last executing test programs:

2m42.378048328s ago: executing program 1 (id=110):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x4f27, 0x5, 0x7, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x7fffffff, 0x2, 0x3, 0xfffffff8]})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x11, r0, 0x8cbab000)

2m42.377768826s ago: executing program 1 (id=111):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "abceb7afbe30597a", "a02aa4928e90841dbad588a3dce544345d63173ace5377cb78dbedca7f420200", "0e3dd449", "80ec9c80859d2a2f"}, 0x38)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa3, 0x0, 0x0}, &(0x7f0000000240)=0x40)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
close_range(r0, r1, 0x0)

2m42.044041709s ago: executing program 1 (id=113):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680))
process_mrelease(0xffffffffffffffff, 0x0)

2m42.04377105s ago: executing program 1 (id=114):
syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x10000000000400, 0x0, 0x0, 0x8, 0x7, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200000000000010", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

2m41.433628319s ago: executing program 1 (id=117):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00')
socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82)
close(0x3)
open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0)
read$FUSE(r0, &(0x7f0000003940)={0x2020}, 0x2020)

2m40.697338067s ago: executing program 1 (id=121):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m40.379123888s ago: executing program 32 (id=121):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m31.154579973s ago: executing program 3 (id=173):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000002500)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x525, &(0x7f0000000480)="$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")
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000003c0)='./file0\x00', 0x224ac5b, 0x0, 0x1, 0x0, &(0x7f0000000080))

2m31.017303534s ago: executing program 3 (id=175):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x75, &(0x7f00000000c0)=""/117, 0x40f00}, 0x94)

2m30.942353142s ago: executing program 3 (id=177):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mkdir(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

2m29.942498963s ago: executing program 3 (id=184):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000140)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5fd0cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb6d658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bebb749daef202e0412a73d545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177de97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b8f8451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9621d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c40000005e538c77b2b14f63d253705363846bc4e9cd3284ff329330812d2211ae34106e0306376a2b1cfe60a09becae2b05ec9adcac47612af85f598a880fa97891a7a290b6e730800542aea761aeb463f5ff5bdf5099ae8ad4afe99db9e9c4e703cb900e9ae272742fe2ff81d1a4f15668392cdafd2e1757706f47f9f84e532f25e2737cb6f6e89378f8d79ab8507b109c7f1f3653a5bc9d54ccc633de6263526eac10519274"], 0x1, 0x5f98, &(0x7f000000efc0)="$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")
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r4, 0x2007ffc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r4, 0x0, r5, 0x0, 0xfffffbffa003e45b, 0x700000000000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

2m28.817901522s ago: executing program 3 (id=191):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18, 0x0, 0x0, {0x2000000}}, 0x18)
write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x1, 0x1, 0x8, 0xc873, 0xffffffff, 0xfffffbff, {0x4, 0x8, 0x85, 0x1, 0x7, 0xa, 0x2, 0x1, 0x40, 0xc000, 0x8, 0xee01, 0x0, 0x5, 0x9}}}, 0x90)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1008002, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x20842, 0x0)
read$FUSE(r3, 0x0, 0x500)

2m28.326696141s ago: executing program 3 (id=198):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2bfc}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbe", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m13.040742116s ago: executing program 33 (id=198):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2bfc}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbe", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m26.710529265s ago: executing program 2 (id=744):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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")
chdir(0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000005f00)={0x60, 0x0, 0x0, {{0xfffffffffffffffd, 0x17, 0x4, 0x0, 0x4, 0xfffffbff, 0x1, 0x8}}}, 0x60)
fadvise64(r0, 0x0, 0x60, 0x4)

1m26.410170731s ago: executing program 2 (id=745):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m26.069142833s ago: executing program 2 (id=749):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000001800128008000100677265000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0)

1m25.479032403s ago: executing program 2 (id=755):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)

1m25.421329929s ago: executing program 2 (id=757):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x2, 0x0, 0x2000000, 0x0, 0x5}})

1m25.100328408s ago: executing program 2 (id=761):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000206010800007c1400000000000000000c000780080008400000002a0500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)

1m24.875623872s ago: executing program 34 (id=761):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000206010800007c1400000000000000000c000780080008400000002a0500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)

1.371533929s ago: executing program 0 (id=1669):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xc, @win={{0x2, 0x2, 0x6, 0x8000}, 0x4, 0x9, 0x0, 0x17, 0x0, 0x10}})

1.23787627s ago: executing program 0 (id=1673):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004"], 0x48}}, 0x0)

1.152669746s ago: executing program 0 (id=1674):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)

1.062558776s ago: executing program 5 (id=1676):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain)

1.006780948s ago: executing program 5 (id=1678):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1.005966219s ago: executing program 5 (id=1679):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
umount2(0x0, 0x0)
munlockall()

882.696766ms ago: executing program 4 (id=1682):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xffffffffffffffa4}, 0x50000, 0x0, 0x2, 0xb, 0x9}, 0x20)

882.511852ms ago: executing program 4 (id=1683):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x201, 0x5388, 0x6f5, 0x800, 0xca, 0x7}, {0xffff, 0x5, 0x1, 0x3, 0x6, 0xfd}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

833.130115ms ago: executing program 4 (id=1684):
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="e33a176ed024", @empty, @void, {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote={0xac, 0x14, 0x0}, @empty, @local}}}}, 0x0)

752.101663ms ago: executing program 4 (id=1685):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000007300)=ANY=[], 0xfe, 0x61b9, &(0x7f0000000400)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

704.363214ms ago: executing program 5 (id=1686):
r0 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]})

644.265863ms ago: executing program 5 (id=1687):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file0\x00', 0x3000010, &(0x7f00000000c0)={[{@unhide}, {@noadinicb}, {@uid}, {@umask={'umask', 0x3d, 0x3d}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@gid_forget}, {@shortad}, {@uid_forget}, {@adinicb}]}, 0x1, 0xc5f, &(0x7f0000000f40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800052, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

522.917154ms ago: executing program 5 (id=1688):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "950e086e0000000000000010000000040100"})

203.011717ms ago: executing program 0 (id=1689):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff038}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

73.555414ms ago: executing program 4 (id=1690):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)

1.280352ms ago: executing program 0 (id=1691):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000f"], 0x0, 0x56}, 0x28)

118.633µs ago: executing program 4 (id=1692):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)={[{@shortname_winnt}, {@uni_xlate}, {@fat=@errors_remount}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}]}, 0x2a, 0x33c, &(0x7f0000000a40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4081, 0xff1)

0s ago: executing program 0 (id=1693):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000004c, &(0x7f00000004c0)=ANY=[@ANYBLOB="757466383d646973636172642c646d61736b3d30303030303030303030303030303030303030303030372c9269643d", @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=maccroatian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000007,umask=00000000000000000000226,\x00'], 0x1, 0x14f7, &(0x7f0000001580)="$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")

kernel console output (not intermixed with test programs):

02 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  122.906168][   T33] audit: type=1326 audit(2000000019.760:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.0.393" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  122.918741][   T33] audit: type=1326 audit(2000000019.760:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.0.393" exe="/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  122.927278][   T33] audit: type=1326 audit(2000000019.760:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.0.393" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  122.929786][    T9] usb 3-1: 0:2 : does not exist
[  122.939645][   T33] audit: type=1326 audit(2000000019.760:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.0.393" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  122.949507][ T7175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.011200][ T6828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.015210][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  123.020507][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  123.024324][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  123.030311][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  123.103985][ T7185] loop4: detected capacity change from 0 to 512
[  123.107209][ T7183] loop0: detected capacity change from 0 to 2048
[  123.122715][ T7183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.125880][ T7185] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  123.148353][ T7185] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  123.162558][    T9] usb 3-1: USB disconnect, device number 8
[  123.192105][ T7185] EXT4-fs (loop4): 1 truncate cleaned up
[  123.195233][ T7185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.271474][ T7189] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[  123.284836][ T6828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.710375][ T7193] loop4: detected capacity change from 0 to 32768
[  124.523283][ T7232] loop2: detected capacity change from 0 to 32768
[  124.580435][ T7232] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  124.641407][ T6878] (syz-executor,6878,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  124.646704][ T6878] ocfs2: Unmounting device (7,2) on (node local)
[  124.999963][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'.
[  125.011712][ T7250] vlan0: entered promiscuous mode
[  125.368526][  T793] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.538086][  T793] usb 3-1: Using ep0 maxpacket: 16
[  125.544379][  T793] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  125.549047][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.552457][  T793] usb 3-1: Product: syz
[  125.555048][  T793] usb 3-1: Manufacturer: syz
[  125.557049][  T793] usb 3-1: SerialNumber: syz
[  125.564495][  T793] usb 3-1: config 0 descriptor??
[  125.695996][ T7263] loop4: detected capacity change from 0 to 32768
[  125.715480][ T7263] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.763067][ T7263] XFS (loop4): Ending clean mount
[  125.768923][ T7263] XFS (loop4): Quotacheck needed: Please wait.
[  125.803950][ T7263] XFS (loop4): Quotacheck: Done.
[  125.846859][ T6828] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.984508][  T793] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  125.997159][  T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  126.011514][  T793] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  126.014714][  T793] usb 3-1: media controller created
[  126.018941][ T7273] loop4: detected capacity change from 0 to 1024
[  126.047223][  T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  126.193273][  T793] zl10353_read_register: readreg error (reg=127, ret==0)
[  126.196367][  T793] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  126.201829][  T793] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  126.222548][  T793] usb 3-1: USB disconnect, device number 9
[  126.319820][  T793] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  127.114794][ T7302] loop2: detected capacity change from 0 to 2048
[  127.148610][ T7302] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  127.151670][ T7302] UDF-fs: Scanning with blocksize 512 failed
[  127.164998][ T7302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.722758][ T7327] loop0: detected capacity change from 0 to 128
[  127.972930][ T7321] loop2: detected capacity change from 0 to 32768
[  127.976728][ T7321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.453 (7321)
[  128.021681][ T7321] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.025112][ T7321] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  128.140467][ T7321] BTRFS info (device loop2): enabling ssd optimizations
[  128.142970][ T7321] BTRFS info (device loop2): enabling free space tree
[  128.295828][ T6878] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.956761][ T7401] netlink: 'syz.0.479': attribute type 11 has an invalid length.
[  128.964005][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'.
[  129.111451][ T7409] loop2: detected capacity change from 0 to 1024
[  129.258941][ T5915] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  129.588092][ T5915] usb 1-1: Using ep0 maxpacket: 16
[  129.592175][ T5915] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  129.597328][ T5915] usb 1-1: config 0 has no interface number 0
[  129.601347][ T5915] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  129.605745][ T5915] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  129.610280][ T5915] usb 1-1: config 0 interface 41 has no altsetting 0
[  129.615999][ T5915] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  129.620991][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.628071][ T5915] usb 1-1: Product: syz
[  129.629790][ T5915] usb 1-1: Manufacturer: syz
[  129.631691][ T5915] usb 1-1: SerialNumber: syz
[  129.635792][ T5915] usb 1-1: config 0 descriptor??
[  129.642840][ T7405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.646476][ T7405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.835165][ T7425] netlink: 276 bytes leftover after parsing attributes in process `syz.4.489'.
[  129.867719][ T7405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.878208][ T7405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  130.195860][ T7435] loop2: detected capacity change from 0 to 256
[  130.220058][ T7435] FAT-fs (loop2): Directory bread(block 64) failed
[  130.222760][ T7435] FAT-fs (loop2): Directory bread(block 65) failed
[  130.225600][ T7435] FAT-fs (loop2): Directory bread(block 66) failed
[  130.229899][ T7435] FAT-fs (loop2): Directory bread(block 67) failed
[  130.232593][ T7435] FAT-fs (loop2): Directory bread(block 68) failed
[  130.241516][ T7435] FAT-fs (loop2): Directory bread(block 69) failed
[  130.244812][ T7435] FAT-fs (loop2): Directory bread(block 70) failed
[  130.247608][ T7435] FAT-fs (loop2): Directory bread(block 71) failed
[  130.250905][ T7435] FAT-fs (loop2): Directory bread(block 72) failed
[  130.255640][ T7435] FAT-fs (loop2): Directory bread(block 73) failed
[  130.274084][   T33] audit: type=1800 audit(2000000027.140:19): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.494" name="file1" dev="loop2" ino=1048624 res=0 errno=0
[  130.280537][ T7435] syz.2.494: attempt to access beyond end of device
[  130.280537][ T7435] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[  130.487084][ T7443] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  130.494754][ T5915] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  130.763917][ T7455] loop2: detected capacity change from 0 to 512
[  130.973041][ T5915] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  130.978182][ T5915] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  130.984058][ T5915] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  130.992014][ T5915] usb 1-1: USB disconnect, device number 12
[  131.822513][   T33] audit: type=1326 audit(2000000028.690:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.2.509" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x0
[  131.962224][ T7471] loop0: detected capacity change from 0 to 4096
[  132.002283][ T7471] ntfs3(loop0): ino=18, mi_enum_attr
[  132.005395][ T7471] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  132.013908][ T7471] ntfs3(loop0): ino=1a, mi_enum_attr
[  132.383100][ T7485] loop0: detected capacity change from 0 to 32768
[  132.387501][ T7485] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas_v0: no devices in entry (unknown data_type 127): 1/0 []
[  132.387501][ T7485] replicas_v0 (size 24):
[  132.387501][ T7485] btree: 1 [0] journal: 1 [0] user: 1 [255] (unknown data_type 127): 0 []
[  132.387501][ T7485] 
[  132.398817][ T7485] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  132.491002][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  132.529362][ T7497] fuse: Bad value for 'fd'
[  132.671538][ T5890] usb 3-1: config index 0 descriptor too short (expected 3133, got 61)
[  132.676386][ T5890] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[  132.685741][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.691738][ T5890] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  132.696268][ T5890] usb 3-1: config 0 has no interface number 0
[  132.699967][ T5890] usb 3-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85
[  132.705669][ T5890] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  132.718168][ T5890] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  132.723430][ T5890] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  132.726491][ T5890] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.737624][ T5890] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  132.741844][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.753482][ T5890] usb 3-1: config 0 descriptor??
[  132.761827][ T5890] gspca_main: spca561-2.14.0 probing abcd:cdee
[  132.772484][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.775127][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.869922][ T7504] netlink: 'syz.4.524': attribute type 15 has an invalid length.
[  132.985459][ T5890] spca561 3-1:0.156: probe with driver spca561 failed with error -22
[  132.994939][ T5890] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  133.000338][ T5890] usb 3-1: MIDIStreaming interface descriptor not found
[  133.101499][ T5890] usb 3-1: USB disconnect, device number 10
[  133.154867][   T33] audit: type=1326 audit(2000000030.020:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.528" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x0
[  133.632805][ T7533] loop2: detected capacity change from 0 to 1764
[  133.674768][ T7533] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  134.160349][ T7551] Zero length message leads to an empty skb
[  134.468186][ T5915] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  134.630310][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.634668][ T5915] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  134.646001][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.654363][ T7559] fuse: Bad value for 'fd'
[  134.663742][ T5915] usb 1-1: config 0 descriptor??
[  135.381352][ T5915] razer 0003:1532:010E.0005: failed to enable macro keys: -71
[  135.388745][ T5915] razer 0003:1532:010E.0005: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0
[  135.402678][ T5915] usb 1-1: USB disconnect, device number 13
[  135.487918][ T7568] loop2: detected capacity change from 0 to 32768
[  135.515904][   T33] audit: type=1800 audit(2000000032.380:22): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.555" name="file2" dev="loop2" ino=5 res=0 errno=0
[  135.729519][ T7574] netlink: 64 bytes leftover after parsing attributes in process `syz.4.557'.
[  136.070014][ T7593] loop0: detected capacity change from 0 to 32768
[  136.178175][ T7593] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names
[  136.178188][ T7593]   allowing incompatible features above 0.0: (unknown version)
[  136.178193][ T7593]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  136.190396][ T7593] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  136.193873][ T7593] bcachefs (loop0): recovering from clean shutdown, journal seq 14
[  136.196849][ T7593] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  136.196849][ T7593]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  136.225252][ T7593] bcachefs (loop0): accounting_read... done
[  136.228168][ T7593] bcachefs (loop0): alloc_read... done
[  136.230411][ T7593] bcachefs (loop0): snapshots_read... done
[  136.233381][ T7593] bcachefs (loop0): check_allocations...
[  136.236485][ T7593] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  136.236524][ T7593]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  136.251365][ T7593] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  136.251378][ T7593]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  136.260197][ T7593] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  136.260209][ T7593]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  136.268440][ T7593] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  136.268450][ T7593]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  136.276704][ T7593] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  136.276714][ T7593]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  136.287136][ T7593] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  136.287148][ T7593]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  136.299624][ T7593]  done
[  136.303297][ T7593] bcachefs (loop0): going read-write
[  136.317767][ T7593] bcachefs (loop0): journal_replay... done
[  136.396390][ T7593] bcachefs (loop0): check_extents_to_backpointers...
[  136.398466][ T7593] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets
[  136.406701][ T7593]  done
[  136.412386][ T7593] bcachefs (loop0): check_inodes... done
[  136.418764][ T7593] bcachefs (loop0): resume_logged_ops... done
[  136.423653][ T7593] bcachefs (loop0): delete_dead_inodes... done
[  136.429864][ T7593] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[  136.433715][ T7593] bcachefs (loop0): check_extents_to_backpointers... done
[  136.439398][ T7593] bcachefs (loop0): check_inodes... done
[  136.443128][ T7593] bcachefs (loop0): resume_logged_ops... done
[  136.446338][ T7593] bcachefs (loop0): delete_dead_inodes... done
[  136.452734][ T7593] bcachefs (loop0): done starting filesystem
[  136.532472][ T7593] syz.0.563 (7593) used greatest stack depth: 14680 bytes left
[  136.538522][ T5856] bcachefs (loop0): shutting down
[  136.540640][ T5856] bcachefs (loop0): going read-only
[  136.544814][ T5856] bcachefs (loop0): finished waiting for writes to stop
[  136.553742][ T5856] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23
[  136.577664][ T5856] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24
[  136.590801][ T5856] bcachefs (loop0): clean shutdown complete, journal seq 25
[  136.594813][ T5856] bcachefs (loop0): marking filesystem clean
[  136.666148][ T5856] bcachefs (loop0): shutdown complete
[  137.646659][ T7619] loop2: detected capacity change from 0 to 40427
[  137.649613][ T7619] F2FS-fs: heap/no_heap options were deprecated
[  137.659257][ T7619] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  137.666126][ T7619] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.671470][ T7619] F2FS-fs (loop2): old and new quota format mixing
[  137.990830][ T7631] fuse: Bad value for 'fd'
[  138.059634][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'.
[  138.082439][ T7623] loop2: detected capacity change from 0 to 32768
[  138.093219][ T7623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.571 (7623)
[  138.137633][ T7623] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.145380][ T7623] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  138.300845][ T7623] BTRFS info (device loop2): enabling free space tree
[  138.303704][ T7623] BTRFS info (device loop2): enabling auto defrag
[  138.320174][ T7623] BTRFS info (device loop2): force zlib compression, level 3
[  138.323184][ T7623] BTRFS info (device loop2): max_inline set to 0
[  138.562395][ T7668] loop0: detected capacity change from 0 to 256
[  138.583785][ T7668] exfat: Deprecated parameter 'utf8'
[  138.585621][ T7668] exfat: Deprecated parameter 'namecase'
[  138.587347][ T7668] exfat: Deprecated parameter 'namecase'
[  138.604274][ T7668] exfat: Deprecated parameter 'utf8'
[  138.612771][ T6878] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.624736][ T7668] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d)
[  139.123198][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  139.290044][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.293418][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.296522][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  139.299719][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.310169][ T5915] usb 3-1: config 0 descriptor??
[  139.776444][ T5915] logitech 0003:046D:C623.0006: unknown main item tag 0x0
[  139.780330][ T5915] logitech 0003:046D:C623.0006: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.2-1/input0
[  139.978069][ T5890] usb 3-1: USB disconnect, device number 11
[  140.089086][ T7690] loop0: detected capacity change from 0 to 32768
[  140.092106][ T7690] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.592 (7690)
[  140.099992][ T7690] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.109964][ T7690] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  140.113261][ T7690] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  140.174271][ T7690] BTRFS info (device loop0): rebuilding free space tree
[  140.184643][ T7690] BTRFS info (device loop0): disabling free space tree
[  140.186870][ T7690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  140.190451][ T7690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  140.199034][ T7690] BTRFS info (device loop0): setting nodatasum
[  140.201141][ T7690] BTRFS info (device loop0): setting nodatacow
[  140.204036][ T7690] BTRFS info (device loop0): enabling ssd optimizations
[  140.206220][ T7690] BTRFS info (device loop0): turning off barriers
[  140.208668][ T7690] BTRFS info (device loop0): turning on flush-on-commit
[  140.211639][ T7690] BTRFS info (device loop0): enabling disk space caching
[  140.214153][ T7690] BTRFS info (device loop0): force clearing of disk cache
[  140.216425][ T7690] BTRFS info (device loop0): doing ref verification
[  140.220421][ T7690] BTRFS info (device loop0): max_inline set to 4096
[  140.365571][ T5856] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.827501][   T33] audit: type=1326 audit(2000000037.690:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  140.858213][   T33] audit: type=1326 audit(2000000037.700:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  140.867669][   T33] audit: type=1326 audit(2000000037.720:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  140.886005][   T33] audit: type=1326 audit(2000000037.750:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  140.886045][   T33] audit: type=1326 audit(2000000037.750:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  141.433820][ T7755] veth1_to_bond: entered allmulticast mode
[  141.449404][ T7755] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  141.483344][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'.
[  141.591707][ T7755] bond0: (slave bond_slave_1): Releasing backup interface
[  141.628916][ T7765] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  141.773592][ T7755] veth1_to_bond (unregistering): left allmulticast mode
[  143.111479][   T33] audit: type=1326 audit(2000000039.980:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.4.627" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f547db8ebe9 code=0x0
[  143.216265][ T7785] loop0: detected capacity change from 0 to 4096
[  143.238361][ T7786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.328825][ T7785] loop0: detected capacity change from 4096 to 0
[  143.335875][    C0] blk_print_req_error: 12 callbacks suppressed
[  143.335900][    C0] I/O error, dev loop0, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.345995][ T7785] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0)
[  143.383652][ T5856] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  143.386944][ T5856] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[  143.403339][ T5856] Remounting filesystem read-only
[  143.405106][ T5856] NILFS (loop0): error -5 truncating bmap (ino=12)
[  143.418770][ T5856] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  143.495800][   T33] audit: type=1326 audit(2000000040.360:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.2.630" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  143.511601][   T33] audit: type=1326 audit(2000000040.370:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.2.630" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  143.539167][   T33] audit: type=1326 audit(2000000040.370:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.2.630" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  143.557702][   T33] audit: type=1326 audit(2000000040.370:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.2.630" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609bd8ebe9 code=0x7ffc0000
[  144.072009][ T5890] IPVS: starting estimator thread 0...
[  144.173532][ T7803] loop0: detected capacity change from 0 to 1024
[  144.178784][ T7801] IPVS: using max 64 ests per chain, 153600 per kthread
[  144.834144][ T7818] hfsplus: xattr searching failed
[  144.844032][ T7818] hfsplus: xattr searching failed
[  145.057343][ T3606] hfsplus: bad catalog file entry
[  145.063133][ T3606] hfsplus: b-tree write err: -5, ino 3
[  145.090878][ T5890] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  145.152891][ T7824] netlink: 'syz.4.644': attribute type 29 has an invalid length.
[  145.248065][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  145.265508][ T5890] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  145.274424][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.277088][ T5890] usb 3-1: Product: syz
[  145.279617][ T5890] usb 3-1: Manufacturer: syz
[  145.281451][ T5890] usb 3-1: SerialNumber: syz
[  145.291636][ T5890] usb 3-1: config 0 descriptor??
[  145.295200][ T5890] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  145.418173][ T5898] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  145.765058][ T5890] gp8psk: usb in 128 operation failed.
[  145.770071][ T5890] gp8psk: usb in 137 operation failed.
[  145.772809][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  145.777150][ T5890] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  145.781932][ T5890] usb 3-1: media controller created
[  145.797100][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  145.811831][ T5890] gp8psk_fe: Frontend revision 1 attached
[  145.814556][ T5890] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  145.818441][ T5890] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  145.849783][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.853545][ T5898] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  145.856336][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.868952][ T5898] usb 1-1: config 0 descriptor??
[  146.066825][ T5890] gp8psk: usb in 137 operation failed.
[  146.069033][ T5890] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  146.074626][ T5890] gp8psk: found Genpix USB device pID = 201 (hex)
[  146.081803][ T5890] usb 3-1: USB disconnect, device number 12
[  146.163295][ T5890] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  146.286608][ T5898] hid_mf 0003:0079:1846.0007: unknown main item tag 0x4
[  146.294017][ T5898] hid_mf 0003:0079:1846.0007: item fetching failed at offset 6/7
[  146.297411][ T5898] hid_mf 0003:0079:1846.0007: HID parse failed.
[  146.301297][ T5898] hid_mf 0003:0079:1846.0007: probe with driver hid_mf failed with error -22
[  146.316534][ T5850] Process accounting resumed
[  146.489692][ T5898] usb 1-1: USB disconnect, device number 14
[  147.308221][ T5898] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  147.376724][   T33] kauditd_printk_skb: 24 callbacks suppressed
[  147.376744][   T33] audit: type=1326 audit(2000000044.240:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  147.388986][   T33] audit: type=1326 audit(2000000044.240:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  147.400382][   T33] audit: type=1326 audit(2000000044.250:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.670" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  147.408953][   T33] audit: type=1326 audit(2000000044.250:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  147.420561][   T33] audit: type=1326 audit(2000000044.250:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.670" exe="/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  147.432614][   T33] audit: type=1326 audit(2000000044.250:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  147.918405][ T5898] usb 3-1: Using ep0 maxpacket: 32
[  147.922484][ T5898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  147.925613][ T5898] usb 3-1: config 0 has no interface number 0
[  147.931430][ T5898] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  147.934842][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.937888][ T5898] usb 3-1: Product: syz
[  147.940197][ T5898] usb 3-1: Manufacturer: syz
[  147.942059][ T5898] usb 3-1: SerialNumber: syz
[  147.946220][ T5898] usb 3-1: config 0 descriptor??
[  147.963687][ T5898] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  147.966540][ T5898] usb 3-1: selecting invalid altsetting 1
[  147.969537][ T5898] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  147.974729][ T5898] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  147.983673][ T5898] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  147.992302][ T5898] usb 3-1: media controller created
[  148.013910][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  148.153923][ T5898] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  148.160970][ T5898] zl10353_read_register: readreg error (reg=127, ret==-32)
[  148.166173][ T5898] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  148.220930][ T5898] usb 3-1: USB disconnect, device number 13
[  149.654873][ T7930] loop0: detected capacity change from 0 to 128
[  149.667402][ T7930] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  149.679044][ T7930] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.744715][ T5856] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  149.922528][ T7933] usb usb8: usbfs: process 7933 (syz.2.687) did not claim interface 0 before use
[  150.712713][ T7948] netlink: 64 bytes leftover after parsing attributes in process `syz.4.695'.
[  151.025428][ T7964] warning: `syz.4.703' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  151.431580][ T7976] loop0: detected capacity change from 0 to 32768
[  151.446012][ T7976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.708 (7976)
[  151.474837][ T7976] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.482552][ T7976] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  151.511222][ T7976] BTRFS info (device loop0): setting nodatasum
[  151.513749][ T7976] BTRFS info (device loop0): enabling ssd optimizations
[  151.516446][ T7976] BTRFS info (device loop0): disabling tree log
[  151.521824][ T7976] BTRFS info (device loop0): enabling free space tree
[  151.524537][ T7976] BTRFS info (device loop0): enabling auto defrag
[  151.595773][ T5856] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.720826][ T7997] overlayfs: failed to clone upperpath
[  152.118498][ T8001] loop0: detected capacity change from 0 to 32768
[  152.123703][ T8001] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.712 (8001)
[  152.133896][ T8001] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.138774][ T8001] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  152.143109][ T8001] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  152.207270][ T8001] BTRFS info (device loop0): rebuilding free space tree
[  152.225095][ T8001] BTRFS info (device loop0): disabling free space tree
[  152.231084][ T8001] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  152.235278][ T8001] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  152.247229][ T8001] BTRFS info (device loop0): setting nodatasum
[  152.250576][ T8001] BTRFS info (device loop0): setting nodatacow
[  152.253235][ T8001] BTRFS info (device loop0): enabling ssd optimizations
[  152.255747][ T8001] BTRFS info (device loop0): turning off barriers
[  152.258413][ T8001] BTRFS info (device loop0): enabling disk space caching
[  152.261254][ T8001] BTRFS info (device loop0): force clearing of disk cache
[  152.264247][ T8001] BTRFS info (device loop0): doing ref verification
[  152.266870][ T8001] BTRFS info (device loop0): max_inline set to 4096
[  152.308616][ T5856] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.538591][ T8035] vlan2: entered promiscuous mode
[  152.540638][ T8035] bridge0: entered promiscuous mode
[  152.826254][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.728'.
[  152.970253][ T8060] loop0: detected capacity change from 0 to 512
[  152.998655][ T8060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  153.005562][ T8060] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  153.032649][ T8060] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  153.045649][ T8060] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  153.058207][ T8060] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.733: Failed to acquire dquot type 0
[  153.115015][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  153.464655][ T8076] loop0: detected capacity change from 0 to 512
[  153.474587][ T8076] EXT4-fs: Ignoring removed oldalloc option
[  153.507668][ T8076] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.739: Parent and EA inode have the same ino 15
[  153.519575][ T8076] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.739: Parent and EA inode have the same ino 15
[  153.532212][ T8076] EXT4-fs (loop0): 1 orphan inode deleted
[  153.536318][ T8076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.555838][ T8076] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.739: unexpected EA_INODE flag
[  153.599332][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.902538][ T8085] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  154.196393][ T8090] loop2: detected capacity change from 0 to 128
[  154.209434][ T8090] EXT4-fs (loop2): Test dummy encryption mode enabled
[  154.253647][ T8090] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.271145][ T8090] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.406560][ T8090] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  154.470537][ T6878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.712967][   T33] audit: type=1326 audit(2000000052.580:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.722659][   T33] audit: type=1326 audit(2000000052.590:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.734446][   T33] audit: type=1326 audit(2000000052.600:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.744030][   T33] audit: type=1326 audit(2000000052.600:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.758943][   T33] audit: type=1326 audit(2000000052.600:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.778658][   T33] audit: type=1326 audit(2000000052.610:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.798204][   T33] audit: type=1326 audit(2000000052.610:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.816339][   T33] audit: type=1326 audit(2000000052.610:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  155.845476][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.009565][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.095374][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.220482][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.238817][ T8141] loop0: detected capacity change from 0 to 512
[  156.248430][ T8141] EXT4-fs: Ignoring removed oldalloc option
[  156.259580][ T8141] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  156.281996][ T8141] EXT4-fs (loop0): 1 truncate cleaned up
[  156.293435][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.295864][ T8141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.303426][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.311279][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.317393][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.326543][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.383644][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.489674][   T13] bridge_slave_0: left allmulticast mode
[  156.491671][   T13] bridge_slave_0: left promiscuous mode
[  156.493708][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.872821][ T8170] loop0: detected capacity change from 0 to 512
[  156.913951][ T8170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.934250][ T8170] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  157.024155][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.116658][ T8175] loop0: detected capacity change from 0 to 256
[  157.132859][ T8175] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  157.145806][ T8175] FAT-fs (loop0): Filesystem has been set read-only
[  157.366425][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.389660][   T13] bond0 (unregistering): Released all slaves
[  157.522660][   T13] IPVS: stopping master sync thread 7443 ...
[  157.681160][ T8143] chnl_net:caif_netlink_parms(): no params data found
[  158.079340][   T13] hsr_slave_0: left promiscuous mode
[  158.081758][   T13] hsr_slave_1: left promiscuous mode
[  158.084117][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.086881][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.101573][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.104664][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.151228][   T13] veth1_macvtap: left promiscuous mode
[  158.153428][   T13] veth0_macvtap: left promiscuous mode
[  158.155491][   T13] veth1_vlan: left promiscuous mode
[  158.157419][   T13] veth0_vlan: left promiscuous mode
[  158.381665][ T5851] Bluetooth: hci0: command tx timeout
[  159.241402][   T13] team0 (unregistering): Port device team_slave_1 removed
[  159.342191][   T13] team0 (unregistering): Port device team_slave_0 removed
[  159.469119][ T8213] netlink: 'syz.4.787': attribute type 10 has an invalid length.
[  160.348857][ T8213] 8021q: adding VLAN 0 to HW filter on device team0
[  160.357119][ T8213] bond0: (slave team0): Enslaving as an active interface with an up link
[  160.419410][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.427930][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.442072][ T8143] bridge_slave_0: entered allmulticast mode
[  160.448406][ T5851] Bluetooth: hci0: command tx timeout
[  160.451995][ T8143] bridge_slave_0: entered promiscuous mode
[  160.476716][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.490184][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.502192][ T8143] bridge_slave_1: entered allmulticast mode
[  160.513509][ T8143] bridge_slave_1: entered promiscuous mode
[  160.655001][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.703382][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.796262][ T8143] team0: Port device team_slave_0 added
[  160.824795][ T8143] team0: Port device team_slave_1 added
[  160.999027][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.001841][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.050965][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.078665][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.086368][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.127536][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.143624][   T13] IPVS: stop unused estimator thread 0...
[  161.221208][ T8143] hsr_slave_0: entered promiscuous mode
[  161.224559][ T8143] hsr_slave_1: entered promiscuous mode
[  161.528650][ T8232] loop0: detected capacity change from 0 to 40427
[  161.537019][ T8232] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  161.547115][ T8232] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  161.580099][ T8232] F2FS-fs (loop0): invalid crc value
[  161.722702][ T8232] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  161.763823][ T8232] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  161.766732][ T8232] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  161.898571][ T5856] syz-executor: attempt to access beyond end of device
[  161.898571][ T5856] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  161.995168][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  161.995194][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.995205][ T5856] Call Trace:
[  161.995212][ T5856]  <TASK>
[  161.995220][ T5856]  dump_stack_lvl+0x189/0x250
[  161.995245][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.995262][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  161.995276][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.995296][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.995323][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  161.995350][ T5856]  f2fs_write_end_io+0x886/0xb60
[  161.995375][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  161.995400][ T5856]  __submit_merged_write_cond+0x255/0x530
[  161.995425][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[  161.995473][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  161.995551][ T5856]  ? __lock_acquire+0xab9/0xd20
[  161.995577][ T5856]  ? do_raw_spin_lock+0x121/0x290
[  161.995631][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  161.995649][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  161.995669][ T5856]  do_writepages+0x32e/0x550
[  161.995696][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  161.995715][ T5856]  filemap_fdatawrite+0x199/0x240
[  161.995736][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  161.995791][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  161.995811][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[  161.995839][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[  161.995873][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  161.995920][ T5856]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  161.995934][ T5856]  ? kfree+0x18e/0x440
[  161.995952][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  161.995970][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  161.995989][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  161.996000][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  161.996026][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  161.996043][ T5856]  deactivate_locked_super+0xbc/0x130
[  161.996063][ T5856]  cleanup_mnt+0x425/0x4c0
[  161.996086][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.996107][ T5856]  task_work_run+0x1d4/0x260
[  161.996127][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  161.996143][ T5856]  ? __x64_sys_umount+0x122/0x160
[  161.996164][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  161.996187][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  161.996206][ T5856]  do_syscall_64+0x2bd/0x3b0
[  161.996219][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.996237][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.996251][ T5856]  ? exc_page_fault+0x9f/0xf0
[  161.996272][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.996286][ T5856] RIP: 0033:0x7fa99078ff17
[  161.996301][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  161.996313][ T5856] RSP: 002b:00007ffda89d5ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  161.996328][ T5856] RAX: 0000000000000000 RBX: 00007fa990811c05 RCX: 00007fa99078ff17
[  161.996337][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda89d5b80
[  161.996345][ T5856] RBP: 00007ffda89d5b80 R08: 0000000000000000 R09: 0000000000000000
[  161.996354][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda89d6c10
[  161.996363][ T5856] R13: 00007fa990811c05 R14: 00000000000277ca R15: 00007ffda89d6c50
[  161.996386][ T5856]  </TASK>
[  161.996458][ T5856] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  162.179734][ T8143] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  162.199430][ T8143] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  162.227214][ T8143] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  162.276495][ T8143] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  162.390835][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.407076][ T8143] 8021q: adding VLAN 0 to HW filter on device team0
[  162.414282][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.416602][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.429133][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.431873][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.529418][ T5851] Bluetooth: hci0: command tx timeout
[  162.624147][ T8275] loop0: detected capacity change from 0 to 128
[  162.655272][ T8275] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.660803][ T8275] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  162.722076][ T5856] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.765353][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.149993][ T8143] veth0_vlan: entered promiscuous mode
[  163.181844][ T8143] veth1_vlan: entered promiscuous mode
[  163.269142][ T8143] veth0_macvtap: entered promiscuous mode
[  163.284072][ T8143] veth1_macvtap: entered promiscuous mode
[  163.312824][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.332665][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.357143][ T5710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.360983][ T5710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.366777][ T5710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.379375][ T5710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.564220][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.567392][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.678566][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.686687][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.458454][ T5890] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  164.618334][ T5890] usb 6-1: Using ep0 maxpacket: 32
[  164.618555][ T5851] Bluetooth: hci0: command tx timeout
[  164.629337][ T5890] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  164.643555][ T5890] usb 6-1: config 0 has no interface number 0
[  164.646045][ T5890] usb 6-1: config 0 interface 89 has no altsetting 0
[  164.657091][ T5890] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  164.662576][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.665980][ T5890] usb 6-1: Product: syz
[  164.667680][ T5890] usb 6-1: Manufacturer: syz
[  164.671406][ T5890] usb 6-1: SerialNumber: syz
[  164.692226][ T5890] usb 6-1: config 0 descriptor??
[  164.714173][ T5890] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  164.727034][ T5890] em28xx 6-1:0.89: Video interface 89 found: bulk
[  165.398807][ T5890] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  165.828638][ T5890] em28xx 6-1:0.89: AC97 command still being executed: not handled properly!
[  166.017791][ T5890] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  166.028152][ T5890] em28xx 6-1:0.89: board has no eeprom
[  166.088198][ T5890] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  166.098114][ T5890] em28xx 6-1:0.89: analog set to bulk mode.
[  166.101040][  T793] em28xx 6-1:0.89: Registering V4L2 extension
[  166.136289][ T5890] usb 6-1: USB disconnect, device number 2
[  166.159923][ T5890] em28xx 6-1:0.89: Disconnecting em28xx
[  166.208689][  T793] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  166.214359][  T793] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  166.222639][  T793] em28xx 6-1:0.89: No AC97 audio processor
[  166.631467][  T793] usb 6-1: Decoder not found
[  166.633404][  T793] em28xx 6-1:0.89: failed to create media graph
[  166.635946][  T793] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  166.643528][  T793] em28xx 6-1:0.89: Registering snapshot button...
[  166.650149][  T793] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input11
[  166.662460][  T793] em28xx 6-1:0.89: Remote control support is not available for this card.
[  166.666063][ T5890] em28xx 6-1:0.89: Closing input extension
[  166.672803][ T5890] em28xx 6-1:0.89: Deregistering snapshot button
[  166.725796][ T5890] em28xx 6-1:0.89: Freeing device
[  167.439804][  T793] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  167.603151][  T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.855539][  T793] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  167.873454][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.880412][  T793] usb 1-1: Product: syz
[  167.882622][  T793] usb 1-1: Manufacturer: syz
[  167.884773][  T793] usb 1-1: SerialNumber: syz
[  167.895164][  T793] usb 1-1: config 0 descriptor??
[  167.906741][  T793] yurex 1-1:0.0: Could not find endpoints
[  168.029537][ T8378] XFS (nullb0): Invalid superblock magic number
[  168.131447][  T793] usb 1-1: USB disconnect, device number 15
[  168.897047][ T8406] loop0: detected capacity change from 0 to 1024
[  168.946967][ T1091] hfsplus: b-tree write err: -5, ino 4
[  169.425921][ T8416] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  169.434853][ T8416] CIFS mount error: No usable UNC path provided in device string!
[  169.434853][ T8416] 
[  169.439143][ T8416] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  169.759621][ T8408] loop0: detected capacity change from 0 to 32768
[  169.767642][ T8408] XFS: attr2 mount option is deprecated.
[  169.801076][ T8408] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  169.805221][ T8408] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  169.834591][ T8408] XFS (loop0): Ending clean mount
[  169.846374][ T8408] XFS (loop0): Quotacheck needed: Please wait.
[  169.884366][ T8408] XFS (loop0): Quotacheck: Done.
[  169.957388][ T5856] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  170.933102][ T8443] loop5: detected capacity change from 0 to 4096
[  170.946251][ T8443] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  170.956210][ T8443] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096)
[  170.960541][ T8443] NILFS (loop5): mounting unchecked fs
[  170.979951][ T8443] NILFS (loop5): recovery complete
[  170.983156][ T8444] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.605531][ T8478] loop0: detected capacity change from 0 to 128
[  171.635641][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  171.635656][   T33] audit: type=1800 audit(2000000068.500:72): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.867" name="file2" dev="loop0" ino=1048634 res=0 errno=0
[  171.637727][ T8478] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  171.652578][ T8478] FAT-fs (loop0): Filesystem has been set read-only
[  171.655411][ T8478] syz.0.867: attempt to access beyond end of device
[  171.655411][ T8478] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  171.663063][ T8478] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  171.670823][ T8478] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  171.677732][ T8478] syz.0.867: attempt to access beyond end of device
[  171.677732][ T8478] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  171.685697][ T8478] syz.0.867: attempt to access beyond end of device
[  171.685697][ T8478] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  171.699555][ T8478] syz.0.867: attempt to access beyond end of device
[  171.699555][ T8478] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  171.707351][ T8483] syz.0.867: attempt to access beyond end of device
[  171.707351][ T8483] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[  171.714842][ T8483] Buffer I/O error on dev loop0, logical block 2065, async page read
[  171.720360][ T8483] syz.0.867: attempt to access beyond end of device
[  171.720360][ T8483] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[  171.725679][ T8483] Buffer I/O error on dev loop0, logical block 2066, async page read
[  171.729916][ T8483] syz.0.867: attempt to access beyond end of device
[  171.729916][ T8483] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128
[  171.739026][ T8483] Buffer I/O error on dev loop0, logical block 2067, async page read
[  171.744351][ T8483] syz.0.867: attempt to access beyond end of device
[  171.744351][ T8483] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128
[  171.754334][ T8483] Buffer I/O error on dev loop0, logical block 2068, async page read
[  171.757599][ T8483] syz.0.867: attempt to access beyond end of device
[  171.757599][ T8483] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128
[  171.762302][ T8483] Buffer I/O error on dev loop0, logical block 2069, async page read
[  171.765354][ T8483] syz.0.867: attempt to access beyond end of device
[  171.765354][ T8483] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128
[  171.774570][ T8483] Buffer I/O error on dev loop0, logical block 2070, async page read
[  171.777689][ T8483] Buffer I/O error on dev loop0, logical block 2071, async page read
[  171.782170][ T8483] Buffer I/O error on dev loop0, logical block 2072, async page read
[  171.786065][ T8483] Buffer I/O error on dev loop0, logical block 2065, async page read
[  171.792865][ T8483] Buffer I/O error on dev loop0, logical block 2066, async page read
[  172.124665][ T8488] loop5: detected capacity change from 0 to 1024
[  172.188846][ T8488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.294445][ T8143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.390782][ T8493] loop5: detected capacity change from 0 to 128
[  172.405655][ T8493] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  172.415283][ T8493] hpfs: filesystem error: improperly stopped
[  172.420633][ T8493] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  172.423903][ T8493] hpfs: You really don't want any checks? You are crazy...
[  172.430788][ T8493] hpfs: hpfs_map_sector(): read error
[  172.433185][ T8493] hpfs: code page support is disabled
[  172.450092][ T8493] hpfs: hpfs_map_4sectors(): unaligned read
[  172.460593][ T8493] hpfs: hpfs_map_4sectors(): unaligned read
[  172.463080][ T8493] hpfs: filesystem error: unable to find root dir
[  172.582339][ T8501] capability: warning: `syz.0.876' uses 32-bit capabilities (legacy support in use)
[  172.625987][ T8503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.707248][ T8507] input: syz1 as /devices/virtual/input/input12
[  173.701931][ T8533] netlink: 11 bytes leftover after parsing attributes in process `syz.0.888'.
[  174.580071][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  174.862353][ T8598] pimreg: entered allmulticast mode
[  174.884039][ T8598] pimreg: left allmulticast mode
[  175.409988][ T8606] loop5: detected capacity change from 0 to 16
[  175.419493][ T8606] erofs (device loop5): mounted with root inode @ nid 36.
[  175.442590][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.454440][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.462656][ T8606] erofs (device loop5): readahead error at folio 7 @ nid 36
[  175.469067][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.474067][ T8606] erofs (device loop5): readahead error at folio 6 @ nid 36
[  175.477236][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.482024][ T8606] erofs (device loop5): readahead error at folio 5 @ nid 36
[  175.485204][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.494074][ T8606] erofs (device loop5): readahead error at folio 4 @ nid 36
[  175.497275][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.501879][ T8606] erofs (device loop5): readahead error at folio 3 @ nid 36
[  175.505814][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.510369][ T8606] erofs (device loop5): readahead error at folio 2 @ nid 36
[  175.512989][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.516260][ T8606] erofs (device loop5): readahead error at folio 1 @ nid 36
[  175.520603][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.523742][ T8606] erofs (device loop5): readahead error at folio 0 @ nid 36
[  175.527372][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.541841][ T8606] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[  175.544738][ T8606] erofs (device loop5): read error -117 @ 0 of nid 36
[  175.563763][ T8606] erofs (device loop5): failed to readdir of logical block 0 of nid 36
[  176.610169][ T8629] netlink: 'syz.4.918': attribute type 28 has an invalid length.
[  176.863903][ T8643] loop0: detected capacity change from 0 to 512
[  176.932015][ T8643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.967716][ T8643] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.112495][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.438893][ T8729] overlayfs: failed to resolve './file0/../file0': -2
[  180.882446][ T8782] loop0: detected capacity change from 0 to 764
[  180.890439][ T8763] loop5: detected capacity change from 0 to 40427
[  180.913725][ T8782] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  180.922829][ T8763] F2FS-fs (loop5): invalid crc value
[  181.032510][ T8763] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  181.042956][ T8763] F2FS-fs (loop5): Start checkpoint disabled!
[  181.054171][ T8763] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  181.059420][ T8785] loop0: detected capacity change from 0 to 256
[  181.116550][   T53] bio_check_eod: 5522 callbacks suppressed
[  181.116580][   T53] kworker/u9:2: attempt to access beyond end of device
[  181.116580][   T53] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  181.138794][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  181.138813][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.138821][   T53] Workqueue: writeback wb_workfn (flush-7:5)
[  181.138842][   T53] Call Trace:
[  181.138847][   T53]  <TASK>
[  181.138852][   T53]  dump_stack_lvl+0x189/0x250
[  181.138872][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.138885][   T53]  ? __pfx_queue_work_on+0x10/0x10
[  181.138896][   T53]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  181.138912][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.138935][   T53]  f2fs_handle_critical_error+0x37c/0x540
[  181.138958][   T53]  f2fs_write_end_io+0x886/0xb60
[  181.139015][   T53]  __submit_merged_bio+0x27a/0x6a0
[  181.139039][   T53]  __submit_merged_write_cond+0x255/0x530
[  181.139096][   T53]  f2fs_write_data_pages+0x261d/0x3000
[  181.139140][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.139168][   T53]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  181.139210][   T53]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  181.139226][   T53]  ? look_up_lock_class+0x74/0x170
[  181.139255][   T53]  ? trace_f2fs_writepages+0x7f/0x200
[  181.139271][   T53]  ? f2fs_write_node_pages+0x478/0x6e0
[  181.139291][   T53]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  181.139318][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.139334][   T53]  do_writepages+0x32e/0x550
[  181.139354][   T53]  ? reacquire_held_locks+0x127/0x1d0
[  181.139366][   T53]  ? writeback_sb_inodes+0x384/0x1010
[  181.139389][   T53]  __writeback_single_inode+0x145/0xff0
[  181.139403][   T53]  ? do_raw_spin_unlock+0x4d/0x240
[  181.139420][   T53]  writeback_sb_inodes+0x6c7/0x1010
[  181.139457][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  181.139506][   T53]  ? rcu_is_watching+0x15/0xb0
[  181.139526][   T53]  wb_writeback+0x43b/0xaf0
[  181.139547][   T53]  ? queue_io+0x331/0x590
[  181.139564][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  181.139585][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  181.139605][   T53]  wb_workfn+0x409/0xef0
[  181.139632][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  181.139648][   T53]  ? __lock_acquire+0xab9/0xd20
[  181.139673][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  181.139691][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  181.139704][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  181.139713][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  181.139726][   T53]  process_scheduled_works+0xae1/0x17b0
[  181.139763][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  181.139790][   T53]  worker_thread+0x8a0/0xda0
[  181.139824][   T53]  kthread+0x711/0x8a0
[  181.139841][   T53]  ? __pfx_worker_thread+0x10/0x10
[  181.139852][   T53]  ? __pfx_kthread+0x10/0x10
[  181.139868][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  181.139881][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.139895][   T53]  ? __pfx_kthread+0x10/0x10
[  181.139909][   T53]  ret_from_fork+0x3fc/0x770
[  181.139925][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  181.139942][   T53]  ? __switch_to_asm+0x39/0x70
[  181.139955][   T53]  ? __switch_to_asm+0x33/0x70
[  181.139998][   T53]  ? __pfx_kthread+0x10/0x10
[  181.140015][   T53]  ret_from_fork_asm+0x1a/0x30
[  181.140043][   T53]  </TASK>
[  181.140050][   T53] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  181.563719][ T8797] loop0: detected capacity change from 0 to 512
[  181.576491][ T8797] FAT-fs (loop0): bogus logical sector size 0
[  181.587233][ T8797] FAT-fs (loop0): Can't find a valid FAT filesystem
[  181.789103][   T33] audit: type=1326 audit(2000000078.660:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.822899][   T33] audit: type=1326 audit(2000000078.680:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.868300][   T33] audit: type=1326 audit(2000000078.680:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.889553][   T33] audit: type=1326 audit(2000000078.680:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.903499][   T33] audit: type=1326 audit(2000000078.680:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.915384][   T33] audit: type=1326 audit(2000000078.680:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.924857][   T33] audit: type=1326 audit(2000000078.680:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.933999][   T33] audit: type=1326 audit(2000000078.680:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.944052][   T33] audit: type=1326 audit(2000000078.680:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  181.952158][   T33] audit: type=1326 audit(2000000078.680:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.994" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  182.111124][ T5851] Bluetooth: to_multiplier 0 < 10
[  182.160222][ T8810] CIFS mount error: No usable UNC path provided in device string!
[  182.160222][ T8810] 
[  182.164201][ T8810] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  183.708201][ T5890] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  183.868632][ T5890] usb 1-1: Using ep0 maxpacket: 32
[  183.876928][ T5890] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  183.881012][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.891821][ T5890] usb 1-1: config 0 descriptor??
[  184.106451][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  184.122854][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  184.128196][ T5851] Bluetooth: hci2: command tx timeout
[  184.135253][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  184.144557][ T5890] usb 1-1: media controller created
[  184.179080][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  184.313993][ T5890] az6027: usb out operation failed. (-71)
[  184.316838][ T5890] az6027: usb out operation failed. (-71)
[  184.328151][ T5890] stb0899_attach: Driver disabled by Kconfig
[  184.331687][ T5890] az6027: no front-end attached
[  184.331687][ T5890] 
[  184.341183][ T5890] az6027: usb out operation failed. (-71)
[  184.344554][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  184.352274][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13
[  184.364951][ T5890] dvb-usb: schedule remote query interval to 400 msecs.
[  184.377917][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  184.386081][ T5890] usb 1-1: USB disconnect, device number 16
[  184.511818][ T8862] netlink: 'syz.4.1018': attribute type 16 has an invalid length.
[  184.586996][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  184.711953][ T8867] mmap: syz.4.1020 (8867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  185.048192][ T8876] loop0: detected capacity change from 0 to 2048
[  185.111923][ T7014]  loop0: p1 < > p4 < >
[  185.131680][ T8880] batadv_slave_1: entered promiscuous mode
[  185.140142][ T8877] batadv_slave_1: left promiscuous mode
[  185.141806][ T8876]  loop0: p1 < > p4 < >
[  185.214542][ T8885] loop5: detected capacity change from 0 to 512
[  185.223239][ T8885] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  185.226138][ T8885] UDF-fs: Scanning with blocksize 512 failed
[  185.240279][ T8885] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  185.243476][ T8885] UDF-fs: Scanning with blocksize 1024 failed
[  185.256767][ T8885] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  185.272005][ T8885] UDF-fs: Scanning with blocksize 2048 failed
[  185.279894][ T8885] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  185.311712][ T7014] udevd[7014]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  185.314322][ T8885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.315301][ T7006] udevd[7006]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  185.517437][ T8899] loop5: detected capacity change from 0 to 256
[  185.570239][ T8899] FAT-fs (loop5): Directory bread(block 64) failed
[  185.573216][ T8899] FAT-fs (loop5): Directory bread(block 65) failed
[  185.576394][ T8899] FAT-fs (loop5): Directory bread(block 66) failed
[  185.584186][ T8899] FAT-fs (loop5): Directory bread(block 67) failed
[  185.588364][ T8899] FAT-fs (loop5): Directory bread(block 68) failed
[  185.592335][ T8899] FAT-fs (loop5): Directory bread(block 69) failed
[  185.596476][ T8899] FAT-fs (loop5): Directory bread(block 70) failed
[  185.601098][ T8899] FAT-fs (loop5): Directory bread(block 71) failed
[  185.603921][ T8899] FAT-fs (loop5): Directory bread(block 72) failed
[  185.607476][ T8899] FAT-fs (loop5): Directory bread(block 73) failed
[  186.231329][ T5915] IPVS: starting estimator thread 0...
[  186.328151][ T8921] IPVS: using max 60 ests per chain, 144000 per kthread
[  187.200226][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  187.360809][   T10] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  187.365721][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  187.373141][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.377700][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.382005][   T10] usb 1-1: Product: syz
[  187.383939][   T10] usb 1-1: Manufacturer: syz
[  187.386118][   T10] usb 1-1: SerialNumber: syz
[  187.444651][ T8971] loop5: detected capacity change from 0 to 32768
[  187.476027][ T8971] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  187.549378][ T8971] (syz.5.1065,8971,1):ocfs2_file_write_iter:2446 ERROR: status = -27
[  187.603999][   T10] usb 1-1: 0:2 : does not exist
[  187.616827][   T10] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  187.626843][   T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  187.634390][   T10] usb 1-1: USB disconnect, device number 17
[  187.664041][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.712857][ T8143] ocfs2: Unmounting device (7,5) on (node local)
[  188.307723][ T9006] loop0: detected capacity change from 0 to 8192
[  188.605112][ T9012] loop5: detected capacity change from 0 to 32768
[  188.716972][ T9022] loop0: detected capacity change from 0 to 32768
[  188.725260][ T9022] XFS: noikeep mount option is deprecated.
[  188.758631][ T9022] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.777593][ T9022] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  188.796053][ T9022] XFS (loop0): Starting recovery (logdev: internal)
[  188.812218][ T9022] XFS (loop0): Ending recovery (logdev: internal)
[  188.829349][   T33] audit: type=1800 audit(2000000085.700:83): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1088" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  188.853049][ T5856] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.874415][ T9035] ..@: renamed from bond_slave_0 (while UP)
[  189.133157][ T9037] loop5: detected capacity change from 0 to 32768
[  189.213104][ T9037] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  189.213121][ T9037]   allowing incompatible features above 0.0: (unknown version)
[  189.213127][ T9037]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  189.232424][ T9037] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  189.235603][ T9037] bcachefs (loop5): initializing new filesystem
[  189.246379][ T9037] bcachefs (loop5): going read-write
[  189.256961][ T9037] bcachefs (loop5): marking superblocks
[  189.286815][ T9037] bcachefs (loop5): initializing freespace
[  189.298687][ T9037] bcachefs (loop5): done initializing freespace
[  189.304676][ T9037] bcachefs (loop5): reading snapshots table
[  189.306747][ T9037] bcachefs (loop5): reading snapshots done
[  189.354930][ T9037] bcachefs (loop5): done starting filesystem
[  189.404319][ T8143] bcachefs (loop5): shutting down
[  189.406028][ T8143] bcachefs (loop5): going read-only
[  189.414809][ T8143] bcachefs (loop5): finished waiting for writes to stop
[  189.422226][ T8143] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  189.489429][ T8143] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  189.495866][ T8143] bcachefs (loop5): clean shutdown complete, journal seq 4
[  189.500037][ T8143] bcachefs (loop5): marking filesystem clean
[  189.545290][ T8143] bcachefs (loop5): shutdown complete
[  189.568228][  T794] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  190.014618][  T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  190.021254][  T794] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  190.024288][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.027457][  T794] usb 1-1: Product: syz
[  190.029435][  T794] usb 1-1: Manufacturer: syz
[  190.030990][  T794] usb 1-1: SerialNumber: syz
[  190.041472][  T794] usb 1-1: config 0 descriptor??
[  190.056669][  T794] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  190.252790][ T5890] usb 1-1: USB disconnect, device number 18
[  190.255326][ T5893] usb 1-1: Failed to submit usb control message: -71
[  190.260552][ T5893] usb 1-1: unable to send the bmi data to the device: -71
[  190.264321][ T5893] usb 1-1: unable to get target info from device
[  190.266825][ T5893] usb 1-1: could not get target info (-71)
[  190.276060][ T5893] usb 1-1: could not probe fw (-71)
[  191.168305][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  191.326957][ T9091] input: syz1 as /devices/virtual/input/input14
[  191.899213][ T9105] loop0: detected capacity change from 0 to 512
[  191.920290][ T9105] EXT4-fs: inline encryption not supported
[  191.927928][ T9105] EXT4-fs: Ignoring removed mblk_io_submit option
[  191.954264][ T9105] EXT4-fs (loop0): Test dummy encryption mode enabled
[  192.021718][ T9105] EXT4-fs (loop0): orphan cleanup on readonly fs
[  192.040427][ T9105] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.1114: inode #13: comm syz.0.1114: iget: illegal inode #
[  192.088488][ T9105] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1114: couldn't read orphan inode 13 (err -117)
[  192.165971][ T9105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  192.252921][ T9105] ext4: Unknown parameter '0000000000000000000018446744073709551615@LqE: 艞t}0$'
[  193.079801][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.263994][ T9114] loop5: detected capacity change from 0 to 40427
[  193.272511][ T9114] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  193.275992][ T9114] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  193.383759][ T9114] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.394331][ T9114] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  193.397813][ T9114] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  193.710946][ T9126] bond0: option packets_per_slave: invalid value (70683304)
[  193.713941][ T9126] bond0: option packets_per_slave: allowed values 0 - 65535
[  193.734875][ T9128] loop0: detected capacity change from 0 to 512
[  193.787927][ T9128] EXT4-fs (loop0): orphan cleanup on readonly fs
[  193.795304][ T9128] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  193.803762][ T9128] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  193.811663][ T9128] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  193.825060][ T9128] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1124: bg 0: block 248: padding at end of block bitmap is not set
[  193.834450][ T9128] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  193.839358][ T9128] EXT4-fs (loop0): 1 orphan inode deleted
[  193.843232][ T9128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.885656][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.221035][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.223559][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.453397][ T9162] loop5: detected capacity change from 0 to 2048
[  194.498360][ T9162] NILFS (loop5): couldn't find nilfs on the device
[  194.785317][ T5915] IPVS: starting estimator thread 0...
[  194.834840][ T9185] netem: change failed
[  194.878403][ T9182] IPVS: using max 64 ests per chain, 153600 per kthread
[  195.278332][ T9193] loop5: detected capacity change from 0 to 256
[  195.283642][ T9193] exfat: Deprecated parameter 'utf8'
[  195.301743][ T9193] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  195.701710][ T9211] loop0: detected capacity change from 0 to 1024
[  195.761008][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  195.830938][ T1091] hfsplus: b-tree write err: -5, ino 4
[  195.919384][ T9215] ieee802154 phy0 wpan0: encryption failed: -22
[  195.923733][ T5890] usb 6-1: config 255 has an invalid interface number: 215 but max is 0
[  195.927108][ T5890] usb 6-1: config 255 has no interface number 0
[  195.939570][ T5890] usb 6-1: config 255 interface 215 has no altsetting 0
[  195.949683][ T5890] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=7d.01
[  195.953245][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.956467][ T5890] usb 6-1: Product: syz
[  195.968398][ T5890] usb 6-1: Manufacturer: syz
[  195.970469][ T5890] usb 6-1: SerialNumber: syz
[  196.188188][ T5890] usb 6-1: NFC: intf ffff888035a24000 id ffffffff8eb543e0
[  196.197430][ T5890] usb 6-1: USB disconnect, device number 3
[  196.274855][ T9222] ALSA: mixer_oss: invalid OSS volume 'LI'
[  196.556098][ T9240] netem: incorrect gi model size
[  196.558887][ T9240] netem: change failed
[  196.956666][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1177'.
[  196.999216][ T9253] loop5: detected capacity change from 0 to 128
[  197.163471][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1185'.
[  197.479009][ T9261] loop5: detected capacity change from 0 to 32768
[  197.491250][ T9261] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1183 (9261)
[  197.518883][ T9261] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  197.522862][ T9261] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  197.594210][ T9261] BTRFS info (device loop5): enabling ssd optimizations
[  197.597048][ T9261] BTRFS info (device loop5): enabling free space tree
[  197.726403][ T8143] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  198.160793][ T9288] loop0: detected capacity change from 0 to 2048
[  198.192437][ T9288] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.277618][ T9288] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  199.157708][ T9291] loop5: detected capacity change from 0 to 32768
[  199.163386][ T9291] XFS: attr2 mount option is deprecated.
[  199.196345][ T9291] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  199.201674][ T9291] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.240738][ T9291] XFS (loop5): Ending clean mount
[  199.255528][ T9291] XFS (loop5): Quotacheck needed: Please wait.
[  199.305670][ T9291] XFS (loop5): Quotacheck: Done.
[  199.453367][ T8143] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.746754][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'.
[  199.966100][ T9342] loop0: detected capacity change from 0 to 764
[  200.030974][ T9342] rock: directory entry would overflow storage
[  200.033876][ T9342] rock: sig=0x4f50, size=4, remaining=3
[  200.036137][ T9342] iso9660: Corrupted directory entry in block 6 of inode 1792
[  200.167119][ T9349] loop0: detected capacity change from 0 to 512
[  200.598671][ T9349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.609085][ T9349] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  200.622417][ T9358] loop5: detected capacity change from 0 to 16
[  200.627215][ T9358] erofs (device loop5): mounted with root inode @ nid 36.
[  201.108482][   T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  201.236771][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.288850][   T10] usb 6-1: config 5 has an invalid interface number: 123 but max is 0
[  201.292683][   T10] usb 6-1: config 5 has no interface number 0
[  201.295485][   T10] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  201.322077][   T10] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x89 has invalid maxpacket 8981, setting to 64
[  201.326349][   T10] usb 6-1: config 5 interface 123 has no altsetting 0
[  201.346853][   T10] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  201.353072][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.356285][   T10] usb 6-1: Product: syz
[  201.357924][   T10] usb 6-1: Manufacturer: syz
[  201.364749][   T10] usb 6-1: SerialNumber: syz
[  201.381141][ T9361] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  201.604079][   T10] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device.
[  201.617847][   T10] usb 6-1: USB disconnect, device number 4
[  202.167154][ T9393] cgroup: subsys name conflicts with all
[  202.262006][ T9391] vlan2: entered promiscuous mode
[  202.263872][ T9391] vlan2: entered allmulticast mode
[  202.265805][ T9391] hsr_slave_1: entered allmulticast mode
[  202.272526][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'.
[  202.458614][ T9395] loop5: detected capacity change from 0 to 32768
[  202.462201][ T9395] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  202.713517][ T9405] loop5: detected capacity change from 0 to 1024
[  202.933487][ T9415] loop0: detected capacity change from 0 to 1024
[  202.948829][ T9415] hfsplus: bad catalog entry used to create inode
[  202.986832][ T1090] hfsplus: b-tree write err: -5, ino 4
[  204.358383][  T794] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  204.539682][  T794] usb 1-1: Using ep0 maxpacket: 8
[  204.546068][  T794] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  204.555249][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.562180][  T794] usb 1-1: Product: syz
[  204.564031][  T794] usb 1-1: Manufacturer: syz
[  204.565896][  T794] usb 1-1: SerialNumber: syz
[  204.575241][  T794] usb 1-1: config 0 descriptor??
[  204.759859][ T9459] tmpfs: Bad value for 'mpol'
[  204.961928][ T9443] block nbd0: not configured, cannot reconfigure
[  204.994485][  T794] usb 1-1: USB disconnect, device number 19
[  205.605510][ T9501] nfs4: Unexpected value for 'acl'
[  205.878268][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  205.966368][ T9522] tmpfs: Bad value for 'mpol'
[  206.028917][   T10] usb 1-1: Using ep0 maxpacket: 16
[  206.040700][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.044720][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.060601][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  206.064201][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.072194][   T10] usb 1-1: Product: syz
[  206.074003][   T10] usb 1-1: Manufacturer: syz
[  206.075910][   T10] usb 1-1: SerialNumber: syz
[  206.167685][ T9532] 9pnet_fd: Insufficient options for proto=fd
[  206.198075][ T9536] netlink: 'syz.5.1294': attribute type 4 has an invalid length.
[  206.214388][ T9536] netlink: 'syz.5.1294': attribute type 17 has an invalid length.
[  206.282756][ T9540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1295'.
[  206.286300][ T9540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1295'.
[  206.297729][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'.
[  206.301898][   T10] usb 1-1: 0:2 : does not exist
[  206.303853][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'.
[  206.303914][   T10] usb 1-1: unit 6 not found!
[  206.312274][ T9540] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1295'.
[  206.343541][   T10] usb 1-1: USB disconnect, device number 20
[  206.392328][ T9544] team0: Device xfrm1 is of different type
[  206.419348][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.528131][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  206.552182][ T9550] tmpfs: Bad value for 'mpol'
[  207.003137][ T9558] loop5: detected capacity change from 0 to 40427
[  207.027625][ T9558] F2FS-fs (loop5): invalid crc value
[  207.101636][ T9558] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  207.114516][ T9558] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  207.158740][ T8143] syz-executor: attempt to access beyond end of device
[  207.158740][ T8143] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  207.180697][ T8143] CPU: 1 UID: 0 PID: 8143 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  207.180712][ T8143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.180723][ T8143] Call Trace:
[  207.180727][ T8143]  <TASK>
[  207.180731][ T8143]  dump_stack_lvl+0x189/0x250
[  207.180771][ T8143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.180783][ T8143]  ? __pfx_queue_work_on+0x10/0x10
[  207.180791][ T8143]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  207.180803][ T8143]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  207.180819][ T8143]  f2fs_handle_critical_error+0x37c/0x540
[  207.180836][ T8143]  f2fs_write_end_io+0x886/0xb60
[  207.180853][ T8143]  __submit_merged_bio+0x27a/0x6a0
[  207.180868][ T8143]  __submit_merged_write_cond+0x255/0x530
[  207.180883][ T8143]  f2fs_write_data_pages+0x261d/0x3000
[  207.180918][ T8143]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  207.180959][ T8143]  ? folios_put_refs+0x559/0x640
[  207.180975][ T8143]  ? __lock_acquire+0xab9/0xd20
[  207.180992][ T8143]  ? do_raw_spin_lock+0x121/0x290
[  207.181007][ T8143]  ? do_raw_spin_unlock+0x4d/0x240
[  207.181019][ T8143]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  207.181032][ T8143]  do_writepages+0x32e/0x550
[  207.181048][ T8143]  ? do_raw_spin_unlock+0x4d/0x240
[  207.181060][ T8143]  filemap_fdatawrite+0x199/0x240
[  207.181073][ T8143]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  207.181108][ T8143]  ? do_raw_spin_unlock+0x4d/0x240
[  207.181120][ T8143]  f2fs_sync_dirty_inodes+0x31f/0x830
[  207.181136][ T8143]  f2fs_write_checkpoint+0x95a/0x1df0
[  207.181157][ T8143]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  207.181203][ T8143]  ? kill_f2fs_super+0x298/0x6c0
[  207.181220][ T8143]  kill_f2fs_super+0x2c3/0x6c0
[  207.181239][ T8143]  ? __pfx_kill_f2fs_super+0x10/0x10
[  207.181250][ T8143]  ? radix_tree_delete_item+0x2b6/0x400
[  207.181274][ T8143]  ? shrinker_free+0x2ce/0x3e0
[  207.181291][ T8143]  deactivate_locked_super+0xbc/0x130
[  207.181310][ T8143]  cleanup_mnt+0x425/0x4c0
[  207.181333][ T8143]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.181352][ T8143]  task_work_run+0x1d4/0x260
[  207.181366][ T8143]  ? __pfx_task_work_run+0x10/0x10
[  207.181375][ T8143]  ? __x64_sys_umount+0x122/0x160
[  207.181389][ T8143]  ? exit_to_user_mode_loop+0x40/0x110
[  207.181403][ T8143]  exit_to_user_mode_loop+0xec/0x110
[  207.181414][ T8143]  do_syscall_64+0x2bd/0x3b0
[  207.181421][ T8143]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.181432][ T8143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.181440][ T8143]  ? exc_page_fault+0x9f/0xf0
[  207.181452][ T8143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.181460][ T8143] RIP: 0033:0x7f996918ff17
[  207.181469][ T8143] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  207.181476][ T8143] RSP: 002b:00007ffc70039718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  207.181485][ T8143] RAX: 0000000000000000 RBX: 00007f9969211c05 RCX: 00007f996918ff17
[  207.181491][ T8143] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc700397d0
[  207.181495][ T8143] RBP: 00007ffc700397d0 R08: 0000000000000000 R09: 0000000000000000
[  207.181500][ T8143] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7003a860
[  207.181505][ T8143] R13: 00007f9969211c05 R14: 00000000000328a5 R15: 00007ffc7003a8a0
[  207.181529][ T8143]  </TASK>
[  207.181533][ T8143] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  207.348656][ T9581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.672555][ T9577] loop0: detected capacity change from 0 to 40427
[  207.685350][ T9577] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  207.698458][ T9577] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  207.706545][ T9577] F2FS-fs (loop0): invalid crc value
[  207.710019][ T9577] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  208.813980][ T9604] loop5: detected capacity change from 0 to 32768
[  208.819811][ T9604] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1323 (9604)
[  208.842266][ T9604] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.846003][ T9604] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  208.892192][ T9604] BTRFS info (device loop5): enabling ssd optimizations
[  208.894386][ T9604] BTRFS info (device loop5): enabling free space tree
[  208.912062][ T8143] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.593478][ T9651] loop5: detected capacity change from 0 to 64
[  209.608351][ T9651] BFS-fs: bfs_fill_super(): Last block not available on loop5: 163903
[  209.628402][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  209.887414][   T10] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  209.892206][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.895357][   T10] usb 1-1: Product: syz
[  209.897055][   T10] usb 1-1: Manufacturer: syz
[  209.899268][   T10] usb 1-1: SerialNumber: syz
[  209.903329][   T10] usb 1-1: config 0 descriptor??
[  209.912376][   T10] rndis_host 1-1:0.0: skipping garbage
[  209.914635][   T10] rndis_host 1-1:0.0: More than one union descriptor, skipping ...
[  209.917826][   T10] usb 1-1: bad CDC descriptors
[  209.920902][   T10] cdc_acm 1-1:0.0: skipping garbage
[  209.923004][   T10] cdc_acm 1-1:0.0: More than one union descriptor, skipping ...
[  210.039341][  T793] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  210.282856][ T5877] usb 1-1: USB disconnect, device number 21
[  210.348596][  T793] usb 6-1: Using ep0 maxpacket: 8
[  210.358710][  T793] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  210.362526][  T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.365922][  T793] usb 6-1: Product: syz
[  210.367671][  T793] usb 6-1: Manufacturer: syz
[  210.372410][  T793] usb 6-1: SerialNumber: syz
[  210.381759][  T793] usb 6-1: config 0 descriptor??
[  210.594123][  T793] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  211.397511][  T793] usb write operation failed. (-71)
[  211.420272][  T793] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  211.425956][  T793] dvbdev: DVB: registering new adapter (Terratec H7)
[  211.431894][  T793] usb 6-1: media controller created
[  211.434805][  T793] usb read operation failed. (-71)
[  211.437533][  T793] usb write operation failed. (-71)
[  211.443728][  T793] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  211.450859][  T793] usb 6-1: USB disconnect, device number 5
[  211.458460][ T5877] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  211.688344][ T5877] usb 1-1: Using ep0 maxpacket: 8
[  211.742668][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short
[  211.772777][ T5877] usb 1-1: config 7 has an invalid descriptor of length 48, skipping remainder of the config
[  211.797703][ T5877] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12408, setting to 64
[  211.815801][ T5877] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.861854][ T5877] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  211.865329][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.874095][ T5877] usb 1-1: Product: syz
[  211.876700][ T5877] usb 1-1: Manufacturer: syz
[  211.880238][ T5877] usb 1-1: SerialNumber: syz
[  212.104594][ T9685] loop5: detected capacity change from 0 to 128
[  212.106424][ T5877] usb 1-1: USB disconnect, device number 22
[  212.109701][ T9685] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.113622][ T9685] EXT4-fs (loop5): Test dummy encryption mode enabled
[  212.135714][ T9685] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.144964][ T9685] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  212.182643][ T8143] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.701692][ T9694] [U] 
[  212.917435][ T9703] loop0: detected capacity change from 0 to 512
[  212.981500][ T9703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.986562][ T9703] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.067233][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.220471][ T9717] loop0: detected capacity change from 0 to 512
[  213.293171][ T9717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.301713][ T9717] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.781974][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.881766][ T9731] loop0: detected capacity change from 0 to 1024
[  213.885964][ T9731] EXT4-fs: Ignoring removed bh option
[  213.890146][ T9731] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  213.895033][ T9731] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  213.899392][ T9731] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  213.966142][ T9731] EXT4-fs (loop0): failed to open journal device unknown-block(0,5) -6
[  215.071110][   T33] audit: type=1800 audit(2000000111.900:84): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1388" name="bus" dev="overlay" ino=2394 res=0 errno=0
[  215.384034][   T33] audit: type=1326 audit(2000000112.250:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.5.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996918ebe9 code=0x7fc00000
[  215.613270][   T33] audit: type=1326 audit(2000000112.480:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.1397" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x0
[  215.801966][ T9805] block nbd5: not configured, cannot reconfigure
[  216.128133][  T793] libceph: connect (1)[c::]:6789 error -101
[  216.133928][  T793] libceph: mon0 (1)[c::]:6789 connect error
[  216.178946][ T5890] libceph: connect (1)[c::]:6789 error -101
[  216.182085][ T5890] libceph: mon0 (1)[c::]:6789 connect error
[  216.441621][ T5890] libceph: connect (1)[c::]:6789 error -101
[  216.444435][ T5890] libceph: mon0 (1)[c::]:6789 connect error
[  216.659359][ T9806] ceph: No mds server is up or the cluster is laggy
[  218.404426][ T9829] loop5: detected capacity change from 0 to 4096
[  218.415317][ T9829] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  218.473896][ T9829] ntfs3(loop5): ino=1d, mi_enum_attr
[  218.482927][ T9829] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  218.494240][ T9829] ntfs3(loop5): ino=1d, mi_enum_attr
[  218.497012][ T9834] loop0: detected capacity change from 0 to 1024
[  218.497881][ T9829] ntfs3(loop5): ino=1d, "file1" mi_enum_attr
[  218.512536][ T9834] hfsplus: bad catalog folder entry
[  218.884409][ T9844] ip6tnl1: entered allmulticast mode
[  219.076969][ T9836] loop0: detected capacity change from 0 to 32768
[  219.097932][ T9836] jfs_mkdir: dtInsert returned -EIO
[  219.100869][ T9836] ERROR: (device loop0): jfs_mkdir: 
[  219.100869][ T9836] 
[  219.112237][ T9836] ERROR: (device loop0): remounting filesystem as read-only
[  219.307597][ T9858] loop0: detected capacity change from 0 to 256
[  219.326931][ T9858] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  219.355945][ T9858] exFAT-fs (loop0): error, data size is invalid(150994954)
[  219.360521][ T9858] exFAT-fs (loop0): Filesystem has been set read-only
[  219.367304][ T9858] exFAT-fs (loop0): error, data size is invalid(150994954)
[  219.439162][ T9861] loop0: detected capacity change from 0 to 128
[  219.787751][ T9864] loop0: detected capacity change from 0 to 32768
[  219.880505][ T5915] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  220.051197][ T5915] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  220.054750][ T5915] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  220.074287][ T5915] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  220.090077][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  220.093024][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.096126][ T5915] usb 6-1: Product: syz
[  220.100706][ T5915] usb 6-1: Manufacturer: syz
[  220.102601][ T5915] usb 6-1: SerialNumber: syz
[  220.383237][ T5915] usb 6-1: USB disconnect, device number 6
[  220.426146][ T9883] zonefs (nullb0) ERROR: Not a zoned block device
[  220.458835][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.786121][ T9888] loop0: detected capacity change from 0 to 40427
[  220.790711][ T9888] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  220.794214][ T9888] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  220.802382][ T9888] F2FS-fs (loop0): invalid crc value
[  220.844992][ T9888] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.850094][ T9888] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  220.852690][ T9888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  220.917138][ T9903] netlink: 'syz.5.1440': attribute type 34 has an invalid length.
[  221.227621][ T9917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1447'.
[  221.235575][ T9917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1447'.
[  221.296478][ T9921] vivid-000: disconnect
[  221.302933][ T9920] vivid-000: reconnect
[  221.698111][  T793] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  222.168151][  T793] usb 1-1: Using ep0 maxpacket: 16
[  222.173227][  T793] usb 1-1: config 4 has an invalid interface number: 51 but max is 0
[  222.176365][  T793] usb 1-1: config 4 has no interface number 0
[  222.179057][  T793] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  222.182543][  T793] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  222.186338][  T793] usb 1-1: config 4 interface 51 has no altsetting 0
[  222.195619][  T793] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  222.206299][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.211061][  T793] usb 1-1: Product: syz
[  222.212716][  T793] usb 1-1: Manufacturer: syz
[  222.214501][  T793] usb 1-1: SerialNumber: syz
[  222.221113][ T9931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.227498][ T9931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.470582][  T793] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -71
[  222.504488][  T793] usb 1-1: USB disconnect, device number 23
[  223.008535][ T5915] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  223.034188][ T9956] loop0: detected capacity change from 0 to 2048
[  223.043347][ T9956] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  223.057621][ T9957] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.060194][ T7014] udevd[7014]: incorrect nilfs2 checksum on /dev/loop0
[  223.170802][ T5915] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  223.175584][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0
[  223.183571][ T5915] usb 6-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00
[  223.187099][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.200777][ T5915] usb 6-1: config 0 descriptor??
[  223.228510][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15
[  223.289419][ T9963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1468'.
[  223.330136][ T9963] nbd: socks must be embedded in a SOCK_ITEM attr
[  223.341644][ T7006] block nbd64: NBD_DISCONNECT
[  223.528316][ T5283] bcm5974 6-1:0.0: could not read from device
[  223.563023][ T5283] bcm5974 6-1:0.0: could not read from device
[  223.579758][ T5915] usb 6-1: USB disconnect, device number 7
[  223.694283][ T9973] new mount options do not match the existing superblock, will be ignored
[  224.574728][ T9989] 9pnet_fd: Insufficient options for proto=fd
[  226.056299][T10011] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.061300][T10011] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.065116][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  226.069927][T10011] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.073845][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  226.077680][T10011] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  226.080274][T10011] UDF-fs: Scanning with blocksize 512 failed
[  226.088980][T10011] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.096064][T10011] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.100548][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  226.105576][T10011] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.109720][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  226.113082][T10011] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  226.116276][T10011] UDF-fs: Scanning with blocksize 1024 failed
[  226.124320][T10011] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.129698][T10011] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.134067][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  226.138347][T10011] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.145272][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  226.150546][T10011] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  226.153843][T10011] UDF-fs: Scanning with blocksize 2048 failed
[  226.159312][T10011] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  226.164291][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  226.169387][T10011] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  226.173274][T10011] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  226.176442][T10011] UDF-fs: Scanning with blocksize 4096 failed
[  226.179112][T10011] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  226.978453][ T5915] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  227.198271][ T5915] usb 1-1: Using ep0 maxpacket: 32
[  227.203505][ T5915] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  227.206841][ T5915] usb 1-1: config 1 has no interface number 0
[  227.212303][ T5915] usb 1-1: config 1 interface 3 has no altsetting 0
[  227.218322][ T5915] usb 1-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce
[  227.223483][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.227141][ T5915] usb 1-1: Product: syz
[  227.231429][ T5915] usb 1-1: Manufacturer: syz
[  227.233405][ T5915] usb 1-1: SerialNumber: syz
[  227.293842][   T33] audit: type=1326 audit(2000000124.160:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.4.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  227.303325][   T33] audit: type=1326 audit(2000000124.160:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.4.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  227.314577][   T33] audit: type=1326 audit(2000000124.160:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.4.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  227.324859][   T33] audit: type=1326 audit(2000000124.160:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.4.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  227.334633][   T33] audit: type=1326 audit(2000000124.160:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.4.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  227.423806][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'.
[  227.474686][ T5915] usb 1-1: USB disconnect, device number 24
[  228.241913][   T33] audit: type=1326 audit(2000000125.100:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.0.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  228.278217][   T33] audit: type=1326 audit(2000000125.100:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.0.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  228.310578][   T33] audit: type=1326 audit(2000000125.120:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.0.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  228.340744][   T33] audit: type=1326 audit(2000000125.120:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.0.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99078ebe9 code=0x7ffc0000
[  229.032431][T10059] loop5: detected capacity change from 0 to 32768
[  229.080770][T10059] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  229.206720][ T8143] ocfs2: Unmounting device (7,5) on (node local)
[  229.343412][   T33] audit: type=1326 audit(2000000126.210:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.1518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  229.633102][ T5851] Bluetooth: hci0: failed to read key size for handle 201
[  230.364487][T10114] loop0: detected capacity change from 0 to 32768
[  230.415588][T10114] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  230.478602][T10114] XFS (loop0): Ending clean mount
[  230.630101][ T5856] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  230.885898][T10145] loop5: detected capacity change from 0 to 1764
[  231.043049][T10149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.178248][   T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  231.378424][   T47] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  231.383211][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.396217][   T47] usb 6-1: config 0 descriptor??
[  231.411464][   T47] cp210x 6-1:0.0: cp210x converter detected
[  231.811873][   T47] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  231.822245][   T47] usb 6-1: cp210x converter now attached to ttyUSB0
[  232.017093][   T10] usb 6-1: USB disconnect, device number 8
[  232.026284][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  232.045075][   T10] cp210x 6-1:0.0: device disconnected
[  232.129086][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  232.347390][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  232.347406][   T33] audit: type=1326 audit(2000000129.210:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.360161][   T33] audit: type=1326 audit(2000000129.210:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.370021][   T33] audit: type=1326 audit(2000000129.220:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.379013][   T33] audit: type=1326 audit(2000000129.220:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.388264][   T33] audit: type=1326 audit(2000000129.220:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.397822][   T33] audit: type=1326 audit(2000000129.220:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.413547][   T33] audit: type=1326 audit(2000000129.220:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.424215][   T33] audit: type=1326 audit(2000000129.220:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.434576][   T33] audit: type=1326 audit(2000000129.220:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.4.1572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.443386][   T33] audit: type=1326 audit(2000000129.280:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10213 comm="syz.4.1573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547db8ebe9 code=0x7ffc0000
[  232.561283][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  232.710629][T10228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.728126][   T10] usb 1-1: Using ep0 maxpacket: 16
[  232.758881][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  232.762342][   T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  232.767541][   T10] usb 1-1: Product: syz
[  232.769956][   T10] usb 1-1: SerialNumber: syz
[  232.775492][   T10] usb 1-1: config 0 descriptor??
[  232.790027][   T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  232.793880][   T10] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  232.804245][   T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  232.807003][   T10] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  232.995911][ T5915] usb 1-1: USB disconnect, device number 25
[  233.718707][ T5851] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  233.722556][ T5851] Bluetooth: hci0: Injecting HCI hardware error event
[  233.727412][ T5851] Bluetooth: hci0: hardware error 0x00
[  233.959019][T10273] overlayfs: failed to clone upperpath
[  234.034376][T10257] loop0: detected capacity change from 0 to 32768
[  234.052647][T10257] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 3ca1c84a should be 00000000
[  234.071282][T10257] bcachefs (/dev/loop0): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096)
[  234.075566][T10257] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset
[  234.173286][T10278] tap0: tun_chr_ioctl cmd 1074025677
[  234.175693][T10278] tap0: linktype set to 825
[  234.613250][T10282] loop5: detected capacity change from 0 to 512
[  234.632985][T10282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.637881][T10282] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.732158][T10290] [U] v
[  234.747457][ T8143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.963927][T10298] loop0: detected capacity change from 0 to 2048
[  234.985849][T10298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.038240][  T793] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  235.144959][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1610'.
[  235.188203][  T793] usb 6-1: Using ep0 maxpacket: 8
[  235.196743][  T793] usb 6-1: config 0 has an invalid interface number: 80 but max is 0
[  235.200429][  T793] usb 6-1: config 0 has no interface number 0
[  235.202965][  T793] usb 6-1: New USB device found, idVendor=134c, idProduct=0004, bcdDevice=27.09
[  235.206921][  T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.217159][  T793] usb 6-1: config 0 descriptor??
[  235.427555][  T793] usb 6-1: USB disconnect, device number 9
[  235.662374][T10322] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96
[  235.729857][T10326] loop0: detected capacity change from 0 to 128
[  235.736543][T10326] ubifs: Bad value for 'compr'
[  235.810045][ T5851] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  235.913848][T10332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.063328][T10332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.170680][T10332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.263393][T10332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.323885][T10348] loop5: detected capacity change from 0 to 8192
[  236.375884][ T7014]  loop5: AHDI p2 p3 p4
[  236.382104][ T7014] loop5: p3 size 4294967042 extends beyond EOD, truncated
[  236.395673][ T7014] loop5: p4 size 16777216 extends beyond EOD, truncated
[  236.418176][T10348]  loop5: AHDI p2 p3 p4
[  236.424958][T10348] loop5: p3 size 4294967042 extends beyond EOD, truncated
[  236.438668][T10348] loop5: p4 size 16777216 extends beyond EOD, truncated
[  236.474449][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.497232][T10348] blk_print_req_error: 2 callbacks suppressed
[  236.497281][T10348] I/O error, dev loop5, sector 1286 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  236.532596][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.553091][ T7006] udevd[7006]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  236.562073][T10358] loop5: detected capacity change from 0 to 512
[  236.567229][T10358] EXT4-fs: Ignoring removed bh option
[  236.575321][T10358] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  236.575379][ T7014] udevd[7014]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  236.582184][ T7009] udevd[7009]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  236.615168][T10358] EXT4-fs (loop5): 1 truncate cleaned up
[  236.621082][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.631461][ T7009] udevd[7009]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  236.633624][ T7006] udevd[7006]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  236.636589][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.644179][ T7014] udevd[7014]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  236.650056][T10358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.524540][ T8143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.919188][T10400] loop5: detected capacity change from 0 to 2048
[  237.937675][T10400] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=66359, location=66359
[  237.956646][T10400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.325519][T10444] loop5: detected capacity change from 0 to 4096
[  239.333035][T10444] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  239.358934][T10444] ntfs3(loop5): ino=2, mi_enum_attr
[  239.361105][T10444] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  239.367526][T10444] ntfs3(loop5): Failed to load $LogFile (-22).
[  239.637069][T10457] 9pnet_fd: Insufficient options for proto=fd
[  239.673112][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  239.869785][ T5915] kernel write not supported for file /vcs (pid: 5915 comm: kworker/1:5)
[  240.270914][T10493] loop5: detected capacity change from 0 to 2048
[  240.286577][T10493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.932719][   T34] INFO: task syz-executor:6257 blocked for more than 143 seconds.
[  240.936844][   T34]       Not tainted syzkaller #0
[  240.943818][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  240.951416][   T34] task:syz-executor    state:D stack:21160 pid:6257  tgid:6257  ppid:1      task_flags:0x400140 flags:0x00004004
[  240.958992][   T34] Call Trace:
[  240.960332][   T34]  <TASK>
[  240.963417][   T34]  __schedule+0x1798/0x4cc0
[  240.965721][   T34]  ? do_raw_spin_lock+0x121/0x290
[  240.969671][   T34]  ? __lock_acquire+0xab9/0xd20
[  240.971589][   T34]  ? __pfx___schedule+0x10/0x10
[  240.974635][   T34]  ? schedule+0x91/0x360
[  240.976289][   T34]  schedule+0x165/0x360
[  240.978404][   T34]  v9fs_evict_inode+0x170/0x320
[  240.980336][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  240.982420][   T34]  ? __pfx_var_wake_function+0x10/0x10
[  240.984457][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  240.986499][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  240.987828][T10505] loop0: detected capacity change from 0 to 256
[  240.988959][   T34]  evict+0x504/0x9c0
[  240.988994][   T34]  ? __pfx_evict+0x10/0x10
[  240.989007][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  240.989027][   T34]  ? _raw_spin_unlock+0x28/0x50
[  240.989045][   T34]  ? iput+0x6d8/0x9d0
[  240.989060][   T34]  __dentry_kill+0x209/0x660
[  240.989074][   T34]  ? dput+0x37/0x2b0
[  240.989086][   T34]  dput+0x19f/0x2b0
[  240.989096][   T34]  shrink_dcache_for_umount+0xa0/0x170
[  240.989113][   T34]  generic_shutdown_super+0x67/0x2c0
[  240.989132][   T34]  kill_anon_super+0x3b/0x70
[  240.989147][   T34]  v9fs_kill_super+0x4c/0x90
[  240.989168][   T34]  deactivate_locked_super+0xbc/0x130
[  240.989183][   T34]  cleanup_mnt+0x425/0x4c0
[  241.005974][T10505] exfat: Deprecated parameter 'utf8'
[  241.006469][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.015698][T10505] exfat: Unexpected value for 'utf8'
[  241.024844][   T34]  task_work_run+0x1d4/0x260
[  241.027184][   T34]  ? __pfx_task_work_run+0x10/0x10
[  241.034753][   T34]  ? __x64_sys_umount+0x122/0x160
[  241.041674][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  241.043911][   T34]  exit_to_user_mode_loop+0xec/0x110
[  241.046061][   T34]  do_syscall_64+0x2bd/0x3b0
[  241.051261][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.053895][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.056257][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.059225][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.063571][   T34] RIP: 0033:0x7ff37a18ff17
[  241.065595][   T34] RSP: 002b:00007ffd8529eba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  241.070651][   T34] RAX: 0000000000000000 RBX: 00007ff37a211c05 RCX: 00007ff37a18ff17
[  241.073915][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8529ec60
[  241.077282][   T34] RBP: 00007ffd8529ec60 R08: 0000000000000000 R09: 0000000000000000
[  241.082374][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8529fcf0
[  241.086024][   T34] R13: 00007ff37a211c05 R14: 0000000000016903 R15: 00007ffd8529fd30
[  241.094050][   T34]  </TASK>
[  241.096090][   T34] 
[  241.096090][   T34] Showing all locks held in the system:
[  241.108182][   T34] 1 lock held by khungtaskd/34:
[  241.110251][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  241.114064][   T34] 2 locks held by udevd/5298:
[  241.116065][   T34] 1 lock held by syz-executor/6257:
[  241.130545][   T34]  #0: ffff88801fcae0e0 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  241.134806][   T34] 2 locks held by getty/6414:
[  241.148191][   T34]  #0: ffff8880234430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  241.152135][   T34]  #1: ffffc900026782f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  241.156245][   T34] 
[  241.158107][   T34] =============================================
[  241.158107][   T34] 
[  241.162023][   T34] NMI backtrace for cpu 0
[  241.162038][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  241.162053][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.162059][   T34] Call Trace:
[  241.162065][   T34]  <TASK>
[  241.162071][   T34]  dump_stack_lvl+0x189/0x250
[  241.162094][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.162110][   T34]  ? __pfx__printk+0x10/0x10
[  241.162146][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  241.162164][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  241.162179][   T34]  ? __pfx__printk+0x10/0x10
[  241.162196][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  241.162238][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  241.162256][   T34]  watchdog+0xf93/0xfe0
[  241.162274][   T34]  ? watchdog+0x1de/0xfe0
[  241.162294][   T34]  kthread+0x711/0x8a0
[  241.162312][   T34]  ? __pfx_watchdog+0x10/0x10
[  241.162327][   T34]  ? __pfx_kthread+0x10/0x10
[  241.162343][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.162360][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.162377][   T34]  ? __pfx_kthread+0x10/0x10
[  241.162392][   T34]  ret_from_fork+0x3fc/0x770
[  241.162406][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  241.162423][   T34]  ? __switch_to_asm+0x39/0x70
[  241.162438][   T34]  ? __switch_to_asm+0x33/0x70
[  241.162452][   T34]  ? __pfx_kthread+0x10/0x10
[  241.162464][   T34]  ret_from_fork_asm+0x1a/0x30
[  241.162491][   T34]  </TASK>
[  241.162977][   T34] Sending NMI from CPU 0 to CPUs 1:
[  241.222731][    C1] NMI backtrace for cpu 1
[  241.222748][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  241.222762][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.222771][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  241.222795][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 67 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  241.222808][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  241.222825][    C1] RAX: ebcb5d5ae798e500 RBX: ffffffff819683c8 RCX: ebcb5d5ae798e500
[  241.222835][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8241 RDI: ffffffff8be33880
[  241.222875][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  241.222884][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39030
[  241.222893][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  241.222901][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  241.222912][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.222921][    C1] CR2: 00007ffc70038f68 CR3: 000000010fbca000 CR4: 00000000000006f0
[  241.222951][    C1] Call Trace:
[  241.222959][    C1]  <TASK>
[  241.222964][    C1]  default_idle+0x13/0x20
[  241.222976][    C1]  default_idle_call+0x74/0xb0
[  241.222991][    C1]  do_idle+0x1e8/0x510
[  241.223005][    C1]  ? __pfx_do_idle+0x10/0x10
[  241.223022][    C1]  cpu_startup_entry+0x44/0x60
[  241.223034][    C1]  start_secondary+0x101/0x110
[  241.223050][    C1]  common_startup_64+0x13e/0x147
[  241.223071][    C1]  </TASK>
[  241.225124][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  241.289944][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  241.293472][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.297508][   T34] Call Trace:
[  241.299010][   T34]  <TASK>
[  241.300256][   T34]  dump_stack_lvl+0x99/0x250
[  241.302089][   T34]  ? __asan_memcpy+0x40/0x70
[  241.304032][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.306091][   T34]  ? __pfx__printk+0x10/0x10
[  241.308055][   T34]  vpanic+0x281/0x750
[  241.309609][   T34]  ? __pfx_vpanic+0x10/0x10
[  241.311462][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  241.313643][   T34]  ? preempt_schedule+0xae/0xc0
[  241.315578][   T34]  ? preempt_schedule_common+0x83/0xd0
[  241.317753][   T34]  panic+0xb9/0xc0
[  241.319282][   T34]  ? __pfx_panic+0x10/0x10
[  241.321060][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  241.323160][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  241.325573][   T34]  watchdog+0xfd2/0xfe0
[  241.327404][   T34]  ? watchdog+0x1de/0xfe0
[  241.329108][   T34]  kthread+0x711/0x8a0
[  241.330677][   T34]  ? __pfx_watchdog+0x10/0x10
[  241.333157][   T34]  ? __pfx_kthread+0x10/0x10
[  241.335107][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.337236][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.339270][   T34]  ? __pfx_kthread+0x10/0x10
[  241.341318][   T34]  ret_from_fork+0x3fc/0x770
[  241.343078][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  241.345051][   T34]  ? __switch_to_asm+0x39/0x70
[  241.346804][   T34]  ? __switch_to_asm+0x33/0x70
[  241.348621][   T34]  ? __pfx_kthread+0x10/0x10
[  241.350356][   T34]  ret_from_fork_asm+0x1a/0x30
[  241.352391][   T34]  </TASK>
[  241.354438][   T34] Kernel Offset: disabled
[  241.356176][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:21:51  Registers:
info registers vcpu 0

CPU#0
RAX=00000000ffffff05 RBX=0000000000000002 RCX=0000000000000003 RDX=0000000000000003
RSI=0000000000000000 RDI=ffff888107e63980 RBP=0000000000000000 RSP=ffffc90002bff3e8
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90002bff638 R11=ffffffff81ac3aa0
R12=00000000ffffff05 R13=0000000000000001 R14=ffff888107e644e8 R15=ffff888107e644e0
RIP=ffffffff819d65ec RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555564784500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555e20f808 CR3=00000001293ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa990812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=76946b3a7564ea00 RDX=0000000000000000
RSI=ffff888136639f98 RDI=ffff88810688e130 RBP=00000000ffffffff RSP=ffffc900001e0c20
R8 =00000038195e1db1 R9 =0000000000000001 R10=ffff888108551d58 R11=ffffed10210aa3ad
R12=0000000000000046 R13=ffff88810688d640 R14=ffff888136639f98 R15=0000000000000000
RIP=ffffffff8b79ce88 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe3d03d3800 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005620ecd1c7e8 CR3=00000000286e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
