last executing test programs:

1m58.063253839s ago: executing program 2 (id=905):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6a000)
ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f00000005c0))

1m58.062782332s ago: executing program 2 (id=906):
syz_mount_image$hpfs(&(0x7f00000000c0), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000100)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x11, 0x9e28, &(0x7f0000009f00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000021180)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRES8, @ANYRESOCT], 0xd, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x1, 0x1758})

1m57.850298514s ago: executing program 2 (id=911):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="3a74be710dc53efe852000000500000018560000080000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ffe1ffffffbea100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0xffffffffffffffdc, &(0x7f0000000080)}, 0x9a)

1m57.672532724s ago: executing program 2 (id=917):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f00000000c0), 0x3, 0x481, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1m57.592595691s ago: executing program 2 (id=919):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}})

1m57.343265526s ago: executing program 2 (id=926):
syz_emit_ethernet(0xb9, &(0x7f0000002440)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "9291dd", 0x83, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@hopopts={0x2b, 0x0, '\x00', [@pad1]}], "34680a046c1b0ea8fcb9ddd4ca77b8ddf1218df1edfef4b5e81ae35c0f8a33032cac3295e8d3c7c7ccc533578f199158093955fb2e08df9f93f4543bb9cb6699780987aa02112713b2ddac0af671b782a3eba9db512cff3f5cf6deeaf73d94cd905bb71542a7707769dfae984212e227992e49"}}}}}, 0x0)

1m57.323659908s ago: executing program 32 (id=926):
syz_emit_ethernet(0xb9, &(0x7f0000002440)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "9291dd", 0x83, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@hopopts={0x2b, 0x0, '\x00', [@pad1]}], "34680a046c1b0ea8fcb9ddd4ca77b8ddf1218df1edfef4b5e81ae35c0f8a33032cac3295e8d3c7c7ccc533578f199158093955fb2e08df9f93f4543bb9cb6699780987aa02112713b2ddac0af671b782a3eba9db512cff3f5cf6deeaf73d94cd905bb71542a7707769dfae984212e227992e49"}}}}}, 0x0)

1m35.252082837s ago: executing program 1 (id=1284):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'bridge_slave_0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m35.148054156s ago: executing program 1 (id=1290):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f00000000c0), 0xd8)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3a, 0x0, 0x0)

1m35.050801552s ago: executing program 1 (id=1293):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x17, 0x18, 0xb05, 0x101, 0x0, 0x0, "0600ff0901a101855d0902150026ff007508951b8102c0"}}, 0x12f)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080))
close(r0)

1m34.950978591s ago: executing program 1 (id=1296):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnToihR0vfZ0m939r2Z9+atZ2hBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/+/K5E8+l+90KAOBeujD21RMn3f8B4JFyyf//AwAAAAAAAAAAAADAfpeiiMcjxdyFtTRRve9qnO/Ub9wcHxndutpgqmoeqMqXvxrPnTx1+ovPD5/p5fnOzIfUv9s+G6+OXTrXfGn2+tz81MLC1GRzfKZzZXZyasd72G39zY5VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dOxWkUZ/+dodN6RruxkeB6OI45Hime/9LLUjoojdn4vGvR37zQarThyrOjE+Mlp1ZLrTnlksP7zYOxFFRLOvUqt3jrYei6jV72kftteKWCqbXzb4WNm9sbn2fPvy9FTzYnt+sbPYmZ25mLqtLfvTjCLOpIjliFgd+ODu6lFELVJ85/BauhwRB3rn4QvVxODt21HsYR93oGxnsx6xXDwAY7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlF+N0xLtbfI94MNWiiL8ox//sWpqsrge968r5rzW/MnN1tq9s77ryMe8PH7hS3Kf7w+CmvDf2+bWpEUW0qyv+WrrzH3YAAAAAAAAAAAAAAAAAuNsGo4jPRIqX/+2PqnnFUc1LP3x2+PeGfql/zvgTH7GfsuyzEbFU7GxO7sE8MfBiupjSfZ5L/ChrRBF/nOf/fet+NwYAAAAAAAAAAAAAAAAAAOCRVsRPI8UL7xxNy9G/pnhn5lrzUvvydHdV2N7av70109fX19ebqZutnBM5l3Iu51zJudrNat5/Vb/I9XNO5FzKuZxzJedqzjiQ6+ds5ZzIuZRzOedKztWcUcv1c7ZyTuRcyrmccyXnas7YJ2v3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TIoo4v1I8e1vrKVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sb22oRkap/u46Wv52O1sEyPxmt4TJfjNa5nO0qa61v3Yf2szv1VMRPIsVA462NAc/jX+++2/gaxJvfvPXus7VuHuh9OPTewGNHDp8dHv21J7Z7nbZqwLHznZkbN5vjI6OjY32ba/non+zbNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BbT5aX1//0/Iouz3EPnmRatv29JF8UQ7tPmjGHnawtqPC9X3Q1D0ZXB525f3/3Ujx2+/8R++GX93/axslNu7w8Ys/uXX/f2HzjnZ4/69trpfv/+U9fav7/+N9217IP43UaxGNxetz9SMRjYXX3zjeud6+NnVtaub0iRNfGh7+0qkT9YMRjaud6am+V7s/VwAAAAAAAAAAAAAAAAD3VCriy5Gi/ZO11IyIm9V8raGzw08ff+pAHKjmW902b/vVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu30cI1qutf4yOiedOYjDe5x+wcbL83OvT7fufYHi1t+fqhx7vLC4nz7ytYfx2AUEa3+LceqBo+PjFaNnu60Z6qqF7ecTP/x1VMR/xkprpxups/lbXn+/+YZ/rfN/1/avKM9mv//ib5t5TFTKuIXkeK3/vKJ+FzVzkPxgXOWy/1tpDh25slcLg6W5Xpt6D5XoDszsCz7v5HiH99/cqm/bG8+5OO3yj634xP7gCjH/3Ck+P6ffzd+PW+7/fkPW4//oc072qPx/1TftkO3Pa9g110nj//xSPHi42/Fb+RtH/b8j96zN47mwhvP59ij8f9037ahfNzfvDtdBwAAAAAAAAAAeKDVUxF/Fyl+NFpLz+dtO/n7f5Obd7RHf//rV/q2Td6d9Yo+8sWuTyoAAAAA7BP1VMRPI8W1xbc25lDfPv+7b/7n79ya/zmSNn1a/TnfL1fPDbibf/7Xbygfd2L33QYAAAAAAAAAAAAAAAAAAIB9JaUins/rqU9U8/knt11PfSVSvPzfz+Ry6UhZrrcO/FD1e+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX66r315rtrvDdqEVGtxT4fKUb/vle2uxZ7b23y7nrg3bXYy7KfiBT/9Q+3l+2tY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFnswKgAAAAAAAAAAAAAAAAAAADxq6qmIP4sU/3N9eWMuf17/v973tvLmN/vW+9/kZrXO/1C1/v92r+9k/f/quQJL2x0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTimKeCNSzF1YSysD5fuuxvnOzI2b4yOjW1cbTFXNA1X58lfjuZOnTn/x+eEzvfzw+nfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14D9vXb9xRi45VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dKyvTK1+R0feUtpm+8Eo4q8ixTPf+1n60UBEER96LnbkI747e22w6sSxqhPjI6NVR6Y77ZnF8sOLvRNRRDT7KrV65+gejMWutCIGyuaXDT5Wdm9srj3fvjw91bzYnl/sLHZmZy6mbmvL/jSjiDMpYjkiVgc+uLt6FPFapPjO4bX0zwMRB3rn4QsXxr564uT27Sj2sI87ULazWY9YLh6AMdvHBqKIH0SKn799NP5lIKIW3V/x+YhXyvxhxJvRHe9UfjFOR7y7xfeIB1Mtivi/cvzPrqW3B8rrQe+6cv5rza/MXJ3tK9u7ruyr+8MP/v3j1hi8G4fd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUzQ/emFPcmbnWvNS+PN2d1teb+9ebM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydw8AAAAAAAAAAAAAAAAAAHi4FNU/Kb79jbW0PtBdX3oiurliPdCH3v8HAAD//z/B9Iw=")
creat(&(0x7f0000000040)='./file2\x00', 0x19)
r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

1m34.770741802s ago: executing program 1 (id=1300):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0xa, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}])

1m34.55283975s ago: executing program 1 (id=1307):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
getuid()

1m18.863008409s ago: executing program 33 (id=1307):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
getuid()

1.016621526s ago: executing program 0 (id=2304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x30, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)

987.004914ms ago: executing program 0 (id=2306):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

790.347699ms ago: executing program 0 (id=2308):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x40, 0x1, 0x2, "b408754749573f7c17e6e724c609b9424f5a003870ac2600", 0x39555659})

710.806515ms ago: executing program 4 (id=2309):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

710.572469ms ago: executing program 0 (id=2310):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

600.865737ms ago: executing program 4 (id=2311):
r0 = syz_open_dev$media(&(0x7f0000000040), 0xffff, 0x80000)
ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, 0x0)

534.732591ms ago: executing program 4 (id=2312):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

441.431371ms ago: executing program 4 (id=2313):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

381.125924ms ago: executing program 3 (id=2314):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d4, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/61, 0x3d)

380.937832ms ago: executing program 4 (id=2315):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x0, 0x6}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)

311.436732ms ago: executing program 4 (id=2316):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)

251.082556ms ago: executing program 3 (id=2317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004881}, 0x200089a0)

250.968236ms ago: executing program 3 (id=2318):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000780)={[{@auto_da_alloc}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@init_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")

170.598428ms ago: executing program 3 (id=2319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c000280050001000000000006000340000100000800074000000001"], 0x6c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x4a1, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

120.638062ms ago: executing program 0 (id=2320):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

120.439942ms ago: executing program 3 (id=2321):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

78.37568ms ago: executing program 0 (id=2322):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000cc0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=2323):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000d00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1014400, &(0x7f0000000040)=ANY=[], 0x2, 0x631b, &(0x7f00000082c0)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802e53, 0x0, 0xfa, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

 an invalid length.
[  114.220315][ T8064] netlink: 248 bytes leftover after parsing attributes in process `syz.3.960'.
[  114.425286][ T5597] Bluetooth: hci0: command tx timeout
[  114.434787][ T8079] loop1: detected capacity change from 0 to 1024
[  114.440353][ T8079] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  114.599135][ T8088] xt_cluster: node mask cannot exceed total number of nodes
[  114.688310][ T8089] evm: overlay not supported
[  115.411173][ T8102] JFS: discard option not supported on device
[  115.415450][ T8102] Mount JFS Failure: -22
[  115.417008][ T8102] jfs_mount failed w/return code = -22
[  116.022209][   T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  116.052253][   T10] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  116.515039][ T5597] Bluetooth: hci0: command tx timeout
[  116.853515][ T8120] loop1: detected capacity change from 0 to 2048
[  116.877505][ T8120]  loop1: p1 < > p3
[  116.878377][ T8120] loop1: p3 size 134217728 extends beyond EOD, truncated
[  116.909251][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  116.912814][ T6240] udevd[6240]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  117.036477][ T8124] loop1: detected capacity change from 0 to 32768
[  117.080584][ T8124] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.099076][ T8124] XFS (loop1): Ending clean mount
[  117.109679][ T8124] XFS (loop1): Quotacheck needed: Please wait.
[  117.142140][ T8136] loop3: detected capacity change from 0 to 256
[  117.162836][ T8124] XFS (loop1): Quotacheck: Done.
[  117.297934][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.992'.
[  117.297988][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.992'.
[  117.472391][   T34] audit: type=1800 audit(1788503983.722:45): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.986" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0
[  117.472452][   T34] audit: type=1800 audit(1788503983.782:46): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.986" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  117.511778][ T8148] loop0: detected capacity change from 0 to 1024
[  117.524594][ T8148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.633853][ T8154] Invalid argument reading file caps for ./file0
[  117.646326][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.661005][ T8156] netlink: 'syz.3.997': attribute type 30 has an invalid length.
[  117.820534][ T5600] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.876261][ T8166] syzkaller1: entered promiscuous mode
[  117.876304][ T8166] syzkaller1: entered allmulticast mode
[  117.991382][ T8170] loop0: detected capacity change from 0 to 1024
[  118.020209][ T8174] netlink: 'syz.3.1005': attribute type 1 has an invalid length.
[  118.033484][ T8174] netlink: 'syz.3.1005': attribute type 268 has an invalid length.
[  118.038443][ T8174] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1005'.
[  118.084624][ T8178] sctp: [Deprecated]: syz.3.1007 (pid 8178) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.084624][ T8178] Use struct sctp_sack_info instead
[  118.203886][ T8184] loop0: detected capacity change from 0 to 128
[  118.221809][ T8184] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.222217][ T8184] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.235368][ T5410] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  118.239780][ T8184] EXT4-fs (loop0): shut down requested (2)
[  118.240430][ T8184] fscrypt (loop0, inode 12): Error -5 getting encryption context
[  118.267733][ T8182] loop3: detected capacity change from 0 to 32768
[  118.268070][ T5596] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.289329][ T8182] ERROR: (device loop3): diAllocAG: free inode not found in summary map
[  118.289329][ T8182] 
[  118.303043][ T8182] ERROR: (device loop3): remounting filesystem as read-only
[  118.308967][ T8182] ialloc: diAlloc returned -5!
[  118.386016][ T5410] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  118.391793][ T5410] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.396743][ T5410] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.400721][ T5410] usb 2-1: config 0 interface 0 has no altsetting 0
[  118.403509][ T5410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.409822][ T5410] usb 2-1: config 0 descriptor??
[  118.596446][ T5597] Bluetooth: hci0: command tx timeout
[  118.835808][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.838429][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.840745][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.843076][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.846257][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.848689][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.851229][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.853657][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  118.856142][ T5410] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  119.031129][ T5410] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71
[  119.043741][ T5410] usb 2-1: USB disconnect, device number 13
[  119.494787][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1015'.
[  119.601073][ T8205] program syz.1.1016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.725987][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'.
[  120.313493][ T8253] bond0: option arp_interval: invalid value (N)
[  120.313572][ T8253] bond0: option arp_interval: allowed values 0 - 2147483647
[  120.422654][ T8259] loop1: detected capacity change from 0 to 1024
[  120.423877][ T8259] EXT4-fs: Ignoring removed bh option
[  120.424552][ T8259] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  120.835864][ T8265] loop0: detected capacity change from 0 to 131072
[  120.839671][ T5597] Bluetooth: hci0: command tx timeout
[  120.860426][ T8265] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24)
[  120.860465][ T8265] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  120.860536][ T8265] F2FS-fs (loop0): Test dummy encryption mode enabled
[  120.866756][ T8265] F2FS-fs (loop0): invalid crc value
[  120.896613][ T8265] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  120.898186][ T8265] loop0: lost filesystem error report for type 5 error -117
[  120.904243][ T8265] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.910481][ T8265] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  120.910526][ T8265] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  120.910566][ T8265] F2FS-fs (loop0): Start checkpoint disabled!
[  120.934289][ T8265] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  120.941023][ T8265] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  120.941072][ T8265] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  120.997373][ T8259] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.1042: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.997432][ T8259] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  121.000876][ T8259] EXT4-fs (loop1): Remounting filesystem read-only
[  121.000888][ T8259] Quota error (device loop1): write_blk: dquota write failed
[  121.000903][ T8259] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  121.000948][ T8259] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  121.001014][ T8259] EXT4-fs (loop1): 1 orphan inode deleted
[  121.001791][ T8259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.003847][ T8259] Quota error (device loop1): find_next_id: Can't read quota tree block 1
[  121.022023][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.295043][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  121.445562][    T9] usb 2-1: New USB device found, idVendor=1132, idProduct=010d, bcdDevice= 0.40
[  121.446122][    T9] usb 2-1: config 0 has no interfaces?
[  121.447962][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.447972][    T9] usb 2-1: Product: syz
[  121.447979][    T9] usb 2-1: Manufacturer: syz
[  121.447985][    T9] usb 2-1: SerialNumber: syz
[  121.452980][    T9] usb 2-1: config 0 descriptor??
[  121.686320][ T8294] ieee802154 phy0 wpan0: encryption failed: -22
[  121.721886][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1056'.
[  121.871356][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.871766][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.873819][    T9] usb 2-1: USB disconnect, device number 14
[  121.979464][ T8302] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1059'.
[  121.979557][ T8302] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1059'.
[  122.074872][ T8308] loop3: detected capacity change from 0 to 512
[  122.086835][ T8308] EXT4-fs (loop3): Test dummy encryption mode enabled
[  122.086869][ T8308] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  122.094662][ T8308] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  122.098566][ T8308] EXT4-fs (loop3): orphan cleanup on readonly fs
[  122.101269][ T8308] EXT4-fs (loop3): 1 orphan inode deleted
[  122.104329][ T8308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  122.127749][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.182813][ T8313] loop3: detected capacity change from 0 to 1764
[  122.443127][ T8325] loop1: detected capacity change from 0 to 2048
[  122.488038][ T8325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.516168][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.818636][ T8323] loop3: detected capacity change from 0 to 131072
[  122.821698][ T8323] F2FS-fs (loop3): invalid crc value
[  122.858288][ T8323] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.862109][ T8323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  122.874004][ T8336] loop1: detected capacity change from 0 to 16
[  122.894661][ T8336] erofs (device loop1): mounted with root inode @ nid 36.
[  122.933798][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1073'.
[  123.107648][ T8345] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  123.115329][ T8345] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  123.582808][ T8359] loop1: detected capacity change from 0 to 764
[  123.584549][ T8359] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  123.648542][ T8362] loop1: detected capacity change from 0 to 2048
[  123.661269][ T8362] NILFS (loop1): invalid segment: Magic number mismatch
[  123.668332][ T8362] NILFS (loop1): trying rollback from an earlier position
[  123.675609][ T8362] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount
[  123.741648][ T8366] random: crng reseeded on system resumption
[  124.226098][ T8380] vlan2: entered promiscuous mode
[  124.226159][ T8380] bridge0: entered promiscuous mode
[  124.921102][ T8402] Bluetooth: MGMT ver 1.23
[  124.976535][ T8406] program syz.1.1099 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.084345][ T8419] sctp: [Deprecated]: syz.3.1103 (pid 8419) Use of int in maxseg socket option.
[  125.084345][ T8419] Use struct sctp_assoc_value instead
[  125.154724][ T8427] loop3: detected capacity change from 0 to 512
[  125.182293][ T8427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.190645][ T8431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  125.197968][ T8427] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.232749][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.475937][ T2335] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  125.635585][ T2335] usb 2-1: Using ep0 maxpacket: 8
[  125.637003][ T2335] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  125.640163][ T2335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.640179][ T2335] usb 2-1: Product: syz
[  125.640186][ T2335] usb 2-1: Manufacturer: syz
[  125.640192][ T2335] usb 2-1: SerialNumber: syz
[  125.784833][ T8463] pim6reg9: entered allmulticast mode
[  125.854621][ T2335] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  125.857092][ T2335] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  125.857118][ T2335] mxuport 2-1:254.0: probe with driver mxuport failed with error -71
[  125.864190][ T2335] usb 2-1: USB disconnect, device number 15
[  126.412909][ T8496] set_capacity_and_notify: 1 callbacks suppressed
[  126.416839][ T8496] loop1: detected capacity change from 0 to 8192
[  126.420464][ T8496] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.536075][ T5597] Bluetooth: Wrong link type (-71)
[  126.624172][ T8505] loop0: detected capacity change from 0 to 32768
[  126.635638][ T8505] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.652253][ T8505] XFS (loop0): Ending clean mount
[  126.684185][ T8515] netlink: 'syz.1.1146': attribute type 1 has an invalid length.
[  126.686960][ T8515] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1146'.
[  126.719925][ T5596] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.754554][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'.
[  127.015800][ T8529] /dev/nullb0: Can't open blockdev
[  127.066095][ T8528] gfs2: not a GFS2 filesystem
[  127.721844][ T2417] pvrusb2: request_firmware fatal error with code=-110
[  127.727458][ T2417] pvrusb2: Failure uploading firmware1
[  127.727504][ T2417] pvrusb2: Device initialization was not successful.
[  127.728109][ T2417] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  127.728140][ T2417] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  127.728185][ T2417] pvrusb2: Failed to submit write-control URB status=-19
[  127.731874][ T5650] pvrusb2: Device being rendered inoperable
[  127.747908][ T2417] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  127.753753][ T2417] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  127.792798][ T8531] tipc: Started in network mode
[  127.792840][ T8531] tipc: Node identity ac1414aa, cluster identity 4711
[  127.800097][ T8531] tipc: New replicast peer: 172.20.20.187
[  127.802642][ T8531] tipc: Enabled bearer <udp:syz0>, priority 10
[  127.962774][ T8538] loop0: detected capacity change from 0 to 32768
[  127.980889][ T8538] JBD2: Ignoring recovery information on journal
[  128.013719][ T8538] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  128.026189][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  128.064277][ T5596] ocfs2: Unmounting device (7,0) on (node local)
[  128.223147][ T8545] loop0: detected capacity change from 0 to 128
[  128.237649][ T8545] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.242332][ T8545] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.261644][ T8545] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 32769 (only 1 groups)
[  128.284299][ T5596] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.383568][ T8551] bond1 (unregistering): Released all slaves
[  128.682147][ T8556] loop1: detected capacity change from 0 to 256
[  128.682799][ T8556] exfat: Deprecated parameter 'utf8'
[  128.682828][ T8556] exfat: Deprecated parameter 'utf8'
[  128.682834][ T8556] exfat: Deprecated parameter 'utf8'
[  128.683147][ T8556] exFAT-fs (loop1): bogus fat length
[  128.683153][ T8556] exFAT-fs (loop1): failed to read boot sector
[  128.683157][ T8556] exFAT-fs (loop1): failed to recognize exfat type
[  128.797114][  T127] tipc: Node number set to 2886997162
[  128.893105][ T8564] loop1: detected capacity change from 0 to 8192
[  128.896579][ T8564] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  128.910748][ T8564] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  128.910926][ T8564] ntfs3(loop1): Failed to load $Extend (-2).
[  128.910936][ T8564] ntfs3(loop1): Failed to initialize $Extend.
[  128.911085][ T8564] ntfs3(loop1): Failed to load root (-22).
[  129.019009][ T8568] loop0: detected capacity change from 0 to 512
[  129.032350][ T8568] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  129.032466][ T8568] System zones: 0-2, 18-18, 34-35
[  129.043225][ T8568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.049794][ T8568] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.082702][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.649404][ T8591] netlink: 'syz.3.1175': attribute type 1 has an invalid length.
[  129.649451][ T8591] netlink: 'syz.3.1175': attribute type 2 has an invalid length.
[  129.649648][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1175'.
[  129.788853][ T8599] loop3: detected capacity change from 0 to 32768
[  129.816948][ T8599] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.837791][ T8599] XFS (loop3): Ending clean mount
[  129.868786][ T7951] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.869300][ T8615] loop1: detected capacity change from 0 to 512
[  129.911128][ T8615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.911196][ T8615] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.941231][ T8615] EXT4-fs (loop1): shut down requested (2)
[  129.979708][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.087011][   T27] IPVS: starting estimator thread 0...
[  130.122610][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  130.132617][ T8628] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1188'.
[  130.138390][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'.
[  130.195063][ T8624] IPVS: using max 85 ests per chain, 204000 per kthread
[  130.246824][ T8634] loop0: detected capacity change from 0 to 512
[  130.247331][ T8634] EXT4-fs: Ignoring removed orlov option
[  130.247380][ T8634] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.257820][ T8634] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.1191: corrupted in-inode xattr: e_value size too large
[  130.257885][ T8634] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  130.258156][ T8634] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1191: couldn't read orphan inode 15 (err -117)
[  130.258169][ T8634] loop0: lost filesystem error report for type 5 error -117
[  130.259026][ T8634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.312389][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.351546][ T8641] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory
[  130.356081][ T8641] loop3: lost filesystem error report for type 5 error -12
[  130.358150][ T8641] EXT4-fs (loop3): 2 truncates cleaned up
[  130.363080][ T8641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.418405][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.477202][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  130.559978][ T8656] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  130.569874][ T8656] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  130.640553][   T10] usb 2-1: Using ep0 maxpacket: 8
[  130.643225][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  130.648714][   T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  130.648776][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  130.648832][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  130.648870][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  130.648908][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.648969][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.878068][ T8668] io-wq is not configured for unbound workers
[  131.074299][   T10] usb 2-1: GET_CAPABILITIES returned 0
[  131.074365][   T10] usbtmc 2-1:16.0: can't read capabilities
[  131.101428][ T8670] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  131.106664][ T8670] cramfs: empty filesystem
[  131.145166][ T8672] netlink: 'syz.3.1208': attribute type 1 has an invalid length.
[  131.145214][ T8672] netlink: 'syz.3.1208': attribute type 4 has an invalid length.
[  131.346621][ T5410] usb 2-1: USB disconnect, device number 16
[  131.522377][ T8686] set_capacity_and_notify: 3 callbacks suppressed
[  131.522441][ T8686] loop3: detected capacity change from 0 to 131072
[  131.523207][ T8686] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  131.523238][ T8686] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  131.523661][ T8686] F2FS-fs (loop3): invalid crc value
[  131.570052][ T8686] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.578704][ T8686] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  131.578755][ T8686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  131.745571][ T8694] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1217'.
[  131.881928][ T8705] loop3: detected capacity change from 0 to 512
[  131.884137][ T8705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  131.887611][ T8705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002]
[  131.887694][ T8705] System zones: 1-12
[  131.907631][ T8705] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1221: bad orphan inode 16
[  131.907682][ T8705] loop3: lost filesystem error report for type 5 error -117
[  131.907909][ T8705] ext4_test_bit(bit=15, block=4) = 0
[  131.907917][ T8705] EXT4-fs (loop3): 1 orphan inode deleted
[  131.908607][ T8705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.957169][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.192034][ T8730] jffs2: notice: (8730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  132.341452][ T2335] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  132.343980][ T2335] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  132.347156][ T2335] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  132.348055][ T2335] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  132.348064][ T2335] rtc rtc0: __rtc_set_alarm: err=-22
[  132.521171][ T8751] loop3: detected capacity change from 0 to 1764
[  132.541737][ T8751] iso9660: Corrupted directory entry in block 2 of inode 1920
[  132.689811][ T8761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1246'.
[  132.753273][ T8765] scsi_dev_info_list_add_str: bad dev info string 'e' '' ''
[  132.765013][ T2335] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  132.828635][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  132.828703][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  132.935169][ T2335] usb 2-1: Using ep0 maxpacket: 16
[  132.935708][ T2335] usb 2-1: New USB device found, idVendor=19d2, idProduct=0065, bcdDevice=d4.64
[  132.936589][ T2335] usb 2-1: config 100 has an invalid interface number: 173 but max is 2
[  132.936599][ T2335] usb 2-1: config 100 has an invalid interface number: 52 but max is 2
[  132.936607][ T2335] usb 2-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config
[  132.936614][ T2335] usb 2-1: config 100 has 2 interfaces, different from the descriptor's value: 3
[  132.936622][ T2335] usb 2-1: config 100 has no interface number 0
[  132.936629][ T2335] usb 2-1: config 100 has no interface number 1
[  132.936654][ T2335] usb 2-1: config 100 interface 52 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  132.936664][ T2335] usb 2-1: config 100 interface 173 has no altsetting 0
[  132.936671][ T2335] usb 2-1: config 100 interface 52 has no altsetting 0
[  132.938449][ T2335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.938460][ T2335] usb 2-1: Product: syz
[  132.938465][ T2335] usb 2-1: Manufacturer: syz
[  132.938471][ T2335] usb 2-1: SerialNumber: syz
[  133.151278][ T2335] option 2-1:100.173: GSM modem (1-port) converter detected
[  133.162663][ T2335] usb 2-1: No union descriptors
[  133.167248][ T2335] usb 2-1: USB disconnect, device number 17
[  133.172708][ T2335] option 2-1:100.173: device disconnected
[  133.324613][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'.
[  133.324689][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'.
[  133.327417][ T8788] geneve0: entered promiscuous mode
[  133.496439][ T8792] loop0: detected capacity change from 0 to 1024
[  133.515184][ T8792] futex_wake_op: syz.0.1261 tries to shift op by -1; fix this program
[  133.529378][ T8792] hfsplus: invalid length 1280 has been corrected to 255
[  133.533844][ T8792] hfsplus: invalid length 1280 has been corrected to 255
[  133.538982][ T8792] hfsplus: invalid length 1280 has been corrected to 255
[  133.541973][ T8792] hfsplus: invalid length 1280 has been corrected to 255
[  133.634858][ T8796] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1263'.
[  133.639670][ T8796] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1263'.
[  133.730920][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'.
[  133.734752][ T8800] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1266'.
[  133.896157][ T8806] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1268'.
[  134.011481][   T34] audit: type=1326 audit(1788504000.322:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025100][   T34] audit: type=1326 audit(1788504000.342:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025164][   T34] audit: type=1326 audit(1788504000.342:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025227][   T34] audit: type=1326 audit(1788504000.342:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025304][   T34] audit: type=1326 audit(1788504000.342:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025352][   T34] audit: type=1326 audit(1788504000.342:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025401][   T34] audit: type=1326 audit(1788504000.342:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025449][   T34] audit: type=1326 audit(1788504000.342:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025538][   T34] audit: type=1326 audit(1788504000.342:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.025586][   T34] audit: type=1326 audit(1788504000.342:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.3.1273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x7ff00000
[  134.345983][ T8841] netlink: 'syz.0.1283': attribute type 2 has an invalid length.
[  134.460346][ T8855] loop3: detected capacity change from 0 to 256
[  134.462118][ T8854] loop0: detected capacity change from 0 to 256
[  134.467517][ T8855] exfat: Deprecated parameter 'namecase'
[  134.477819][ T8855] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d)
[  134.480524][ T8854] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d)
[  134.608482][ T5410] asus 0018:0B05:0101.0008: hidraw0: I2C HID v0.00 Device [syz1] on syz0
[  134.608537][ T5410] asus 0018:0B05:0101.0008: Asus handshake 5d failed to send: -5
[  134.608568][ T5410] asus 0018:0B05:0101.0008: Failed to initialize 0x5d: -5.
[  134.701453][ T8866] loop1: detected capacity change from 0 to 2048
[  134.718030][ T8866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.920868][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1303'.
[  134.923512][ T8883] loop3: detected capacity change from 0 to 40427
[  134.929574][ T8883] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  134.929613][ T8883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  134.966433][ T8883] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  134.972726][ T8883] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  134.972787][ T8883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.035471][ T8883] smpboot: CPU 1 is now offline
[  135.092982][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  135.093030][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  135.093062][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  135.093085][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  135.093109][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  135.093133][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  135.093157][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  135.698237][ T8906] netlink: 'syz.0.1313': attribute type 11 has an invalid length.
[  135.892616][ T8913] loop0: detected capacity change from 0 to 128
[  136.084041][ T8918] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  136.289621][ T8919] loop0: detected capacity change from 0 to 32768
[  136.310260][ T8919] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.341660][ T8919] XFS (loop0): Ending clean mount
[  136.465406][ T8919] XFS (loop0): User initiated shutdown received.
[  136.465622][ T8919] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  136.465675][ T8919] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  136.505981][ T5596] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.681196][ T8938] jffs2: notice: (8938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  137.039941][ T8949] loop0: detected capacity change from 0 to 256
[  137.059157][ T8949] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  137.655615][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  137.805944][   T10] usb 4-1: Using ep0 maxpacket: 16
[  137.808661][   T10] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  137.813890][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.818447][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  137.822485][   T10] usb 4-1: config 1 has no interface number 0
[  137.822532][   T10] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  137.822566][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  137.822594][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  137.822620][   T10] usb 4-1: config 1 interface 2 has no altsetting 0
[  137.846532][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.846568][   T10] usb 4-1: Product: syz
[  137.846598][   T10] usb 4-1: Manufacturer: syz
[  137.846622][   T10] usb 4-1: SerialNumber: syz
[  138.103832][   T10] snd-usb-us122l 4-1:1.1: usb_set_interface error
[  138.107610][   T10] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  138.133142][   T10] usb 4-1: USB disconnect, device number 2
[  139.176408][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  139.325982][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  139.329732][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  139.329774][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.329809][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.342358][   T10] usb 4-1: config 0 descriptor??
[  139.758120][   T10] hid_parser_main: 31 callbacks suppressed
[  139.763469][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.769282][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771743][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771784][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771812][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771839][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771867][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771894][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771921][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.771948][   T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0
[  139.809704][   T10] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  140.369667][   T10] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device
[  140.369719][   T10] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse
[  140.383963][   T10] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71
[  140.393099][   T10] usb 4-1: USB disconnect, device number 3
[  141.512999][ T8984] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  141.513039][ T8984] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  141.612876][ T9014] __nla_validate_parse: 1 callbacks suppressed
[  141.612933][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1351'.
[  141.748567][ T8984] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  141.776487][ T8984] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  142.213723][ T8984] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  142.213762][ T8984] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  142.360002][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'.
[  143.239834][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.242193][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.253393][ T9043] bridge0: entered allmulticast mode
[  143.283930][ T9043] bridge_slave_1: left allmulticast mode
[  143.283985][ T9043] bridge_slave_1: left promiscuous mode
[  143.286358][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.374663][ T9043] bridge_slave_0: left allmulticast mode
[  143.374707][ T9043] bridge_slave_0: left promiscuous mode
[  143.394062][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.208800][ T9055] loop3: detected capacity change from 0 to 4096
[  144.226330][ T9055] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  144.238725][ T9055] ntfs3(loop3): ino=8, mi_enum_attr
[  144.240599][ T9055] ntfs3(loop3): Failed to load $BadClus (-22).
[  144.815845][   T34] kauditd_printk_skb: 485 callbacks suppressed
[  144.816058][   T34] audit: type=1400 audit(1788504011.122:542): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9076 comm="syz.3.1372"
[  145.054684][ T9083] netlink: 'syz.3.1375': attribute type 2 has an invalid length.
[  145.057643][ T9083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1375'.
[  145.134707][ T9085] netlink: 'syz.3.1376': attribute type 11 has an invalid length.
[  145.347726][ T9087] loop3: detected capacity change from 0 to 131072
[  145.366928][ T9087] F2FS-fs (loop3): invalid crc value
[  145.393975][ T9087] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.400278][ T9087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  145.879914][ T9098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1380'.
[  146.221715][ T9102] gfs2: path_lookup on c::: returned error -2
[  147.371567][ T9134] loop3: detected capacity change from 0 to 512
[  147.399506][ T9134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.405176][ T9134] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.452260][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.035624][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  148.190393][   T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  148.194654][   T10] usb 4-1: config index 0 descriptor too short (expected 69, got 51)
[  148.194708][   T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.194736][   T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.206830][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.206865][   T10] usb 4-1: Product: syz
[  148.206894][   T10] usb 4-1: Manufacturer: syz
[  148.206917][   T10] usb 4-1: SerialNumber: syz
[  148.219573][   T10] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  148.431918][   T10] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -90
[  148.489631][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -90
[  148.522465][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.650216][    T9] usb 4-1: USB disconnect, device number 4
[  149.665107][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  150.600646][   T10] usb 4-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00
[  150.609722][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.609772][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  150.609815][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.854759][   T10] usb 4-1: dvb_usb_v2: usb_bulk_msg() write length=12, actual=0
[  150.854834][   T10] dvb_usb_af9035 4-1:1.0: probe with driver dvb_usb_af9035 failed with error -5
[  150.911609][ T2335] usb 4-1: USB disconnect, device number 5
[  151.074569][ T4993] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.090370][ T4993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.094581][ T4993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.099971][ T4993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.102535][ T4993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.129497][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.149038][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.163934][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.167963][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.170660][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.558865][ T9176] loop0: detected capacity change from 0 to 32768
[  151.600287][ T9176] XFS (loop0): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  151.646699][ T5596] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.849438][ T9197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'.
[  152.138518][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.138643][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.138731][ T9159] bridge_slave_0: entered allmulticast mode
[  152.139572][ T9159] bridge_slave_0: entered promiscuous mode
[  152.151132][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.155557][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.155719][ T9159] bridge_slave_1: entered allmulticast mode
[  152.161611][ T9159] bridge_slave_1: entered promiscuous mode
[  152.198949][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.206582][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.243468][ T9159] team0: Port device team_slave_0 added
[  152.247057][ T9159] team0: Port device team_slave_1 added
[  152.298627][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.300949][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.309276][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.313837][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.318692][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.318734][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.377233][ T9159] hsr_slave_0: entered promiscuous mode
[  152.384801][ T9159] hsr_slave_1: entered promiscuous mode
[  152.387360][ T9159] debugfs: 'hsr0' already exists in 'hsr'
[  152.394459][ T9159] Cannot create hsr debugfs directory
[  152.817431][ T9159] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  152.828541][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  152.832378][ T9159] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  152.853914][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  152.862489][ T9159] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  152.876740][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  152.880602][ T9159] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  152.903528][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  153.053478][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.078735][ T9159] 8021q: adding VLAN 0 to HW filter on device team0
[  153.085608][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.085678][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.096675][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.096745][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.226429][ T5597] Bluetooth: hci3: command tx timeout
[  153.503362][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.728129][ T9159] veth0_vlan: entered promiscuous mode
[  153.736338][ T9159] veth1_vlan: entered promiscuous mode
[  153.776648][ T9159] veth0_macvtap: entered promiscuous mode
[  153.782418][ T9159] veth1_macvtap: entered promiscuous mode
[  153.804252][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.815380][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.862252][ T9228] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  153.955984][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.956185][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.956227][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.956260][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.997313][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.997353][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.078924][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.078979][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.100355][ T9268] loop0: detected capacity change from 0 to 40427
[  155.168020][ T9268] F2FS-fs (loop0): invalid crc value
[  155.230970][ T9275] loop4: detected capacity change from 0 to 512
[  155.235367][ T9275] EXT4-fs: Ignoring removed nobh option
[  155.239222][ T9275] EXT4-fs: Ignoring removed nobh option
[  155.268859][ T9275] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  155.277029][ T9275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002]
[  155.281269][ T9275] System zones: 1-12
[  155.281433][ T9275] EXT4-fs (loop4): orphan cleanup on readonly fs
[  155.290283][ T9275] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1438: attempt to clear invalid blocks 1024 len 1
[  155.290325][ T9275] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  155.295261][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  155.295270][    C0] EXT4-fs (loop4): initial error at time 1788504021: ext4_clear_blocks:876: inode 11
[  155.295281][    C0] EXT4-fs (loop4): last error at time 1788504021: ext4_clear_blocks:876: inode 11
[  155.307939][ T5597] Bluetooth: hci3: command tx timeout
[  155.319410][ T9275] EXT4-fs (loop4): Remounting filesystem read-only
[  155.324884][ T9275] EXT4-fs (loop4): 1 truncate cleaned up
[  155.338168][ T9275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  155.363519][ T9275] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1438: error -EUCLEAN reading directory block
[  155.370395][ T9268] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.410781][ T9268] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.437175][ T9159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  155.923869][ T9288] loop0: detected capacity change from 0 to 4096
[  155.954699][ T9290] loop4: detected capacity change from 0 to 512
[  155.982348][ T9288] NILFS (loop0): invalid segment: Checksum error in segment payload
[  155.982390][ T9288] NILFS (loop0): trying rollback from an earlier position
[  156.143196][ T9288] NILFS (loop0): recovery complete
[  156.147057][ T9293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.224497][ T9295] loop4: detected capacity change from 0 to 512
[  156.233369][ T9295] EXT4-fs: Ignoring removed nobh option
[  156.238327][ T9295] EXT4-fs: Ignoring removed i_version option
[  156.271091][ T9295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.275364][ T9295] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.399630][ T9288] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  156.420771][ T9159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.528415][ T9303] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  156.539473][ T9303] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  156.562045][ T9303] overlayfs: conflicting lowerdir path
[  156.697975][ T9308] loop4: detected capacity change from 0 to 64
[  156.832138][ T9313] comedi comedi3: pcl818: I/O base address not correctly aligned
[  157.386051][ T5597] Bluetooth: hci3: command tx timeout
[  157.678659][ T9326] binder: 9325:9326 ioctl 4018620d 0 returned -22
[  157.681787][ T9326] binder: 9325:9326 ioctl c0306201 0 returned -14
[  157.684292][ T9326] binder: 9325:9326 ioctl c0306201 200000000040 returned -22
[  157.709453][ T9326] loop3: detected capacity change from 0 to 512
[  157.723000][ T9326] EXT4-fs (loop3): DAX unsupported by block device.
[  157.766904][ T9332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1461'.
[  158.210299][ T9356] netlink: 'syz.0.1473': attribute type 4 has an invalid length.
[  158.249780][ T9356] netlink: 'syz.0.1473': attribute type 4 has an invalid length.
[  158.355954][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'.
[  158.428556][  T654] IPVS: starting estimator thread 0...
[  158.453700][ T9360] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  158.516057][ T9366] IPVS: using max 86 ests per chain, 206400 per kthread
[  158.552173][ T9374] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1481'.
[  158.641541][ T9376] xt_hashlimit: size too large, truncated to 1048576
[  158.856119][ T9387] program syz.3.1486 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  159.465474][ T5597] Bluetooth: hci3: command tx timeout
[  160.039642][ T9400] loop0: detected capacity change from 0 to 256
[  160.163766][ T9401] loop4: detected capacity change from 0 to 131072
[  160.172436][ T9401] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  160.172475][ T9401] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  160.181260][ T9401] F2FS-fs (loop4): invalid crc value
[  160.210523][ T9401] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  160.217814][ T9401] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  160.217893][ T9401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  160.683152][ T9422] tmpfs: Bad value for 'mpol'
[  160.701062][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'.
[  161.049341][ T9435] loop0: detected capacity change from 0 to 32768
[  161.061244][ T9435] (syz.0.1507,9435,0):ocfs2_verify_volume:2304 ERROR: bad block number on superblock: found 0, should be 2
[  161.061283][ T9435] (syz.0.1507,9435,0):ocfs2_verify_volume:2327 ERROR: status = -22
[  161.061316][ T9435] (syz.0.1507,9435,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  161.061346][ T9435] (syz.0.1507,9435,0):ocfs2_fill_super:1177 ERROR: status = -22
[  161.205367][ T5658] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  161.355185][ T5658] usb 5-1: Using ep0 maxpacket: 32
[  161.357345][ T5658] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  161.361334][ T5658] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.361385][ T5658] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  161.371368][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.371403][ T5658] usb 5-1: Product: syz
[  161.371434][ T5658] usb 5-1: Manufacturer: syz
[  161.371457][ T5658] usb 5-1: SerialNumber: syz
[  161.409078][ T5658] snd-ua101 5-1:1.1: invalid format type
[  161.409118][ T5658] snd-ua101 5-1:1.0: invalid num_altsetting
[  161.588859][ T2335] usb 5-1: USB disconnect, device number 2
[  161.775476][ T5658] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  161.928213][ T5658] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[  161.936362][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.939868][ T5658] usb 4-1: Product: syz
[  161.942096][ T5658] usb 4-1: Manufacturer: syz
[  161.944383][ T5658] usb 4-1: SerialNumber: syz
[  161.951153][ T5658] usb 4-1: config 0 descriptor??
[  161.966564][ T5658] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  162.203196][ T5658] gspca_m5602: Failed to find a sensor
[  162.203228][ T5658] ALi m5602 4-1:0.0: ALi m5602 webcam failed
[  162.212386][ T5658] usb 4-1: USB disconnect, device number 6
[  162.233362][ T9462] loop0: detected capacity change from 0 to 8
[  162.241780][ T9462] Major/Minor mismatch, older Squashfs 0.-12800 filesystems are unsupported
[  162.551532][    T9] Process accounting resumed
[  162.633629][ T9471] ublk_ctrl_add_dev: invalid recovery flags 10
[  162.727241][ T9470] loop0: detected capacity change from 0 to 32768
[  162.759139][ T9470] (syz.0.1524,9470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  162.764853][ T9470] (syz.0.1524,9470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  162.775910][ T9470] (syz.0.1524,9470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  162.781471][ T9470] JBD2: Ignoring recovery information on journal
[  162.860448][ T9470] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  162.962163][ T9470] (syz.0.1524,9470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  162.962234][ T9470] (syz.0.1524,9470,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  162.962271][ T9470] (syz.0.1524,9470,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  162.962301][ T9470] (syz.0.1524,9470,0):ocfs2_quota_read:201 ERROR: status = -5
[  162.962327][ T9470] Quota error (device loop0): find_next_id: Can't read quota tree block 5
[  162.962426][ T9470] (syz.0.1524,9470,0):ocfs2_get_next_id:935 ERROR: status = -5
[  163.079241][ T5596] ocfs2: Unmounting device (7,0) on (node local)
[  163.339049][ T9493] loop3: detected capacity change from 0 to 8192
[  163.347948][ T9493] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  163.380904][ T9493] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  163.385428][ T9493] ntfs3(loop3): Failed to load $Extend (-2).
[  163.385464][ T9493] ntfs3(loop3): Failed to initialize $Extend.
[  163.534532][ T9499] IPv6: addrconf: prefix option has invalid lifetime
[  163.736684][ T2335] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  163.884980][ T2335] usb 4-1: Using ep0 maxpacket: 8
[  163.887352][ T2335] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  163.892269][ T2335] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  163.895268][ T2335] usb 4-1: config 179 has no interface number 0
[  163.897452][ T2335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  163.901202][ T2335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  163.901216][ T2335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  163.901226][ T2335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  163.901236][ T2335] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  163.901256][ T2335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.922007][ T9497] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  163.985065][ T5657] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  164.137321][ T5657] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  164.150184][ T5657] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  164.150222][ T5657] usb 5-1: config 0 has no interface number 0
[  164.150335][ T5657] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  164.150364][ T5657] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10
[  164.150393][ T5657] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024
[  164.150561][ T5657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.182963][ T5657] usb 5-1: config 0 descriptor??
[  164.267096][ T5657] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input10
[  164.272326][ T2335] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9
[  164.493594][ T2335] usb 5-1: USB disconnect, device number 3
[  164.590588][ T5657] usb 4-1: USB disconnect, device number 7
[  164.590663][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  164.590698][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  165.412580][ T9532] loop3: detected capacity change from 0 to 512
[  165.420204][ T9532] EXT4-fs: Ignoring removed oldalloc option
[  165.427389][ T9532] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  165.432212][ T9532] EXT4-fs (loop3): failed to initialize system zone (-117)
[  165.435450][ T9532] EXT4-fs (loop3): mount failed
[  165.701415][ T9545] loop3: detected capacity change from 0 to 2048
[  165.719801][ T9545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.726837][   T34] audit: type=1800 audit(1788504032.042:543): pid=9545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1558" name="file1" dev="loop3" ino=15 res=0 errno=0
[  165.755712][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.824838][ T9550] Console: switching to colour dummy device 80x25
[  165.929585][ T9554] loop3: detected capacity change from 0 to 1024
[  165.939103][ T9554] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  165.939161][ T9554] EXT4-fs (loop3): group descriptors corrupted!
[  167.578693][ T9588] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1576'.
[  167.581562][ T9588] tc_dump_action: action bad kind
[  167.635939][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  167.646762][ T9592] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  167.655396][ T2335] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  167.787947][    T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  167.791563][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  167.791603][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  167.791631][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  167.806019][ T2335] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  167.810005][ T2335] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  167.810044][ T2335] usb 5-1: config 1 has no interface number 0
[  167.817568][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.817681][    T9] usb 4-1: Product: syz
[  167.817710][    T9] usb 4-1: Manufacturer: syz
[  167.817756][    T9] usb 4-1: SerialNumber: syz
[  167.829903][ T2335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.829938][ T2335] usb 5-1: Product: syz
[  167.829967][ T2335] usb 5-1: Manufacturer: syz
[  167.829991][ T2335] usb 5-1: SerialNumber: syz
[  167.838030][    T9] usb 4-1: config 0 descriptor??
[  167.842516][ T9580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  167.845101][ T9580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  167.850899][    T9] usb 4-1: ucan: probing device on interface #0
[  167.854439][ T2335] usb 5-1: 3:0 : does not exist
[  167.864784][ T2335] usb 5-1: 3:0 : does not exist
[  167.907124][ T9598] loop0: detected capacity change from 0 to 256
[  168.070500][    T9] usb 4-1: ucan: device protocol version 0 is not supported
[  168.073270][    T9] usb 4-1: ucan: probe failed; try to update the device firmware
[  168.163099][    T9] usb 5-1: USB disconnect, device number 4
[  168.284624][   T10] usb 4-1: USB disconnect, device number 8
[  168.408874][ T9613] program syz.0.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.467080][   T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  168.480369][   T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  168.509624][   T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  168.746745][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  168.767188][    T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  168.921884][ T9624] loop4: detected capacity change from 0 to 32768
[  168.936655][ T9624] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  168.999010][ T9624] XFS (loop4): Ending clean mount
[  169.012859][ T9624] XFS (loop4): User initiated shutdown received.
[  169.013045][ T9624] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464).  Shutting down filesystem.
[  169.020161][ T9624] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  169.042253][ T9159] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.257519][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  169.284805][ T9615] ceph: No mds server is up or the cluster is laggy
[  169.292075][ T9618] ceph: No mds server is up or the cluster is laggy
[  169.300659][    T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  169.403987][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1601'.
[  169.776189][ T9665] loop0: detected capacity change from 0 to 128
[  169.789710][ T9665] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  169.816073][ T9666] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1608'.
[  169.816117][ T9666] veth0_to_bond: default FDB implementation only supports local addresses
[  169.910358][   T34] audit: type=1800 audit(1788504036.222:544): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1607" name="bus" dev="loop0" ino=120 res=0 errno=0
[  169.924841][ T9668] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  169.924888][ T9668] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  169.925162][ T9668] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  169.942465][ T9665] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  170.019815][ T9668] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  170.139555][ T9668] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  170.178218][ T9676] netlink: 'syz.0.1612': attribute type 21 has an invalid length.
[  170.180880][ T9676] IPv6: NLM_F_CREATE should be specified when creating new route
[  170.192040][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'.
[  170.365199][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  170.475580][ T9690] af_packet: packet size is too long (1853191215 > 736)
[  170.516477][    T9] usb 4-1: Using ep0 maxpacket: 16
[  170.518700][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  170.526439][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[  170.526484][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.533908][    T9] usb 4-1: config 0 descriptor??
[  170.863174][ T9698] loop4: detected capacity change from 0 to 131072
[  170.884767][ T9698] F2FS-fs (loop4): invalid crc value
[  170.924815][ T9698] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.931341][ T9698] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  171.109599][    T9] hid_parser_main: 222 callbacks suppressed
[  171.109677][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109713][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109742][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109769][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109797][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109824][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109851][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109879][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109906][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.109933][    T9] nzxt-kraken2 0003:1E71:170E.000A: unknown main item tag 0x0
[  171.165899][    T9] nzxt-kraken2 0003:1E71:170E.000A: hidraw0: USB HID v7e.ff Device [HID 1e71:170e] on usb-dummy_hcd.3-1/input0
[  171.294566][    T9] usb 4-1: USB disconnect, device number 9
[  171.667975][ T9719] loop0: detected capacity change from 0 to 32768
[  171.705400][ T9719] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  171.726137][ T9719] XFS (loop0): Ending clean mount
[  171.742582][ T9733] /dev/loop0: Can't open blockdev
[  171.747752][ T5596] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  171.902886][ T9737] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1635'.
[  171.951179][ T9739] loop3: detected capacity change from 0 to 4096
[  171.989185][ T9739] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  172.018195][ T9739] ntfs3(loop3): ino=19, mi_enum_attr
[  172.018240][ T9739] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  172.023019][ T9739] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  172.075406][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'.
[  172.736828][ T9774] loop3: detected capacity change from 0 to 512
[  172.743610][ T9774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  172.759774][ T9774] EXT4-fs (loop3): 1 truncate cleaned up
[  172.763971][ T9774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.824843][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.032928][ T9789] loop0: detected capacity change from 0 to 512
[  173.050172][ T9789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.061589][ T9789] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #18: comm syz.0.1660: verity is only allowed on extent-based files
[  173.098368][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.227810][   T34] audit: type=1326 audit(1788504039.542:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.0.1664" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x0
[  173.403213][ T9805] loop0: detected capacity change from 0 to 512
[  173.458551][ T9805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.458669][ T9805] ext4 filesystem being mounted at /478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  173.485725][ T9805] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 3: comm syz.0.1666: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  173.499271][ T9805] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 12: comm syz.0.1666: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  173.508061][ T9805] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 13: comm syz.0.1666: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  173.517455][ T9805] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 16: comm syz.0.1666: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0
[  173.524003][ T9805] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 18: comm syz.0.1666: lblock 23 mapped to illegal pblock 18 (length 1)
[  174.254059][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.440961][ T9824] input: syz0 as /devices/virtual/input/input11
[  175.628982][ T9830] netlink: 'syz.0.1676': attribute type 2 has an invalid length.
[  175.839008][ T9836] loop0: detected capacity change from 0 to 32768
[  175.888454][ T9836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1678 (9836)
[  175.933011][ T9836] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.952255][ T9836] BTRFS info (device loop0): using crc32c checksum algorithm
[  176.064601][ T9858] loop3: detected capacity change from 0 to 256
[  176.075354][ T9836] BTRFS info (device loop0): enabling ssd optimizations
[  176.077690][ T9836] BTRFS info (device loop0): turning on flush-on-commit
[  176.080178][ T9836] BTRFS info (device loop0): enabling free space tree
[  176.082534][ T9836] BTRFS info (device loop0): force zlib compression, level 3
[  176.085148][ T9836] BTRFS info (device loop0): max_inline set to 4096
[  176.096781][ T9858] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  176.194274][ T5596] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.382674][ T9864] batman_adv: batadv0: Adding interface: vlan2
[  176.384710][ T9864] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.394665][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.394676][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.394681][ T9864] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  176.459691][ T9868] pimreg0: tun_chr_ioctl cmd 2147767506
[  176.658404][ T9877] loop3: detected capacity change from 0 to 164
[  177.271478][ T9912] loop0: detected capacity change from 0 to 32768
[  177.316163][ T9912]  loop0: p9 p11 p16
[  177.441228][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'.
[  177.497362][ T6240] udevd[6240]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory
[  177.501744][ T6237] udevd[6237]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory
[  177.506793][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory
[  177.526413][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1708'.
[  177.597642][ T9920] block nbd0: server does not support multiple connections per device.
[  177.658033][ T9920] block nbd0: shutting down sockets
[  177.893576][ T9934] ./file0: Can't open blockdev
[  178.021912][ T9942] loop0: detected capacity change from 0 to 3904
[  178.050656][ T9942] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  178.050698][ T9942] ldm_validate_privheads(): Disk read failed.
[  178.058284][ T9942] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be ''.
[  178.061523][ T9942] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  178.064666][ T9942] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  178.067532][ T9942] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  178.070840][ T9942] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  178.070894][ T9942]  loop0:
[  178.070921][ T9942] loop0: partition table partially beyond EOD, truncated
[  178.119420][ T9944] loop0: detected capacity change from 0 to 64
[  178.192500][ T9946] loop4: detected capacity change from 0 to 256
[  178.193031][ T9946] exfat: Deprecated parameter 'namecase'
[  178.193086][ T9946] exfat: Deprecated parameter 'namecase'
[  178.223081][ T9946] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  178.240193][   T34] audit: type=1800 audit(1788504044.552:546): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1722" name="file1" dev="loop0" ino=5 res=0 errno=0
[  178.519814][ T9959] binder: 9958:9959 ioctl c0306201 200000000480 returned -14
[  178.595413][ T9963] sd 0:0:0:0: PR command failed: 1026
[  178.595459][ T9963] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  178.595500][ T9963] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  180.406832][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'.
[  181.004618][T10029] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1759'.
[  181.507853][T10053] futex_wake_op: syz.3.1771 tries to shift op by 32; fix this program
[  181.649065][T10059] loop4: detected capacity change from 0 to 4096
[  181.677478][T10059] ntfs3(loop4): Failed to load $Extend (-22).
[  181.679663][T10059] ntfs3(loop4): Failed to initialize $Extend.
[  182.827976][T10069] CacheFiles: No cache directory specified
[  183.099958][   T34] audit: type=1326 audit(1788504049.412:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.109994][   T34] audit: type=1326 audit(1788504049.422:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.124189][   T34] audit: type=1326 audit(1788504049.432:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.133403][   T34] audit: type=1326 audit(1788504049.452:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.141420][   T34] audit: type=1326 audit(1788504049.462:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.148535][   T34] audit: type=1326 audit(1788504049.462:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.155711][   T34] audit: type=1326 audit(1788504049.472:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.167743][   T34] audit: type=1326 audit(1788504049.482:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.167788][   T34] audit: type=1326 audit(1788504049.482:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  183.246386][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  183.398154][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  183.398247][   T10] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40
[  183.406057][   T10] usb 5-1: config 1 interface 0 has no altsetting 0
[  183.410706][   T10] usb 5-1: string descriptor 0 read error: -22
[  183.410782][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.820912][   T10] hid_parser_main: 470 callbacks suppressed
[  184.820967][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.820998][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821026][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821053][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821081][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821108][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821136][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821164][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821191][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.821219][   T10] glorious 0003:22D4:1503.000B: unknown main item tag 0x0
[  184.910489][   T10] glorious 0003:22D4:1503.000B: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.4-1/input0
[  184.941081][   T10] usb 5-1: USB disconnect, device number 5
[  185.337841][T10137] loop3: detected capacity change from 0 to 32768
[  185.360927][T10137] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1811 (10137)
[  185.382012][T10137] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.382058][T10137] BTRFS info (device loop3): using sha256 checksum algorithm
[  185.447537][T10137] BTRFS info (device loop3): enabling ssd optimizations
[  185.447576][T10137] BTRFS info (device loop3): turning on async discard
[  185.447606][T10137] BTRFS info (device loop3): enabling free space tree
[  185.507351][ T7951] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.653804][T10164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1817'.
[  185.653845][T10164] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1817'.
[  185.653879][T10164] netlink: 'syz.4.1817': attribute type 6 has an invalid length.
[  185.653903][T10164] netlink: 'syz.4.1817': attribute type 5 has an invalid length.
[  185.653925][T10164] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1817'.
[  185.960815][T10179] FAULT_INJECTION: forcing a failure.
[  185.960815][T10179] name failslab, interval 1, probability 0, space 0, times 9
[  185.969238][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.3.1824 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  185.969269][T10179] Tainted: [L]=SOFTLOCKUP
[  185.969273][T10179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.969278][T10179] Call Trace:
[  185.969282][T10179]  <TASK>
[  185.969286][T10179]  dump_stack_lvl+0xe8/0x150
[  185.969303][T10179]  should_fail_ex+0x410/0x560
[  185.969316][T10179]  should_failslab+0xa8/0x100
[  185.969328][T10179]  __kvmalloc_node_noprof+0x176/0x820
[  185.969339][T10179]  ? v4l2_ctrl_new+0xa5a/0x1820
[  185.969350][T10179]  ? v4l2_ctrl_new+0xa5a/0x1820
[  185.969371][T10179]  v4l2_ctrl_new+0xa5a/0x1820
[  185.969387][T10179]  v4l2_ctrl_new_std+0x24e/0x300
[  185.969404][T10179]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  185.969439][T10179]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  185.969456][T10179]  ? find_ref_lock+0x425/0x480
[  185.969469][T10179]  handler_new_ref+0x153/0x930
[  185.969483][T10179]  ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10
[  185.969494][T10179]  v4l2_ctrl_new+0x1395/0x1820
[  185.969510][T10179]  v4l2_ctrl_new_std+0x24e/0x300
[  185.969527][T10179]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  185.969538][T10179]  ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[  185.969550][T10179]  ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[  185.969563][T10179]  ? __kvmalloc_node_noprof+0x345/0x820
[  185.969575][T10179]  ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[  185.969587][T10179]  vicodec_open+0x30c/0xbf0
[  185.969603][T10179]  v4l2_open+0x1bc/0x3a0
[  185.969612][T10179]  chrdev_open+0x4d9/0x600
[  185.969623][T10179]  ? __pfx_chrdev_open+0x10/0x10
[  185.969633][T10179]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  185.969645][T10179]  ? __pfx_chrdev_open+0x10/0x10
[  185.969654][T10179]  do_dentry_open+0x816/0x1380
[  185.969669][T10179]  vfs_open+0x3b/0x340
[  185.969678][T10179]  ? path_openat+0x1428/0x1d60
[  185.969688][T10179]  path_openat+0x1443/0x1d60
[  185.969704][T10179]  do_file_open+0x23e/0x4a0
[  185.969715][T10179]  ? __pfx_do_file_open+0x10/0x10
[  185.969732][T10179]  ? _raw_spin_unlock+0x28/0x50
[  185.969739][T10179]  ? alloc_fd+0x651/0x6c0
[  185.969750][T10179]  do_sys_openat2+0x115/0x200
[  185.969761][T10179]  ? __se_sys_futex+0x3a8/0x450
[  185.969771][T10179]  ? __pfx_do_sys_openat2+0x10/0x10
[  185.969782][T10179]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  185.969790][T10179]  ? rcu_is_watching+0x16/0xb0
[  185.969801][T10179]  __x64_sys_openat+0x138/0x170
[  185.969814][T10179]  do_syscall_64+0x166/0x520
[  185.969822][T10179]  ? trace_irq_disable+0x3b/0x140
[  185.969829][T10179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.969838][T10179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.969845][T10179] RIP: 0033:0x7f5783f5e98e
[  185.969854][T10179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  185.969860][T10179] RSP: 002b:00007f5784ddcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  185.969869][T10179] RAX: ffffffffffffffda RBX: 00007f5784ddd6c0 RCX: 00007f5783f5e98e
[  185.969875][T10179] RDX: 0000000000000002 RSI: 00007f5784ddcc00 RDI: ffffffffffffff9c
[  185.969880][T10179] RBP: 00007f5784ddcc00 R08: 0000000000000000 R09: 0000000000000000
[  185.969902][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  185.969907][T10179] R13: 00007f5784226038 R14: 00007f5784225fa0 R15: 00007ffc453c57a8
[  185.969919][T10179]  </TASK>
[  186.270602][T10190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1829'.
[  186.401242][T10194] loop3: detected capacity change from 0 to 164
[  186.423278][T10194] Unable to read rock-ridge attributes
[  186.694071][T10205] loop4: detected capacity change from 0 to 512
[  186.714150][T10205] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1835: bg 0: block 5: invalid block bitmap
[  186.714206][T10205] loop4: lost filesystem error report for type 5 error -117
[  186.715612][    C0] EXT4-fs (loop4): initial error at time 1788504053: ext4_validate_block_bitmap:436
[  186.715661][    C0] EXT4-fs (loop4): last error at time 1788504053: ext4_validate_block_bitmap:436
[  186.759209][T10205] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  186.759247][T10205] loop4: lost filesystem error report for type 5 error -117
[  186.766532][T10205] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1835: invalid indirect mapped block 3 (level 2)
[  186.766572][T10205] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  186.766868][T10205] EXT4-fs (loop4): 1 orphan inode deleted
[  186.766898][T10205] EXT4-fs (loop4): 1 truncate cleaned up
[  186.767634][T10205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.824299][ T9159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.881569][T10210] netlink: 'syz.4.1837': attribute type 1 has an invalid length.
[  186.930484][T10210] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.960252][T10210] vlan2: entered allmulticast mode
[  186.960290][T10210] veth0_to_bond: entered allmulticast mode
[  186.975535][T10210] bond1: (slave vlan2): making interface the new active one
[  186.980372][T10210] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  187.301499][T10226] loop4: detected capacity change from 0 to 256
[  187.755444][ T5658] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  187.872620][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'.
[  187.901297][T10249] macsec1: entered promiscuous mode
[  187.901339][T10249] dummy0: entered promiscuous mode
[  187.901498][T10249] macsec1: entered allmulticast mode
[  187.901524][T10249] dummy0: entered allmulticast mode
[  187.910819][ T5658] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  187.914589][ T5658] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  187.914627][ T5658] usb 5-1: config 0 has no interface number 0
[  187.914662][ T5658] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  187.914691][ T5658] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  187.914726][ T5658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.931673][ T5658] usb 5-1: config 0 descriptor??
[  187.938130][T10237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  187.976519][ T5658] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  187.988352][T10249] dummy0: left allmulticast mode
[  188.028616][    T9] dummy0: left promiscuous mode
[  188.210745][    T9] usb 5-1: USB disconnect, device number 6
[  188.376148][T10260] loop3: detected capacity change from 0 to 4096
[  188.418583][T10260] ntfs3(loop3): Failed to load $Extend (-22).
[  188.420618][T10260] ntfs3(loop3): Failed to initialize $Extend.
[  188.477228][   T34] kauditd_printk_skb: 5 callbacks suppressed
[  188.477281][   T34] audit: type=1800 audit(1788504054.792:561): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1860" name="file1" dev="loop3" ino=30 res=0 errno=0
[  188.501917][   T34] audit: type=1800 audit(1788504054.802:562): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1860" name="file1" dev="loop3" ino=30 res=0 errno=0
[  188.846784][T10277] loop4: detected capacity change from 0 to 4096
[  188.852296][T10277] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  188.872417][T10277] ntfs3(loop4): ino=19, mi_enum_attr
[  188.923294][T10279] CIFS: bad ip= option (1270.0.1)
[  188.929856][T10279] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  188.942435][T10279] CIFS: Attempting to mount (null)
[  189.149311][ T2417] pvrusb2: request_firmware fatal error with code=-110
[  189.152389][ T2417] pvrusb2: Failure uploading firmware1
[  189.154544][ T2417] pvrusb2: Device initialization was not successful.
[  189.157014][ T2417] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  189.160383][ T2417] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  189.163966][ T5650] pvrusb2: Device being rendered inoperable
[  189.467033][ T5650] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  189.615546][ T5650] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  189.619538][ T5650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.626234][ T5650] usb 1-1: config 0 descriptor??
[  189.725807][T10283] loop3: detected capacity change from 0 to 256
[  189.823181][T10279] CIFS: VFS: Error connecting to socket. Aborting operation.
[  189.823304][T10279] CIFS: VFS: cifs_mount failed w/return code = -4
[  190.013000][T10293] loop3: detected capacity change from 0 to 512
[  190.036135][T10293] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory
[  190.036176][T10293] loop3: lost filesystem error report for type 5 error -12
[  190.039511][T10293] EXT4-fs (loop3): 2 truncates cleaned up
[  190.040242][T10293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.123890][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.211746][T10320] binder: 10319:10320 ioctl c0306201 2000000002c0 returned -14
[  191.287845][T10323] loop3: detected capacity change from 0 to 256
[  191.293217][T10323] exfat: Unknown parameter '&-MiJAo׶ 34$;H{Lf57꘬ΎS~.ۣDhʰT緄H%&+SkP?@"j'
[  191.391809][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'.
[  191.531611][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'.
[  191.557491][ T2335] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  191.734081][ T2335] usb 4-1: Using ep0 maxpacket: 32
[  191.866049][ T2335] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  192.149959][ T2335] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11
[  192.170455][ T2335] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58319, setting to 1024
[  192.411179][ T2335] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  192.442844][ T2335] usb 4-1: Product: syz
[  192.458646][ T2335] usb 4-1: Manufacturer: syz
[  192.555606][ T2335] hub 4-1:4.0: USB hub found
[  192.597131][   T10] usb 1-1: USB disconnect, device number 6
[  192.672387][T10339] loop4: detected capacity change from 0 to 1024
[  192.704560][T10339] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  192.779175][ T2335] hub 4-1:4.0: 2 ports detected
[  193.180483][ T2335] hub 4-1:4.0: set hub depth failed
[  193.191109][ T2335] usb 4-1: USB disconnect, device number 10
[  193.339051][T10365] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size.
[  193.346817][T10365] loop0: detected capacity change from 0 to 164
[  193.359009][T10365] Unable to read rock-ridge attributes
[  193.363958][T10365] Unable to read rock-ridge attributes
[  193.615040][ T5658] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  193.765942][ T5658] usb 1-1: Using ep0 maxpacket: 32
[  193.783366][ T5658] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  193.789677][ T5658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.789718][ T5658] usb 1-1: Product: syz
[  193.789742][ T5658] usb 1-1: Manufacturer: syz
[  193.789766][ T5658] usb 1-1: SerialNumber: syz
[  193.803653][ T5658] usb 1-1: config 0 descriptor??
[  193.816876][ T5658] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  194.256513][    T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  194.269197][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  194.269249][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  194.377317][T10381] kAFS: bad VL server IP address
[  194.406610][    T9] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  194.410784][    T9] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  194.410824][    T9] usb 5-1: config 0 has no interface number 0
[  194.410861][    T9] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64
[  194.423857][    T9] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  194.423893][    T9] usb 5-1: Manufacturer: syz
[  194.423924][    T9] usb 5-1: SerialNumber: syz
[  194.457763][    T9] usb 5-1: config 0 descriptor??
[  194.460549][T10375] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  194.510748][T10383] tmpfs: Cannot enable quota on remount
[  194.834727][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'.
[  194.844309][ T5658] gspca_ov534_9: reg_w failed -71
[  194.886628][    T9] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71
[  194.900032][    T9] usb 5-1: USB disconnect, device number 7
[  194.966856][T10395] TCP: tcp_parse_options: Illegal window scaling value 227 > 14 received
[  195.125013][ T5658] gspca_ov534_9: Unknown sensor 0000
[  195.125109][ T5658] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  195.132153][ T5658] usb 1-1: USB disconnect, device number 7
[  195.620175][T10408] input: syz0 as /devices/virtual/input/input13
[  195.753729][T10414] xt_CT: No such helper "netbios-ns"
[  195.881439][T10420] loop4: detected capacity change from 0 to 1024
[  195.907540][T10420] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  195.949144][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'.
[  195.952217][T10420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.068586][T10420] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.591315][   T34] audit: type=1326 audit(1788504062.902:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1944" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f98b9e159 code=0x0
[  196.613847][T10456] loop3: detected capacity change from 0 to 256
[  196.626413][   T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  196.791589][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  196.791633][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  197.706393][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.706452][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.740980][   T10] uvcvideo 1-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  198.371015][   T10] uvcvideo 1-1:1.1: Failed to set UVC probe control : -71 (exp. 26).
[  198.373795][   T10] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  198.373845][   T10] uvcvideo 1-1:1.1: Failed to initialize the device (-71).
[  198.374163][   T10] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71
[  198.406608][   T10] usb 1-1: USB disconnect, device number 8
[  199.225017][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  199.235288][ T5658] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  199.278004][T10476] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  199.278039][T10476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  199.287822][T10476] vhci_hcd vhci_hcd.0: Device attached
[  199.291628][T10477] vhci_hcd: connection closed
[  199.299590][   T13] vhci_hcd vhci_hcd.4: stop threads
[  199.304032][   T13] vhci_hcd vhci_hcd.4: release socket
[  199.306710][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  199.376142][   T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  199.379932][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.394735][ T5658] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  199.399597][   T10] usb 1-1: config 0 descriptor??
[  199.402075][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.402112][ T5658] usb 4-1: Product: syz
[  199.402136][ T5658] usb 4-1: Manufacturer: syz
[  199.402160][ T5658] usb 4-1: SerialNumber: syz
[  199.412589][ T5658] usb 4-1: config 0 descriptor??
[  199.619227][ T5658] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  199.831743][   T10] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[  199.831843][   T10] hackrf 1-1:0.0: Could not detect board
[  199.831889][   T10] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[  199.846366][   T10] usb 1-1: USB disconnect, device number 9
[  200.004735][T10484] loop4: detected capacity change from 0 to 8192
[  201.201227][T10492] loop0: detected capacity change from 0 to 1024
[  201.224616][ T5658] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  201.259748][T10492] EXT4-fs (loop0): Can't support bigalloc feature without extents feature
[  201.259748][T10492] 
[  201.259790][T10492] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  201.425801][ T5658] usb 4-1: USB disconnect, device number 11
[  201.965669][ T5658] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  202.120115][ T5658] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  202.128599][ T5658] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[  202.128642][ T5658] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25970, setting to 1024
[  202.128676][ T5658] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  202.128710][ T5658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.150968][T10515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  202.151119][T10515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  202.166044][ T5658] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  202.173020][ T5658] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  202.409996][ T5658] usb 1-1: USB disconnect, device number 10
[  202.421110][ T5658] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  202.427166][ T5658] cyberjack 1-1:1.0: device disconnected
[  202.913282][T10552] Invalid argument reading file caps for ./file0
[  203.041113][T10558] syzkaller1: entered promiscuous mode
[  203.041169][T10558] syzkaller1: entered allmulticast mode
[  203.353630][T10569] loop0: detected capacity change from 0 to 32768
[  203.358926][T10569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1992 (10569)
[  203.372957][T10569] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.372998][T10569] BTRFS info (device loop0): using crc32c checksum algorithm
[  203.505524][T10569] BTRFS info (device loop0): enabling ssd optimizations
[  203.505563][T10569] BTRFS info (device loop0): turning on flush-on-commit
[  203.505597][T10569] BTRFS info (device loop0): enabling free space tree
[  203.505621][T10569] BTRFS info (device loop0): enabling auto defrag
[  203.505646][T10569] BTRFS info (device loop0): use lzo compression, level 1
[  203.505672][T10569] BTRFS info (device loop0): max_inline set to 4096
[  203.704565][T10597] loop4: detected capacity change from 0 to 256
[  204.021720][ T5596] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  204.698235][   T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  204.846024][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  204.846071][   T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  204.854476][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.854513][   T10] usb 4-1: Product: syz
[  204.854543][   T10] usb 4-1: Manufacturer: syz
[  204.854567][   T10] usb 4-1: SerialNumber: syz
[  205.068996][T10632] loop4: detected capacity change from 0 to 136
[  205.112947][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  205.116355][   T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  205.234276][   T10] usb 4-1: USB disconnect, device number 12
[  205.510587][T10640] loop4: detected capacity change from 0 to 16
[  205.543021][T10640] erofs (device loop4): mounted with root inode @ nid 36.
[  206.107197][   T34] audit: type=1326 audit(1788504072.422:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.3.2025" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5783f9e159 code=0x0
[  208.238634][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'.
[  208.302267][T10669] loop4: detected capacity change from 0 to 1024
[  208.573983][T10675] hfsplus: xattr search failed
[  208.574402][T10675] syz.4.2030: attempt to access beyond end of device
[  208.574402][T10675] loop4: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[  208.574545][T10675] Buffer I/O error on dev loop4, logical block 2889, async page read
[  208.574601][T10675] syz.4.2030: attempt to access beyond end of device
[  208.574601][T10675] loop4: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[  208.574631][T10675] Buffer I/O error on dev loop4, logical block 2889, async page read
[  208.587540][   T34] audit: type=1800 audit(1788504074.882:565): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2030" name="bus" dev="loop4" ino=20 res=0 errno=0
[  208.686833][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  208.836074][   T10] usb 4-1: Using ep0 maxpacket: 32
[  208.839087][   T10] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  208.844537][   T10] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  208.844572][   T10] usb 4-1: config 2 has no interface number 0
[  208.844612][   T10] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  208.844641][   T10] usb 4-1: config 2 interface 88 has no altsetting 0
[  208.857690][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  208.857725][   T10] usb 4-1: Product: syz
[  208.857755][   T10] usb 4-1: Manufacturer: syz
[  208.857778][   T10] usb 4-1: SerialNumber: syz
[  208.876541][T10671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  209.057663][T10696] Bluetooth: hci0: unsupported parameter 5134
[  209.064823][T10697] loop0: detected capacity change from 0 to 128
[  209.067298][T10696] Bluetooth: hci0: unsupported parameter 8192
[  209.067409][T10696] Bluetooth: hci0: unsupported parameter 5134
[  209.067432][T10696] Bluetooth: hci0: unsupported parameter 8192
[  209.096693][T10671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  209.110716][   T34] audit: type=1800 audit(1788504075.422:566): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2042" name="file1" dev="loop0" ino=1048639 res=0 errno=0
[  209.311393][   T10] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  209.311558][   T10] asix 4-1:2.88: probe with driver asix failed with error -71
[  209.325569][   T10] usb 4-1: USB disconnect, device number 13
[  209.579740][T10716] loop4: detected capacity change from 0 to 4096
[  209.874997][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  210.028388][   T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  210.032168][   T10] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  210.038109][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.041784][   T10] usb 1-1: config 0 has no interface number 0
[  210.044330][   T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  210.047832][   T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  210.051153][   T10] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.058340][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.060989][   T10] usb 1-1: Product: syz
[  210.062962][   T10] usb 1-1: Manufacturer: syz
[  210.062991][   T10] usb 1-1: SerialNumber: syz
[  210.069223][   T10] usb 1-1: config 0 descriptor??
[  210.499438][   T10] usb 1-1: USB disconnect, device number 11
[  210.599071][T10735] loop4: detected capacity change from 0 to 2048
[  210.614835][T10735] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  210.621044][T10735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.761206][T10741] loop4: detected capacity change from 0 to 8192
[  210.873069][T10745] macvlan0: entered promiscuous mode
[  210.876519][T10745] netlink: 'syz.4.2063': attribute type 1 has an invalid length.
[  210.879107][T10745] netlink: 'syz.4.2063': attribute type 2 has an invalid length.
[  211.090104][   T34] audit: type=1326 audit(1788504077.402:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.3.2069" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5783f9e159 code=0x0
[  211.225131][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  211.375907][   T10] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  211.381928][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.384758][   T10] usb 5-1: Product: syz
[  211.386404][   T10] usb 5-1: Manufacturer: syz
[  211.388159][   T10] usb 5-1: SerialNumber: syz
[  211.394606][   T10] ums_eneub6250 5-1:1.0: USB Mass Storage device detected
[  211.411229][T10775] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  211.411229][T10775] The task syz.0.2076 (10775) triggered the difference, watch for misbehavior.
[  211.600533][   T10] usb 5-1: USB disconnect, device number 8
[  211.922899][T10756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.209012][T10780] macvlan0: left promiscuous mode
[  212.507085][T10793] overlay: Unknown parameter 'subj_role'
[  212.733845][T10807] loop0: detected capacity change from 0 to 8
[  212.742245][T10807] SQUASHFS error: lzo decompression failed, data probably corrupt
[  212.742287][T10807] SQUASHFS error: Failed to read block 0x91: -5
[  212.742316][T10807] SQUASHFS error: Unable to read metadata cache entry [8f]
[  212.742340][T10807] SQUASHFS error: Unable to read inode 0x11f
[  212.836045][ T2335] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  212.874397][   T34] audit: type=1804 audit(1788504079.182:568): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2094" name="bus" dev="ramfs" ino=24588 res=1 errno=0
[  212.901225][   T34] audit: type=1804 audit(1788504079.212:569): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2094" name="bus" dev="ramfs" ino=24588 res=1 errno=0
[  212.990248][ T2335] usb 4-1: Using ep0 maxpacket: 16
[  212.993949][ T2335] usb 4-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00
[  212.999230][ T2335] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  212.999266][ T2335] usb 4-1: Product: syz
[  212.999295][ T2335] usb 4-1: SerialNumber: syz
[  213.008511][ T2335] usb 4-1: config 0 descriptor??
[  213.012335][ T2335] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  213.016821][ T2335] usb 4-1: Detected FT2232C/D
[  213.221812][ T2335] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  213.224754][ T2335] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  213.232153][ T2335] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  213.243881][ T2335] usb 4-1: USB disconnect, device number 14
[  213.250251][ T2335] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  213.254304][ T2335] ftdi_sio 4-1:0.0: device disconnected
[  213.385113][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  213.545384][    T9] usb 1-1: Using ep0 maxpacket: 32
[  213.547733][    T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  213.551754][    T9] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  213.551797][    T9] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  213.551832][    T9] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  213.551858][    T9] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  213.570609][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.570644][    T9] usb 1-1: Product: syz
[  213.570674][    T9] usb 1-1: Manufacturer: syz
[  213.570698][    T9] usb 1-1: SerialNumber: syz
[  213.585991][    T9] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  213.600338][    T9] imon 1-1:155.0: unable to initialize intf0, err -19
[  213.600379][    T9] imon:imon_probe: failed to initialize context!
[  213.600403][    T9] imon 1-1:155.0: unable to register, err -19
[  213.791151][ T2335] usb 1-1: USB disconnect, device number 12
[  213.953858][T10828] bond1: option min_links: invalid value (18446744073709551612)
[  213.953895][T10828] bond1: option min_links: allowed values 0 - 2147483647
[  213.962245][T10828] bond1 (unregistering): Released all slaves
[  214.387221][T10846] loop0: detected capacity change from 0 to 64
[  214.839182][T10861] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  214.936750][T10865] loop4: detected capacity change from 0 to 2048
[  214.965471][T10865] Dev loop4: RDB in block 2 has bad checksum
[  214.969184][ T5043] Dev loop4: RDB in block 2 has bad checksum
[  215.210131][T10874] loop0: detected capacity change from 0 to 32768
[  215.336051][ T2335] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  215.357470][T10878] loop0: detected capacity change from 0 to 256
[  215.376558][T10878] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.485718][ T2335] usb 5-1: Using ep0 maxpacket: 16
[  215.489354][ T2335] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  215.493104][ T2335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.493137][ T2335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  215.503146][ T2335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.503180][ T2335] usb 5-1: Product: syz
[  215.503209][ T2335] usb 5-1: Manufacturer: syz
[  215.503233][ T2335] usb 5-1: SerialNumber: syz
[  215.526859][ T2335] usb 5-1: 0:2 : does not exist
[  215.683808][T10894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2131'.
[  215.687056][T10894] i: renamed from virt_wifi0
[  215.724778][ T2335] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  215.753705][ T2335] usb 5-1: USB disconnect, device number 9
[  215.782477][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.795631][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  215.946579][    T9] usb 4-1: Using ep0 maxpacket: 8
[  215.948976][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  215.953091][    T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  215.955800][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.959178][    T9] usb 4-1: config 0 has no interface number 0
[  215.963219][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.965976][    T9] usb 4-1: Product: syz
[  215.965984][    T9] usb 4-1: Manufacturer: syz
[  215.965990][    T9] usb 4-1: SerialNumber: syz
[  215.972374][    T9] usb 4-1: config 0 descriptor??
[  215.978067][    T9] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  215.986126][    T9] uvcvideo 4-1:0.31: Failed to create links for entity 32774
[  215.988708][    T9] uvcvideo 4-1:0.31: Failed to register entities (-22).
[  216.182273][    T9] usb 4-1: USB disconnect, device number 15
[  216.527302][T10914] loop4: detected capacity change from 0 to 4096
[  216.532884][T10914] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  216.548553][T10914] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  216.551254][T10914] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  217.927565][T10936] loop4: detected capacity change from 0 to 16
[  217.942388][T10936] erofs (device loop4): mounted with root inode @ nid 36.
[  218.014272][T10936] syz.4.2151: attempt to access beyond end of device
[  218.014272][T10936] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  218.038339][T10936] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  218.055011][T10936] erofs (device loop4): read error -117 @ 0 of nid 89
[  218.063206][   T34] audit: type=1800 audit(1788504084.372:570): pid=10936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2151" name="file2" dev="loop4" ino=89 res=0 errno=0
[  218.325603][   T34] audit: type=1326 audit(1788504084.642:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.0.2159" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef2ed9e159 code=0x0
[  218.771750][T10978] loop3: detected capacity change from 0 to 256
[  218.786753][T10978] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[  218.811571][T10978] exFAT-fs (loop3): error, in sector 160, dentry 5 should be unused, but 0xc1
[  218.815666][T10978] exFAT-fs (loop3): Filesystem has been set read-only
[  219.214722][T10997] loop3: detected capacity change from 0 to 256
[  219.834317][T11028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2191'.
[  220.343520][T11052] IPv6: addrconf: prefix option has invalid lifetime
[  220.444748][   T34] audit: type=1326 audit(1788504086.752:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.0.2202" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x0
[  222.210514][   T34] audit: type=1326 audit(1788504088.522:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.0.2222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  222.221651][   T34] audit: type=1326 audit(1788504088.532:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.0.2222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  222.229920][   T34] audit: type=1326 audit(1788504088.542:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.0.2222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  222.237041][   T34] audit: type=1326 audit(1788504088.552:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.0.2222" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  222.245046][   T34] audit: type=1326 audit(1788504088.552:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.0.2222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  222.252047][   T34] audit: type=1326 audit(1788504088.562:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.0.2222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  222.259301][   T34] audit: type=1326 audit(1788504088.582:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.0.2222" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ed9e159 code=0x7ffc0000
[  222.327311][   T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  222.477553][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  222.483273][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.483320][   T10] usb 5-1: Product: syz
[  222.483344][   T10] usb 5-1: Manufacturer: syz
[  222.483368][   T10] usb 5-1: SerialNumber: syz
[  222.493225][   T10] usb 5-1: config 0 descriptor??
[  222.683344][T11119] loop3: detected capacity change from 0 to 1024
[  222.769496][T11119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.793713][   T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  222.851643][ T7951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.349180][  T144] IPVS: starting estimator thread 0...
[  223.355452][T11131] IPVS: rr: UDP 172.20.20.1:80 - no destination available
[  223.435406][T11132] IPVS: using max 86 ests per chain, 206400 per kthread
[  223.668997][T11138] RDS: rds_bind could not find a transport for fe80::30, load rds_tcp or rds_rdma?
[  223.729965][   T27] IPVS: starting estimator thread 0...
[  223.815617][T11139] IPVS: using max 85 ests per chain, 204000 per kthread
[  223.992886][   T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  224.004863][   T10] usb 5-1: USB disconnect, device number 10
[  224.413061][T11172] fuse: Bad value for 'fd'
[  225.085427][T11195] dlm: no locking on control device
[  225.935047][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  226.086927][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  226.086977][   T10] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  226.093112][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.093146][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  226.093188][   T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  226.093231][   T10] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  226.093265][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  226.107533][   T10] usb 4-1: config 1 interface 1 has no altsetting 0
[  226.116451][   T10] usb 4-1: string descriptor 0 read error: -22
[  226.116529][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.775312][T11233] loop4: detected capacity change from 0 to 32768
[  226.781865][T11233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2280 (11233)
[  226.854776][T11233] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.863690][T11233] BTRFS info (device loop4): using sha256 checksum algorithm
[  226.924096][T11233] BTRFS info (device loop4): setting nodatasum
[  226.927539][T11233] BTRFS info (device loop4): enabling ssd optimizations
[  226.927578][T11233] BTRFS info (device loop4): turning on async discard
[  226.927603][T11233] BTRFS info (device loop4): enabling free space tree
[  227.052414][   T10] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[  227.064233][   T10] usb 4-1: Warning! Unlikely big volume step count (=11688), linear volume or wrong cval->res?
[  227.064271][   T10] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/11688/1
[  227.170321][   T10] usb 4-1: USB disconnect, device number 16
[  227.319200][ T9159] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.405334][T11259] loop4: detected capacity change from 0 to 256
[  227.412397][T11259] exfat: Deprecated parameter 'utf8'
[  227.412457][T11259] exfat: Deprecated parameter 'namecase'
[  227.412514][T11259] exfat: Deprecated parameter 'namecase'
[  227.412541][T11259] exfat: Deprecated parameter 'utf8'
[  227.429022][T11259] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  227.429183][T11259] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  227.500026][T11259] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  227.681314][T11261] loop4: detected capacity change from 0 to 1024
[  227.715534][T11261] hfsplus: invalid btree extent records (0 size)
[  227.733815][T11261] hfsplus: failed to load extents file
[  228.090433][T11281] Cannot find add_set index 2 as target
[  228.250455][T11289] loop3: detected capacity change from 0 to 40427
[  228.253529][T11289] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  228.253568][T11289] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  228.294813][T11289] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  228.304079][T11289] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  228.304118][T11289] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  228.421156][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  228.421196][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  228.421227][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  228.421250][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  228.421274][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  228.421298][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  228.421322][ T7951] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  228.507457][T11297] Bluetooth: ISO socket layer initialized
[  228.788900][T11308] loop4: detected capacity change from 0 to 4096
[  228.793435][T11308] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  228.805469][T11308] ntfs3(loop4): Failed to load $MFT.
[  228.923439][T11312] overlayfs: upper fs does not support tmpfile.
[  229.366143][T11332] loop3: detected capacity change from 0 to 1024
[  229.369955][T11332] journal_path: not usable as path
[  229.372981][T11332] EXT4-fs: error: could not find journal device path
[  229.627325][T11342] loop3: detected capacity change from 0 to 32768
[  229.638135][T11342] 
[  229.638135][T11342]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.638135][T11342] 
[  229.671280][T11342] 
[  229.671280][T11342]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.671280][T11342] 
[  229.675911][T11342] 
[  229.675911][T11342]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.675911][T11342] 
[  229.679740][T11342] 
[  229.679740][T11342]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.679740][T11342] 
[  229.686912][T11342] 
[  229.686912][T11342]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.686912][T11342] 
[  229.693810][T11342] 
[  229.693810][T11342]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.693810][T11342] 
[  229.699642][T11342] 
[  229.699642][T11342]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.699642][T11342] 
[  229.723315][  T125] 
[  229.723315][  T125]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.723315][  T125] 
[  229.728876][ T7951] 
[  229.728876][ T7951]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.728876][ T7951] 
[  229.733103][ T7951] 
[  229.733103][ T7951]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.733103][ T7951] 
[  229.739339][  T125] ==================================================================
[  229.739362][  T125] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x530
[  229.739378][  T125] Write of size 8 at addr ffff88802aaf6840 by task jfsCommit/125
[  229.739385][  T125] 
[  229.739391][  T125] CPU: 0 UID: 0 PID: 125 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  229.739401][  T125] Tainted: [L]=SOFTLOCKUP
[  229.739404][  T125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.739408][  T125] Call Trace:
[  229.739411][  T125]  <TASK>
[  229.739415][  T125]  dump_stack_lvl+0xe8/0x150
[  229.739426][  T125]  print_address_description+0x55/0x1e0
[  229.739436][  T125]  ? txEnd+0x32d/0x530
[  229.739444][  T125]  print_report+0x58/0x70
[  229.739452][  T125]  kasan_report+0x117/0x150
[  229.739462][  T125]  ? txEnd+0x32d/0x530
[  229.739472][  T125]  kasan_check_range+0x264/0x2c0
[  229.739481][  T125]  txEnd+0x32d/0x530
[  229.739491][  T125]  jfs_lazycommit+0x5d6/0xac0
[  229.739501][  T125]  ? __pfx_jfs_lazycommit+0x10/0x10
[  229.739511][  T125]  ? __pfx_default_wake_function+0x10/0x10
[  229.739521][  T125]  ? __kthread_parkme+0x71/0x1f0
[  229.739531][  T125]  ? __kthread_parkme+0x199/0x1f0
[  229.739541][  T125]  kthread+0x38b/0x480
[  229.739547][  T125]  ? __pfx_jfs_lazycommit+0x10/0x10
[  229.739556][  T125]  ? __pfx_kthread+0x10/0x10
[  229.739563][  T125]  ret_from_fork+0x514/0xb70
[  229.739570][  T125]  ? __pfx_ret_from_fork+0x10/0x10
[  229.739576][  T125]  ? __switch_to+0xc89/0x1420
[  229.739586][  T125]  ? __pfx_kthread+0x10/0x10
[  229.739593][  T125]  ret_from_fork_asm+0x1a/0x30
[  229.739602][  T125]  </TASK>
[  229.739604][  T125] 
[  229.739606][  T125] Allocated by task 11342:
[  229.739610][  T125]  kasan_save_track+0x3e/0x80
[  229.739616][  T125]  __kasan_kmalloc+0x93/0xb0
[  229.739623][  T125]  __kmalloc_cache_noprof+0x321/0x600
[  229.739629][  T125]  lmLogOpen+0x2d1/0xf90
[  229.739637][  T125]  jfs_mount_rw+0xf3/0x670
[  229.739644][  T125]  jfs_fill_super+0x769/0xda0
[  229.739650][  T125]  get_tree_bdev_flags+0x430/0x4f0
[  229.739657][  T125]  vfs_get_tree+0x92/0x2a0
[  229.739664][  T125]  do_new_mount+0x319/0xdc0
[  229.739670][  T125]  __se_sys_mount+0x31d/0x420
[  229.739676][  T125]  do_syscall_64+0x166/0x520
[  229.739684][  T125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.739713][  T125] 
[  229.739715][  T125] Freed by task 7951:
[  229.739719][  T125]  kasan_save_track+0x3e/0x80
[  229.739725][  T125]  kasan_save_free_info+0x40/0x50
[  229.739733][  T125]  __kasan_slab_free+0x5c/0x80
[  229.739740][  T125]  kfree+0x1c5/0x650
[  229.739748][  T125]  lmLogClose+0x296/0x530
[  229.739756][  T125]  jfs_umount+0x2da/0x3b0
[  229.739763][  T125]  jfs_put_super+0x8c/0x190
[  229.739769][  T125]  generic_shutdown_super+0x13d/0x2d0
[  229.739775][  T125]  kill_block_super+0x44/0xa0
[  229.739782][  T125]  deactivate_locked_super+0xbc/0x110
[  229.739787][  T125]  cleanup_mnt+0x3d3/0x460
[  229.739795][  T125]  task_work_run+0x1d9/0x270
[  229.739802][  T125]  exit_to_user_mode_loop+0x204/0x770
[  229.739809][  T125]  do_syscall_64+0x328/0x520
[  229.739815][  T125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.739821][  T125] 
[  229.739823][  T125] The buggy address belongs to the object at ffff88802aaf6800
[  229.739823][  T125]  which belongs to the cache kmalloc-1k of size 1024
[  229.739829][  T125] The buggy address is located 64 bytes inside of
[  229.739829][  T125]  freed 1024-byte region [ffff88802aaf6800, ffff88802aaf6c00)
[  229.739836][  T125] 
[  229.739838][  T125] The buggy address belongs to the physical page:
[  229.739842][  T125] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aaf0
[  229.739850][  T125] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  229.739855][  T125] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  229.739862][  T125] page_type: f5(slab)
[  229.739869][  T125] raw: 00fff00000000040 ffff888100041dc0 dead000000000100 dead000000000122
[  229.739874][  T125] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  229.739881][  T125] head: 00fff00000000040 ffff888100041dc0 dead000000000100 dead000000000122
[  229.739886][  T125] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  229.739892][  T125] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  229.739897][  T125] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  229.739900][  T125] page dumped because: kasan: bad access detected
[  229.739904][  T125] page_owner tracks the page as allocated
[  229.739907][  T125] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 162746147293
[  229.739919][  T125]  post_alloc_hook+0x1f9/0x250
[  229.739928][  T125]  get_page_from_freelist+0x2007/0x2080
[  229.739935][  T125]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  229.739941][  T125]  allocate_slab+0x7d/0x620
[  229.739949][  T125]  refill_objects+0x2d5/0x350
[  229.739956][  T125]  __pcs_replace_empty_main+0x2c8/0x6c0
[  229.739963][  T125]  __kmalloc_node_track_caller_noprof+0x548/0x720
[  229.739969][  T125]  pskb_expand_head+0x22c/0x13a0
[  229.739979][  T125]  batadv_skb_head_push+0x169/0x200
[  229.739987][  T125]  batadv_send_skb_packet+0xce/0x650
[  229.739996][  T125]  batadv_iv_send_outstanding_bat_ogm_packet+0x590/0x740
[  229.740004][  T125]  process_scheduled_works+0xc3d/0x1630
[  229.740012][  T125]  worker_thread+0xa47/0xfb0
[  229.740020][  T125]  kthread+0x38b/0x480
[  229.740025][  T125]  ret_from_fork+0x514/0xb70
[  229.740030][  T125]  ret_from_fork_asm+0x1a/0x30
[  229.740036][  T125] page last free pid 9470 tgid 9468 ts 162726889200 stack trace:
[  229.740041][  T125]  __free_frozen_pages+0xcfd/0xe10
[  229.740049][  T125]  __slab_free+0x274/0x2c0
[  229.740055][  T125]  qlist_free_all+0x99/0x100
[  229.740060][  T125]  kasan_quarantine_reduce+0x148/0x160
[  229.740066][  T125]  __kasan_slab_alloc+0x22/0x80
[  229.740073][  T125]  kmem_cache_alloc_noprof+0x2b9/0x600
[  229.740082][  T125]  do_getname+0x2e/0x250
[  229.740091][  T125]  do_sys_openat2+0xcc/0x200
[  229.740100][  T125]  __x64_sys_openat+0x138/0x170
[  229.740108][  T125]  do_syscall_64+0x166/0x520
[  229.740115][  T125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.740121][  T125] 
[  229.740123][  T125] Memory state around the buggy address:
[  229.740127][  T125]  ffff88802aaf6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  229.740131][  T125]  ffff88802aaf6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  229.740136][  T125] >ffff88802aaf6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.740139][  T125]                                            ^
[  229.740143][  T125]  ffff88802aaf6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.740147][  T125]  ffff88802aaf6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.740150][  T125] ==================================================================
[  229.789008][  T125] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  229.968552][  T125] CPU: 0 UID: 0 PID: 125 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  229.971915][  T125] Tainted: [L]=SOFTLOCKUP
[  229.973292][  T125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.976435][  T125] Call Trace:
[  229.977506][  T125]  <TASK>
[  229.978470][  T125]  vpanic+0x56d/0xa60
[  229.979770][  T125]  ? __pfx_vpanic+0x10/0x10
[  229.981230][  T125]  ? __pfx___schedule+0x10/0x10
[  229.982794][  T125]  panic+0xc5/0xd0
[  229.983994][  T125]  ? __pfx_panic+0x10/0x10
[  229.985432][  T125]  ? preempt_schedule_common+0x7f/0xd0
[  229.987166][  T125]  ? txEnd+0x32d/0x530
[  229.988473][  T125]  check_panic_on_warn+0x89/0xb0
[  229.990128][  T125]  ? txEnd+0x32d/0x530
[  229.991459][  T125]  end_report+0x73/0x170
[  229.992828][  T125]  ? txEnd+0x32d/0x530
[  229.994329][  T125]  kasan_report+0x128/0x150
[  229.996160][  T125]  ? txEnd+0x32d/0x530
[  229.997761][  T125]  kasan_check_range+0x264/0x2c0
[  229.999665][  T125]  txEnd+0x32d/0x530
[  230.001161][  T125]  jfs_lazycommit+0x5d6/0xac0
[  230.002652][  T125]  ? __pfx_jfs_lazycommit+0x10/0x10
[  230.004300][  T125]  ? __pfx_default_wake_function+0x10/0x10
[  230.006145][  T125]  ? __kthread_parkme+0x71/0x1f0
[  230.007730][  T125]  ? __kthread_parkme+0x199/0x1f0
[  230.009335][  T125]  kthread+0x38b/0x480
[  230.010627][  T125]  ? __pfx_jfs_lazycommit+0x10/0x10
[  230.012323][  T125]  ? __pfx_kthread+0x10/0x10
[  230.013798][  T125]  ret_from_fork+0x514/0xb70
[  230.015242][  T125]  ? __pfx_ret_from_fork+0x10/0x10
[  230.016858][  T125]  ? __switch_to+0xc89/0x1420
[  230.018364][  T125]  ? __pfx_kthread+0x10/0x10
[  230.019790][  T125]  ret_from_fork_asm+0x1a/0x30
[  230.021346][  T125]  </TASK>
[  230.022657][  T125] Kernel Offset: disabled
[  230.024063][  T125] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:41:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000157900
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff857371f0
R12=dffffc0000000000 R13=0000000000000020 R14=ffffffff9ad3f0c0 R15=0000000000000000
RIP=ffffffff8573726c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d6cc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557e6e7a28 CR3=0000000113dfc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=3cb3486e63e772d7 f3a22482dabb339f XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81750a02 RBX=000000000000000f RCX=ffff8881604f0000 RDX=0000000000000000
RSI=000000000000000f RDI=0000000000000003 RBP=ffffc900001a7f10 RSP=ffffc900001a7e38
R8 =ffff88823c623fbb R9 =1ffff110478c47f7 R10=dffffc0000000000 R11=ffffed10478c47f8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff81750a03 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8ccc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2de14ff8 CR3=000000000eb48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=6e6f2f317570632f ffffffff813362fe
XMM02=00656e696c6e6f2f 317570632f757063 XMM03=2f6d65747379732f 736563697665642f
XMM04=0000000000000000 0000000000000000 XMM05=0336cca9ffff0000 0077f6ea00000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
