/0xfe0
[  138.341433][ T8006]  ? user_path_at+0x44/0x60
[  138.341442][ T8006]  __se_sys_mount+0x317/0x410
[  138.341453][ T8006]  ? __pfx___se_sys_mount+0x10/0x10
[  138.341462][ T8006]  ? rcu_is_watching+0x15/0xb0
[  138.341469][ T8006]  ? do_syscall_64+0xbe/0x3b0
[  138.341478][ T8006]  ? __x64_sys_mount+0x20/0xc0
[  138.341488][ T8006]  do_syscall_64+0xfa/0x3b0
[  138.341498][ T8006]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.341506][ T8006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.341513][ T8006]  ? exc_page_fault+0x9f/0xf0
[  138.341522][ T8006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.341529][ T8006] RIP: 0033:0x7f7c4418ebe9
[  138.341538][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.341544][ T8006] RSP: 002b:00007f7c44f26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  138.341553][ T8006] RAX: ffffffffffffffda RBX: 00007f7c443b5fa0 RCX: 00007f7c4418ebe9
[  138.341558][ T8006] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  138.341563][ T8006] RBP: 00007f7c44211e19 R08: 0000200000000400 R09: 0000000000000000
[  138.341568][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.341572][ T8006] R13: 00007f7c443b6038 R14: 00007f7c443b5fa0 R15: 00007fffaf981a68
[  138.341579][ T8006]  </TASK>
[  138.345032][  T791] kovaplus 0003:1E7D:2D50.000E: item fetching failed at offset 4/5
[  138.363197][ T8006] overlayfs: upper fs does not support tmpfile.
[  138.369608][  T791] kovaplus 0003:1E7D:2D50.000E: parse failed
[  138.376402][ T8006] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  138.377963][  T791] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -22
[  138.388341][ T8006] overlayfs: upper fs missing required features.
[  138.556409][ T1271] usb 1-1: USB disconnect, device number 18
[  138.570314][ T6179] ocfs2: Unmounting device (7,3) on (node local)

VM DIAGNOSIS:
23:01:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080000000 RBX=0000000000000201 RCX=0f1cacb1c3ec9500 RDX=0000000000000000
RSI=ffffffff8be33260 RDI=ffffffff8184e7fd RBP=ffffc900000f7978 RSP=ffffc900000f78b8
R8 =ffffffff8fa37d37 R9 =1ffffffff1f46fa6 R10=dffffc0000000000 R11=fffffbfff1f46fa7
R12=ffffffff8b473888 R13=dffffc0000000000 R14=dffffc0000000000 R15=1ffff9200001ef1c
RIP=ffffffff810014b0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056443b6e9ff0 CR3=0000000106978000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=bee5ef7508ae65b2 52d928941d96b3df
XMM02=b58fdb0f6e332d27 31f17d860c30cde0 XMM03=c96628f881ec9173 953ca6a1976d88c3
XMM04=19618e2e67dae1d0 a957314006b70b93 XMM05=251ba5f58c627d6f 69975b6e0b58010e
XMM06=9d510ceacbc34c71 b3e1f064b361877b XMM07=9dc321347d830cf2 0cb018814c2c0b52
XMM08=80cad5c223ccad93 6702bc07225edf19 XMM09=0000000000000000 00007f645d812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003303 RDI=0000000000003304 RBP=00000000000003f8 RSP=ffffc90007726850
R8 =ffff8880216b8237 R9 =1ffff110042d7046 R10=dffffc0000000000 R11=ffffffff854efc70
R12=dffffc0000000000 R13=ffffffff99af98c8 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efcec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7c44f266c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=00000000396c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=3030303030303030 3030303d72656972
XMM04=6274726165682c37 3030303030303030 XMM05=0000000000000000 00007f7c44f256e0
XMM06=00007f7c44f256e0 00007f7c44f25560 XMM07=00007f7c44f255a0 00007f7c44f25580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f7c44212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
