last executing test programs:

2m21.512085217s ago: executing program 0 (id=2345):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file0\x00', 0x800000, &(0x7f0000000180)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$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")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0xd280, 0x0, 0x1, 0x0, &(0x7f00000007c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xc000, 0xa0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2)

2m20.92170208s ago: executing program 0 (id=2352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

2m20.79180507s ago: executing program 0 (id=2354):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20005, 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)

2m19.881605454s ago: executing program 0 (id=2371):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001240))

2m19.778616731s ago: executing program 0 (id=2375):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1f3)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m19.662567214s ago: executing program 0 (id=2377):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000cc0)={0xefea4fc070ba5848, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1b, 0x4, 0x7, '\x00', "4cdfdb14"}}, 0x0}, 0x0)

2m4.306372877s ago: executing program 32 (id=2377):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000cc0)={0xefea4fc070ba5848, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1b, 0x4, 0x7, '\x00', "4cdfdb14"}}, 0x0}, 0x0)

24.631121754s ago: executing program 2 (id=3763):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x6e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

24.56104041s ago: executing program 2 (id=3765):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)

24.510109687s ago: executing program 2 (id=3767):
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)

24.46162744s ago: executing program 2 (id=3768):
syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126)

24.369656617s ago: executing program 2 (id=3769):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
statfs(&(0x7f0000000000)='./file0\x00', 0x0)

23.480204083s ago: executing program 2 (id=3775):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002a40)=@newtfilter={0x54, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_to_bond\x00'}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

23.30747653s ago: executing program 33 (id=3775):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002a40)=@newtfilter={0x54, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_to_bond\x00'}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

3.410083869s ago: executing program 4 (id=4034):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r1=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1, 0x25, 0x2, @val=@netkit={@void, @value=r0}}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

3.321612219s ago: executing program 4 (id=4035):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x1d}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0)

3.32137225s ago: executing program 4 (id=4036):

3.210284977s ago: executing program 4 (id=4038):
pipe2(&(0x7f0000000000), 0x80000)
syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x4, 0x51}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x5, 0x1, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1000000000000395, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

3.153916542s ago: executing program 4 (id=4040):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$uac1(0x6, 0x84, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xfe, 0x50, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfe, 0x5, 0x8, 0x3, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x19, 0x0, 0x2, {0x7, 0x25, 0x1, 0xc, 0xfc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3, 0x7, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x8, 0x6, {0x7, 0x25, 0x1, 0x8, 0x9, 0x1}}}}}}}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

2.888959886s ago: executing program 1 (id=4046):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000010c0))
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4097, 0x1001}], 0x1, 0x33, 0x5)

2.830668798s ago: executing program 1 (id=4048):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)

2.75168182s ago: executing program 1 (id=4049):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0xffffffff, "152a44e39305000000000000c200002011000000000000101000000800"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r1})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ppoll(&(0x7f0000000140)=[{r2, 0x8301}], 0x1, 0x0, 0x0, 0x0)

1.891466965s ago: executing program 1 (id=4050):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

1.830789026s ago: executing program 1 (id=4051):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001840)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff"], 0x8)

930.348519ms ago: executing program 1 (id=4052):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0)

179.709913ms ago: executing program 3 (id=4057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004800}, 0x4800)

131.393356ms ago: executing program 3 (id=4058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x2, @val=@netkit={@void, @value=r1}}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r2, 0x0, 0x0}, 0x10)

131.036852ms ago: executing program 3 (id=4059):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c00018025000100"], 0x159c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

91.861082ms ago: executing program 3 (id=4060):
mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x404, &(0x7f00000001c0)={[], [{@seclabel}, {@seclabel}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '(.\'\'{-{\'^]@+{'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x50, 0x63, 0x36, 0x31, 0x31, 0x35], 0x2d, [0x38, 0x57, 0x61, 0x30], 0x2d, [0x5d, 0x31, 0x39, 0x30], 0x2d, [0x62, 0x37, 0x64, 0x30], 0x2d, [0x63, 0x64, 0x62, 0x61, 0x39, 0x34, 0x5f, 0x61]}}}]})

1.058628ms ago: executing program 3 (id=4061):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0x6, &(0x7f0000000740), 0x4)

223.092µs ago: executing program 4 (id=4062):
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@setneightbl={0x2c, 0x43, 0x1, 0x2, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x7f}]}, 0x2c}}, 0x0)

0s ago: executing program 3 (id=4063):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0x38, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000)

0s ago: executing program 3 (id=4065):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0)

kernel console output (not intermixed with test programs):

cfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  291.003601][   T51] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  291.009104][   T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.009254][   T51] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  291.023229][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.023305][   T51] usb 3-1: Product: syz
[  291.023352][   T51] usb 3-1: Manufacturer: syz
[  291.023365][   T51] usb 3-1: SerialNumber: syz
[  291.098573][T12025] ocfs2: Unmounting device (7,3) on (node local)
[  291.195013][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'.
[  291.277689][T13847] loop1: detected capacity change from 0 to 1024
[  291.301807][T13847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.350253][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.378237][T13854] FAULT_INJECTION: forcing a failure.
[  291.378237][T13854] name failslab, interval 1, probability 0, space 0, times 0
[  291.378296][T13854] CPU: 1 UID: 0 PID: 13854 Comm: syz.3.3211 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.378325][T13854] Tainted: [L]=SOFTLOCKUP
[  291.378330][T13854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.378336][T13854] Call Trace:
[  291.378340][T13854]  <TASK>
[  291.378360][T13854]  dump_stack_lvl+0xe8/0x150
[  291.378381][T13854]  should_fail_ex+0x410/0x560
[  291.378398][T13854]  ? __alloc_skb+0x1db/0x7a0
[  291.378413][T13854]  should_failslab+0xa8/0x100
[  291.378426][T13854]  ? __alloc_skb+0x1db/0x7a0
[  291.378438][T13854]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  291.378452][T13854]  ? lock_acquire+0x115/0x350
[  291.378460][T13854]  ? __alloc_skb+0x1db/0x7a0
[  291.378474][T13854]  __alloc_skb+0x1db/0x7a0
[  291.378488][T13854]  tcp_stream_alloc_skb+0x3f/0x580
[  291.378501][T13854]  ? __asan_memset+0x22/0x50
[  291.378514][T13854]  tcp_connect+0x1646/0x54e0
[  291.378531][T13854]  ? lock_acquire+0x115/0x350
[  291.378541][T13854]  ? __pfx_tcp_connect+0x10/0x10
[  291.378550][T13854]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  291.378560][T13854]  ? kvm_clock_get_cycles+0x49/0x60
[  291.378574][T13854]  ? __asan_memset+0x22/0x50
[  291.378586][T13854]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  291.378604][T13854]  ? inet6_hash_connect+0xeb/0x170
[  291.378617][T13854]  tcp_v6_connect+0x14ed/0x1cf0
[  291.378626][T13854]  ? tcp_sendmsg_locked+0x4d3d/0x5640
[  291.378636][T13854]  ? tcp_sendmsg+0x2f/0x50
[  291.378651][T13854]  ? __pfx_tcp_v6_connect+0x10/0x10
[  291.378665][T13854]  __inet_stream_connect+0x258/0xe00
[  291.378680][T13854]  ? __pfx___inet_stream_connect+0x10/0x10
[  291.378689][T13854]  ? __kasan_kmalloc+0x93/0xb0
[  291.378700][T13854]  ? __kmalloc_cache_noprof+0x321/0x600
[  291.378712][T13854]  ? __kmalloc_cache_noprof+0x14d/0x600
[  291.378723][T13854]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  291.378736][T13854]  tcp_sendmsg_fastopen+0x3af/0x5f0
[  291.378749][T13854]  tcp_sendmsg_locked+0x4d3d/0x5640
[  291.378763][T13854]  ? look_up_lock_class+0x57/0x110
[  291.378774][T13854]  ? register_lock_class+0x31/0x2e0
[  291.378784][T13854]  ? __lock_acquire+0x6df/0x2e50
[  291.378801][T13854]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  291.378815][T13854]  ? tcp_sendmsg+0x21/0x50
[  291.378826][T13854]  ? __local_bh_enable_ip+0xd6/0x140
[  291.378837][T13854]  tcp_sendmsg+0x2f/0x50
[  291.378847][T13854]  ? __pfx_inet6_sendmsg+0x10/0x10
[  291.378856][T13854]  sock_sendmsg_nosec+0x90/0x180
[  291.378867][T13854]  __sys_sendto+0x408/0x5a0
[  291.378879][T13854]  ? __pfx_eprobe_trigger_func+0x10/0x10
[  291.378892][T13854]  ? __pfx___sys_sendto+0x10/0x10
[  291.378918][T13854]  __x64_sys_sendto+0xde/0x100
[  291.378930][T13854]  do_syscall_64+0x166/0x520
[  291.378941][T13854]  ? trace_irq_disable+0x3b/0x140
[  291.378948][T13854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.378959][T13854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.378967][T13854] RIP: 0033:0x7f686819e159
[  291.378976][T13854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.378983][T13854] RSP: 002b:00007f6869017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  291.378993][T13854] RAX: ffffffffffffffda RBX: 00007f6868425fa0 RCX: 00007f686819e159
[  291.378999][T13854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  291.379003][T13854] RBP: 00007f686823506b R08: 00002000000001c0 R09: 000000000000001c
[  291.379008][T13854] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000
[  291.379013][T13854] R13: 00007f6868426038 R14: 00007f6868425fa0 R15: 00007ffc58ce3fb8
[  291.379025][T13854]  </TASK>
[  291.454916][    C1] usb 3-1: received EP1 urb->status = -2
[  291.454965][   T51] usb 3-1: unable to init card! (ret=-110)
[  291.455307][   T51] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  291.483285][   T51] usb 3-1: USB disconnect, device number 52
[  291.539796][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3212'.
[  291.571534][T13860] overlay: filesystem on ./file0 not supported as upperdir
[  291.584501][T13862] syzkaller0: entered promiscuous mode
[  291.586370][T13862] syzkaller0: entered allmulticast mode
[  291.747761][T13869] loop3: detected capacity change from 0 to 2048
[  291.763264][T13869] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  291.774834][T13869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.829811][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'.
[  291.965197][T13880] netlink: 'syz.1.3224': attribute type 1 has an invalid length.
[  291.973979][T13880] netlink: 'syz.1.3224': attribute type 2 has an invalid length.
[  292.018811][T13882] syzkaller0: entered promiscuous mode
[  292.021253][T13882] syzkaller0: entered allmulticast mode
[  292.297129][T13899] overlay: filesystem on ./file0 not supported as upperdir
[  292.329074][T13903] loop2: detected capacity change from 0 to 256
[  292.644509][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'.
[  293.130616][   T51] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  293.242961][T13938] netlink: 'syz.1.3252': attribute type 21 has an invalid length.
[  293.243250][T13938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3252'.
[  293.282906][   T51] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  293.284051][   T51] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  293.284066][   T51] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  293.284079][   T51] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  293.284092][   T51] usb 4-1: config 1 has no interface number 0
[  293.284119][   T51] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  293.284134][   T51] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  293.284186][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.292499][   T51] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  293.317760][T13940] loop1: detected capacity change from 0 to 1024
[  293.343246][T13940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.372362][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.422024][T13944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.428915][T13943] tipc: Disabling bearer <eth:syzkaller0>
[  293.496705][T13946] openvswitch: netlink: IP tunnel TTL not specified.
[  293.498022][   T51] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  293.520566][T13946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.850679][T13963] loop2: detected capacity change from 0 to 1024
[  293.854298][T13963] EXT4-fs: Ignoring removed nomblk_io_submit option
[  293.862889][T13963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.867473][T13963] ext4 filesystem being mounted at /1048/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.896891][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  293.913112][    T9] usb 4-1: USB disconnect, device number 9
[  293.913969][    T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  294.029248][T13969] loop2: detected capacity change from 0 to 8192
[  294.247048][T13976] loop2: detected capacity change from 0 to 4096
[  294.267106][T13976] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  294.279036][T13976] ntfs3(loop2): Failed to load $Extend (-22).
[  294.279088][T13976] ntfs3(loop2): Failed to initialize $Extend.
[  294.770594][   T51] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  294.951261][   T51] usb 3-1: New USB device found, idVendor=1199, idProduct=6856, bcdDevice= 8.c1
[  294.953075][   T51] usb 3-1: config 3 has an invalid interface number: 5 but max is 0
[  294.953093][   T51] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  294.953107][   T51] usb 3-1: config 3 has no interface number 0
[  294.953127][   T51] usb 3-1: config 3 interface 5 has no altsetting 0
[  294.955539][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.955554][   T51] usb 3-1: Product: syz
[  294.955563][   T51] usb 3-1: Manufacturer: syz
[  294.955574][   T51] usb 3-1: SerialNumber: syz
[  295.171590][   T51] sierra 3-1:3.5: Sierra USB modem converter detected
[  295.177634][   T51] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  295.179413][   T51] usb 3-1: USB disconnect, device number 53
[  295.185248][   T51] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  295.185530][   T51] sierra 3-1:3.5: device disconnected
[  295.768015][   T33] audit: type=1326 audit(1790262930.661:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.3281" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdded9e159 code=0x0
[  296.197391][T14019] loop2: detected capacity change from 0 to 256
[  296.760328][T14027] loop1: detected capacity change from 0 to 512
[  297.098588][T14035] loop1: detected capacity change from 0 to 8192
[  297.225842][T14047] loop2: detected capacity change from 0 to 2048
[  297.244272][T14047] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  297.250048][T14047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.671394][T14051] loop1: detected capacity change from 0 to 32768
[  297.680163][T14051] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3303 (14051)
[  297.695721][T14051] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.695783][T14051] BTRFS info (device loop1): using sha256 checksum algorithm
[  297.769506][T14051] BTRFS info (device loop1): enabling ssd optimizations
[  297.772688][T14051] BTRFS info (device loop1): turning on async discard
[  297.775621][T14051] BTRFS info (device loop1): enabling free space tree
[  297.776428][T14059] loop2: detected capacity change from 0 to 40427
[  297.783719][T14059] F2FS-fs (loop2): invalid crc value
[  297.846632][ T5599] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.862898][T14059] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  297.904765][T14059] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  297.908227][T14059] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  297.908286][T14059] F2FS-fs (loop2): Start checkpoint disabled!
[  298.023976][T14059] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  298.024309][T14059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  298.110741][T14086] loop1: detected capacity change from 0 to 128
[  298.164103][T14086] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  298.164229][T14086] hpfs: filesystem error: improperly stopped
[  298.164254][T14086] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  298.164261][T14086] hpfs: You really don't want any checks? You are crazy...
[  298.164266][T14086] hpfs: Code page index out of array
[  298.164270][T14086] hpfs: code page support is disabled
[  298.164323][T14086] hpfs: hpfs_map_4sectors(): unaligned read
[  298.164356][T14086] hpfs: hpfs_map_4sectors(): unaligned read
[  298.164360][T14086] hpfs: filesystem error: unable to find root dir
[  298.175545][T14086] hpfs: hpfs_map_4sectors(): unaligned read
[  298.515277][T14099] loop2: detected capacity change from 0 to 4096
[  298.531200][T14099] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  298.549827][T14099] ntfs3(loop2): Failed to load $Extend (-22).
[  298.549882][T14099] ntfs3(loop2): Failed to initialize $Extend.
[  298.579665][T14099] ntfs3: Cannot use different iocharset when remounting!
[  298.653817][T14108] loop1: detected capacity change from 0 to 512
[  298.744230][T14113] loop2: detected capacity change from 0 to 2048
[  298.746745][T14113] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  298.747612][T14113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.373658][T14131] loop1: detected capacity change from 0 to 65536
[  299.375869][ T1293] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  299.430251][T14131] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  299.448437][T14131] XFS (loop1): Ending clean mount
[  299.455338][T14133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3335 (14133)
[  299.463112][T14133] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.463191][T14133] BTRFS info (device loop3): using crc32c checksum algorithm
[  299.508391][ T5599] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  299.521832][ T1293] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  299.522836][ T1293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.522864][ T1293] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  299.522882][ T1293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.576016][T14133] BTRFS info (device loop3): enabling ssd optimizations
[  299.576060][T14133] BTRFS info (device loop3): turning on flush-on-commit
[  299.576093][T14133] BTRFS info (device loop3): enabling free space tree
[  299.576118][T14133] BTRFS info (device loop3): enabling auto defrag
[  299.576189][T14133] BTRFS info (device loop3): use lzo compression, level 1
[  299.576221][T14133] BTRFS info (device loop3): max_inline set to 4096
[  299.966204][ T1293] dvb_ttusb_budget: ttusb_init_controller: error
[  299.966267][ T1293] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  300.093220][T12025] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  300.106916][ T1293] DVB: Unable to find symbol stv0299_attach()
[  300.169294][ T1293] DVB: Unable to find symbol tda8083_attach()
[  300.169344][ T1293] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  300.268451][T14161] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.289022][T14161] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  300.296297][T14161] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  300.296463][T14161] EXT4-fs (loop1): orphan cleanup on readonly fs
[  300.299712][T14161] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.3336: Invalid block bitmap block 0 in block_group 0
[  300.299730][T14161] loop1: lost filesystem error report for type 5 error -117
[  300.303770][T14161] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.3336: Invalid block bitmap block 0 in block_group 0
[  300.303786][T14161] loop1: lost filesystem error report for type 5 error -117
[  300.303960][T14161] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.3336: Invalid block bitmap block 0 in block_group 0
[  300.303972][T14161] loop1: lost filesystem error report for type 5 error -117
[  300.304203][T14161] Quota error (device loop1): write_blk: dquota write failed
[  300.304241][T14161] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  300.304261][T14161] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3336: Failed to acquire dquot type 1
[  300.304271][T14161] loop1: lost filesystem error report for type 5 error -28
[  300.306554][T14161] EXT4-fs (loop1): 1 orphan inode deleted
[  300.310380][    C1] EXT4-fs (loop1): error count since last fsck: 4
[  300.310389][    C1] EXT4-fs (loop1): last error at time 1790262935: ext4_acquire_dquot:7069
[  300.471052][ T1120] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  300.471113][ T1120] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u10:10: Failed to release dquot type 1
[  300.471159][ T1120] loop1: lost filesystem error report for type 5 error -117
[  300.492719][T14161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  301.038911][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.370690][ T2019] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  301.410479][   T51] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  301.520624][ T2019] usb 4-1: Using ep0 maxpacket: 32
[  301.523804][ T2019] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  301.529711][ T2019] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  301.534370][ T2019] usb 4-1: config 0 has no interface number 0
[  301.539163][ T2019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.542905][ T2019] usb 4-1: Product: syz
[  301.544783][ T2019] usb 4-1: Manufacturer: syz
[  301.546698][ T2019] usb 4-1: SerialNumber: syz
[  301.551654][ T2019] usb 4-1: config 0 descriptor??
[  301.581287][   T51] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  301.585405][   T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.585494][   T51] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  301.596292][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.596341][   T51] usb 2-1: Product: syz
[  301.596612][   T51] usb 2-1: Manufacturer: syz
[  301.596620][   T51] usb 2-1: SerialNumber: syz
[  301.872224][ T1293] usb 3-1: USB disconnect, device number 54
[  302.034337][T14181] FAULT_INJECTION: forcing a failure.
[  302.034337][T14181] name failslab, interval 1, probability 0, space 0, times 0
[  302.034406][T14181] CPU: 0 UID: 0 PID: 14181 Comm: syz.2.3343 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  302.034461][T14181] Tainted: [L]=SOFTLOCKUP
[  302.034467][T14181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.034476][T14181] Call Trace:
[  302.034481][T14181]  <TASK>
[  302.034486][T14181]  dump_stack_lvl+0xe8/0x150
[  302.034504][T14181]  should_fail_ex+0x410/0x560
[  302.034522][T14181]  should_failslab+0xa8/0x100
[  302.034534][T14181]  __kmalloc_noprof+0xfe/0x720
[  302.034547][T14181]  ? __list_lru_init+0xba/0x5d0
[  302.034556][T14181]  ? __list_lru_init+0xba/0x5d0
[  302.034567][T14181]  __list_lru_init+0xba/0x5d0
[  302.034579][T14181]  sget_fc+0xf41/0x1a40
[  302.034592][T14181]  ? __pfx_afs_dynroot_test_super+0x10/0x10
[  302.034607][T14181]  ? __pfx_afs_set_super+0x10/0x10
[  302.034619][T14181]  ? __pfx_sget_fc+0x10/0x10
[  302.034629][T14181]  ? __kasan_kmalloc+0x93/0xb0
[  302.034639][T14181]  ? __kmalloc_cache_noprof+0x321/0x600
[  302.034650][T14181]  ? __kmalloc_cache_noprof+0x14d/0x600
[  302.034661][T14181]  ? afs_get_tree+0x3b9/0x12c0
[  302.034672][T14181]  afs_get_tree+0x725/0x12c0
[  302.034682][T14181]  ? apparmor_capable+0x126/0x170
[  302.034694][T14181]  vfs_get_tree+0x92/0x2a0
[  302.034712][T14181]  do_new_mount+0x319/0xdc0
[  302.034731][T14181]  ? __pfx_do_new_mount+0x10/0x10
[  302.034758][T14181]  ? ns_capable+0x89/0xe0
[  302.034778][T14181]  ? path_mount+0x647/0x1050
[  302.034795][T14181]  ? user_path_at+0xd4/0x160
[  302.034816][T14181]  __se_sys_mount+0x31d/0x420
[  302.034829][T14181]  ? __pfx___se_sys_mount+0x10/0x10
[  302.034840][T14181]  ? trace_syscall_enter+0x58/0x110
[  302.034850][T14181]  ? rcu_is_watching+0x16/0xb0
[  302.034858][T14181]  ? trace_syscall_enter+0x58/0x110
[  302.034865][T14181]  ? __x64_sys_mount+0x20/0xc0
[  302.034875][T14181]  do_syscall_64+0x166/0x520
[  302.034887][T14181]  ? trace_irq_disable+0x3b/0x140
[  302.034895][T14181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.034906][T14181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.034915][T14181] RIP: 0033:0x7f6d2cf9e159
[  302.034925][T14181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.034933][T14181] RSP: 002b:00007f6d2df42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  302.034942][T14181] RAX: ffffffffffffffda RBX: 00007f6d2d225fa0 RCX: 00007f6d2cf9e159
[  302.034950][T14181] RDX: 00002000000002c0 RSI: 0000200000000180 RDI: 0000000000000000
[  302.034955][T14181] RBP: 00007f6d2d03506b R08: 0000200000000200 R09: 0000000000000000
[  302.034961][T14181] R10: 0000000002000400 R11: 0000000000000246 R12: 0000000000000000
[  302.034967][T14181] R13: 00007f6d2d226038 R14: 00007f6d2d225fa0 R15: 00007ffc31a56368
[  302.034981][T14181]  </TASK>
[  302.349682][T14185] set_capacity_and_notify: 2 callbacks suppressed
[  302.351341][T14185] loop2: detected capacity change from 0 to 32768
[  302.353356][T14185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3345 (14185)
[  302.365818][T14185] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  302.365869][T14185] BTRFS info (device loop2): using sha256 checksum algorithm
[  302.374794][ T2019] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  302.374852][ T2019] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  302.383624][ T2019] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  302.383843][ T2019] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  302.399032][ T2019] usb 4-1: USB disconnect, device number 10
[  302.452804][T14185] BTRFS info (device loop2): enabling ssd optimizations
[  302.452859][T14185] BTRFS info (device loop2): turning on async discard
[  302.452968][T14185] BTRFS info (device loop2): enabling free space tree
[  302.488197][ T5591] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  302.960707][T14209] CIFS: Attempting to mount //127.0.0.1/share
[  303.094443][T14209] CIFS: VFS: Error connecting to socket. Aborting operation.
[  303.094524][T14209] CIFS: VFS: cifs_mount failed w/return code = -111
[  303.177184][T14215] loop3: detected capacity change from 0 to 1024
[  303.215179][   T33] audit: type=1800 audit(1790262938.111:58): pid=14215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3351" name="file1" dev="loop3" ino=20 res=0 errno=0
[  303.641863][ T5655] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  303.685923][T14227] loop2: detected capacity change from 0 to 512
[  303.794500][ T5655] usb 4-1: Using ep0 maxpacket: 32
[  303.797921][ T5655] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  303.807976][ T5655] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  303.808035][ T5655] usb 4-1: config 0 has no interface number 0
[  303.818208][ T5655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.818264][ T5655] usb 4-1: Product: syz
[  303.824303][ T5655] usb 4-1: Manufacturer: syz
[  303.827314][ T5655] usb 4-1: SerialNumber: syz
[  303.833983][ T5655] usb 4-1: config 0 descriptor??
[  303.977585][T14237] loop2: detected capacity change from 0 to 256
[  304.003801][T14237] FAT-fs (loop2): unable to read block(103987194760) for building NFS inode
[  304.095014][T14239] loop2: detected capacity change from 0 to 1024
[  304.183073][   T51] snd-usb-caiaq 2-1:1.0: can't set alt interface.
[  304.183163][   T51] usb 2-1: unable to init card! (ret=-5)
[  304.183662][   T51] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  304.206623][   T51] usb 2-1: USB disconnect, device number 39
[  304.278654][T14245] CIFS: Attempting to mount //127.0.0.1/share
[  304.392905][T14251] overlayfs: failed to resolve './bus': -2
[  304.657934][ T5655] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  304.657979][ T5655] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  304.667900][ T5655] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  304.671693][ T5655] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  304.678911][ T5655] usb 4-1: USB disconnect, device number 11
[  305.116164][T14245] CIFS: VFS: Error connecting to socket. Aborting operation.
[  305.119476][T14245] CIFS: VFS: cifs_mount failed w/return code = -4
[  305.512087][T14281] CIFS: Attempting to mount //127.0.0.1/share
[  305.515334][T14283] loop1: detected capacity change from 0 to 256
[  305.515973][T14283] exfat: Deprecated parameter 'namecase'
[  305.515993][T14283] exfat: Deprecated parameter 'utf8'
[  305.516482][T14281] CIFS: VFS: Error connecting to socket. Aborting operation.
[  305.516503][T14281] CIFS: VFS: cifs_mount failed w/return code = -111
[  305.519536][T14283] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  305.591328][   T33] audit: type=1800 audit(1790262940.491:59): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3385" name="file1" dev="loop1" ino=1048671 res=0 errno=0
[  306.061797][T14304] loop2: detected capacity change from 0 to 512
[  306.435825][T14322] loop1: detected capacity change from 0 to 256
[  306.441872][T14322] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  306.447632][T14322] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  306.464818][T14321] FAULT_INJECTION: forcing a failure.
[  306.464818][T14321] name failslab, interval 1, probability 0, space 0, times 0
[  306.464871][T14321] CPU: 1 UID: 0 PID: 14321 Comm: syz.3.3402 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  306.464900][T14321] Tainted: [L]=SOFTLOCKUP
[  306.464905][T14321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.464911][T14321] Call Trace:
[  306.464915][T14321]  <TASK>
[  306.464920][T14321]  dump_stack_lvl+0xe8/0x150
[  306.464939][T14321]  should_fail_ex+0x410/0x560
[  306.464957][T14321]  should_failslab+0xa8/0x100
[  306.464971][T14321]  __kmalloc_cache_noprof+0xa3/0x600
[  306.464985][T14321]  ? snd_seq_port_use_ptr+0x29/0x260
[  306.464994][T14321]  ? snd_seq_port_connect+0x6b/0x3a0
[  306.465003][T14321]  ? snd_seq_port_connect+0x6b/0x3a0
[  306.465013][T14321]  snd_seq_port_connect+0x6b/0x3a0
[  306.465020][T14321]  ? snd_seq_port_use_ptr+0x29/0x260
[  306.465027][T14321]  ? snd_seq_port_use_ptr+0x29/0x260
[  306.465035][T14321]  ? snd_seq_port_use_ptr+0x229/0x260
[  306.465043][T14321]  snd_seq_ioctl_subscribe_port+0x351/0x790
[  306.465055][T14321]  ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10
[  306.465064][T14321]  ? clientptr+0x17/0x160
[  306.465075][T14321]  ? clientptr+0x17/0x160
[  306.465084][T14321]  ? clientptr+0x17/0x160
[  306.465125][T14321]  snd_seq_oss_midi_open+0x558/0x890
[  306.465140][T14321]  ? __pfx_snd_seq_oss_midi_open+0x10/0x10
[  306.465155][T14321]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  306.465186][T14321]  ? snd_seq_oss_midi_get_addr+0x19e/0x260
[  306.465199][T14321]  snd_seq_oss_synth_setup_midi+0x12d/0x530
[  306.465215][T14321]  snd_seq_oss_open+0x94f/0xf40
[  306.465227][T14321]  ? __pfx_snd_seq_oss_open+0x10/0x10
[  306.465249][T14321]  ? rcu_is_watching+0x16/0xb0
[  306.465260][T14321]  ? trace_contention_end+0x3d/0x140
[  306.465277][T14321]  ? __pfx___mutex_lock+0x10/0x10
[  306.465290][T14321]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[  306.465298][T14321]  ? __pfx_free_devinfo+0x10/0x10
[  306.465306][T14321]  ? do_raw_spin_unlock+0x4d/0x200
[  306.465320][T14321]  ? soundcore_open+0x2da/0x490
[  306.465333][T14321]  odev_open+0x67/0xa0
[  306.465343][T14321]  chrdev_open+0x4d9/0x600
[  306.465352][T14321]  ? __pfx_chrdev_open+0x10/0x10
[  306.465360][T14321]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  306.465375][T14321]  ? __pfx_chrdev_open+0x10/0x10
[  306.465383][T14321]  do_dentry_open+0x816/0x1380
[  306.465395][T14321]  vfs_open+0x3b/0x340
[  306.465403][T14321]  ? path_openat+0x1428/0x1d60
[  306.465415][T14321]  path_openat+0x1443/0x1d60
[  306.465433][T14321]  do_file_open+0x23e/0x4a0
[  306.465446][T14321]  ? __pfx_do_file_open+0x10/0x10
[  306.465465][T14321]  ? _raw_spin_unlock+0x28/0x50
[  306.465474][T14321]  ? alloc_fd+0x651/0x6c0
[  306.465488][T14321]  do_sys_openat2+0x115/0x200
[  306.465497][T14321]  ? __trace_event_discard_commit+0x59/0x70
[  306.465505][T14321]  ? __pfx_do_sys_openat2+0x10/0x10
[  306.465514][T14321]  ? trace_syscall_enter+0x58/0x110
[  306.465527][T14321]  __x64_sys_openat+0x138/0x170
[  306.465538][T14321]  do_syscall_64+0x166/0x520
[  306.465549][T14321]  ? trace_irq_disable+0x3b/0x140
[  306.465556][T14321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.465566][T14321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.465574][T14321] RIP: 0033:0x7f686819e159
[  306.465583][T14321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.465590][T14321] RSP: 002b:00007f6869017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  306.465600][T14321] RAX: ffffffffffffffda RBX: 00007f6868425fa0 RCX: 00007f686819e159
[  306.465606][T14321] RDX: 0000000000080d02 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  306.465611][T14321] RBP: 00007f686823506b R08: 0000000000000000 R09: 0000000000000000
[  306.465616][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.465621][T14321] R13: 00007f6868426038 R14: 00007f6868425fa0 R15: 00007ffc58ce3fb8
[  306.465633][T14321]  </TASK>
[  306.807218][T14342] loop2: detected capacity change from 0 to 256
[  306.823353][T14342] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  306.972165][T14352] netlink: 'syz.3.3417': attribute type 1 has an invalid length.
[  307.087507][T14358] loop3: detected capacity change from 0 to 256
[  307.130844][    T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  307.280982][    T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  307.282113][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  307.282131][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  307.286192][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.286207][    T9] usb 3-1: Product: syz
[  307.286216][    T9] usb 3-1: Manufacturer: syz
[  307.286225][    T9] usb 3-1: SerialNumber: syz
[  307.302051][    T9] usb 3-1: config 0 descriptor??
[  307.302996][T14349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  307.303201][T14349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  307.359358][T14364] loop1: detected capacity change from 0 to 2048
[  307.381617][T14365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.383745][T14364] NILFS (loop1): bad btree root (ino=2): level = 0, flags = 0x7, nchildren = 0
[  307.383857][T14364] NILFS (loop1): error -5 getting root inode
[  307.512531][T14349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  307.512713][T14349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  307.691616][ T1293] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  307.700319][ T1293] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  307.918971][    T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  308.177861][T14381] loop1: detected capacity change from 0 to 65536
[  308.197620][T14381] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  308.214987][T14381] XFS (loop1): Ending clean mount
[  308.328568][ T5599] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  308.343256][    T9] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  308.346497][    T9] usb 3-1: USB disconnect, device number 55
[  308.632227][T14411] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  308.632227][T14411] 
[  308.636764][T14411] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  308.641458][T14411] CIFS mount error: No usable UNC path provided in device string!
[  308.641458][T14411] 
[  308.645973][T14411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  308.775447][T14413] loop1: detected capacity change from 0 to 32768
[  308.784382][T14413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3442 (14413)
[  308.791124][T14413] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  308.795492][T14413] BTRFS info (device loop1): using crc32c checksum algorithm
[  309.012837][T14413] BTRFS info (device loop1): enabling ssd optimizations
[  309.016743][T14413] BTRFS info (device loop1): turning on flush-on-commit
[  309.016784][T14413] BTRFS info (device loop1): enabling free space tree
[  309.016809][T14413] BTRFS info (device loop1): enabling auto defrag
[  309.016835][T14413] BTRFS info (device loop1): use lzo compression, level 1
[  309.016861][T14413] BTRFS info (device loop1): max_inline set to 4096
[  309.032023][T14409] CIFS: Attempting to mount //127.0.0.1/share
[  309.054001][T14409] CIFS: VFS: Error connecting to socket. Aborting operation.
[  309.056434][T14409] CIFS: VFS: cifs_mount failed w/return code = -111
[  309.326634][ T5599] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  309.460825][T14438] overlayfs: missing 'lowerdir'
[  310.264298][T14475] loop1: detected capacity change from 0 to 512
[  310.288845][T14475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.294541][T14475] ext4 filesystem being mounted at /1218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.305383][T14475] EXT4-fs error (device loop1): ext4_xattr_block_find:1885: inode #12: comm syz.1.3458: corrupted xattr block 6: invalid header
[  310.344386][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.419867][T14484] Bluetooth: hci0: invalid length 0, exp 2 for type 25
[  311.029546][T14501] loop2: detected capacity change from 0 to 40427
[  311.037382][T14501] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  311.037426][T14501] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  311.044926][T14501] F2FS-fs (loop2): invalid crc value
[  311.101555][T14501] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  311.112566][T14501] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  311.115607][T14501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  311.167858][ T5591] syz-executor: attempt to access beyond end of device
[  311.167858][ T5591] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  311.172738][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  311.172761][ T5591] Tainted: [L]=SOFTLOCKUP
[  311.172766][ T5591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.172775][ T5591] Call Trace:
[  311.172780][ T5591]  <TASK>
[  311.172786][ T5591]  dump_stack_lvl+0xe8/0x150
[  311.172812][ T5591]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  311.172832][ T5591]  f2fs_write_end_bio+0x1211/0x16e0
[  311.172853][ T5591]  ? blkg_put+0x22/0x240
[  311.172878][ T5591]  __submit_merged_bio+0x258/0x6a0
[  311.172893][ T5591]  ? rcu_is_watching+0x16/0xb0
[  311.172913][ T5591]  __submit_merged_write_cond+0x3c9/0x4e0
[  311.172934][ T5591]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  311.172965][ T5591]  f2fs_write_data_pages+0x2a27/0x36f0
[  311.172982][ T5591]  ? is_bpf_text_address+0x292/0x2b0
[  311.173021][ T5591]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  311.173037][ T5591]  ? is_bpf_text_address+0x26/0x2b0
[  311.173108][ T5591]  ? arch_stack_walk+0xfb/0x150
[  311.173143][ T5591]  ? add_lock_to_list+0xc7/0x100
[  311.173161][ T5591]  ? lockdep_unlock+0x5c/0xd0
[  311.173178][ T5591]  ? __lock_acquire+0x14b9/0x2e50
[  311.173209][ T5591]  ? do_raw_spin_lock+0x12b/0x2f0
[  311.173231][ T5591]  ? do_raw_spin_unlock+0x4d/0x200
[  311.173249][ T5591]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  311.173266][ T5591]  do_writepages+0x338/0x560
[  311.173293][ T5591]  ? do_raw_spin_unlock+0x4d/0x200
[  311.173314][ T5591]  filemap_fdatawrite+0x1e9/0x2f0
[  311.173331][ T5591]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  311.173380][ T5591]  ? do_raw_spin_unlock+0x4d/0x200
[  311.173403][ T5591]  f2fs_sync_dirty_inodes+0x30e/0x830
[  311.173431][ T5591]  f2fs_write_checkpoint+0xa3d/0x2710
[  311.173448][ T5591]  ? __lock_acquire+0x6df/0x2e50
[  311.173482][ T5591]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  311.173533][ T5591]  kill_f2fs_super+0x2dd/0x700
[  311.173557][ T5591]  ? __pfx_kill_f2fs_super+0x10/0x10
[  311.173582][ T5591]  ? call_rcu+0x64d/0x8b0
[  311.173597][ T5591]  ? lockdep_hardirqs_on+0x7b/0x110
[  311.173626][ T5591]  deactivate_locked_super+0xbc/0x110
[  311.173645][ T5591]  cleanup_mnt+0x3d3/0x460
[  311.173668][ T5591]  task_work_run+0x1d9/0x270
[  311.173686][ T5591]  ? __pfx_task_work_run+0x10/0x10
[  311.173706][ T5591]  exit_to_user_mode_loop+0x204/0x770
[  311.173721][ T5591]  ? rcu_is_watching+0x16/0xb0
[  311.173739][ T5591]  do_syscall_64+0x328/0x520
[  311.173756][ T5591]  ? trace_irq_disable+0x3b/0x140
[  311.173769][ T5591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.173786][ T5591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.173800][ T5591] RIP: 0033:0x7f6d2cf9f397
[  311.173813][ T5591] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  311.173825][ T5591] RSP: 002b:00007ffc31a555d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  311.173841][ T5591] RAX: 0000000000000000 RBX: 00007f6d2d0344bb RCX: 00007f6d2cf9f397
[  311.173851][ T5591] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31a55690
[  311.173859][ T5591] RBP: 00007ffc31a55690 R08: 00007ffc31a56690 R09: 00000000ffffffff
[  311.173867][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31a56720
[  311.173876][ T5591] R13: 00007f6d2d0344bb R14: 000000000004bef5 R15: 00007ffc31a56760
[  311.173896][ T5591]  </TASK>
[  311.174184][ T5591] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  311.466892][T14511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3472'.
[  311.860533][ T5655] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  312.021429][ T5655] usb 2-1: Using ep0 maxpacket: 32
[  312.021942][ T5655] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  312.023465][ T5655] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  312.023481][ T5655] usb 2-1: config 0 has no interface number 0
[  312.023503][ T5655] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  312.023520][ T5655] usb 2-1: config 0 interface 85 has no altsetting 0
[  312.027156][ T5655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.027171][ T5655] usb 2-1: Product: syz
[  312.027180][ T5655] usb 2-1: Manufacturer: syz
[  312.027188][ T5655] usb 2-1: SerialNumber: syz
[  312.030118][ T5655] usb 2-1: config 0 descriptor??
[  312.266435][T14534] loop2: detected capacity change from 0 to 32768
[  312.273451][T14534] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3482 (14534)
[  312.283958][T14534] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  312.289284][T14534] BTRFS info (device loop2): using crc32c checksum algorithm
[  312.331174][T14534] BTRFS info (device loop2): enabling ssd optimizations
[  312.331216][T14534] BTRFS info (device loop2): turning on flush-on-commit
[  312.331259][T14534] BTRFS info (device loop2): enabling free space tree
[  312.331284][T14534] BTRFS info (device loop2): enabling auto defrag
[  312.331343][T14534] BTRFS info (device loop2): use lzo compression, level 1
[  312.331379][T14534] BTRFS info (device loop2): max_inline set to 4096
[  312.411556][ T5591] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  312.434349][ T6670] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  312.445818][ T5655] appletouch 2-1:0.85: Geyser mode initialized.
[  312.472810][ T5655] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input28
[  312.580799][ T6670] usb 4-1: Using ep0 maxpacket: 32
[  312.583425][ T6670] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  312.587667][ T6670] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  312.590975][ T6670] usb 4-1: config 0 has no interface number 0
[  312.593517][ T6670] usb 4-1: config 0 interface 184 has no altsetting 0
[  312.598441][ T6670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.601969][ T6670] usb 4-1: Product: syz
[  312.603719][ T6670] usb 4-1: Manufacturer: syz
[  312.605885][ T6670] usb 4-1: SerialNumber: syz
[  312.616044][ T6670] usb 4-1: config 0 descriptor??
[  312.656373][ T1293] usb 2-1: USB disconnect, device number 40
[  312.704648][ T1293] appletouch 2-1:0.85: input: appletouch disconnected
[  313.643899][ T6670] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  313.647944][ T6670] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  313.655886][ T6670] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  313.660232][ T6670] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  313.660287][ T6670] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  313.660313][ T6670] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  313.660578][ T6670] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  313.681186][ T6670] usb 4-1: USB disconnect, device number 12
[  313.975695][T14598] loop2: detected capacity change from 0 to 32768
[  313.994617][T14598] ERROR: (device loop2): diRead: i_ino != di_number
[  313.994617][T14598] 
[  314.077607][T14602] loop1: detected capacity change from 0 to 32768
[  314.081447][T14602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3505 (14602)
[  314.092111][T14602] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  314.095346][T14602] BTRFS info (device loop1): using sha256 checksum algorithm
[  314.141604][T14602] BTRFS info (device loop1): enabling ssd optimizations
[  314.144478][T14602] BTRFS info (device loop1): turning on async discard
[  314.147549][T14602] BTRFS info (device loop1): enabling free space tree
[  314.172359][T14602] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  314.172447][T14602] BTRFS error (device loop1 state M): nologreplay must be used with ro mount option
[  314.216865][ T5599] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  314.558585][T14639] loop1: detected capacity change from 0 to 2048
[  314.564860][T14639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.573437][T14639] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3515: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  314.589419][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.765517][T14648] loop1: detected capacity change from 0 to 32768
[  314.778912][T14648] add_index: next_index = 0.  Resetting!
[  314.779107][T14648] non-latin1 character 0x3ff found in JFS file name
[  314.779115][T14648] mount with iocharset=utf8 to access
[  315.120619][ T1293] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  315.146898][T14655] CIFS: Attempting to mount //127.0.0.1/share
[  315.482875][ T1293] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  315.499434][ T1293] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  315.499498][ T1293] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  315.656148][ T1293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.656259][ T1293] usb 2-1: Product: syz
[  315.656311][ T1293] usb 2-1: Manufacturer: syz
[  315.656341][ T1293] usb 2-1: SerialNumber: syz
[  315.812779][T14666] loop3: detected capacity change from 0 to 32768
[  315.816429][T14666] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3526 (14666)
[  315.920158][ T1293] usb 2-1: config 0 descriptor??
[  315.928907][T14650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  315.929024][T14650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  315.932974][T14666] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.932991][T14666] BTRFS info (device loop3): using crc32c checksum algorithm
[  315.934333][T14655] CIFS: VFS: cifs_mount failed w/return code = -112
[  316.005468][T14666] BTRFS info (device loop3): enabling ssd optimizations
[  316.005519][T14666] BTRFS info (device loop3): turning on flush-on-commit
[  316.005557][T14666] BTRFS info (device loop3): enabling free space tree
[  316.005582][T14666] BTRFS info (device loop3): enabling auto defrag
[  316.005591][T14666] BTRFS info (device loop3): use lzo compression, level 1
[  316.005599][T14666] BTRFS info (device loop3): max_inline set to 4096
[  316.116490][T12025] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.144592][T14650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  316.144718][T14650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  316.264127][T14681] loop2: detected capacity change from 0 to 32768
[  316.266853][T14681] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3527 (14681)
[  316.271103][T14681] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.271124][T14681] BTRFS info (device loop2): using crc32c checksum algorithm
[  316.320265][T14681] BTRFS info (device loop2): enabling ssd optimizations
[  316.320317][T14681] BTRFS info (device loop2): turning on flush-on-commit
[  316.320813][T14681] BTRFS info (device loop2): enabling free space tree
[  316.320822][T14681] BTRFS info (device loop2): enabling auto defrag
[  316.320829][T14681] BTRFS info (device loop2): use lzo compression, level 1
[  316.320836][T14681] BTRFS info (device loop2): max_inline set to 4096
[  316.463366][ T5591] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.550013][ T1293] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  316.691182][T14700] loop3: detected capacity change from 0 to 32768
[  316.702092][T14700] (syz.3.3528,14700,1):ocfs2_find_slot:490 ERROR: no free slots available!
[  316.706002][T14700] (syz.3.3528,14700,1):ocfs2_mount_volume:1750 ERROR: status = -22
[  316.729441][T14700] (syz.3.3528,14700,1):ocfs2_fill_super:1177 ERROR: status = -22
[  316.890405][  T128] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  316.955244][ T1293] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  316.963638][ T1293] usb 2-1: USB disconnect, device number 41
[  317.030795][ T5655] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  317.040652][  T128] usb 3-1: Using ep0 maxpacket: 32
[  317.043085][  T128] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  317.047923][  T128] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  317.051351][  T128] usb 3-1: config 0 has no interface number 0
[  317.051384][  T128] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  317.051403][  T128] usb 3-1: config 0 interface 85 has no altsetting 0
[  317.063350][  T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.066650][  T128] usb 3-1: Product: syz
[  317.066664][  T128] usb 3-1: Manufacturer: syz
[  317.066675][  T128] usb 3-1: SerialNumber: syz
[  317.074586][  T128] usb 3-1: config 0 descriptor??
[  317.168740][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  317.168806][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  317.181063][ T5655] usb 4-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f
[  317.182141][ T5655] usb 4-1: config 8 has an invalid interface number: 235 but max is 0
[  317.182152][ T5655] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  317.182159][ T5655] usb 4-1: config 8 has no interface number 0
[  317.182174][ T5655] usb 4-1: config 8 interface 235 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  317.182184][ T5655] usb 4-1: config 8 interface 235 has no altsetting 0
[  317.182203][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.186755][ T5655] hub 4-1:8.235: bad descriptor, ignoring hub
[  317.186766][ T5655] hub 4-1:8.235: probe with driver hub failed with error -5
[  317.187267][ T5655] keyspan 4-1:8.235: Keyspan - (without firmware) converter detected
[  317.702378][  T128] appletouch 3-1:0.85: Geyser mode initialized.
[  317.706832][  T128] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input29
[  317.904502][  T128] usb 3-1: USB disconnect, device number 56
[  317.926312][  T128] appletouch 3-1:0.85: input: appletouch disconnected
[  318.618123][T14730] loop2: detected capacity change from 0 to 2048
[  318.627269][T14730] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  318.718095][T14732] loop2: detected capacity change from 0 to 1024
[  318.725323][T14732] ext4: Bad value for 'stripe'
[  318.990476][ T5655] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  319.150470][ T5655] usb 3-1: Using ep0 maxpacket: 16
[  319.153206][ T5655] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  319.158480][ T5655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.158528][ T5655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.158572][ T5655] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  319.158591][ T5655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.159848][ T5655] usb 3-1: config 0 descriptor??
[  319.391662][T14734] loop1: detected capacity change from 0 to 512
[  319.417218][T14734] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.3543: Unrecognised inode hash code 255
[  319.417267][T14734] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3543: Corrupt directory, running e2fsck is recommended
[  319.448946][T14734] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  319.452924][T14734] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.3543: corrupted in-inode xattr: invalid ea_ino
[  319.458358][T14734] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  319.458757][T14734] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.3543: couldn't read orphan inode 15 (err -117)
[  319.462471][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  319.462486][    C1] EXT4-fs (loop1): initial error at time 1790262954: ext4_iget_extra_inode:5210: inode 15
[  319.462508][    C1] EXT4-fs (loop1): last error at time 1790262954: ext4_iget_extra_inode:5210: inode 15
[  319.478133][T14734] loop1: lost filesystem error report for type 5 error -117
[  319.479821][T14734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.497483][T14734] EXT4-fs error (device loop1): __ext4_remount:6872: comm syz.1.3543: Abort forced by user
[  319.498135][T14734] EXT4-fs (loop1): Remounting filesystem read-only
[  319.498149][T14734] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  319.529395][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.605515][ T5655] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input30
[  319.709870][ T5655] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  319.820951][ T1293] usb 3-1: USB disconnect, device number 57
[  319.860563][T14746] netlink: 'syz.1.3548': attribute type 1 has an invalid length.
[  319.894835][T14746] bond2: entered promiscuous mode
[  319.895146][T14746] 8021q: adding VLAN 0 to HW filter on device bond2
[  319.918244][T14746] 8021q: adding VLAN 0 to HW filter on device bond2
[  319.918478][T14746] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  319.918492][T14746] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  319.927583][T14746] bond2: (slave ip6gre1): making interface the new active one
[  319.927595][T14746] ip6gre1: entered promiscuous mode
[  319.932108][T14746] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  319.942072][ T5655] usb 4-1: USB disconnect, device number 13
[  319.942533][ T5655] keyspan 4-1:8.235: device disconnected
[  320.079625][T14754] loop3: detected capacity change from 0 to 256
[  320.090301][T14754] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  320.107849][   T33] audit: type=1800 audit(1790262955.001:60): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3551" name="file1" dev="loop3" ino=1048676 res=0 errno=0
[  320.125339][   T33] audit: type=1800 audit(1790262955.021:61): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3551" name="file1" dev="loop3" ino=1048676 res=0 errno=0
[  320.230424][ T5655] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  320.394697][ T5655] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  320.395954][ T5655] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.396001][ T5655] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  320.396056][ T5655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.410956][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  320.561063][   T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  320.565760][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  320.566664][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  320.574367][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.574418][   T10] usb 4-1: Product: syz
[  320.574842][   T10] usb 4-1: Manufacturer: syz
[  320.574934][   T10] usb 4-1: SerialNumber: syz
[  320.581252][   T10] usb 4-1: config 0 descriptor??
[  320.583922][T14756] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  320.584115][T14756] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  320.602452][ T1293] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  320.750424][ T1293] usb 3-1: Using ep0 maxpacket: 16
[  320.753421][ T1293] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  320.758423][ T1293] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  320.762704][ T1293] usb 3-1: config 0 has no interface number 0
[  320.767705][ T1293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.771041][ T1293] usb 3-1: Product: syz
[  320.772828][ T1293] usb 3-1: Manufacturer: syz
[  320.774810][ T1293] usb 3-1: SerialNumber: syz
[  320.779343][ T1293] usb 3-1: config 0 descriptor??
[  320.785941][ T1293] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  320.794216][T14756] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  320.795001][T14756] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  320.807358][ T5655] dvb_ttusb_budget: ttusb_init_controller: error
[  320.807406][ T5655] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  320.867724][ T5655] DVB: Unable to find symbol stv0299_attach()
[  320.908213][ T5655] DVB: Unable to find symbol tda8083_attach()
[  320.908343][ T5655] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  321.199283][   T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  321.389089][ T1293] gspca_spca1528: reg_w err -71
[  321.400150][   T10] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  321.404602][   T10] usb 4-1: USB disconnect, device number 14
[  321.410516][ T1293] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  321.414423][ T1293] usb 3-1: USB disconnect, device number 58
[  322.190528][ T1293] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  322.225341][T14774] loop2: detected capacity change from 0 to 32768
[  322.233331][T14774] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  322.246271][T14774] XFS (loop2): Ending clean mount
[  322.273411][ T5591] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  322.354140][ T1293] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  322.360950][ T1293] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  322.361032][ T1293] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  322.361083][ T1293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.587402][ T1293] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  322.611812][ T1293] usb 4-1: USB disconnect, device number 15
[  322.737069][T14784] loop2: detected capacity change from 0 to 32768
[  322.740320][T14784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3560 (14784)
[  322.755231][T14784] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  322.755458][T14784] BTRFS info (device loop2): using crc32c checksum algorithm
[  322.802024][T14784] BTRFS info (device loop2): enabling ssd optimizations
[  322.804923][T14784] BTRFS info (device loop2): turning on flush-on-commit
[  322.804992][T14784] BTRFS info (device loop2): enabling free space tree
[  322.805052][T14784] BTRFS info (device loop2): enabling auto defrag
[  322.805085][T14784] BTRFS info (device loop2): use lzo compression, level 1
[  322.805120][T14784] BTRFS info (device loop2): max_inline set to 4096
[  322.885699][ T5591] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  323.028553][ T2019] usb 2-1: USB disconnect, device number 42
[  323.250496][   T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  323.400609][ T1293] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  323.401513][   T10] usb 3-1: Using ep0 maxpacket: 16
[  323.401631][ T2019] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  323.403250][   T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  323.405398][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  323.405414][   T10] usb 3-1: config 0 has no interface number 0
[  323.408660][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.408676][   T10] usb 3-1: Product: syz
[  323.408686][   T10] usb 3-1: Manufacturer: syz
[  323.408695][   T10] usb 3-1: SerialNumber: syz
[  323.421864][   T10] usb 3-1: config 0 descriptor??
[  323.428256][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  323.561715][ T2019] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  323.563773][ T2019] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  323.563795][ T2019] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  323.567425][ T2019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.567436][ T2019] usb 2-1: Product: syz
[  323.567442][ T2019] usb 2-1: Manufacturer: syz
[  323.567447][ T2019] usb 2-1: SerialNumber: syz
[  323.572475][ T2019] usb 2-1: config 0 descriptor??
[  323.573696][T14804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  323.573880][T14804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  323.590636][ T1293] usb 4-1: Using ep0 maxpacket: 32
[  323.594166][ T1293] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  323.599595][ T1293] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  323.603819][ T1293] usb 4-1: config 0 has no interface number 0
[  323.611404][ T1293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.614716][ T1293] usb 4-1: Product: syz
[  323.616819][ T1293] usb 4-1: Manufacturer: syz
[  323.619575][ T1293] usb 4-1: SerialNumber: syz
[  323.623513][ T1293] usb 4-1: config 0 descriptor??
[  323.629192][ T1293] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  323.778929][T14804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  323.779320][T14804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  323.834268][ T1293] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  323.840503][ T1293] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  324.040848][   T10] gspca_spca1528: reg_w err -71
[  324.070512][   T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  324.074618][   T10] usb 3-1: USB disconnect, device number 59
[  324.184521][ T2019] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  324.234675][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  324.239829][ T1293] usb 4-1: USB disconnect, device number 16
[  324.242972][ T1293] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  324.246973][ T1293] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  324.247671][ T1293] quatech2 4-1:0.51: device disconnected
[  324.385217][ T2019] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  324.393206][ T2019] usb 2-1: USB disconnect, device number 43
[  324.974263][T14814] bond3: entered allmulticast mode
[  324.974544][T14814] 8021q: adding VLAN 0 to HW filter on device bond3
[  325.210560][  T128] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  325.285517][T14837] netlink: 'syz.2.3578': attribute type 2 has an invalid length.
[  325.304543][T14837] : entered promiscuous mode
[  325.350678][ T1293] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  325.371964][  T128] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00
[  325.372031][  T128] usb 4-1: no configurations
[  325.372061][  T128] usb 4-1: can't read configurations, error -22
[  325.458684][T14845] loop2: detected capacity change from 0 to 164
[  325.503056][ T1293] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  325.504408][ T1293] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.504481][ T1293] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  325.504532][ T1293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.526634][  T128] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  325.701377][  T128] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00
[  325.701496][  T128] usb 4-1: no configurations
[  325.701526][  T128] usb 4-1: can't read configurations, error -22
[  325.701699][  T128] usb usb4-port1: attempt power cycle
[  325.834920][T14853] loop2: detected capacity change from 0 to 32768
[  325.936558][ T1293] dvb_ttusb_budget: ttusb_init_controller: error
[  325.936617][ T1293] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  325.965630][ T1293] DVB: Unable to find symbol stv0299_attach()
[  325.984964][ T1293] DVB: Unable to find symbol tda8083_attach()
[  325.985028][ T1293] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  326.060478][  T128] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  326.081594][  T128] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00
[  326.081649][  T128] usb 4-1: no configurations
[  326.081680][  T128] usb 4-1: can't read configurations, error -22
[  326.185804][T14863] loop2: detected capacity change from 0 to 256
[  326.206714][T14863] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  326.220506][  T128] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  326.226712][   T33] audit: type=1800 audit(1790262961.121:62): pid=14863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3589" name="file1" dev="loop2" ino=1048677 res=0 errno=0
[  326.241727][  T128] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00
[  326.241799][  T128] usb 4-1: no configurations
[  326.241837][  T128] usb 4-1: can't read configurations, error -22
[  326.242025][  T128] usb usb4-port1: unable to enumerate USB device
[  326.489401][T14877] loop2: detected capacity change from 0 to 256
[  326.506177][T14877] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  326.524145][   T33] audit: type=1800 audit(1790262961.421:63): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3596" name="file1" dev="loop2" ino=1048678 res=0 errno=0
[  326.776532][T14889] loop2: detected capacity change from 0 to 4096
[  326.777601][T14889] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  326.796882][T14889] ntfs3(loop2): ino=19, mi_enum_attr
[  326.797222][T14889] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  326.997878][T14897] loop2: detected capacity change from 0 to 4096
[  327.420580][ T1293] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  327.570549][ T1293] usb 3-1: Using ep0 maxpacket: 32
[  327.573341][ T1293] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  327.577838][ T1293] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  327.577910][ T1293] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  327.577968][ T1293] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  327.578013][ T1293] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  327.578031][ T1293] usb 3-1: config 0 interface 0 has no altsetting 0
[  327.583823][ T1293] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  327.583841][ T1293] usb 3-1: Product: syz
[  327.583851][ T1293] usb 3-1: Manufacturer: syz
[  327.583861][ T1293] usb 3-1: SerialNumber: syz
[  327.587651][ T1293] usb 3-1: config 0 descriptor??
[  327.590655][ T1293] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  327.593053][ T1293] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  328.142934][ T1293] usb 2-1: USB disconnect, device number 44
[  328.740191][T14927] loop1: detected capacity change from 0 to 512
[  328.755123][T14927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  328.767477][T14927] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.3621: bad orphan inode 11
[  328.767526][T14927] loop1: lost filesystem error report for type 5 error -117
[  328.769416][T14927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.788680][T14927] CacheFiles: No cache directory specified
[  328.812999][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.040585][T14933] loop1: detected capacity change from 0 to 256
[  329.067133][T14933] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  329.080065][   T33] audit: type=1800 audit(1790262963.971:64): pid=14933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3623" name="file1" dev="loop1" ino=1048679 res=0 errno=0
[  329.521339][ T2019] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  329.628148][T14943] loop3: detected capacity change from 0 to 128
[  329.632302][T14943] ubifs: Bad value for 'compr'
[  329.671629][ T2019] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  329.676716][ T2019] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  329.676809][ T2019] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  329.676847][ T2019] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  329.692847][ T2019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.696192][ T2019] usb 2-1: Product: syz
[  329.698055][ T2019] usb 2-1: Manufacturer: syz
[  329.700109][ T2019] usb 2-1: SerialNumber: syz
[  329.747253][T14945] loop3: detected capacity change from 0 to 512
[  329.752062][T14945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  329.758116][T14945] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3629: bad orphan inode 11
[  329.758175][T14945] loop3: lost filesystem error report for type 5 error -117
[  329.774093][T14945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.778946][T14945] CacheFiles: No cache directory specified
[  329.810865][T12025] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.141163][    C0] usb 2-1: received EP1 urb->status = -2
[  330.143416][ T2019] usb 2-1: unable to init card! (ret=-110)
[  330.145891][ T2019] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  330.395982][T14941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.407172][ T5655] usb 2-1: USB disconnect, device number 45
[  330.947672][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.067045][T14964] set_capacity_and_notify: 1 callbacks suppressed
[  331.068149][T14964] loop1: detected capacity change from 0 to 2048
[  331.076153][T14964] EXT4-fs: Ignoring removed mblk_io_submit option
[  331.076263][T14964] EXT4-fs: Ignoring removed i_version option
[  331.117227][T14964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.158198][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.240519][ T5655] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  331.390559][ T5655] usb 4-1: Using ep0 maxpacket: 16
[  331.393600][ T5655] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  331.398888][ T5655] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  331.403559][ T5655] usb 4-1: config 0 has no interface number 0
[  331.408541][ T5655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.408757][ T5655] usb 4-1: Product: syz
[  331.408769][ T5655] usb 4-1: Manufacturer: syz
[  331.408779][ T5655] usb 4-1: SerialNumber: syz
[  331.412368][ T5655] usb 4-1: config 0 descriptor??
[  331.423250][ T5655] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  332.026192][ T5655] gspca_spca1528: reg_w err -71
[  332.040528][ T5655] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  332.046353][ T5655] usb 4-1: USB disconnect, device number 21
[  332.520723][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.602597][T14976] loop3: detected capacity change from 0 to 4096
[  332.609045][T14976] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  332.639763][T14976] ntfs3(loop3): ino=19, mi_enum_attr
[  332.639881][T14976] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  332.642452][T14976] ntfs3(loop3): ino=1a, mi_enum_attr
[  332.642504][T14976] ntfs3(loop3): ino=1a, mi_enum_attr
[  332.642588][T14976] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  332.842201][T14905] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[  332.865340][ T5655] usb 3-1: USB disconnect, device number 60
[  332.868883][ T5655] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  332.896635][T14986] loop3: detected capacity change from 0 to 4096
[  333.064622][T14996] netlink: 'syz.2.3651': attribute type 1 has an invalid length.
[  333.276168][T15012] netlink: 'syz.1.3658': attribute type 1 has an invalid length.
[  333.338347][T15016] loop1: detected capacity change from 0 to 256
[  333.347738][T15016] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  333.359812][   T33] audit: type=1800 audit(1790262968.251:65): pid=15016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3660" name="file1" dev="loop1" ino=1048680 res=0 errno=0
[  333.416029][T15018] netlink: 'syz.1.3661': attribute type 2 has an invalid length.
[  333.423767][T15018] : entered promiscuous mode
[  333.471450][ T5655] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  333.622848][ T5655] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  333.629119][ T5655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.629178][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.639389][ T5655] usb 4-1: config 0 descriptor??
[  333.855077][ T5655] usbhid 4-1:0.0: can't add hid device: -71
[  333.859001][ T5655] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  333.867297][ T5655] usb 4-1: USB disconnect, device number 22
[  333.986967][T15041] CIFS: Attempting to mount //127.0.0.1/share
[  334.300575][ T5655] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  334.462015][ T5655] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  334.467448][ T5655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.472403][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.480902][ T5655] usb 4-1: config 0 descriptor??
[  334.710467][  T128] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  334.817453][T15041] CIFS: VFS: Error connecting to socket. Aborting operation.
[  334.817613][T15041] CIFS: VFS: cifs_mount failed w/return code = -4
[  334.874501][  T128] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  334.876493][  T128] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  334.876515][  T128] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  334.880277][  T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.880296][  T128] usb 3-1: Product: syz
[  334.880306][  T128] usb 3-1: Manufacturer: syz
[  334.880317][  T128] usb 3-1: SerialNumber: syz
[  334.887616][  T128] usb 3-1: config 0 descriptor??
[  334.890847][T15048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  334.891083][T15048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  335.023290][T15054] CacheFiles: Failed to register: -95
[  335.100264][T15048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  335.101218][T15048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  335.116978][T15056] loop1: detected capacity change from 0 to 4096
[  335.123309][T15056] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  335.139862][T15056] ntfs3(loop1): ino=19, mi_enum_attr
[  335.139902][T15056] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  335.321060][ T5655] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  335.322045][ T5655] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31
[  335.504877][  T128] Error reading MAC address
[  335.512728][  T128] usb 3-1: USB disconnect, device number 61
[  335.663022][ T5655] usb 4-1: USB disconnect, device number 23
[  335.663189][    C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  336.366190][T15065] loop2: detected capacity change from 0 to 32768
[  336.370727][T15065] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3683 (15065)
[  336.378329][T15065] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  336.382648][T15065] BTRFS info (device loop2): using crc32c checksum algorithm
[  336.420994][T15065] BTRFS info (device loop2): enabling ssd optimizations
[  336.423863][T15065] BTRFS info (device loop2): turning on flush-on-commit
[  336.426781][T15065] BTRFS info (device loop2): enabling free space tree
[  336.429646][T15065] BTRFS info (device loop2): enabling auto defrag
[  336.442610][T15065] BTRFS info (device loop2): use lzo compression, level 1
[  336.442998][T15065] BTRFS info (device loop2): max_inline set to 4096
[  336.570546][  T128] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  336.596336][ T5591] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  336.720485][  T128] usb 4-1: Using ep0 maxpacket: 16
[  336.722510][  T128] usb 4-1: unable to get BOS descriptor or descriptor too short
[  336.722536][  T128] usb 4-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=a9.de
[  336.723509][  T128] usb 4-1: config 0 has an invalid interface number: 191 but max is 0
[  336.723522][  T128] usb 4-1: config 0 has no interface number 0
[  336.723534][  T128] usb 4-1: config 0 interface 191 has no altsetting 0
[  336.726395][  T128] usb 4-1: string descriptor 0 read error: -22
[  336.726481][  T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.753730][  T128] usb 4-1: config 0 descriptor??
[  336.759827][  T128] rndis_host 4-1:0.191: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  336.970157][  T128] usb 4-1: USB disconnect, device number 24
[  337.080615][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  337.231296][    T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  337.236456][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  337.241973][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  337.242051][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  337.253345][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.256578][    T9] usb 2-1: Product: syz
[  337.258403][    T9] usb 2-1: Manufacturer: syz
[  337.260491][    T9] usb 2-1: SerialNumber: syz
[  337.266979][T15091] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  337.267231][T15091] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  337.274882][    T9] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  337.283889][    T9] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  337.522435][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3691'.
[  337.689325][  T128] usb 2-1: USB disconnect, device number 46
[  337.743350][  T128] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  337.745479][  T128] cyberjack 2-1:1.0: device disconnected
[  337.796351][T15110] loop3: detected capacity change from 0 to 512
[  337.809192][T15110] EXT4-fs: Ignoring removed oldalloc option
[  337.815331][T15110] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3697: bad orphan inode 15
[  337.815382][T15110] loop3: lost filesystem error report for type 5 error -117
[  337.815547][T15110] ext4_test_bit(bit=14, block=5) = 0
[  337.816877][T15110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.834726][T15110] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.3697: inode has both inline data and extents flags
[  337.844450][T15110] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  337.865792][T12025] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.022723][T15118] loop3: detected capacity change from 0 to 764
[  338.083604][T15120] sg_write: data in/out 417804/136 bytes for SCSI command 0x0-- guessing data in;
[  338.083604][T15120]    program syz.3.3701 not setting count and/or reply_len properly
[  338.589144][T15136] netlink: 'syz.1.3708': attribute type 1 has an invalid length.
[  338.589193][T15136] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3708'.
[  338.589886][T15136] netlink: 'syz.1.3708': attribute type 2 has an invalid length.
[  338.589894][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3708'.
[  338.695377][T15140] loop1: detected capacity change from 0 to 4096
[  338.699652][T15140] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  338.722305][T15140] ntfs3(loop1): ino=19, mi_enum_attr
[  338.722362][T15140] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  338.723749][T15140] ntfs3(loop1): ino=1a, mi_enum_attr
[  338.723830][T15140] ntfs3(loop1): ino=1a, mi_enum_attr
[  338.723839][T15140] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  338.744096][T15140] ntfs3(loop1): ino=1e, mi_enum_attr
[  338.910440][    T9] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  339.061311][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  339.067394][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  339.072263][    T9] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  339.072296][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.312076][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3720'.
[  339.507566][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  339.507612][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  339.547434][    T9] DVB: Unable to find symbol stv0299_attach()
[  339.563821][    T9] DVB: Unable to find symbol tda8083_attach()
[  339.563870][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  339.567214][    T9] usb 3-1: USB disconnect, device number 62
[  339.610608][ T5655] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  339.761708][ T5655] usb 4-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f
[  339.763112][ T5655] usb 4-1: config 8 has an invalid interface number: 235 but max is 0
[  339.763129][ T5655] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  339.763142][ T5655] usb 4-1: config 8 has no interface number 0
[  339.763168][ T5655] usb 4-1: config 8 interface 235 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  339.763185][ T5655] usb 4-1: config 8 interface 235 has no altsetting 0
[  339.763206][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.791758][ T5655] hub 4-1:8.235: bad descriptor, ignoring hub
[  339.791823][ T5655] hub 4-1:8.235: probe with driver hub failed with error -5
[  339.792703][ T5655] keyspan 4-1:8.235: Keyspan - (without firmware) converter detected
[  339.908301][T15168] loop1: detected capacity change from 0 to 512
[  339.916053][T15168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  339.924683][T15168] EXT4-fs (loop1): 1 truncate cleaned up
[  339.925877][T15168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.952887][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.131945][T15176] loop2: detected capacity change from 0 to 512
[  340.149193][T15176] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.3725: bg 0: block 5: invalid block bitmap
[  340.154483][T15176] loop2: lost filesystem error report for type 5 error -117
[  340.154856][T15176] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  340.161462][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  340.161477][    C1] EXT4-fs (loop2): initial error at time 1790262975: ext4_validate_block_bitmap:436
[  340.161492][    C1] EXT4-fs (loop2): last error at time 1790262975: ext4_validate_block_bitmap:436
[  340.171560][T15176] loop2: lost filesystem error report for type 5 error -117
[  340.171890][T15176] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3725: invalid indirect mapped block 3 (level 2)
[  340.179487][T15176] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  340.180025][T15176] EXT4-fs (loop2): 1 orphan inode deleted
[  340.187674][T15176] EXT4-fs (loop2): 1 truncate cleaned up
[  340.195139][T15176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.200978][  T128] usb 4-1: USB disconnect, device number 25
[  340.206561][  T128] keyspan 4-1:8.235: device disconnected
[  340.244439][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.503559][T15198] loop2: detected capacity change from 0 to 512
[  340.512854][T15198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.3735: bg 0: block 5: invalid block bitmap
[  340.518222][T15198] loop2: lost filesystem error report for type 5 error -117
[  340.518636][T15198] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  340.521699][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  340.521715][    C1] EXT4-fs (loop2): initial error at time 1790262975: ext4_validate_block_bitmap:436
[  340.521731][    C1] EXT4-fs (loop2): last error at time 1790262975: ext4_validate_block_bitmap:436
[  340.538735][T15198] loop2: lost filesystem error report for type 5 error -117
[  340.542220][T15198] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3735: invalid indirect mapped block 3 (level 2)
[  340.545247][T15198] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  340.552399][T15198] EXT4-fs (loop2): 1 orphan inode deleted
[  340.552466][T15198] EXT4-fs (loop2): 1 truncate cleaned up
[  340.554365][T15198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.566261][T15198] CacheFiles: mkdir cache failed with error -105
[  340.566289][T15198] CacheFiles: Failed to register: -105
[  340.581733][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.744431][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3738'.
[  340.772775][   T33] audit: type=1326 audit(1790262975.671:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.773710][   T33] audit: type=1326 audit(1790262975.671:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.774279][   T33] audit: type=1326 audit(1790262975.671:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.775410][   T33] audit: type=1326 audit(1790262975.671:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f686819f9c7 code=0x7ffc0000
[  340.775429][   T33] audit: type=1326 audit(1790262975.671:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.775444][   T33] audit: type=1326 audit(1790262975.671:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.775459][   T33] audit: type=1326 audit(1790262975.671:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.775475][   T33] audit: type=1326 audit(1790262975.671:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.775489][   T33] audit: type=1326 audit(1790262975.671:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.775563][   T33] audit: type=1326 audit(1790262975.671:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3738" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f686819e159 code=0x7ffc0000
[  340.778211][T15205] sctp: [Deprecated]: syz.3.3738 (pid 15205) Use of struct sctp_assoc_value in delayed_ack socket option.
[  340.778211][T15205] Use struct sctp_sack_info instead
[  341.129056][T15218] loop3: detected capacity change from 0 to 32768
[  341.139286][T15218] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  341.186150][T15218] XFS (loop3): Ending clean mount
[  341.237333][T12025] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  341.830451][ T1293] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  341.980509][ T1293] usb 4-1: Using ep0 maxpacket: 16
[  341.983079][ T1293] usb 4-1: unable to get BOS descriptor or descriptor too short
[  341.983113][ T1293] usb 4-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=a9.de
[  341.985533][ T1293] usb 4-1: config 0 has an invalid interface number: 191 but max is 0
[  341.985545][ T1293] usb 4-1: config 0 has no interface number 0
[  341.985557][ T1293] usb 4-1: config 0 interface 191 has no altsetting 0
[  341.989002][ T1293] usb 4-1: string descriptor 0 read error: -22
[  341.989059][ T1293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.996742][ T1293] usb 4-1: config 0 descriptor??
[  342.000101][ T1293] rndis_host 4-1:0.191: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  342.189637][T15253] loop2: detected capacity change from 0 to 32768
[  342.211571][ T1293] usb 4-1: USB disconnect, device number 26
[  342.323676][T15253] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.340281][T15253] XFS (loop2): Ending clean mount
[  342.386601][ T5591] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.489742][T15263] loop1: detected capacity change from 0 to 512
[  342.514949][T15263] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  342.515013][T15263] loop1: lost filesystem error report for type 5 error -117
[  342.515459][T15263] EXT4-fs (loop1): 2 truncates cleaned up
[  342.516679][T15263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.549256][T15263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3759'.
[  342.597885][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.862880][T15284] loop2: detected capacity change from 0 to 16
[  342.866851][T15284] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  342.939111][T15276] loop1: detected capacity change from 0 to 32768
[  342.977123][T15276] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  343.003216][T15276] XFS (loop1): Ending clean mount
[  343.073286][ T5599] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  343.933301][ T5648] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.933369][ T5648] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.120733][ T5648] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.120805][ T5648] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.219630][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  344.223312][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  344.232774][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  344.246175][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  344.252985][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  344.384413][ T5648] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.384479][ T5648] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.494579][ T5648] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.494639][ T5648] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.626210][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3785'.
[  345.011411][ T5648] bridge_slave_1: left allmulticast mode
[  345.016375][ T5648] bridge_slave_1: left promiscuous mode
[  345.019136][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.056787][T15353] block nbd3: not configured, cannot reconfigure
[  345.059826][ T5648] bridge_slave_0: left allmulticast mode
[  345.062806][ T5648] bridge_slave_0: left promiscuous mode
[  345.065483][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.511179][T15376] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  345.511179][T15376] The task syz.3.3797 (15376) triggered the difference, watch for misbehavior.
[  345.603519][ T5648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.613390][ T5648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.620137][ T5648] bond0 (unregistering): Released all slaves
[  345.625524][ T5648] bond1 (unregistering): Released all slaves
[  345.634684][ T5648] bond2 (unregistering): Released all slaves
[  345.667694][ T5339] 8021q: adding VLAN 0 to HW filter on device eth1
[  345.815301][ T5648] : left promiscuous mode
[  345.908485][T15381] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3799'.
[  345.968677][ T5648] tipc: Disabling bearer <udp:syz2>
[  345.986492][ T5648] tipc: Left network mode
[  346.360994][ T4991] Bluetooth: hci0: command tx timeout
[  346.379045][ T5339] 8021q: adding VLAN 0 to HW filter on device eth2
[  346.531656][ T5648] hsr_slave_0: left promiscuous mode
[  346.534237][ T5648] hsr_slave_1: left promiscuous mode
[  346.534996][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.535023][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.556272][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.556320][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.577645][ T5648] veth1_macvtap: left promiscuous mode
[  346.590186][ T5648] veth0_macvtap: left promiscuous mode
[  346.592855][ T5648] veth1_vlan: left promiscuous mode
[  346.593075][ T5648] veth0_vlan: left promiscuous mode
[  346.685302][T15412] loop3: detected capacity change from 0 to 256
[  346.721235][T15412] FAT-fs (loop3): codepage cp85 not found
[  346.885048][T15420] loop3: detected capacity change from 0 to 8192
[  346.953234][ T5648] team0 (unregistering): Port device team_slave_1 removed
[  346.963065][ T5648] team0 (unregistering): Port device team_slave_0 removed
[  347.076569][T15313] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.078896][T15313] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.079037][T15313] bridge_slave_0: entered allmulticast mode
[  347.079909][T15313] bridge_slave_0: entered promiscuous mode
[  347.097362][T15313] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.101544][T15313] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.101690][T15313] bridge_slave_1: entered allmulticast mode
[  347.107502][T15313] bridge_slave_1: entered promiscuous mode
[  347.170520][T15427] block nbd3: not configured, cannot reconfigure
[  347.191973][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.198655][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.256344][T15431] xt_hashlimit: size too large, truncated to 1048576
[  347.296152][T15313] team0: Port device team_slave_0 added
[  347.298482][T15313] team0: Port device team_slave_1 added
[  347.367895][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.370970][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.380944][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.387239][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.390059][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.400579][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.429643][T15313] hsr_slave_0: entered promiscuous mode
[  347.441521][T15313] hsr_slave_1: entered promiscuous mode
[  347.443778][T15313] debugfs: 'hsr0' already exists in 'hsr'
[  347.445664][T15313] Cannot create hsr debugfs directory
[  347.559493][ T5339] 8021q: adding VLAN 0 to HW filter on device eth3
[  347.689241][ T5648] IPVS: stop unused estimator thread 0...
[  347.787622][T15447] loop3: detected capacity change from 0 to 512
[  347.794528][T15447] EXT4-fs: Ignoring removed nobh option
[  347.804112][T15447] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  347.804183][T15447] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  347.806748][T15447] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.3819: inode has both inline data and extents flags
[  347.806767][T15447] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  347.808556][T15447] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3819: couldn't read orphan inode 13 (err -117)
[  347.808577][T15447] loop3: lost filesystem error report for type 5 error -117
[  347.810056][T15447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.834320][T15447] EXT4-fs (loop3): shut down requested (2)
[  347.897929][T12025] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.988811][T15313] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  347.995991][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  347.996401][T15313] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  348.003729][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  348.006748][T15313] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  348.011583][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  348.014533][T15313] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  348.023953][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  348.075414][ T5339] 8021q: adding VLAN 0 to HW filter on device eth4
[  348.116752][T15313] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.136896][T15313] 8021q: adding VLAN 0 to HW filter on device team0
[  348.150763][T10326] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.150841][T10326] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.171261][T10326] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.171332][T10326] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.440538][ T4991] Bluetooth: hci0: command tx timeout
[  348.544112][T15313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.660493][ T1293] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  348.718096][T15313] veth0_vlan: entered promiscuous mode
[  348.729604][T15313] veth1_vlan: entered promiscuous mode
[  348.764893][T15313] veth0_macvtap: entered promiscuous mode
[  348.768950][T15313] veth1_macvtap: entered promiscuous mode
[  348.781986][T15313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.790093][T15313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.822283][ T1293] usb 4-1: Using ep0 maxpacket: 32
[  348.823106][ T1293] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  348.826697][ T1293] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  348.826725][ T1293] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  348.826751][ T1293] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  348.826769][ T1293] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  348.826785][ T1293] usb 4-1: config 0 interface 0 has no altsetting 0
[  348.834590][ T1293] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  348.834610][ T1293] usb 4-1: Product: syz
[  348.834620][ T1293] usb 4-1: Manufacturer: syz
[  348.834631][ T1293] usb 4-1: SerialNumber: syz
[  348.851908][ T1293] usb 4-1: config 0 descriptor??
[  348.857250][ T1293] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  348.892155][ T1293] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  348.904813][ T5648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.905131][ T5648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.905204][ T5648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.905251][ T5648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.016921][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.016971][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.040809][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.040856][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.434994][T15513] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3831'.
[  349.510823][ T5655] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  349.661435][ T5655] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  349.666535][ T5655] usb 5-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  349.671683][ T5655] usb 5-1: config 0 interface 0 has no altsetting 0
[  349.671713][ T5655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.683222][ T5655] usb 5-1: config 0 descriptor??
[  349.689798][T15506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  350.414807][ T5655] usbhid 5-1:0.0: can't add hid device: -71
[  350.414921][ T5655] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  350.422050][ T5655] usb 5-1: USB disconnect, device number 2
[  350.520482][ T4991] Bluetooth: hci0: command tx timeout
[  350.683362][T15529] loop1: detected capacity change from 0 to 4096
[  350.691967][T15529] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  350.717994][T15529] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  350.720590][T15529] ntfs3(loop1): Failed to load $Extend (-22).
[  350.722949][T15529] ntfs3(loop1): Failed to initialize $Extend.
[  350.794542][T15529] ntfs3(loop1): ino=5, "/" indx_read_ra
[  350.798240][T15529] ntfs3(loop1): ino=5, "/" ntfs_readdir
[  350.880066][T15531] loop1: detected capacity change from 0 to 256
[  351.238894][T15539] loop4: detected capacity change from 0 to 2048
[  351.257767][T15539] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  351.266968][T15539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  351.559999][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3848'.
[  351.715837][T15557] loop1: detected capacity change from 0 to 256
[  352.501002][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  352.600539][ T4991] Bluetooth: hci0: command tx timeout
[  352.650948][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  352.651869][    T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  352.651880][    T9] usb 5-1: config 0 has no interface number 0
[  352.651896][    T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  352.653572][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.653582][    T9] usb 5-1: Product: syz
[  352.653588][    T9] usb 5-1: Manufacturer: syz
[  352.653594][    T9] usb 5-1: SerialNumber: syz
[  352.654935][    T9] usb 5-1: config 0 descriptor??
[  352.660998][    T9] yurex 5-1:0.50: USB YUREX device now attached to Yurex #1
[  354.029459][T15605] loop1: detected capacity change from 0 to 4096
[  354.039053][T15605] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  354.073685][T15605] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  354.077902][T15605] ntfs3(loop1): Failed to load $Extend (-22).
[  354.078259][T15605] ntfs3(loop1): Failed to initialize $Extend.
[  354.124983][T15485] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[  354.131021][ T1293] usb 5-1: USB disconnect, device number 3
[  354.138893][ T1293] yurex 5-1:0.50: USB YUREX #1 now disconnected
[  354.170495][ T6670] usb 4-1: USB disconnect, device number 27
[  354.180224][ T6670] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  354.500333][T15622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.546757][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3880'.
[  354.552423][T15624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3880'.
[  354.628619][T15626] loop3: detected capacity change from 0 to 4096
[  354.635922][T15626] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  354.658308][T15626] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  354.961338][T15646] loop1: detected capacity change from 0 to 2048
[  354.966453][T15646] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  354.979971][T15647] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  354.992967][T15646] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  355.000171][T15646] Remounting filesystem read-only
[  355.052660][    T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  355.068749][T15642] loop4: detected capacity change from 0 to 32768
[  355.083370][T15642] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  355.102823][T15642] VFS: Lookup of '' in ocfs2 loop4 would have caused loop
[  355.132085][T15313] ocfs2: Unmounting device (7,4) on (node local)
[  355.211373][    T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  355.213018][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.213068][    T9] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  355.213082][    T9] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  355.219737][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.219755][    T9] usb 4-1: Product: syz
[  355.219766][    T9] usb 4-1: Manufacturer: syz
[  355.219776][    T9] usb 4-1: SerialNumber: syz
[  355.313637][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'.
[  355.330008][T15661] hsr_slave_1 (unregistering): left promiscuous mode
[  355.641305][    C0] usb 4-1: received EP1 urb->status = -2
[  355.641384][    T9] usb 4-1: unable to init card! (ret=-110)
[  355.641561][    T9] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  355.845346][    T9] usb 4-1: USB disconnect, device number 28
[  355.873122][T15683] loop1: detected capacity change from 0 to 1024
[  355.873736][T15683] EXT4-fs: Ignoring removed nomblk_io_submit option
[  355.888733][T15683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.899639][T15683] EXT4-fs warning (device loop1): ext4_empty_dir:3106: inode #11: comm syz.1.3902: directory missing '..'
[  355.941784][ T5599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.046629][T15692] Bluetooth: MGMT ver 1.23
[  356.454977][T15706] block nbd3: not configured, cannot reconfigure
[  356.540003][T15714] loop1: detected capacity change from 0 to 128
[  356.562310][T15714] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  356.562871][T15714] ext4 filesystem being mounted at /1412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  356.691979][ T5599] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  356.748573][T15731] FAULT_INJECTION: forcing a failure.
[  356.748573][T15731] name failslab, interval 1, probability 0, space 0, times 0
[  356.748633][T15731] CPU: 1 UID: 0 PID: 15731 Comm: syz.1.3917 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  356.748662][T15731] Tainted: [L]=SOFTLOCKUP
[  356.748666][T15731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  356.748672][T15731] Call Trace:
[  356.748676][T15731]  <TASK>
[  356.748680][T15731]  dump_stack_lvl+0xe8/0x150
[  356.748695][T15731]  should_fail_ex+0x410/0x560
[  356.748711][T15731]  should_failslab+0xa8/0x100
[  356.748722][T15731]  __kmalloc_cache_noprof+0xa3/0x600
[  356.748735][T15731]  ? dev_ethtool+0x13f/0x29c0
[  356.748748][T15731]  ? dev_ethtool+0x13f/0x29c0
[  356.748763][T15731]  dev_ethtool+0x13f/0x29c0
[  356.748775][T15731]  ? __lock_acquire+0x6df/0x2e50
[  356.748788][T15731]  ? __pfx_dev_ethtool+0x10/0x10
[  356.748800][T15731]  ? kasan_quarantine_put+0xbb/0x1f0
[  356.748815][T15731]  ? lock_acquire+0x115/0x350
[  356.748851][T15731]  ? dev_load+0x21/0x1f0
[  356.748865][T15731]  ? dev_load+0x21/0x1f0
[  356.748877][T15731]  dev_ioctl+0x392/0x1150
[  356.748890][T15731]  sock_do_ioctl+0x23e/0x320
[  356.748903][T15731]  ? __pfx_sock_do_ioctl+0x10/0x10
[  356.748912][T15731]  ? hook_file_ioctl+0x1f2/0x600
[  356.748926][T15731]  sock_ioctl+0x57a/0x7e0
[  356.748937][T15731]  ? __pfx_sock_ioctl+0x10/0x10
[  356.748947][T15731]  ? __fget_files+0x2a/0x420
[  356.748958][T15731]  ? __fget_files+0x3a2/0x420
[  356.748968][T15731]  ? __fget_files+0x2a/0x420
[  356.748978][T15731]  ? bpf_lsm_file_ioctl+0x9/0x20
[  356.748990][T15731]  ? __pfx_sock_ioctl+0x10/0x10
[  356.748999][T15731]  __se_sys_ioctl+0xfc/0x170
[  356.749007][T15731]  do_syscall_64+0x166/0x520
[  356.749018][T15731]  ? trace_irq_disable+0x3b/0x140
[  356.749026][T15731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.749036][T15731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.749044][T15731] RIP: 0033:0x7fbdded9e159
[  356.749052][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.749059][T15731] RSP: 002b:00007fbddfc7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  356.749069][T15731] RAX: ffffffffffffffda RBX: 00007fbddf025fa0 RCX: 00007fbdded9e159
[  356.749076][T15731] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003
[  356.749081][T15731] RBP: 00007fbddee3506b R08: 0000000000000000 R09: 0000000000000000
[  356.749086][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.749091][T15731] R13: 00007fbddf026038 R14: 00007fbddf025fa0 R15: 00007fffb91c3d48
[  356.749103][T15731]  </TASK>
[  357.647318][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3936'.
[  357.825997][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3944'.
[  357.945964][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'.
[  357.952421][T15810] hsr_slave_1 (unregistering): left promiscuous mode
[  358.164621][T15824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3955'.
[  358.164680][T15824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3955'.
[  358.821083][   T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  358.971698][   T10] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice= 1.00
[  358.977917][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  358.978001][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  358.978062][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.995686][T15854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  358.995874][T15854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  359.007690][   T10] ems_usb 4-1:1.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -71
[  359.007964][   T10] ems_usb 4-1:1.0: probe with driver ems_usb failed with error -71
[  359.225992][    T9] usb 4-1: USB disconnect, device number 29
[  359.986254][T15901] loop3: detected capacity change from 0 to 512
[  359.993844][T15901] EXT4-fs: Ignoring removed nobh option
[  359.997754][T15901] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  359.997832][T15901] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  359.998203][T15901] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.3982: inode has both inline data and extents flags
[  359.998390][T15901] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  359.998589][T15901] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3982: couldn't read orphan inode 13 (err -117)
[  359.998621][T15901] loop3: lost filesystem error report for type 5 error -117
[  359.999555][T15901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.006338][T15901] EXT4-fs (loop3): shut down requested (2)
[  360.019956][T12025] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.037845][T15904] macvtap0: entered promiscuous mode
[  360.360438][    T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  360.512052][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  360.515319][    T9] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[  360.523265][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.526539][    T9] usb 4-1: Product: syz
[  360.528402][    T9] usb 4-1: Manufacturer: syz
[  360.530513][    T9] usb 4-1: SerialNumber: syz
[  360.745127][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  360.750269][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  360.765205][    T9] usb 4-1: USB disconnect, device number 30
[  361.852227][T15937] loop3: detected capacity change from 0 to 4096
[  361.855430][T15937] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  361.865237][T15937] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  362.062343][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  362.210499][    T9] usb 5-1: Using ep0 maxpacket: 16
[  362.213484][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  362.219624][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.224856][    T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.229243][    T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.233388][    T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  362.238898][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  362.238933][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.248695][    T9] usb 5-1: config 0 descriptor??
[  362.443103][T15962] FAULT_INJECTION: forcing a failure.
[  362.443103][T15962] name failslab, interval 1, probability 0, space 0, times 0
[  362.453576][T15962] CPU: 0 UID: 0 PID: 15962 Comm: syz.1.4008 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  362.453636][T15962] Tainted: [L]=SOFTLOCKUP
[  362.453643][T15962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  362.453652][T15962] Call Trace:
[  362.453659][T15962]  <TASK>
[  362.453666][T15962]  dump_stack_lvl+0xe8/0x150
[  362.453697][T15962]  should_fail_ex+0x410/0x560
[  362.453722][T15962]  should_failslab+0xa8/0x100
[  362.453740][T15962]  __kvmalloc_node_noprof+0x176/0x820
[  362.453753][T15962]  ? security_capable+0x7e/0x2c0
[  362.453775][T15962]  ? proc_sys_call_handler+0x3d0/0x830
[  362.453788][T15962]  ? proc_sys_call_handler+0x3d0/0x830
[  362.453837][T15962]  proc_sys_call_handler+0x3d0/0x830
[  362.453858][T15962]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  362.453880][T15962]  vfs_read+0x595/0xa80
[  362.453905][T15962]  ? __pfx_vfs_read+0x10/0x10
[  362.453929][T15962]  ? __fget_files+0x2a/0x420
[  362.453952][T15962]  ksys_read+0x150/0x270
[  362.453971][T15962]  ? __pfx_ksys_read+0x10/0x10
[  362.453989][T15962]  ? trace_syscall_enter+0x58/0x110
[  362.454006][T15962]  ? rcu_is_watching+0x16/0xb0
[  362.454020][T15962]  ? trace_syscall_enter+0x58/0x110
[  362.454037][T15962]  do_syscall_64+0x166/0x520
[  362.454055][T15962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.454073][T15962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.454086][T15962] RIP: 0033:0x7fbdded9e159
[  362.454101][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.454113][T15962] RSP: 002b:00007fbddfc7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  362.454130][T15962] RAX: ffffffffffffffda RBX: 00007fbddf025fa0 RCX: 00007fbdded9e159
[  362.454142][T15962] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000004
[  362.454151][T15962] RBP: 00007fbddee3506b R08: 0000000000000000 R09: 0000000000000000
[  362.454159][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.454168][T15962] R13: 00007fbddf026038 R14: 00007fbddf025fa0 R15: 00007fffb91c3d48
[  362.454189][T15962]  </TASK>
[  362.712099][    T9] logitech-djreceiver 0003:046D:C53A.000E: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0
[  362.789569][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4013'.
[  362.865265][ T6670] usb 5-1: USB disconnect, device number 4
[  363.057518][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4019'.
[  363.074109][T15985] hsr_slave_1 (unregistering): left promiscuous mode
[  363.186438][T15995] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  364.208708][T16033] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  364.430474][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  364.581317][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  364.582262][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.582288][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.583604][    T9] usb 5-1: config 0 descriptor??
[  364.690506][ T6670] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  364.788668][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  364.788774][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  364.796389][    T9] usb 5-1: USB disconnect, device number 5
[  364.842425][ T6670] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  364.843619][ T6670] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  364.843638][ T6670] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  364.843663][ T6670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.855513][ T6670] usb 4-1: probing VID:PID(0424:012C)   
[  364.860183][ T6670] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[  364.861161][ T6670] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[  364.861176][ T6670] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[  364.861189][ T6670] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04
[  364.861200][ T6670] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  365.230641][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  365.257514][T16044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.258181][T16044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.259473][ T6670] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  365.382873][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  365.388169][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.392598][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.400213][    T9] usb 5-1: config 0 descriptor??
[  365.409903][T16051] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  365.465805][ T6670] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  366.507959][   T10] usb 4-1: USB disconnect, device number 31
[  366.517411][  T128] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  366.520681][  T128] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  366.522965][  T128] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  367.154477][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4058'.
[  367.196209][   T10] USB vub300 remote SDIO host controller[0] now disconnected
[  367.243755][    T9] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[  367.259994][    T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32
[  367.322288][    T9] usb 5-1: USB disconnect, device number 6
[  367.322390][    C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  367.413054][    C1] 
[  367.415222][    C1] =============================
[  367.417212][    C1] WARNING: suspicious RCU usage
[  367.419243][    C1] syzkaller #0 Tainted: G             L     
[  367.422106][    C1] -----------------------------
[  367.424162][    C1] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section!
[  367.428008][    C1] 
[  367.428008][    C1] other info that might help us debug this:
[  367.428008][    C1] 
[  367.431843][    C1] 
[  367.431843][    C1] rcu_scheduler_active = 2, debug_locks = 1
[  367.434970][    C1] locks held by syz.3.4065/16082: 5, last CPU#1:
[  367.437566][    C1]  #0: ffff8881bb7c1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  367.441454][    C1]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  367.445432][    C1]  #2: ffff88810aa01438 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  367.449696][    C1]  #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  367.453502][    C1]  #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  367.457758][    C1] 
[  367.457758][    C1] stack backtrace:
[  367.460253][    C1] CPU: 1 UID: 0 PID: 16082 Comm: syz.3.4065 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  367.464557][    C1] Tainted: [L]=SOFTLOCKUP
[  367.466259][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.470329][    C1] Call Trace:
[  367.471694][    C1]  <IRQ>
[  367.472909][    C1]  dump_stack_lvl+0xe8/0x150
[  367.474711][    C1]  lockdep_rcu_suspicious+0x140/0x1d0
[  367.476914][    C1]  __might_resched+0xbb/0x4c0
[  367.478874][    C1]  ? __cancel_work_sync+0x5c/0x110
[  367.480941][    C1]  __cancel_work_sync+0x6d/0x110
[  367.482938][    C1]  mmc_free_host+0x19/0x30
[  367.484671][    C1]  call_timer_fn+0x18d/0x5f0
[  367.486519][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  367.489105][    C1]  ? call_timer_fn+0xd5/0x5f0
[  367.490961][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  367.492908][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.494956][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  367.497602][    C1]  __run_timer_base+0x652/0x8b0
[  367.499652][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  367.501905][    C1]  ? ktime_get+0x1f5/0x220
[  367.503756][    C1]  ? lapic_next_event+0x11/0x20
[  367.505758][    C1]  run_timer_softirq+0xb7/0x170
[  367.507704][    C1]  handle_softirqs+0x226/0x860
[  367.509693][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  367.511630][    C1]  __irq_exit_rcu+0xcb/0x220
[  367.513507][    C1]  irq_exit_rcu+0x9/0x30
[  367.515254][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  367.517554][    C1]  </IRQ>
[  367.518738][    C1]  <TASK>
[  367.519931][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  367.522252][    C1] RIP: 0010:lock_acquire+0x232/0x350
[  367.524348][    C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da
[  367.531940][    C1] RSP: 0018:ffffc9000377f2d8 EFLAGS: 00000286
[  367.534455][    C1] RAX: 46041b06cc143700 RBX: 0000000000000000 RCX: 8000000000000002
[  367.537651][    C1] RDX: 00000000a697430a RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380
[  367.540867][    C1] RBP: ffff8881a9d31e00 R08: 3d00000000000000 R09: 0000000000000000
[  367.544053][    C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  367.547257][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  367.550537][    C1]  ? pfn_valid+0xba/0x490
[  367.552391][    C1]  pfn_valid+0xd6/0x490
[  367.554145][    C1]  ? pfn_valid+0xba/0x490
[  367.555935][    C1]  page_table_check_clear+0x21/0x500
[  367.558099][    C1]  ? vm_normal_page+0x13c/0x2b0
[  367.560118][    C1]  __zap_vma_range+0x3a12/0x4f80
[  367.562113][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  367.564218][    C1]  ? mas_find+0x6d6/0xcb0
[  367.566022][    C1]  unmap_vmas+0x390/0x550
[  367.567828][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  367.569881][    C1]  ? mas_next_slot+0xc91/0xd70
[  367.571922][    C1]  exit_mmap+0x293/0x9f0
[  367.573691][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  367.575738][    C1]  ? __pfx_exit_aio+0x10/0x10
[  367.577666][    C1]  ? uprobe_clear_state+0x2a4/0x3d0
[  367.579724][    C1]  __mmput+0x118/0x420
[  367.581430][    C1]  exit_mm+0x221/0x2d0
[  367.582798][    C1]  do_exit+0x6cd/0x2360
[  367.584144][    C1]  ? __pfx_do_exit+0x10/0x10
[  367.585628][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  367.587273][    C1]  do_group_exit+0x22d/0x2f0
[  367.588864][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.590582][    C1]  get_signal+0x121b/0x12c0
[  367.592233][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  367.594299][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  367.596274][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  367.598100][    C1]  ? rcu_is_watching+0x16/0xb0
[  367.599928][    C1]  do_syscall_64+0x328/0x520
[  367.601520][    C1]  ? trace_irq_disable+0x3b/0x140
[  367.603092][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.605193][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.607250][    C1] RIP: 0033:0x7f686819e159
[  367.608909][    C1] Code: Unable to access opcode bytes at 0x7f686819e12f.
[  367.611303][    C1] RSP: 002b:00007f68690170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  367.613893][    C1] RAX: 0000000000000001 RBX: 00007f6868425fa8 RCX: 00007f686819e159
[  367.616339][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6868425fac
[  367.618785][    C1] RBP: 00007f6868425fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  367.621164][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  367.623568][    C1] R13: 00007f6868426038 R14: 00007ffc58ce3ed0 R15: 00007ffc58ce3fb8
[  367.625970][    C1]  </TASK>
[  367.628981][    C1] BUG: sl
** replaying previous printk message **
[  367.628981][    C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4552
[  367.629007][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16082, name: syz.3.4065
[  367.629031][    C1] preempt_count: 102, expected: 0
[  367.629053][    C1] RCU nest depth: 1, expected: 0
[  367.629075][    C1] locks held by syz.3.4065/16082: 5, last CPU#1:
[  367.629083][    C1]  #0: ffff8881bb7c1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  367.629109][    C1]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  367.629129][    C1]  #2: ffff88810aa01438 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  367.629150][    C1]  #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  367.629167][    C1]  #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  367.629187][    C1] Preemption disabled at:
[  367.629189][    C1] [<0000000000000000>] 0x0
[  367.629201][    C1] CPU: 1 UID: 0 PID: 16082 Comm: syz.3.4065 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  367.629212][    C1] Tainted: [L]=SOFTLOCKUP
[  367.629215][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.629219][    C1] Call Trace:
[  367.629224][    C1]  <IRQ>
[  367.629228][    C1]  dump_stack_lvl+0xe8/0x150
[  367.629243][    C1]  __might_resched+0x36a/0x4c0
[  367.629256][    C1]  __cancel_work_sync+0x6d/0x110
[  367.629268][    C1]  mmc_free_host+0x19/0x30
[  367.629279][    C1]  call_timer_fn+0x18d/0x5f0
[  367.629288][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  367.629298][    C1]  ? call_timer_fn+0xd5/0x5f0
[  367.629306][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  367.629317][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.629326][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  367.629336][    C1]  __run_timer_base+0x652/0x8b0
[  367.629348][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  367.629357][    C1]  ? ktime_get+0x1f5/0x220
[  367.629365][    C1]  ? lapic_next_event+0x11/0x20
[  367.629374][    C1]  run_timer_softirq+0xb7/0x170
[  367.629383][    C1]  handle_softirqs+0x226/0x860
[  367.629393][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  367.629404][    C1]  __irq_exit_rcu+0xcb/0x220
[  367.629413][    C1]  irq_exit_rcu+0x9/0x30
[  367.629421][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  367.629431][    C1]  </IRQ>
[  367.629434][    C1]  <TASK>
[  367.629437][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  367.629446][    C1] RIP: 0010:lock_acquire+0x232/0x350
[  367.629454][    C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da
[  367.629461][    C1] RSP: 0018:ffffc9000377f2d8 EFLAGS: 00000286
[  367.629468][    C1] RAX: 46041b06cc143700 RBX: 0000000000000000 RCX: 8000000000000002
[  367.629473][    C1] RDX: 00000000a697430a RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380
[  367.629478][    C1] RBP: ffff8881a9d31e00 R08: 3d00000000000000 R09: 0000000000000000
[  367.629483][    C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  367.629488][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  367.629498][    C1]  ? pfn_valid+0xba/0x490
[  367.629507][    C1]  pfn_valid+0xd6/0x490
[  367.629514][    C1]  ? pfn_valid+0xba/0x490
[  367.629521][    C1]  page_table_check_clear+0x21/0x500
[  367.629530][    C1]  ? vm_normal_page+0x13c/0x2b0
[  367.629541][    C1]  __zap_vma_range+0x3a12/0x4f80
[  367.629562][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  367.629573][    C1]  ? mas_find+0x6d6/0xcb0
[  367.629585][    C1]  unmap_vmas+0x390/0x550
[  367.629594][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  367.629601][    C1]  ? mas_next_slot+0xc91/0xd70
[  367.629617][    C1]  exit_mmap+0x293/0x9f0
[  367.629627][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  367.629643][    C1]  ? __pfx_exit_aio+0x10/0x10
[  367.629656][    C1]  ? uprobe_clear_state+0x2a4/0x3d0
[  367.629667][    C1]  __mmput+0x118/0x420
[  367.629677][    C1]  exit_mm+0x221/0x2d0
[  367.629685][    C1]  do_exit+0x6cd/0x2360
[  367.629695][    C1]  ? __pfx_do_exit+0x10/0x10
[  367.629703][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  367.629715][    C1]  do_group_exit+0x22d/0x2f0
[  367.629722][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.629731][    C1]  get_signal+0x121b/0x12c0
[  367.629747][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  367.629759][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  367.629801][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  367.629810][    C1]  ? rcu_is_watching+0x16/0xb0
[  367.629820][    C1]  do_syscall_64+0x328/0x520
[  367.629829][    C1]  ? trace_irq_disable+0x3b/0x140
[  367.629836][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.629845][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.629852][    C1] RIP: 0033:0x7f686819e159
[  367.629859][    C1] Code: Unable to access opcode bytes at 0x7f686819e12f.
[  367.629863][    C1] RSP: 002b:00007f68690170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  367.629871][    C1] RAX: 0000000000000001 RBX: 00007f6868425fa8 RCX: 00007f686819e159
[  367.629876][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6868425fac
[  367.629881][    C1] RBP: 00007f6868425fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  367.629886][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  367.629891][    C1] R13: 00007f6868426038 R14: 00007ffc58ce3ed0 R15: 00007ffc58ce3fb8
[  367.629901][    C1]  </TASK>
[  367.629997][    C1] 
[  367.798844][    C1] =============================
[  367.800831][    C1] WARNING: suspicious RCU usage
[  367.802589][    C1] syzkaller #0 Tainted: G        W    L     
[  367.804755][    C1] -----------------------------
[  367.806618][    C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!
[  367.811203][    C1] 
[  367.811203][    C1] other info that might help us debug this:
[  367.811203][    C1] 
[  367.815055][    C1] 
[  367.815055][    C1] rcu_scheduler_active = 2, debug_locks = 1
[  367.818140][    C1] locks held by syz.3.4065/16082: 5, last CPU#1:
[  367.820632][    C1]  #0: ffff8881bb7c1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  367.823952][    C1]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  367.827482][    C1]  #2: ffff88810aa01438 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  367.831326][    C1]  #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490
[  367.834136][    C1]  #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  367.837840][    C1] 
[  367.837840][    C1] stack backtrace:
[  367.839910][    C1] CPU: 1 UID: 0 PID: 16082 Comm: syz.3.4065 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  367.843442][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  367.845437][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.848931][    C1] Call Trace:
[  367.850236][    C1]  <IRQ>
[  367.851368][    C1]  dump_stack_lvl+0xe8/0x150
[  367.853162][    C1]  lockdep_rcu_suspicious+0x140/0x1d0
[  367.855216][    C1]  __synchronize_srcu+0x157/0x2f0
[  367.857170][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  367.859277][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  367.861258][    C1]  ? kvm_clock_get_cycles+0x49/0x60
[  367.863251][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  367.865391][    C1]  ? synchronize_srcu+0x20a/0x260
[  367.867340][    C1]  wakeup_source_unregister+0x129/0x3f0
[  367.869349][    C1]  mmc_host_classdev_release+0x47/0x100
[  367.871285][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  367.873272][    C1]  device_release+0xc4/0x1f0
[  367.874835][    C1]  kobject_put+0x222/0x550
[  367.876300][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  367.877813][    C1]  call_timer_fn+0x18d/0x5f0
[  367.879335][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  367.881503][    C1]  ? call_timer_fn+0xd5/0x5f0
[  367.883047][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  367.884585][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.886135][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  367.888202][    C1]  __run_timer_base+0x652/0x8b0
[  367.889850][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  367.891606][    C1]  ? ktime_get+0x1f5/0x220
[  367.893036][    C1]  ? lapic_next_event+0x11/0x20
[  367.894602][    C1]  run_timer_softirq+0xb7/0x170
[  367.896191][    C1]  handle_softirqs+0x226/0x860
[  367.897728][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  367.899345][    C1]  __irq_exit_rcu+0xcb/0x220
[  367.900872][    C1]  irq_exit_rcu+0x9/0x30
[  367.902228][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  367.904080][    C1]  </IRQ>
[  367.904992][    C1]  <TASK>
[  367.905946][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  367.907876][    C1] RIP: 0010:lock_acquire+0x232/0x350
[  367.909576][    C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da
[  367.916993][    C1] RSP: 0018:ffffc9000377f2d8 EFLAGS: 00000286
[  367.919393][    C1] RAX: 46041b06cc143700 RBX: 0000000000000000 RCX: 8000000000000002
[  367.922507][    C1] RDX: 00000000a697430a RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380
[  367.925639][    C1] RBP: ffff8881a9d31e00 R08: 3d00000000000000 R09: 0000000000000000
[  367.928512][    C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  367.931628][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  367.934584][    C1]  ? pfn_valid+0xba/0x490
[  367.936027][    C1]  pfn_valid+0xd6/0x490
[  367.937362][    C1]  ? pfn_valid+0xba/0x490
[  367.938728][    C1]  page_table_check_clear+0x21/0x500
[  367.940379][    C1]  ? vm_normal_page+0x13c/0x2b0
[  367.942076][    C1]  __zap_vma_range+0x3a12/0x4f80
[  367.944028][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  367.946124][    C1]  ? mas_find+0x6d6/0xcb0
[  367.947668][    C1]  unmap_vmas+0x390/0x550
[  367.949107][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  367.950665][    C1]  ? mas_next_slot+0xc91/0xd70
[  367.952231][    C1]  exit_mmap+0x293/0x9f0
[  367.953605][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  367.955400][    C1]  ? __pfx_exit_aio+0x10/0x10
[  367.957214][    C1]  ? uprobe_clear_state+0x2a4/0x3d0
[  367.959294][    C1]  __mmput+0x118/0x420
[  367.960936][    C1]  exit_mm+0x221/0x2d0
[  367.962549][    C1]  do_exit+0x6cd/0x2360
[  367.964110][    C1]  ? __pfx_do_exit+0x10/0x10
[  367.965793][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  367.967492][    C1]  do_group_exit+0x22d/0x2f0
[  367.968931][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.970552][    C1]  get_signal+0x121b/0x12c0
[  367.971991][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  367.973708][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  367.975667][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  367.977354][    C1]  ? rcu_is_watching+0x16/0xb0
[  367.978867][    C1]  do_syscall_64+0x328/0x520
[  367.980327][    C1]  ? trace_irq_disable+0x3b/0x140
[  367.981913][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.983828][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.985660][    C1] RIP: 0033:0x7f686819e159
[  367.987070][    C1] Code: Unable to access opcode bytes at 0x7f686819e12f.
[  367.989205][    C1] RSP: 002b:00007f68690170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  367.991790][    C1] RAX: 0000000000000001 RBX: 00007f6868425fa8 RCX: 00007f686819e159
[  367.994441][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6868425fac
[  367.997053][    C1] RBP: 00007f6868425fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  367.999522][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  368.002015][    C1] R13: 00007f6868426038 R14: 00007ffc58ce3ed0 R15: 00007ffc58ce3fb8
[  368.004512][    C1]  </TASK>
[  368.005685][    C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90003778000, but annotated.
[  368.005959][    C1] ------------[ cut here ]------------
[  368.005964][    C1] 1
[  368.005967][    C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz.3.4065/16082
[  368.014417][    C1] Modules linked in:
[  368.015678][    C1] CPU: 1 UID: 0 PID: 16082 Comm: syz.3.4065 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  368.018994][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  368.020619][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.023954][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  368.025996][    C1] Code: fd 06 cc 41 ff c7 44 89 3d 69 98 e8 15 48 c7 c1 80 9c 6d 8c 48 c7 c7 e0 9c 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 2c 3e fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 c1 ff 6e 0a 3b 05 bf
[  368.032638][    C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046
[  368.034503][    C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 46041b06cc143700
[  368.036910][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  368.039434][    C1] RBP: ffff8881a9d31e20 R08: 0000000000000100 R09: 1ffff920001430e4
[  368.042082][    C1] R10: dffffc0000000000 R11: fffff520001430e5 R12: 1ffff9200014314c
[  368.044537][    C1] R13: ffff8881bb051b60 R14: dffffc0000000000 R15: 0000000000000001
[  368.046987][    C1] FS:  00007f68690176c0(0000) GS:ffff8882a8cda000(0000) knlGS:0000000000000000
[  368.050227][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  368.052659][    C1] CR2: 00007f3877b89500 CR3: 00000001bf1c6000 CR4: 00000000000006f0
[  368.055307][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  368.058317][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  368.061151][    C1] Call Trace:
[  368.062319][    C1]  <IRQ>
[  368.063248][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  368.065320][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  368.066916][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  368.068723][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  368.070326][    C1]  ? kvm_clock_get_cycles+0x49/0x60
[  368.071956][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  368.073652][    C1]  ? synchronize_srcu+0x20a/0x260
[  368.075175][    C1]  wakeup_source_unregister+0x129/0x3f0
[  368.076860][    C1]  mmc_host_classdev_release+0x47/0x100
[  368.078574][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  368.080465][    C1]  device_release+0xc4/0x1f0
[  368.081934][    C1]  kobject_put+0x222/0x550
[  368.083336][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  368.084837][    C1]  call_timer_fn+0x18d/0x5f0
[  368.086248][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  368.088335][    C1]  ? call_timer_fn+0xd5/0x5f0
[  368.089822][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  368.091378][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.092990][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  368.095082][    C1]  __run_timer_base+0x652/0x8b0
[  368.096626][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  368.098307][    C1]  ? ktime_get+0x1f5/0x220
[  368.099703][    C1]  ? lapic_next_event+0x11/0x20
[  368.101280][    C1]  run_timer_softirq+0xb7/0x170
[  368.102788][    C1]  handle_softirqs+0x226/0x860
[  368.104248][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  368.105731][    C1]  __irq_exit_rcu+0xcb/0x220
[  368.107180][    C1]  irq_exit_rcu+0x9/0x30
[  368.108490][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  368.110212][    C1]  </IRQ>
[  368.111118][    C1]  <TASK>
[  368.112003][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  368.113837][    C1] RIP: 0010:lock_acquire+0x232/0x350
[  368.115443][    C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da
[  368.121277][    C1] RSP: 0018:ffffc9000377f2d8 EFLAGS: 00000286
[  368.123116][    C1] RAX: 46041b06cc143700 RBX: 0000000000000000 RCX: 8000000000000002
[  368.125506][    C1] RDX: 00000000a697430a RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380
[  368.127933][    C1] RBP: ffff8881a9d31e00 R08: 3d00000000000000 R09: 0000000000000000
[  368.130363][    C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  368.132798][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  368.135192][    C1]  ? pfn_valid+0xba/0x490
[  368.136535][    C1]  pfn_valid+0xd6/0x490
[  368.137815][    C1]  ? pfn_valid+0xba/0x490
[  368.139123][    C1]  page_table_check_clear+0x21/0x500
[  368.140755][    C1]  ? vm_normal_page+0x13c/0x2b0
[  368.142302][    C1]  __zap_vma_range+0x3a12/0x4f80
[  368.143840][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  368.145452][    C1]  ? mas_find+0x6d6/0xcb0
[  368.146824][    C1]  unmap_vmas+0x390/0x550
[  368.148203][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  368.149715][    C1]  ? mas_next_slot+0xc91/0xd70
[  368.151231][    C1]  exit_mmap+0x293/0x9f0
[  368.152575][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  368.154123][    C1]  ? __pfx_exit_aio+0x10/0x10
[  368.155616][    C1]  ? uprobe_clear_state+0x2a4/0x3d0
[  368.157254][    C1]  __mmput+0x118/0x420
[  368.158546][    C1]  exit_mm+0x221/0x2d0
[  368.159844][    C1]  do_exit+0x6cd/0x2360
[  368.161163][    C1]  ? __pfx_do_exit+0x10/0x10
[  368.162614][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  368.164212][    C1]  do_group_exit+0x22d/0x2f0
[  368.165651][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.167297][    C1]  get_signal+0x121b/0x12c0
[  368.168802][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  368.170514][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  368.172411][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  368.174062][    C1]  ? rcu_is_watching+0x16/0xb0
[  368.175581][    C1]  do_syscall_64+0x328/0x520
[  368.177036][    C1]  ? trace_irq_disable+0x3b/0x140
[  368.178696][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.180988][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.182800][    C1] RIP: 0033:0x7f686819e159
[  368.184156][    C1] Code: Unable to access opcode bytes at 0x7f686819e12f.
[  368.186252][    C1] RSP: 002b:00007f68690170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  368.188885][    C1] RAX: 0000000000000001 RBX: 00007f6868425fa8 RCX: 00007f686819e159
[  368.191346][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6868425fac
[  368.193875][    C1] RBP: 00007f6868425fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  368.196330][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  368.198797][    C1] R13: 00007f6868426038 R14: 00007ffc58ce3ed0 R15: 00007ffc58ce3fb8
[  368.201187][    C1]  </TASK>
[  368.202151][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  368.204394][    C1] CPU: 1 UID: 0 PID: 16082 Comm: syz.3.4065 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  368.207748][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  368.209411][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.212520][    C1] Call Trace:
[  368.213604][    C1]  <IRQ>
[  368.214513][    C1]  vpanic+0x56d/0xa60
[  368.215802][    C1]  ? __pfx__printk+0x10/0x10
[  368.217219][    C1]  ? __pfx_vpanic+0x10/0x10
[  368.218654][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  368.220364][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  368.222006][    C1]  panic+0xc5/0xd0
[  368.223196][    C1]  ? __pfx_panic+0x10/0x10
[  368.224667][    C1]  __warn+0x315/0x4c0
[  368.225940][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  368.227586][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  368.229322][    C1]  __report_bug+0x276/0x570
[  368.230787][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  368.232423][    C1]  ? __pfx___report_bug+0x10/0x10
[  368.234037][    C1]  ? __wake_up_klogd+0xf0/0x130
[  368.235578][    C1]  ? vprintk_emit+0x4ee/0x560
[  368.237059][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  368.238670][    C1]  ? __irq_work_queue_local+0x1f9/0x4f0
[  368.240364][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  368.241953][    C1]  report_bug+0x16b/0x220
[  368.243202][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  368.244863][    C1]  ? __debug_object_init+0x2c6/0x3c0
[  368.246517][    C1]  handle_bug+0x9c/0x200
[  368.247911][    C1]  exc_invalid_op+0x1a/0x50
[  368.249370][    C1]  asm_exc_invalid_op+0x1a/0x20
[  368.250910][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  368.252796][    C1] Code: fd 06 cc 41 ff c7 44 89 3d 69 98 e8 15 48 c7 c1 80 9c 6d 8c 48 c7 c7 e0 9c 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 2c 3e fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 c1 ff 6e 0a 3b 05 bf
[  368.258866][    C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046
[  368.260830][    C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 46041b06cc143700
[  368.263347][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  368.265816][    C1] RBP: ffff8881a9d31e20 R08: 0000000000000100 R09: 1ffff920001430e4
[  368.268270][    C1] R10: dffffc0000000000 R11: fffff520001430e5 R12: 1ffff9200014314c
[  368.270716][    C1] R13: ffff8881bb051b60 R14: dffffc0000000000 R15: 0000000000000001
[  368.273342][    C1]  ? __debug_object_init+0x2c3/0x3c0
[  368.275102][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  368.277063][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  368.278842][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  368.280859][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  368.282700][    C1]  ? kvm_clock_get_cycles+0x49/0x60
[  368.284476][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  368.286396][    C1]  ? synchronize_srcu+0x20a/0x260
[  368.288231][    C1]  wakeup_source_unregister+0x129/0x3f0
[  368.290339][    C1]  mmc_host_classdev_release+0x47/0x100
[  368.292041][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  368.293934][    C1]  device_release+0xc4/0x1f0
[  368.295362][    C1]  kobject_put+0x222/0x550
[  368.296715][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  368.298405][    C1]  call_timer_fn+0x18d/0x5f0
[  368.299927][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  368.302015][    C1]  ? call_timer_fn+0xd5/0x5f0
[  368.303541][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  368.305256][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.306893][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  368.308959][    C1]  __run_timer_base+0x652/0x8b0
[  368.310487][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  368.312177][    C1]  ? ktime_get+0x1f5/0x220
[  368.313778][    C1]  ? lapic_next_event+0x11/0x20
[  368.315345][    C1]  run_timer_softirq+0xb7/0x170
[  368.316896][    C1]  handle_softirqs+0x226/0x860
[  368.318410][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  368.320022][    C1]  __irq_exit_rcu+0xcb/0x220
[  368.321691][    C1]  irq_exit_rcu+0x9/0x30
[  368.323135][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  368.324900][    C1]  </IRQ>
[  368.325884][    C1]  <TASK>
[  368.326988][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  368.329111][    C1] RIP: 0010:lock_acquire+0x232/0x350
[  368.331096][    C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da
[  368.338136][    C1] RSP: 0018:ffffc9000377f2d8 EFLAGS: 00000286
[  368.340543][    C1] RAX: 46041b06cc143700 RBX: 0000000000000000 RCX: 8000000000000002
[  368.343673][    C1] RDX: 00000000a697430a RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380
[  368.346813][    C1] RBP: ffff8881a9d31e00 R08: 3d00000000000000 R09: 0000000000000000
[  368.349658][    C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0
[  368.352137][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  368.354605][    C1]  ? pfn_valid+0xba/0x490
[  368.355983][    C1]  pfn_valid+0xd6/0x490
[  368.357296][    C1]  ? pfn_valid+0xba/0x490
[  368.358644][    C1]  page_table_check_clear+0x21/0x500
[  368.360301][    C1]  ? vm_normal_page+0x13c/0x2b0
[  368.361889][    C1]  __zap_vma_range+0x3a12/0x4f80
[  368.363460][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  368.365110][    C1]  ? mas_find+0x6d6/0xcb0
[  368.366449][    C1]  unmap_vmas+0x390/0x550
[  368.367824][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  368.369347][    C1]  ? mas_next_slot+0xc91/0xd70
[  368.370876][    C1]  exit_mmap+0x293/0x9f0
[  368.372213][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  368.373732][    C1]  ? __pfx_exit_aio+0x10/0x10
[  368.375267][    C1]  ? uprobe_clear_state+0x2a4/0x3d0
[  368.376872][    C1]  __mmput+0x118/0x420
[  368.378134][    C1]  exit_mm+0x221/0x2d0
[  368.379394][    C1]  do_exit+0x6cd/0x2360
[  368.380663][    C1]  ? __pfx_do_exit+0x10/0x10
[  368.382113][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  368.383698][    C1]  do_group_exit+0x22d/0x2f0
[  368.385261][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.387124][    C1]  get_signal+0x121b/0x12c0
[  368.388880][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  368.390795][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  368.392680][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  368.394477][    C1]  ? rcu_is_watching+0x16/0xb0
[  368.395984][    C1]  do_syscall_64+0x328/0x520
[  368.397450][    C1]  ? trace_irq_disable+0x3b/0x140
[  368.398990][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.400842][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.402730][    C1] RIP: 0033:0x7f686819e159
[  368.404182][    C1] Code: Unable to access opcode bytes at 0x7f686819e12f.
[  368.406376][    C1] RSP: 002b:00007f68690170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  368.409001][    C1] RAX: 0000000000000001 RBX: 00007f6868425fa8 RCX: 00007f686819e159
[  368.411465][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6868425fac
[  368.413922][    C1] RBP: 00007f6868425fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  368.416388][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  368.418845][    C1] R13: 00007f6868426038 R14: 00007ffc58ce3ed0 R15: 00007ffc58ce3fb8
[  368.421440][    C1]  </TASK>
[  368.423147][    C1] Kernel Offset: disabled
[  368.424527][    C1] Rebooting in 86400 seconds..
