last executing test programs:

2m33.858609141s ago: executing program 1 (id=347):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)

2m32.799117756s ago: executing program 1 (id=355):
syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@nodecompose}]}, 0x1, 0x5dd, &(0x7f0000001680)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2m32.498493597s ago: executing program 1 (id=357):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r6, 0x0, 0x0, 0xe7c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r8, 0x2000009)
sendfile(r7, r8, 0x0, 0x7ffff004)

2m31.437614768s ago: executing program 1 (id=359):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
ftruncate(r0, 0x2007ffc)
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3f, 0x0)

2m29.947850101s ago: executing program 1 (id=365):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00)

2m29.567205265s ago: executing program 1 (id=367):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000340)={{0x3, 0x2, 0x801, 0x2, 0x7}, 0xfe, 0x2d8, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x101, 0x80000001, 0x8})

2m29.435604425s ago: executing program 32 (id=367):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000340)={{0x3, 0x2, 0x801, 0x2, 0x7}, 0xfe, 0x2d8, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x101, 0x80000001, 0x8})

2m15.146938275s ago: executing program 3 (id=475):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]})
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0)
fsync(r0)

2m15.007643281s ago: executing program 3 (id=476):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20)

2m14.807688158s ago: executing program 3 (id=477):
r0 = syz_usb_connect$hid(0x2, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000340), 0x0, 0x801c0)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0)

2m14.125245534s ago: executing program 2 (id=481):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6c, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x80000aa, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)

2m13.967464159s ago: executing program 2 (id=482):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000001900)={@desc={0x1, 0x0, @desc2}, 0x21, 0x0, '\x00', @c})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}})

2m13.706183507s ago: executing program 2 (id=484):
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a5a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000000090582020002"], 0x0)

2m12.386017877s ago: executing program 2 (id=490):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c)
sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9)

2m11.837814215s ago: executing program 3 (id=495):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote={0xfe, 0x7}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}}, 0x0)

2m11.387708344s ago: executing program 0 (id=498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)={0x1c, r2, 0x9a2ea8ba8fb8e27f, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x8c0)

2m11.26522276s ago: executing program 0 (id=499):
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@random="493f6b6e24d9", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bb0e9e", 0x18, 0x0, 0x0, @remote, @private0, {[@routing={0x0, 0x2, 0x1, 0x5, 0x0, [@mcast2]}]}}}}}, 0x0)

2m11.17638029s ago: executing program 0 (id=500):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xb4, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

2m11.17589093s ago: executing program 3 (id=501):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000040)=0x4)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x2b, 0x1, 0x1)
connect$inet6(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)

2m10.646858951s ago: executing program 0 (id=502):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000540)=@s={0x5, @generic=0x2, 0x15, 0x5e})

2m10.014709705s ago: executing program 0 (id=503):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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")
syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)

2m9.704896385s ago: executing program 0 (id=504):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}, {0xf800, 0x4000, 0x0, 0x0}], 0x2})

2m9.47285193s ago: executing program 3 (id=505):
syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0)

2m9.469635384s ago: executing program 2 (id=506):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000900))

2m9.297827862s ago: executing program 2 (id=507):
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4e24, 0x4e00, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x8}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

1m38.652959836s ago: executing program 33 (id=504):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}, {0xf800, 0x4000, 0x0, 0x0}], 0x2})

50.813781226s ago: executing program 34 (id=505):
syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0)

0s ago: executing program 35 (id=507):
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4e24, 0x4e00, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x8}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

kernel console output (not intermixed with test programs):

e
[   64.250181][ T5826] bridge_slave_0: entered allmulticast mode
[   64.253391][ T5826] bridge_slave_0: entered promiscuous mode
[   64.257242][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.270361][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.273419][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.276160][ T5826] bridge_slave_1: entered allmulticast mode
[   64.279559][ T5826] bridge_slave_1: entered promiscuous mode
[   64.363329][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.373488][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.376391][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.379169][ T5829] bridge_slave_0: entered allmulticast mode
[   64.383495][ T5829] bridge_slave_0: entered promiscuous mode
[   64.391467][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.403446][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.406294][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.409091][ T5829] bridge_slave_1: entered allmulticast mode
[   64.413310][ T5829] bridge_slave_1: entered promiscuous mode
[   64.487661][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.491671][ T5826] team0: Port device team_slave_0 added
[   64.494170][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.496969][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.499736][ T5834] bridge_slave_0: entered allmulticast mode
[   64.504035][ T5834] bridge_slave_0: entered promiscuous mode
[   64.509782][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.521759][ T5826] team0: Port device team_slave_1 added
[   64.530891][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.534170][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.536982][ T5834] bridge_slave_1: entered allmulticast mode
[   64.540604][ T5834] bridge_slave_1: entered promiscuous mode
[   64.584148][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.589146][ T5829] team0: Port device team_slave_0 added
[   64.592255][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.594777][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.604056][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.609943][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.621322][ T5829] team0: Port device team_slave_1 added
[   64.623977][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.626574][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.636443][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.670817][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.673042][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.680613][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.685804][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.687916][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.695351][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.701694][ T5834] team0: Port device team_slave_0 added
[   64.705289][ T5834] team0: Port device team_slave_1 added
[   64.764526][ T5826] hsr_slave_0: entered promiscuous mode
[   64.767567][ T5826] hsr_slave_1: entered promiscuous mode
[   64.771449][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.774237][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.783940][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.802174][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.805074][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.814419][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.833407][ T5829] hsr_slave_0: entered promiscuous mode
[   64.835923][ T5829] hsr_slave_1: entered promiscuous mode
[   64.837927][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   64.839605][ T5829] Cannot create hsr debugfs directory
[   64.900108][ T5834] hsr_slave_0: entered promiscuous mode
[   64.903298][ T5834] hsr_slave_1: entered promiscuous mode
[   64.905889][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   64.907948][ T5834] Cannot create hsr debugfs directory
[   65.275362][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.289719][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.294640][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.301509][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.308738][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.317189][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.321264][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.327925][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.385726][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.394508][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.403275][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.408545][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.412579][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.418879][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.433492][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.438363][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.495390][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.501360][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.503961][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.507943][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.516377][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.521941][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.526371][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.534832][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.620395][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.667407][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   65.689857][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.693033][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.707653][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.722864][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.725550][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.775909][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   65.783059][   T54] Bluetooth: hci0: command tx timeout
[   65.799980][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.803285][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.805564][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.820457][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.822831][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.846449][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   65.860557][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.862813][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.866251][   T54] Bluetooth: hci2: command tx timeout
[   65.866386][ T5827] Bluetooth: hci1: command tx timeout
[   65.885102][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.887648][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.069902][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.078455][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.102463][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.143142][ T5826] veth0_vlan: entered promiscuous mode
[   66.159403][ T5829] veth0_vlan: entered promiscuous mode
[   66.176936][ T5826] veth1_vlan: entered promiscuous mode
[   66.180068][ T5829] veth1_vlan: entered promiscuous mode
[   66.193067][ T5834] veth0_vlan: entered promiscuous mode
[   66.210071][ T5834] veth1_vlan: entered promiscuous mode
[   66.234267][ T5829] veth0_macvtap: entered promiscuous mode
[   66.246796][ T5829] veth1_macvtap: entered promiscuous mode
[   66.254528][ T5826] veth0_macvtap: entered promiscuous mode
[   66.268850][ T5826] veth1_macvtap: entered promiscuous mode
[   66.287102][ T5834] veth0_macvtap: entered promiscuous mode
[   66.293528][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.307059][ T5834] veth1_macvtap: entered promiscuous mode
[   66.312409][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.315989][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.333271][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.343933][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.355904][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.363858][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.367640][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.374979][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.380081][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.383803][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.388632][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.394692][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.412969][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.433693][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.449927][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.457122][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.473903][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.577322][  T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.587107][  T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.607640][  T323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.615100][  T323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.635573][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.638465][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.675442][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.678818][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.725484][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.731308][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.738970][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.749567][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.763326][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.514029][ T5909] loop1: detected capacity change from 0 to 256
[   67.520894][ T5909] exfat: Deprecated parameter 'utf8'
[   67.566196][ T5909] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[   67.592688][   T33] audit: type=1800 audit(1776956614.905:2): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7" name="file1" dev="loop1" ino=1048595 res=0 errno=0
[   67.861118][   T54] Bluetooth: hci0: command tx timeout
[   67.942013][   T54] Bluetooth: hci2: command tx timeout
[   67.943545][ T5214] Bluetooth: hci1: command tx timeout
[   68.084079][ T5936] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   68.400246][ T5945] =======================================================
[   68.400246][ T5945] WARNING: The mand mount option has been deprecated and
[   68.400246][ T5945]          and is ignored by this kernel. Remove the mand
[   68.400246][ T5945]          option from the mount to silence this warning.
[   68.400246][ T5945] =======================================================
[   68.415827][ T5945] loop1: detected capacity change from 0 to 128
[   68.449383][ T5945] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   68.466041][ T5945] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   68.708473][ T5954] IPv6: Can't replace route, no match found
[   68.717805][ T5954] IPv6: Can't replace route, no match found
[   68.720109][ T5954] Zero length message leads to an empty skb
[   68.845682][ T5956] loop2: detected capacity change from 0 to 2048
[   68.862736][ T5956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.183752][   T33] audit: type=1326 audit(1776956616.495:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.199886][   T33] audit: type=1326 audit(1776956616.495:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.207644][   T33] audit: type=1326 audit(1776956616.495:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.216602][   T33] audit: type=1326 audit(1776956616.495:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.236135][   T33] audit: type=1326 audit(1776956616.495:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.251158][   T33] audit: type=1326 audit(1776956616.495:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.261642][   T33] audit: type=1326 audit(1776956616.495:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.271281][   T33] audit: type=1326 audit(1776956616.495:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.283000][   T33] audit: type=1326 audit(1776956616.495:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbccd79c819 code=0x7ffc0000
[   69.819904][ T5826] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.850506][ T5971] loop0: detected capacity change from 0 to 4096
[   69.885210][ T5971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.910660][ T5971] EXT4-fs error (device loop0): ext4_empty_dir:3101: inode #12: block 80: comm syz.0.35: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[   69.917198][ T5971] EXT4-fs warning (device loop0): ext4_empty_dir:3104: inode #12: comm syz.0.35: directory missing '..'
[   69.941040][ T5827] Bluetooth: hci0: command tx timeout
[   69.984771][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.029241][ T5827] Bluetooth: hci2: command 0x040f tx timeout
[   70.029781][   T54] Bluetooth: hci1: command tx timeout
[   70.146953][ T5982] loop1: detected capacity change from 0 to 64
[   70.181908][ T5982] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   70.514258][ T5993] kernel profiling enabled (shift: 6)
[   70.564398][ T5993] loop2: detected capacity change from 0 to 256
[   71.452656][ T6009] loop0: detected capacity change from 0 to 128
[   71.585106][ T6008] syz.0.50: attempt to access beyond end of device
[   71.585106][ T6008] loop0: rw=0, sector=121, nr_sectors = 920 limit=128
[   71.772575][  T955] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   71.780111][ T6014] netlink: 68 bytes leftover after parsing attributes in process `syz.2.52'.
[   71.957480][  T955] usb 2-1: unable to get BOS descriptor or descriptor too short
[   71.967441][  T955] usb 2-1: not running at top speed; connect to a high speed hub
[   71.975745][  T955] usb 2-1: config 5 has an invalid interface number: 246 but max is 0
[   71.978977][  T955] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[   71.983110][  T955] usb 2-1: config 5 has no interface number 0
[   71.985851][  T955] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0
[   71.989625][  T955] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   71.996525][  T955] usb 2-1: config 5 interface 246 has no altsetting 0
[   72.011939][  T955] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[   72.016083][  T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.019525][  T955] usb 2-1: Product: syz
[   72.022587][ T5214] Bluetooth: hci0: command tx timeout
[   72.030839][  T955] usb 2-1: Manufacturer: syz
[   72.033098][  T955] usb 2-1: SerialNumber: syz
[   72.102378][ T5214] Bluetooth: hci2: command 0x040f tx timeout
[   72.108860][ T5214] Bluetooth: hci1: command tx timeout
[   72.429453][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   72.552977][  T955] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   72.554571][ T5856] usb 2-1: Failed to submit usb control message: -71
[   72.569182][ T5856] usb 2-1: unable to send the bmi data to the device: -71
[   72.578418][ T5856] usb 2-1: unable to get target info from device
[   72.584408][ T5856] usb 2-1: could not get target info (-71)
[   72.594316][ T5856] usb 2-1: could not probe fw (-71)
[   72.682992][  T955] usb 2-1: USB disconnect, device number 2
[   72.921759][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.102086][ T5877] usb 1-1: Using ep0 maxpacket: 8
[   73.109032][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.120685][ T5877] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   73.133869][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.150723][ T5877] usb 1-1: config 0 descriptor??
[   73.167192][ T5877] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22
[   73.211973][ T6031] loop1: detected capacity change from 0 to 128
[   73.231859][   T33] kauditd_printk_skb: 14 callbacks suppressed
[   73.231877][   T33] audit: type=1800 audit(1776956620.535:26): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.59" name="bus" dev="loop1" ino=1048600 res=0 errno=0
[   73.345156][ T6033] loop1: detected capacity change from 0 to 764
[   73.381845][ T5877] usb 1-1: USB disconnect, device number 2
[   73.391688][  T955] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   73.477667][ T6037] loop1: detected capacity change from 0 to 1024
[   73.545339][  T955] usb 3-1: unable to get BOS descriptor or descriptor too short
[   73.557157][  T955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.560750][  T955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   73.573988][  T955] usb 3-1: string descriptor 0 read error: -22
[   73.578410][  T955] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   73.588574][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.622542][  T955] usb 3-1: selecting invalid altsetting 1
[   73.627261][  T955] usb 3-1: unit 3 not found!
[   73.670455][ T6043] loop1: detected capacity change from 0 to 2048
[   73.673291][ T6043] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.677624][ T6043] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 64935
[   73.823021][  T955] usb 3-1: unit 0 not found!
[   74.046279][  T955] usb 3-1: USB disconnect, device number 2
[   74.122549][ T6059] loop1: detected capacity change from 0 to 512
[   74.151283][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.155893][ T6059] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.169450][   T33] audit: type=1800 audit(1776956621.475:27): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file1" dev="loop1" ino=15 res=0 errno=0
[   74.183319][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   74.210815][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.237453][ T6055] loop0: detected capacity change from 0 to 32768
[   74.665546][   T33] audit: type=1804 audit(1776956621.975:28): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.79" name="bus" dev="ramfs" ino=7467 res=1 errno=0
[   74.711796][  T955] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   74.876782][  T955] usb 2-1: config 6 has an invalid interface number: 14 but max is 0
[   74.880833][  T955] usb 2-1: config 6 has no interface number 0
[   74.884622][  T955] usb 2-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0
[   74.888551][  T955] usb 2-1: config 6 interface 14 has no altsetting 0
[   74.916998][  T955] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[   74.920709][  T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.925476][  T955] usb 2-1: Product: syz
[   74.927706][  T955] usb 2-1: Manufacturer: syz
[   74.929852][  T955] usb 2-1: SerialNumber: syz
[   75.363538][  T955] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[   75.373951][  T955] command write [95] error -8
[   75.496779][  T955] usb 2-1: USB disconnect, device number 3
[   75.520856][   T33] audit: type=1400 audit(1776956622.825:29): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A68617265645F436C65616E3A2020202020202020202030206B420A5368617265645F44697274793A2020202020202020203238206B420A507269766174655F436C65616E3A20202020202020203336206B420A507269766174655F44697274793A20202020202020202030206B420A5265666572656E6365643A20202020202020202020203634206B420A416E6F6E796D6F75733A2020202020202020202020202030206B420A4B534D3A2020202020202020202020202020202020202030206B420A4C617A79467265653A202020202020202020202020202030206B pid=6080 comm="syz.0.80"
[   76.062397][ T6090] loop0: detected capacity change from 0 to 2048
[   76.068874][ T6090] EXT4-fs: Ignoring removed bh option
[   76.074448][ T6090] EXT4-fs: Ignoring removed mblk_io_submit option
[   76.135495][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.150809][ T6090] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.173430][ T6097] netlink: 220 bytes leftover after parsing attributes in process `syz.2.86'.
[   76.179656][ T6097] netlink: 'syz.2.86': attribute type 2 has an invalid length.
[   76.242329][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.264527][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   76.389969][ T6114] loop2: detected capacity change from 0 to 256
[   76.415934][   T33] audit: type=1800 audit(1776956623.725:30): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.94" name="file1" dev="loop2" ino=1048601 res=0 errno=0
[   76.485248][ T6118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.96'.
[   76.499263][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.96'.
[   76.678116][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[   76.680426][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[   76.689486][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   76.692654][   T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) 
[   76.692666][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.692672][   T54] Workqueue: hci2 hci_rx_work
[   76.692699][   T54] Call Trace:
[   76.692704][   T54]  <TASK>
[   76.692709][   T54]  dump_stack_lvl+0xe8/0x150
[   76.692726][   T54]  sysfs_create_dir_ns+0x271/0x2a0
[   76.692739][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   76.692749][   T54]  ? do_raw_spin_unlock+0x4d/0x210
[   76.692762][   T54]  kobject_add_internal+0x62b/0xd00
[   76.692776][   T54]  kobject_add+0x163/0x240
[   76.692788][   T54]  ? __pfx_kobject_add+0x10/0x10
[   76.692797][   T54]  ? _raw_spin_unlock+0x28/0x50
[   76.692810][   T54]  ? get_device_parent+0x366/0x3a0
[   76.692826][   T54]  device_add+0x408/0xbb0
[   76.692839][   T54]  hci_conn_add_sysfs+0xd5/0x210
[   76.692850][   T54]  le_conn_complete_evt+0x10e6/0x16b0
[   76.692867][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   76.692878][   T54]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[   76.692886][   T54]  ? __asan_memcpy+0x40/0x70
[   76.692898][   T54]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   76.692906][   T54]  ? skb_pull_data+0xfb/0x200
[   76.692921][   T54]  hci_le_conn_complete_evt+0x187/0x470
[   76.692936][   T54]  hci_event_packet+0x659/0xef0
[   76.692948][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   76.692959][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[   76.692970][   T54]  ? kcov_remote_start+0x49a/0x7a0
[   76.692982][   T54]  ? hci_send_to_monitor+0xe2/0x590
[   76.693024][   T54]  hci_rx_work+0x3ee/0x1040
[   76.693038][   T54]  ? process_scheduled_works+0xa70/0x1860
[   76.693052][   T54]  process_scheduled_works+0xb5d/0x1860
[   76.693078][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.693093][   T54]  ? assign_work+0x3d5/0x5e0
[   76.693106][   T54]  worker_thread+0xa53/0xfc0
[   76.693130][   T54]  kthread+0x388/0x470
[   76.693139][   T54]  ? __pfx_worker_thread+0x10/0x10
[   76.693149][   T54]  ? __pfx_kthread+0x10/0x10
[   76.693158][   T54]  ret_from_fork+0x514/0xb70
[   76.693173][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[   76.693184][   T54]  ? __switch_to+0xc79/0x1410
[   76.693196][   T54]  ? __pfx_kthread+0x10/0x10
[   76.693205][   T54]  ret_from_fork_asm+0x1a/0x30
[   76.693221][   T54]  </TASK>
[   76.693236][   T54] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   76.772812][   T54] Bluetooth: hci2: failed to register connection device
[   76.831059][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   76.986688][ T5876] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   76.990088][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.994454][ T5876] usb 2-1: Product: syz
[   76.996181][ T5876] usb 2-1: Manufacturer: syz
[   76.998004][ T5876] usb 2-1: SerialNumber: syz
[   77.003024][ T5876] usb 2-1: config 0 descriptor??
[   78.018576][ T5876] usb 2-1: unexpected transceiver, part 0x00 version 0x27
[   78.033660][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   78.185580][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.189741][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   78.197323][   T10] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[   78.200768][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.205598][   T10] usb 1-1: Product: syz
[   78.207237][   T10] usb 1-1: Manufacturer: syz
[   78.208974][   T10] usb 1-1: SerialNumber: syz
[   78.215316][   T10] usb 1-1: config 0 descriptor??
[   78.222362][ T5876] usb 2-1: Firmware version (0.0) predates our first public release.
[   78.224839][ T5876] usb 2-1: Please update to version 0.2 or newer
[   78.227532][   T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[   78.231705][ T5876] usb 2-1: atusb_probe: initialization failed, error = -19
[   78.237978][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   78.244008][ T5876] usb 2-1: USB disconnect, device number 4
[   78.245824][   T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[   78.250795][   T10] usb 1-1: media controller created
[   78.268430][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   78.306807][   T10] DVB: Unable to find symbol tda10046_attach()
[   78.309141][   T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[   78.313201][   T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[   78.634216][   T10] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[   78.644017][   T10] usb 1-1: USB disconnect, device number 3
[   79.211022][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   79.371038][   T10] usb 2-1: Using ep0 maxpacket: 8
[   79.377546][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.389928][   T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[   79.398032][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.401222][   T10] usb 2-1: Product: syz
[   79.403582][   T10] usb 2-1: Manufacturer: syz
[   79.407291][   T10] usb 2-1: SerialNumber: syz
[   79.419671][   T10] usb 2-1: config 0 descriptor??
[   79.431930][   T10] gspca_main: stk014-2.14.0 probing 05e1:0893
[   79.437354][   T10] usb 2-1: selecting invalid altsetting 1
[   79.513626][ T6159] loop2: detected capacity change from 0 to 24
[   79.519025][ T6155] loop0: detected capacity change from 0 to 32768
[   79.525374][ T6159] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   79.549403][ T6159] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   79.638989][   T10] gspca_stk014: reg_r err -71
[   79.645845][   T10] stk014 2-1:0.0: probe with driver stk014 failed with error -71
[   79.659697][   T10] usb 2-1: USB disconnect, device number 5
[   79.789530][ T6167] loop0: detected capacity change from 0 to 64
[   79.802129][ T6167] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[   79.922448][ T6171] loop0: detected capacity change from 0 to 512
[   79.937353][ T6173] PM: Enabling pm_trace changes system date and time during resume.
[   79.937353][ T6173] PM: Correct system time has to be restored manually after resume.
[   80.070908][ T6180] loop2: detected capacity change from 0 to 164
[   80.085804][ T6180] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   80.094568][ T6180] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   80.103638][ T6180] Symlink component flag not implemented
[   80.105809][ T6180] Symlink component flag not implemented
[   80.107653][ T6180] Symlink component flag not implemented (7)
[   80.109695][ T6180] Symlink component flag not implemented (116)
[   80.228147][ T6189] capability: warning: `syz.0.128' uses deprecated v2 capabilities in a way that may be insecure
[   80.234844][ T6185] loop2: detected capacity change from 0 to 4096
[   80.242279][ T6187] loop1: detected capacity change from 0 to 512
[   80.268196][ T6187] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   80.291208][ T6185] ntfs3(loop2): Failed to load $Volume (-22).
[   80.292062][ T6187] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   80.298482][ T6187] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.127: Corrupt directory, running e2fsck is recommended
[   80.326113][ T6187] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   80.335090][ T6187] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.127: corrupted in-inode xattr: invalid ea_ino
[   80.349560][ T6187] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   80.351573][    C0] EXT4-fs (loop1): initial error at time 1776956627: ext4_iget_extra_inode:5128: inode 15
[   80.359893][    C0] EXT4-fs (loop1): last error at time 1776956627: ext4_iget_extra_inode:5128: inode 15
[   80.367170][ T6187] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.127: couldn't read orphan inode 15 (err -117)
[   80.381974][ T6187] loop1: lost filesystem error report for type 5 error -117
[   80.388823][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.401351][ T6196] loop2: detected capacity change from 0 to 512
[   80.418847][ T6196] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.130: corrupted inode contents
[   80.429155][ T6187] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   80.438935][ T6196] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   80.441002][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   80.443174][ T6187] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   80.444822][    C0] EXT4-fs (loop2): initial error at time 1776956627: ext4_do_update_inode:5690
[   80.448517][ T6187] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.127: Corrupt directory, running e2fsck is recommended
[   80.450571][    C0] : inode 15
[   80.455294][ T6187] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   80.458292][    C0] 
[   80.458304][    C0] EXT4-fs (loop2): last error at time 1776956627: ext4_do_update_inode:5690: inode 15
[   80.471575][ T6196] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   80.480207][ T6196] loop2: lost filesystem error report for type 5 error -117
[   80.483814][ T6196] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.130: corrupted inode contents
[   80.493201][ T6187] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   80.500275][ T6187] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.127: Corrupt directory, running e2fsck is recommended
[   80.511321][ T6196] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   80.512417][ T6196] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.130: mark_inode_dirty error
[   80.524670][ T6196] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   80.526777][ T6196] EXT4-fs (loop2): 1 orphan inode deleted
[   80.532948][ T6187] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   80.541068][ T6187] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   80.554192][ T6187] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.127: Corrupt directory, running e2fsck is recommended
[   80.563512][ T6196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.568954][ T6187] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   80.582195][ T6187] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.127: path /44/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   80.604704][ T6187] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 2: comm syz.1.127: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[   80.614094][ T6187] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.127: path /44/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0
[   80.615993][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.650613][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.674084][ T6208] loop0: detected capacity change from 0 to 1024
[   80.677981][ T6208] hfsplus: failed to load extents file
[   80.807037][ T6212] loop0: detected capacity change from 0 to 1764
[   81.070152][   T33] audit: type=1326 audit(1776956628.375:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f519c819 code=0x7ffc0000
[   81.086915][   T33] audit: type=1326 audit(1776956628.385:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f519c819 code=0x7ffc0000
[   81.097440][   T33] audit: type=1326 audit(1776956628.385:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55f515d04e code=0x7ffc0000
[   81.104348][   T33] audit: type=1326 audit(1776956628.385:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f519c4ab code=0x7ffc0000
[   81.110857][   T33] audit: type=1326 audit(1776956628.385:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f519c4ab code=0x7ffc0000
[   81.118000][   T33] audit: type=1326 audit(1776956628.395:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f519c4ab code=0x7ffc0000
[   81.125524][   T33] audit: type=1326 audit(1776956628.395:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f519c4ab code=0x7ffc0000
[   81.182239][   T33] audit: type=1326 audit(1776956628.495:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f519c4ab code=0x7ffc0000
[   81.199431][ T6219] find_entry called with index = 0
[   81.203607][ T6219] read_mapping_page failed!
[   81.205727][ T6219] ERROR: (device loop1): txCommit: 
[   81.205727][ T6219] 
[   81.251820][   T33] audit: type=1326 audit(1776956628.565:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f519c4ab code=0x7ffc0000
[   81.311280][ T5876] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   81.328044][   T33] audit: type=1326 audit(1776956628.635:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.146" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f519c4ab code=0x7ffc0000
[   81.512045][ T5876] usb 3-1: Using ep0 maxpacket: 16
[   81.530413][ T5876] usb 3-1: config 251 has an invalid interface number: 202 but max is 0
[   81.541083][ T5876] usb 3-1: config 251 has no interface number 0
[   81.545970][ T5876] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   81.553236][ T5876] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[   81.558517][ T5876] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   81.575162][ T5876] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[   81.584490][ T5876] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[   81.596499][ T5876] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120
[   81.602928][ T5876] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   81.607034][ T5876] usb 3-1: config 251 interface 202 has no altsetting 0
[   81.610402][ T6246] syz.1.154 uses obsolete (PF_INET,SOCK_PACKET)
[   81.622662][ T5876] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[   81.626096][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   81.628836][ T5876] usb 3-1: Product: syz
[   81.630406][ T5876] usb 3-1: SerialNumber: syz
[   81.641754][ T6230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   81.802193][  T795] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   81.856760][ T5876] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02!
[   81.859550][ T5876] cxacru 3-1:251.202: probe with driver cxacru failed with error -22
[   81.865990][ T5876] usb 3-1: USB disconnect, device number 3
[   81.951083][  T795] usb 1-1: Using ep0 maxpacket: 8
[   81.956579][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   81.961047][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.964900][  T795] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.968541][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[   81.974093][  T795] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   81.978925][  T795] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   81.983193][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.988789][  T795] usb 1-1: config 0 descriptor??
[   81.992059][ T6244] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   82.031107][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   82.182997][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.187791][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.192415][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[   82.199010][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.204464][   T10] usb 2-1: config 0 descriptor??
[   82.210881][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   82.214916][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   82.412967][ T5214] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[   82.418244][  T955] usb 1-1: USB disconnect, device number 4
[   82.962836][   T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0
[   82.965866][   T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0
[   82.968880][   T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0
[   82.971976][   T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0
[   82.975050][   T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0
[   82.978050][   T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0
[   83.003153][   T10] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0
[   83.081697][ T6263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   83.094792][   T10] usb 2-1: USB disconnect, device number 6
[   83.564215][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.567455][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.601042][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   83.628162][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.649093][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.754228][   T10] usb 1-1: Using ep0 maxpacket: 16
[   83.762043][   T10] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   83.767236][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   83.771187][   T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[   83.777698][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.792710][   T10] usb 1-1: config 0 descriptor??
[   84.024684][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.033278][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.038158][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.051404][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.265191][   T10] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0
[   84.268321][   T10] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0
[   84.271877][   T10] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0
[   84.274441][   T10] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0
[   84.287014][   T10] lenovo 0003:17EF:6009.0002: hidraw0: USB HID v0.0b Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[   84.447688][   T10] usb 1-1: USB disconnect, device number 5
[   84.904730][ T6299] set_capacity_and_notify: 2 callbacks suppressed
[   84.904742][ T6299] loop2: detected capacity change from 0 to 4096
[   84.953540][ T6299] NILFS (loop2): invalid segment: Checksum error in segment payload
[   84.956211][ T6299] NILFS (loop2): trying rollback from an earlier position
[   84.996138][ T6299] NILFS (loop2): recovery complete
[   85.001812][ T6301] loop0: detected capacity change from 0 to 256
[   85.006870][ T6301] exfat: Deprecated parameter 'namecase'
[   85.013812][ T6301] exfat: Deprecated parameter 'namecase'
[   85.023267][ T6302] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.029132][ T6301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   85.308982][ T6314] loop2: detected capacity change from 0 to 512
[   85.315029][ T6314] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   85.319245][ T6314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   85.323523][ T6314] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26919!=33349)
[   85.328732][ T6314] EXT4-fs (loop2): mount failed
[   85.459190][ T6310] loop0: detected capacity change from 0 to 32768
[   85.463163][ T6310] btrfs: Deprecated parameter 'usebackuproot'
[   85.467255][ T6310] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   85.483047][ T6310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.180 (6310)
[   85.530668][ T6310] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.543261][ T6310] BTRFS info (device loop0): using crc32c checksum algorithm
[   85.696520][ T6310] BTRFS info (device loop0): rebuilding free space tree
[   85.754923][ T6310] BTRFS info (device loop0): turning off barriers
[   85.757398][ T6310] BTRFS info (device loop0): turning on sync discard
[   85.759878][ T6310] BTRFS info (device loop0): enabling free space tree
[   85.763110][ T6310] BTRFS info (device loop0): force clearing of disk cache
[   85.765807][ T6310] BTRFS info (device loop0): enabling auto defrag
[   85.768201][ T6310] BTRFS info (device loop0): trying to use backup root at mount time
[   85.998124][ T5829] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.001848][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'.
[   86.239034][ T6351] loop0: detected capacity change from 0 to 512
[   86.286114][ T6351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.290448][ T6351] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.329897][   T33] kauditd_printk_skb: 26 callbacks suppressed
[   86.329911][   T33] audit: type=1800 audit(1776956633.635:66): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.191" name="file1" dev="loop0" ino=15 res=0 errno=0
[   86.499670][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.674189][ T6358] loop2: detected capacity change from 0 to 32768
[   86.929138][   T31] cfg80211: failed to load regulatory.db
[   87.002396][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   87.151151][   T10] usb 1-1: Using ep0 maxpacket: 32
[   87.155710][   T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   87.158326][   T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   87.160767][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   87.164275][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   87.167426][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   87.170317][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   87.174354][   T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   87.177376][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.183526][   T10] usb 1-1: config 0 descriptor??
[   87.430019][   T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   87.519387][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'.
[   87.627707][    C1] usblp0: nonzero read bulk status received: -71
[   87.630344][   T31] usb 1-1: USB disconnect, device number 6
[   87.660246][ T6386] binder: BC_ACQUIRE_RESULT not supported
[   87.665725][ T6386] binder: 6385:6386 ioctl c0306201 2000000001c0 returned -22
[   87.835772][ T6368] usblp0: removed
[   88.619791][ T6398] loop0: detected capacity change from 0 to 512
[   88.643991][ T6398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.652380][ T6398] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.209: iget: bad i_size value: 38620345925642
[   88.657131][ T6398] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   88.657540][ T6398] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.209: couldn't read orphan inode 15 (err -117)
[   88.665303][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   88.665320][    C0] EXT4-fs (loop0): initial error at time 1776956635: ext4_orphan_get:1397: inode 15
[   88.665344][    C0] EXT4-fs (loop0): last error at time 1776956635: ext4_orphan_get:1397: inode 15
[   88.675263][ T6398] loop0: lost filesystem error report for type 5 error -117
[   88.677060][ T6398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.711535][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.890073][ T6404] loop2: detected capacity change from 0 to 256
[   89.061345][   T54] Bluetooth: hci3: command 0x1003 tx timeout
[   89.066159][ T5214] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   89.231286][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.392136][ T5876] usb 3-1: Using ep0 maxpacket: 8
[   89.396070][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short
[   89.400186][ T5876] usb 3-1: config 127 has an invalid interface number: 1 but max is 0
[   89.402940][ T5876] usb 3-1: config 127 has no interface number 0
[   89.405153][ T5876] usb 3-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[   89.408665][ T5876] usb 3-1: config 127 interface 1 has no altsetting 0
[   89.413019][ T5876] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89
[   89.415668][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.417990][ T5876] usb 3-1: Product: syz
[   89.419357][ T5876] usb 3-1: Manufacturer: syz
[   89.420801][ T5876] usb 3-1: SerialNumber: syz
[   89.427504][ T6409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   89.662004][ T5876] redrat3 3-1:127.1: Couldn't find all endpoints
[   89.675334][ T5876] usb 3-1: USB disconnect, device number 4
[   89.703015][   T33] audit: type=1400 audit(1776956637.005:67): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6414 comm="syz.0.216"
[   89.844864][ T6424] input: syz0 as /devices/virtual/input/input5
[   90.516724][ T6438] loop2: detected capacity change from 0 to 2048
[   90.541968][ T6439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.728762][ T6447] loop2: detected capacity change from 0 to 8192
[   91.174092][ T6471] loop7: detected capacity change from 0 to 16384
[   91.211684][   T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   91.226632][ T6473] loop0: detected capacity change from 0 to 1024
[   91.262462][ T6473] hfsplus: bad catalog entry type
[   91.362440][   T31] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   91.371447][   T31] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   91.377337][   T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   91.380570][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.390748][ T6460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   91.406305][   T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   91.759967][ T5890] usb 3-1: USB disconnect, device number 5
[   92.112430][ T6499] loop0: detected capacity change from 0 to 512
[   92.115869][ T6499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   92.129313][ T6499] EXT4-fs (loop0): 1 truncate cleaned up
[   92.137821][ T6499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.145838][ T6499] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.253: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   92.153270][ T6499] EXT4-fs (loop0): Remounting filesystem read-only
[   92.156015][ T6499] EXT4-fs warning (device loop0): ext4_rename_delete:3739: inode #2: comm syz.0.253: Deleting old file: nlink 4, error=-117
[   92.178467][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.555024][ T6515] random: crng reseeded on system resumption
[   92.883708][ T6514] loop0: detected capacity change from 0 to 32768
[   92.899384][ T6514] 
[   92.899384][ T6514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   92.899384][ T6514] 
[   92.934992][ T3600] ERROR: (device loop0): diWrite: ixpxd invalid
[   92.934992][ T3600] 
[   92.943251][ T3600] ERROR: (device loop0): txCommit: 
[   92.943251][ T3600] 
[   92.946962][ T3600] jfs_write_inode: jfs_commit_inode failed!
[   92.950105][ T5829] 
[   92.950105][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   92.950105][ T5829] 
[   92.957991][ T5829] 
[   92.957991][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   92.957991][ T5829] 
[   94.607549][ T6545] loop2: detected capacity change from 0 to 32768
[   94.622581][ T6545] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.272 (6545)
[   95.041132][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   95.100162][ T6547] loop0: detected capacity change from 0 to 131072
[   95.110609][ T6547] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[   95.113339][ T6547] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   95.118338][ T6547] F2FS-fs (loop0): invalid crc value
[   95.191309][ T5876] usb 2-1: Using ep0 maxpacket: 8
[   95.192122][ T6547] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.197271][ T6545] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   95.203489][ T6545] BTRFS info (device loop2): using sha256 checksum algorithm
[   95.205061][ T6547] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   95.205711][ T5876] usb 2-1: config 6 has an invalid interface number: 220 but max is 0
[   95.208482][ T6547] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   95.222592][ T5214] Bluetooth: hci2: command 0x040f tx timeout
[   95.229815][ T5876] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   95.236262][ T5876] usb 2-1: config 6 has no interface number 0
[   95.241380][ T5876] usb 2-1: config 6 interface 220 has no altsetting 0
[   95.250492][ T5876] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10
[   95.256647][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.259591][ T5876] usb 2-1: Product: syz
[   95.262570][ T5876] usb 2-1: Manufacturer: syz
[   95.264744][ T5876] usb 2-1: SerialNumber: syz
[   95.315471][ T6545] BTRFS info (device loop2): turning off barriers
[   95.319996][ T6545] BTRFS info (device loop2): enabling free space tree
[   95.389456][ T5834] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   95.520260][ T5876] uvcvideo 2-1:6.220: probe with driver uvcvideo failed with error -22
[   95.563373][ T5876] usb 2-1: USB disconnect, device number 7
[   95.957663][   T33] audit: type=1326 audit(1776956643.265:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.281" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbccd79c819 code=0x0
[   96.061230][ T5876] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   96.218182][ T5876] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[   96.222263][ T5876] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4
[   96.228823][ T5876] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[   96.232039][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.234777][ T5876] usb 3-1: Product: syz
[   96.236144][ T5876] usb 3-1: Manufacturer: syz
[   96.237885][ T5876] usb 3-1: SerialNumber: syz
[   96.261953][  T955] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   96.424275][  T955] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[   96.427627][  T955] usb 2-1: config 5 has no interface number 0
[   96.430004][  T955] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[   96.435336][  T955] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[   96.442851][  T955] usb 2-1: config 5 interface 123 has no altsetting 0
[   96.448940][  T955] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[   96.455880][  T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.468325][  T955] usb 2-1: Product: syz
[   96.474801][  T955] usb 2-1: Manufacturer: syz
[   96.477883][  T955] usb 2-1: SerialNumber: syz
[   96.548144][ T5876] usb 3-1: USB disconnect, device number 6
[   96.703662][  T955] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device.
[   96.712357][  T955] usb 2-1: USB disconnect, device number 8
[   96.828969][ T6588] tmpfs: Bad value for 'mpol'
[   96.877469][ T5214] Bluetooth: hci1: SCO packet for unknown connection handle 4041
[   96.969388][ T6594] loop0: detected capacity change from 0 to 2048
[   96.997697][ T6594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.178879][ T6602] loop0: detected capacity change from 0 to 256
[   97.763476][ T6633] program syz.0.305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.949546][ T6631] loop1: detected capacity change from 0 to 40427
[   97.961476][ T6631] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   97.964465][ T6631] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   98.061384][ T6631] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.069893][ T6631] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   98.072802][ T6631] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.118013][ T6631] syz.1.304: attempt to access beyond end of device
[   98.118013][ T6631] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   98.139849][ T5826] syz-executor: attempt to access beyond end of device
[   98.139849][ T5826] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   98.156824][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.156843][ T5826] Tainted: [L]=SOFTLOCKUP
[   98.156862][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.156867][ T5826] Call Trace:
[   98.156873][ T5826]  <TASK>
[   98.156877][ T5826]  dump_stack_lvl+0xe8/0x150
[   98.156897][ T5826]  f2fs_handle_critical_error+0x37c/0x540
[   98.156914][ T5826]  f2fs_write_end_io+0x1273/0x1740
[   98.156958][ T5826]  __submit_merged_bio+0x256/0x6a0
[   98.156974][ T5826]  f2fs_submit_merged_write+0x284/0x390
[   98.156987][ T5826]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[   98.157006][ T5826]  f2fs_sync_node_pages+0x14bf/0x1680
[   98.157025][ T5826]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   98.157055][ T5826]  f2fs_write_checkpoint+0xeb8/0x26a0
[   98.157078][ T5826]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   98.157110][ T5826]  kill_f2fs_super+0x314/0x720
[   98.157121][ T5826]  ? __pfx_kill_f2fs_super+0x10/0x10
[   98.157135][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[   98.157149][ T5826]  deactivate_locked_super+0xbc/0x130
[   98.157161][ T5826]  cleanup_mnt+0x437/0x4d0
[   98.157172][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.157186][ T5826]  task_work_run+0x1d9/0x270
[   98.157199][ T5826]  ? __pfx_task_work_run+0x10/0x10
[   98.157211][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.157220][ T5826]  exit_to_user_mode_loop+0xed/0x480
[   98.157239][ T5826]  ? rcu_is_watching+0x15/0xb0
[   98.157249][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.157257][ T5826]  do_syscall_64+0x33e/0xf80
[   98.157265][ T5826]  ? trace_irq_disable+0x3b/0x140
[   98.157280][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.157287][ T5826] RIP: 0033:0x7fe2c3d9da57
[   98.157297][ T5826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   98.157304][ T5826] RSP: 002b:00007ffee6ce2ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   98.157315][ T5826] RAX: 0000000000000000 RBX: 00007fe2c3e32048 RCX: 00007fe2c3d9da57
[   98.157321][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6ce2fb0
[   98.157326][ T5826] RBP: 00007ffee6ce2fb0 R08: 00007ffee6ce3fb0 R09: 00000000ffffffff
[   98.157331][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6ce4040
[   98.157336][ T5826] R13: 00007fe2c3e32048 R14: 0000000000017eed R15: 00007ffee6ce4080
[   98.157350][ T5826]  </TASK>
[   98.158052][ T5826] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   98.240543][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.240561][ T5826] Tainted: [L]=SOFTLOCKUP
[   98.240565][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.240570][ T5826] Call Trace:
[   98.240574][ T5826]  <TASK>
[   98.240578][ T5826]  dump_stack_lvl+0xe8/0x150
[   98.240598][ T5826]  f2fs_handle_critical_error+0x37c/0x540
[   98.240615][ T5826]  f2fs_write_end_io+0x1273/0x1740
[   98.240634][ T5826]  __submit_merged_bio+0x256/0x6a0
[   98.240649][ T5826]  f2fs_submit_merged_write+0x284/0x390
[   98.240664][ T5826]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[   98.240683][ T5826]  f2fs_sync_node_pages+0x14bf/0x1680
[   98.240704][ T5826]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   98.240737][ T5826]  f2fs_write_checkpoint+0xeb8/0x26a0
[   98.240762][ T5826]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   98.240812][ T5826]  kill_f2fs_super+0x314/0x720
[   98.240826][ T5826]  ? __pfx_kill_f2fs_super+0x10/0x10
[   98.240840][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[   98.240856][ T5826]  deactivate_locked_super+0xbc/0x130
[   98.240868][ T5826]  cleanup_mnt+0x437/0x4d0
[   98.240879][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.240894][ T5826]  task_work_run+0x1d9/0x270
[   98.240920][ T5826]  ? __pfx_task_work_run+0x10/0x10
[   98.240937][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.240950][ T5826]  exit_to_user_mode_loop+0xed/0x480
[   98.240963][ T5826]  ? rcu_is_watching+0x15/0xb0
[   98.240973][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.240982][ T5826]  do_syscall_64+0x33e/0xf80
[   98.240990][ T5826]  ? trace_irq_disable+0x3b/0x140
[   98.241005][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.241013][ T5826] RIP: 0033:0x7fe2c3d9da57
[   98.241023][ T5826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   98.241030][ T5826] RSP: 002b:00007ffee6ce2ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   98.241040][ T5826] RAX: 0000000000000000 RBX: 00007fe2c3e32048 RCX: 00007fe2c3d9da57
[   98.241046][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6ce2fb0
[   98.241050][ T5826] RBP: 00007ffee6ce2fb0 R08: 00007ffee6ce3fb0 R09: 00000000ffffffff
[   98.241056][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6ce4040
[   98.241061][ T5826] R13: 00007fe2c3e32048 R14: 0000000000017eed R15: 00007ffee6ce4080
[   98.241075][ T5826]  </TASK>
[   98.319402][ T5826] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   98.330025][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.330042][ T5826] Tainted: [L]=SOFTLOCKUP
[   98.330045][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.330050][ T5826] Call Trace:
[   98.330054][ T5826]  <TASK>
[   98.330058][ T5826]  dump_stack_lvl+0xe8/0x150
[   98.330078][ T5826]  f2fs_handle_critical_error+0x37c/0x540
[   98.330095][ T5826]  f2fs_write_end_io+0x1273/0x1740
[   98.330114][ T5826]  __submit_merged_bio+0x256/0x6a0
[   98.330130][ T5826]  f2fs_submit_merged_write+0x284/0x390
[   98.330144][ T5826]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[   98.330164][ T5826]  f2fs_sync_node_pages+0x14bf/0x1680
[   98.330190][ T5826]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   98.330224][ T5826]  f2fs_write_checkpoint+0xeb8/0x26a0
[   98.330249][ T5826]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   98.330284][ T5826]  kill_f2fs_super+0x314/0x720
[   98.330297][ T5826]  ? __pfx_kill_f2fs_super+0x10/0x10
[   98.330311][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[   98.330328][ T5826]  deactivate_locked_super+0xbc/0x130
[   98.330341][ T5826]  cleanup_mnt+0x437/0x4d0
[   98.330352][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.330367][ T5826]  task_work_run+0x1d9/0x270
[   98.330380][ T5826]  ? __pfx_task_work_run+0x10/0x10
[   98.330393][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.330403][ T5826]  exit_to_user_mode_loop+0xed/0x480
[   98.330416][ T5826]  ? rcu_is_watching+0x15/0xb0
[   98.330426][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.330435][ T5826]  do_syscall_64+0x33e/0xf80
[   98.330443][ T5826]  ? trace_irq_disable+0x3b/0x140
[   98.330477][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.330486][ T5826] RIP: 0033:0x7fe2c3d9da57
[   98.330496][ T5826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   98.330503][ T5826] RSP: 002b:00007ffee6ce2ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   98.330514][ T5826] RAX: 0000000000000000 RBX: 00007fe2c3e32048 RCX: 00007fe2c3d9da57
[   98.330519][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6ce2fb0
[   98.330524][ T5826] RBP: 00007ffee6ce2fb0 R08: 00007ffee6ce3fb0 R09: 00000000ffffffff
[   98.330530][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6ce4040
[   98.330535][ T5826] R13: 00007fe2c3e32048 R14: 0000000000017eed R15: 00007ffee6ce4080
[   98.330549][ T5826]  </TASK>
[   98.330553][ T5826] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   98.412359][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.412386][ T5826] Tainted: [L]=SOFTLOCKUP
[   98.412391][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.412400][ T5826] Call Trace:
[   98.412408][ T5826]  <TASK>
[   98.412414][ T5826]  dump_stack_lvl+0xe8/0x150
[   98.412443][ T5826]  f2fs_handle_critical_error+0x37c/0x540
[   98.412501][ T5826]  f2fs_write_end_io+0x1273/0x1740
[   98.412532][ T5826]  __submit_merged_bio+0x256/0x6a0
[   98.412559][ T5826]  f2fs_submit_merged_write+0x284/0x390
[   98.412582][ T5826]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[   98.412633][ T5826]  f2fs_sync_node_pages+0x14bf/0x1680
[   98.412669][ T5826]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   98.412722][ T5826]  f2fs_write_checkpoint+0xeb8/0x26a0
[   98.412761][ T5826]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   98.412818][ T5826]  kill_f2fs_super+0x314/0x720
[   98.412840][ T5826]  ? __pfx_kill_f2fs_super+0x10/0x10
[   98.412865][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[   98.412892][ T5826]  deactivate_locked_super+0xbc/0x130
[   98.412912][ T5826]  cleanup_mnt+0x437/0x4d0
[   98.412930][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.412955][ T5826]  task_work_run+0x1d9/0x270
[   98.412976][ T5826]  ? __pfx_task_work_run+0x10/0x10
[   98.412999][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.413016][ T5826]  exit_to_user_mode_loop+0xed/0x480
[   98.413045][ T5826]  ? rcu_is_watching+0x15/0xb0
[   98.413062][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.413077][ T5826]  do_syscall_64+0x33e/0xf80
[   98.413091][ T5826]  ? trace_irq_disable+0x3b/0x140
[   98.413115][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.413130][ T5826] RIP: 0033:0x7fe2c3d9da57
[   98.413145][ T5826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   98.413158][ T5826] RSP: 002b:00007ffee6ce2ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   98.413175][ T5826] RAX: 0000000000000000 RBX: 00007fe2c3e32048 RCX: 00007fe2c3d9da57
[   98.413185][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6ce2fb0
[   98.413194][ T5826] RBP: 00007ffee6ce2fb0 R08: 00007ffee6ce3fb0 R09: 00000000ffffffff
[   98.413203][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6ce4040
[   98.413212][ T5826] R13: 00007fe2c3e32048 R14: 0000000000017eed R15: 00007ffee6ce4080
[   98.413237][ T5826]  </TASK>
[   98.413285][ T5826] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   98.604285][ T6649] loop0: detected capacity change from 0 to 32768
[   98.805251][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'.
[   98.869913][ T6664] erspan0: entered promiscuous mode
[   98.872504][ T6666] loop0: detected capacity change from 0 to 128
[   98.890605][ T6664] erspan0: left promiscuous mode
[   98.901572][ T6666] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   98.902305][ T6668] loop1: detected capacity change from 0 to 64
[   98.913081][ T6666] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.931861][ T6668] syz.1.321: attempt to access beyond end of device
[   98.931861][ T6668] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64
[   98.936554][ T6668] Buffer I/O error on dev loop1, logical block 512, async page read
[   98.939014][ T6668] syz.1.321: attempt to access beyond end of device
[   98.939014][ T6668] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64
[   98.943140][ T6668] Buffer I/O error on dev loop1, logical block 56576, async page read
[   98.967798][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   99.169804][ T6681] binder: 6680:6681 ioctl c0306201 200000000240 returned -14
[   99.371087][  T795] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   99.413895][ T6695] loop2: detected capacity change from 0 to 2048
[   99.452576][ T6695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.532733][ T6699] loop0: detected capacity change from 0 to 2048
[   99.546520][  T795] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[   99.550711][ T6699] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[   99.556468][  T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.589439][  T795] usb 2-1: config 0 descriptor??
[   99.605360][  T795] pwc: Philips SPC 900NC USB webcam detected.
[   99.820556][  T795] pwc: Failed to set LED on/off time (-71)
[   99.827485][  T795] pwc: send_video_command error -71
[   99.829109][  T795] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   99.835522][  T795] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[   99.842706][ T6711] loop0: detected capacity change from 0 to 1024
[   99.846406][  T795] usb 2-1: USB disconnect, device number 9
[   99.853434][ T6711] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  100.097492][ T6715] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  100.219082][ T6715] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  100.223290][ T6715] overlayfs: failed to look up (tracing) for ino (-66)
[  100.271072][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  100.421106][   T10] usb 1-1: Using ep0 maxpacket: 32
[  100.432895][   T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  100.439796][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.444417][   T10] usb 1-1: Product: syz
[  100.446179][   T10] usb 1-1: Manufacturer: syz
[  100.448176][   T10] usb 1-1: SerialNumber: syz
[  100.474677][   T10] usb 1-1: config 0 descriptor??
[  100.606510][ T6717] loop1: detected capacity change from 0 to 32768
[  100.612389][ T6717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.342 (6717)
[  100.631261][ T6717] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.636763][ T6717] BTRFS info (device loop1): using sha256 checksum algorithm
[  100.839235][ T6717] BTRFS info (device loop1): enabling ssd optimizations
[  100.847571][ T6717] BTRFS info (device loop1): turning on async discard
[  100.849946][ T6717] BTRFS info (device loop1): enabling free space tree
[  100.892470][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.993380][   T10] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a
[  100.995593][   T10] airspy 1-1:0.0: Could not detect board
[  100.997244][   T10] airspy 1-1:0.0: probe with driver airspy failed with error -71
[  101.009195][   T10] usb 1-1: USB disconnect, device number 7
[  101.284426][ T6745] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.672007][ T6758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.352 (6758)
[  101.681261][ T6758] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.684212][ T6758] BTRFS info (device loop0): using sha256 checksum algorithm
[  101.742748][ T6758] BTRFS info (device loop0): setting nodatasum
[  101.744896][ T6758] BTRFS info (device loop0): enabling ssd optimizations
[  101.746878][ T6758] BTRFS info (device loop0): turning on async discard
[  101.748808][ T6758] BTRFS info (device loop0): enabling free space tree
[  102.198984][   T33] audit: type=1800 audit(1776956649.285:69): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.352" name="file1" dev="loop0" ino=260 res=0 errno=0
[  102.325026][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  102.336226][ T6781] set_capacity_and_notify: 3 callbacks suppressed
[  102.336244][ T6781] loop1: detected capacity change from 0 to 1024
[  102.486834][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short
[  102.498628][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  102.511350][ T5890] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  102.521863][ T5890] usb 3-1: config 1 interface 0 has no altsetting 0
[  102.527121][ T5829] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.533268][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  102.540560][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.551822][ T5890] usb 3-1: Product: syz
[  102.554631][ T5890] usb 3-1: Manufacturer: syz
[  102.556476][ T5890] usb 3-1: SerialNumber: syz
[  102.783317][ T5890] smsusb:smsusb_probe: board id=8, interface number 0
[  102.788417][ T5890] smsusb:smsusb_probe: Device initialized with return code -19
[  102.837636][ T5890] usb 3-1: USB disconnect, device number 7
[  102.849160][ T6785] loop1: detected capacity change from 0 to 40427
[  102.853076][ T6785] F2FS-fs (loop1): invalid crc value
[  102.914254][ T6785] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.918218][ T6785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.440874][ T6798] evm: overlay not supported
[  103.616635][ T5826] syz-executor: attempt to access beyond end of device
[  103.616635][ T5826] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  103.634192][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  103.634217][ T5826] Tainted: [L]=SOFTLOCKUP
[  103.634222][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.634230][ T5826] Call Trace:
[  103.634235][ T5826]  <TASK>
[  103.634241][ T5826]  dump_stack_lvl+0xe8/0x150
[  103.634269][ T5826]  f2fs_handle_critical_error+0x37c/0x540
[  103.634296][ T5826]  f2fs_write_end_io+0x1273/0x1740
[  103.634325][ T5826]  __submit_merged_bio+0x256/0x6a0
[  103.634350][ T5826]  __submit_merged_write_cond+0x3c9/0x4e0
[  103.634376][ T5826]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  103.634412][ T5826]  f2fs_write_data_pages+0x287e/0x34f0
[  103.634433][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.634482][ T5826]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.634563][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.634596][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.634622][ T5826]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.634644][ T5826]  ? do_raw_spin_unlock+0x4d/0x210
[  103.634660][ T5826]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.634680][ T5826]  do_writepages+0x32e/0x550
[  103.634708][ T5826]  ? do_raw_spin_unlock+0x4d/0x210
[  103.634725][ T5826]  filemap_fdatawrite+0x1e9/0x2f0
[  103.634749][ T5826]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  103.634783][ T5826]  ? do_raw_spin_unlock+0x4d/0x210
[  103.634794][ T5826]  f2fs_sync_dirty_inodes+0x30e/0x830
[  103.634809][ T5826]  f2fs_write_checkpoint+0x9df/0x26a0
[  103.634817][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.634841][ T5826]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  103.634872][ T5826]  kill_f2fs_super+0x314/0x720
[  103.634883][ T5826]  ? __pfx_kill_f2fs_super+0x10/0x10
[  103.634896][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[  103.634917][ T5826]  deactivate_locked_super+0xbc/0x130
[  103.634928][ T5826]  cleanup_mnt+0x437/0x4d0
[  103.634939][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.634953][ T5826]  task_work_run+0x1d9/0x270
[  103.634966][ T5826]  ? __pfx_task_work_run+0x10/0x10
[  103.634978][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.634987][ T5826]  exit_to_user_mode_loop+0xed/0x480
[  103.635000][ T5826]  ? rcu_is_watching+0x15/0xb0
[  103.635010][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.635018][ T5826]  do_syscall_64+0x33e/0xf80
[  103.635026][ T5826]  ? trace_irq_disable+0x3b/0x140
[  103.635041][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.635048][ T5826] RIP: 0033:0x7fe2c3d9da57
[  103.635058][ T5826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  103.635065][ T5826] RSP: 002b:00007ffee6ce2ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.635076][ T5826] RAX: 0000000000000000 RBX: 00007fe2c3e32048 RCX: 00007fe2c3d9da57
[  103.635108][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6ce2fb0
[  103.635113][ T5826] RBP: 00007ffee6ce2fb0 R08: 00007ffee6ce3fb0 R09: 00000000ffffffff
[  103.635119][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6ce4040
[  103.635124][ T5826] R13: 00007fe2c3e32048 R14: 00000000000193fa R15: 00007ffee6ce4080
[  103.635137][ T5826]  </TASK>
[  103.636276][ T5826] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  103.760060][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  103.760120][ T5826] Tainted: [L]=SOFTLOCKUP
[  103.760126][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.760135][ T5826] Call Trace:
[  103.760142][ T5826]  <TASK>
[  103.760149][ T5826]  dump_stack_lvl+0xe8/0x150
[  103.760180][ T5826]  f2fs_handle_critical_error+0x37c/0x540
[  103.760208][ T5826]  f2fs_write_end_io+0x1273/0x1740
[  103.760240][ T5826]  __submit_merged_bio+0x256/0x6a0
[  103.760268][ T5826]  __submit_merged_write_cond+0x3c9/0x4e0
[  103.760293][ T5826]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  103.760328][ T5826]  f2fs_write_data_pages+0x287e/0x34f0
[  103.760351][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.760398][ T5826]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.760455][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.760488][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.760515][ T5826]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.760542][ T5826]  ? do_raw_spin_unlock+0x4d/0x210
[  103.760559][ T5826]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.760582][ T5826]  do_writepages+0x32e/0x550
[  103.760613][ T5826]  ? do_raw_spin_unlock+0x4d/0x210
[  103.760640][ T5826]  filemap_fdatawrite+0x1e9/0x2f0
[  103.760667][ T5826]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  103.760718][ T5826]  ? do_raw_spin_unlock+0x4d/0x210
[  103.760740][ T5826]  f2fs_sync_dirty_inodes+0x30e/0x830
[  103.760765][ T5826]  f2fs_write_checkpoint+0x9df/0x26a0
[  103.760781][ T5826]  ? __lock_acquire+0x6b5/0x2cf0
[  103.760823][ T5826]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  103.760877][ T5826]  kill_f2fs_super+0x314/0x720
[  103.760899][ T5826]  ? __pfx_kill_f2fs_super+0x10/0x10
[  103.760923][ T5826]  ? lockdep_hardirqs_on+0x7a/0x110
[  103.760947][ T5826]  deactivate_locked_super+0xbc/0x130
[  103.760968][ T5826]  cleanup_mnt+0x437/0x4d0
[  103.760987][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.761009][ T5826]  task_work_run+0x1d9/0x270
[  103.761031][ T5826]  ? __pfx_task_work_run+0x10/0x10
[  103.761054][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.761069][ T5826]  exit_to_user_mode_loop+0xed/0x480
[  103.761116][ T5826]  ? rcu_is_watching+0x15/0xb0
[  103.761132][ T5826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.761148][ T5826]  do_syscall_64+0x33e/0xf80
[  103.761164][ T5826]  ? trace_irq_disable+0x3b/0x140
[  103.761185][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.761200][ T5826] RIP: 0033:0x7fe2c3d9da57
[  103.761216][ T5826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  103.761228][ T5826] RSP: 002b:00007ffee6ce2ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.761244][ T5826] RAX: 0000000000000000 RBX: 00007fe2c3e32048 RCX: 00007fe2c3d9da57
[  103.761253][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6ce2fb0
[  103.761261][ T5826] RBP: 00007ffee6ce2fb0 R08: 00007ffee6ce3fb0 R09: 00000000ffffffff
[  103.761272][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6ce4040
[  103.761280][ T5826] R13: 00007fe2c3e32048 R14: 00000000000193fa R15: 00007ffee6ce4080
[  103.761304][ T5826]  </TASK>
[  103.891743][ T5826] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.069861][ T6807] loop1: detected capacity change from 0 to 512
[  104.078712][ T6807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  104.111967][ T6807] EXT4-fs (loop1): 1 truncate cleaned up
[  104.115381][ T6807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.142880][   T33] audit: type=1800 audit(1776956651.455:70): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="file1" dev="loop1" ino=15 res=0 errno=0
[  104.702812][ T6809] loop2: detected capacity change from 0 to 131072
[  105.037847][ T6809] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  105.042690][ T6809] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  105.086200][   T33] audit: type=1800 audit(1776956652.395:71): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.359" name="file1" dev="overlay" ino=15 res=0 errno=0
[  105.130641][ T6807] syz.1.359 (6807) used greatest stack depth: 17728 bytes left
[  105.448370][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.561612][ T5876] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  105.712974][ T5876] usb 1-1: config 6 has an invalid interface number: 20 but max is 0
[  105.717735][ T5876] usb 1-1: config 6 has no interface number 0
[  105.725368][ T5876] usb 1-1: config 6 interface 20 has no altsetting 0
[  105.730486][ T5876] usb 1-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86
[  105.738184][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.747003][ T5876] usb 1-1: Product: syz
[  105.748307][ T5876] usb 1-1: Manufacturer: syz
[  105.757534][ T5876] usb 1-1: SerialNumber: syz
[  105.783554][ T6834] loop2: detected capacity change from 0 to 2048
[  105.792440][ T6834] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.803324][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.812709][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.816580][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.821598][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.825006][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.907522][ T6841] loop2: detected capacity change from 0 to 8
[  105.943884][ T6841] SQUASHFS error: Unable to read directory block [249:c]
[  105.984477][ T5876] usb 1-1: Could not find all expected endpoints
[  106.011898][ T5876] usb 1-1: USB disconnect, device number 8
[  106.059331][ T6832] chnl_net:caif_netlink_parms(): no params data found
[  106.155692][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.158396][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.161265][ T6832] bridge_slave_0: entered allmulticast mode
[  106.164208][ T6832] bridge_slave_0: entered promiscuous mode
[  106.167781][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.170436][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.177054][ T6832] bridge_slave_1: entered allmulticast mode
[  106.179987][ T6851] loop2: detected capacity change from 0 to 256
[  106.180353][ T6832] bridge_slave_1: entered promiscuous mode
[  106.202260][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.208326][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.217052][ T6851] FAT-fs (loop2): Directory bread(block 64) failed
[  106.223175][ T6851] FAT-fs (loop2): Directory bread(block 65) failed
[  106.225798][ T6851] FAT-fs (loop2): Directory bread(block 66) failed
[  106.228357][ T6851] FAT-fs (loop2): Directory bread(block 67) failed
[  106.229241][ T6832] team0: Port device team_slave_0 added
[  106.231577][ T6851] FAT-fs (loop2): Directory bread(block 68) failed
[  106.235144][ T6832] team0: Port device team_slave_1 added
[  106.235257][ T6851] FAT-fs (loop2): Directory bread(block 69) failed
[  106.239357][ T6851] FAT-fs (loop2): Directory bread(block 70) failed
[  106.243565][ T6851] FAT-fs (loop2): Directory bread(block 71) failed
[  106.246254][ T6851] FAT-fs (loop2): Directory bread(block 72) failed
[  106.249564][ T6851] FAT-fs (loop2): Directory bread(block 73) failed
[  106.256398][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.258868][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.267385][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.271806][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.274412][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.282183][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.316827][ T6832] hsr_slave_0: entered promiscuous mode
[  106.322821][ T6832] hsr_slave_1: entered promiscuous mode
[  106.333656][ T6832] debugfs: 'hsr0' already exists in 'hsr'
[  106.340886][ T6832] Cannot create hsr debugfs directory
[  106.731099][ T5876] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  106.756013][ T6832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.764968][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.768521][ T6832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.776816][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.780256][ T6832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.789700][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.796493][ T6832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.808580][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.893209][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.899059][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.908613][ T5876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  106.914569][ T5876] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  106.918149][ T5876] usb 3-1: Product: syz
[  106.923118][ T5876] usb 3-1: Manufacturer: syz
[  106.924911][ T5876] usb 3-1: SerialNumber: syz
[  106.939772][ T5876] usb 3-1: 0:2 : does not exist
[  106.976196][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.987659][ T6832] 8021q: adding VLAN 0 to HW filter on device team0
[  106.994990][  T459] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.997171][  T459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.009350][  T459] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.011779][  T459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.151963][ T5890] usb 3-1: USB disconnect, device number 8
[  107.199531][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.241664][ T6832] veth0_vlan: entered promiscuous mode
[  107.247037][ T6832] veth1_vlan: entered promiscuous mode
[  107.266017][ T6832] veth0_macvtap: entered promiscuous mode
[  107.270153][ T6832] veth1_macvtap: entered promiscuous mode
[  107.282775][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.294362][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.305786][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.308775][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.313035][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.316000][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.416304][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.423008][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.449670][  T459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.454980][  T459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.715128][ T6900] mkiss: ax0: crc mode is auto.
[  107.862136][   T54] Bluetooth: hci0: command tx timeout
[  107.865238][ T5857] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.919310][   T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  108.012061][ T5857] usb 4-1: Using ep0 maxpacket: 8
[  108.017037][ T5857] usb 4-1: unable to get BOS descriptor or descriptor too short
[  108.027871][ T5857] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  108.035072][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.042100][ T5857] usb 4-1: Product: syz
[  108.043458][ T5857] usb 4-1: Manufacturer: syz
[  108.051026][ T5857] usb 4-1: SerialNumber: syz
[  108.278988][ T5857] kalmia 4-1:1.0: probe with driver kalmia failed with error -22
[  108.311556][ T5857] usb 4-1: USB disconnect, device number 2
[  108.580540][ T6919] mkiss: ax0: crc mode is auto.
[  109.095536][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  109.137967][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  109.179993][   T10] usb 1-1: config 0 has an invalid interface number: 230 but max is 0
[  109.189629][   T10] usb 1-1: config 0 has no interface number 0
[  109.205016][   T10] usb 1-1: config 0 interface 230 has no altsetting 0
[  109.307873][   T10] usb 1-1: New USB device found, idVendor=06bd, idProduct=0404, bcdDevice=4f.dc
[  109.310531][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.325628][   T10] usb 1-1: Product: syz
[  109.326882][   T10] usb 1-1: Manufacturer: syz
[  109.328244][   T10] usb 1-1: SerialNumber: syz
[  109.392656][   T10] usb 1-1: config 0 descriptor??
[  109.457444][ T6933] loop3: detected capacity change from 0 to 40427
[  109.470797][ T6933] F2FS-fs (loop3): Image doesn't support compression
[  109.476933][ T6933] F2FS-fs (loop3): build fault injection rate: 690
[  109.483230][ T6933] F2FS-fs (loop3): build fault injection type: 0x4
[  109.489109][ T6933] F2FS-fs (loop3): invalid crc value
[  109.536010][ T6933] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.539578][ T6933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  109.619372][ T6832] syz-executor: attempt to access beyond end of device
[  109.619372][ T6832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  109.633733][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  109.633753][ T6832] Tainted: [L]=SOFTLOCKUP
[  109.633756][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.633761][ T6832] Call Trace:
[  109.633765][ T6832]  <TASK>
[  109.633769][ T6832]  dump_stack_lvl+0xe8/0x150
[  109.633789][ T6832]  f2fs_handle_critical_error+0x37c/0x540
[  109.633806][ T6832]  f2fs_write_end_io+0x1273/0x1740
[  109.633823][ T6832]  __submit_merged_bio+0x256/0x6a0
[  109.633837][ T6832]  __submit_merged_write_cond+0x3c9/0x4e0
[  109.633852][ T6832]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  109.633873][ T6832]  f2fs_write_data_pages+0x287e/0x34f0
[  109.633884][ T6832]  ? __lock_acquire+0x6b5/0x2cf0
[  109.633912][ T6832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.633929][ T6832]  ? __lock_acquire+0x6b5/0x2cf0
[  109.633951][ T6832]  ? unwind_next_frame+0xa6/0x2550
[  109.633959][ T6832]  ? lock_acquire+0x106/0x350
[  109.633980][ T6832]  ? __lock_acquire+0x6b5/0x2cf0
[  109.634001][ T6832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.634013][ T6832]  do_writepages+0x32e/0x550
[  109.634030][ T6832]  ? do_raw_spin_unlock+0x4d/0x210
[  109.634041][ T6832]  filemap_fdatawrite+0x1e9/0x2f0
[  109.634054][ T6832]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.634084][ T6832]  ? do_raw_spin_unlock+0x4d/0x210
[  109.634095][ T6832]  f2fs_sync_dirty_inodes+0x30e/0x830
[  109.634110][ T6832]  f2fs_write_checkpoint+0x9df/0x26a0
[  109.634131][ T6832]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.634156][ T6832]  ? kfree+0x1c5/0x640
[  109.634169][ T6832]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  109.634186][ T6832]  kill_f2fs_super+0x314/0x720
[  109.634202][ T6832]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.634224][ T6832]  ? lockdep_hardirqs_on+0x7a/0x110
[  109.634239][ T6832]  deactivate_locked_super+0xbc/0x130
[  109.634250][ T6832]  cleanup_mnt+0x437/0x4d0
[  109.634261][ T6832]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.634276][ T6832]  task_work_run+0x1d9/0x270
[  109.634289][ T6832]  ? __pfx_task_work_run+0x10/0x10
[  109.634301][ T6832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.634310][ T6832]  exit_to_user_mode_loop+0xed/0x480
[  109.634322][ T6832]  ? rcu_is_watching+0x15/0xb0
[  109.634331][ T6832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.634339][ T6832]  do_syscall_64+0x33e/0xf80
[  109.634348][ T6832]  ? trace_irq_disable+0x3b/0x140
[  109.634362][ T6832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.634370][ T6832] RIP: 0033:0x7fb874f9da57
[  109.634379][ T6832] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  109.634386][ T6832] RSP: 002b:00007ffe6c368278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.634396][ T6832] RAX: 0000000000000000 RBX: 00007fb875032048 RCX: 00007fb874f9da57
[  109.634402][ T6832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c368330
[  109.634407][ T6832] RBP: 00007ffe6c368330 R08: 00007ffe6c369330 R09: 00000000ffffffff
[  109.634412][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6c3693c0
[  109.634417][ T6832] R13: 00007fb875032048 R14: 000000000001ab9d R15: 00007ffe6c369400
[  109.634430][ T6832]  </TASK>
[  109.634434][ T6832] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  109.945486][   T54] Bluetooth: hci0: command tx timeout
[  109.968772][ T6937] loop2: detected capacity change from 0 to 128
[  110.014937][   T10] gspca_main: spca500-2.14.0 probing 06bd:0404
[  110.149592][   T10] usb 1-1: USB disconnect, device number 9
[  110.827625][ T6941] loop3: detected capacity change from 0 to 32768
[  110.831061][  T955] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  110.840102][ T6941] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.407 (6941)
[  110.940475][ T6941] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.955925][ T6941] BTRFS info (device loop3): using sha256 checksum algorithm
[  110.981882][  T955] usb 3-1: Using ep0 maxpacket: 16
[  110.985894][  T955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.990006][  T955] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  111.010711][  T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  111.030162][  T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  111.051826][  T955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.076437][  T955] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  111.080379][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.090621][  T955] usb 3-1: Product: syz
[  111.099252][  T955] usb 3-1: Manufacturer: syz
[  111.105042][  T955] usb 3-1: SerialNumber: syz
[  111.126946][  T955] usb 3-1: config 0 descriptor??
[  111.136109][  T955] xbox_remote_probe: endpoint_in message size==0?
[  111.211225][ T6941] BTRFS info (device loop3): enabling ssd optimizations
[  111.218130][ T6941] BTRFS info (device loop3): turning on async discard
[  111.223042][ T6941] BTRFS info (device loop3): enabling free space tree
[  111.319452][ T6832] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.368507][  T955] usb 3-1: USB disconnect, device number 9
[  111.839375][   T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  112.021714][   T54] Bluetooth: hci0: command tx timeout
[  112.290905][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  112.380447][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  112.451599][   T10] usb 1-1: config 8 has an invalid interface number: 196 but max is 0
[  112.454435][   T10] usb 1-1: config 8 has no interface number 0
[  112.456688][   T10] usb 1-1: config 8 interface 196 has no altsetting 0
[  112.586188][   T10] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=f4.2f
[  112.589421][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.613854][   T10] usb 1-1: Product: syz
[  112.633164][   T10] usb 1-1: Manufacturer: syz
[  112.634853][   T10] usb 1-1: SerialNumber: syz
[  112.988711][   T10] ftdi_sio 1-1:8.196: FTDI USB Serial Device converter detected
[  113.094400][   T10] ftdi_sio ttyUSB0: unknown device type: 0xf42f
[  113.111567][  T955] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  113.168384][   T10] usb 1-1: USB disconnect, device number 10
[  113.207350][   T10] ftdi_sio 1-1:8.196: device disconnected
[  113.233715][ T6992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.261136][  T955] usb 4-1: Using ep0 maxpacket: 16
[  113.264685][  T955] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  113.278631][  T955] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  113.288543][  T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.304183][  T955] usb 4-1: Product: syz
[  113.309148][  T955] usb 4-1: Manufacturer: syz
[  113.316790][  T955] usb 4-1: SerialNumber: syz
[  113.435651][  T955] r8152-cfgselector 4-1: Unknown version 0x0000
[  113.441614][  T955] r8152-cfgselector 4-1: config 0 descriptor??
[  113.593983][ T5891] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  113.669595][  T955] r8152-cfgselector 4-1: Needed 1 retries to read version
[  113.676464][  T955] r8152-cfgselector 4-1: Unknown version 0x0000
[  113.683417][  T955] r8152-cfgselector 4-1: No union descriptors
[  113.754997][ T5891] usb 3-1: Using ep0 maxpacket: 32
[  113.772424][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.776074][ T5891] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.780255][ T5891] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.784266][ T5891] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  113.793257][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0
[  113.795562][ T5891] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  113.798206][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.820169][ T5891] usb 3-1: config 0 descriptor??
[  113.879170][ T5857] r8152-cfgselector 4-1: USB disconnect, device number 3
[  114.103152][   T54] Bluetooth: hci0: command tx timeout
[  114.258465][ T5891] hid-thrustmaster 0003:044F:B65D.0003: item fetching failed at offset 1/5
[  114.273457][ T5891] hid-thrustmaster 0003:044F:B65D.0003: parse failed with error -22
[  114.278749][ T5891] hid-thrustmaster 0003:044F:B65D.0003: probe with driver hid-thrustmaster failed with error -22
[  114.499270][ T5891] usb 3-1: USB disconnect, device number 10
[  114.707557][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'.
[  115.269815][ T7008] loop3: detected capacity change from 0 to 40427
[  115.280607][ T7008] F2FS-fs (loop3): invalid crc value
[  115.333001][ T7008] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  115.339480][ T7008] F2FS-fs (loop3): Start checkpoint disabled!
[  115.350498][ T7008] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  115.354461][ T7008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  115.429786][  T323] kworker/u10:3: attempt to access beyond end of device
[  115.429786][  T323] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  115.455184][  T323] CPU: 1 UID: 0 PID: 323 Comm: kworker/u10:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.455230][  T323] Tainted: [L]=SOFTLOCKUP
[  115.455236][  T323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.455273][  T323] Workqueue: writeback wb_workfn (flush-7:3)
[  115.455306][  T323] Call Trace:
[  115.455313][  T323]  <TASK>
[  115.455319][  T323]  dump_stack_lvl+0xe8/0x150
[  115.455342][  T323]  f2fs_handle_critical_error+0x37c/0x540
[  115.455368][  T323]  f2fs_write_end_io+0x1273/0x1740
[  115.455398][  T323]  __submit_merged_bio+0x256/0x6a0
[  115.455424][  T323]  f2fs_submit_merged_write+0x284/0x390
[  115.455449][  T323]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  115.455481][  T323]  f2fs_sync_node_pages+0x14bf/0x1680
[  115.455515][  T323]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  115.455534][  T323]  ? __percpu_counter_sum+0x1c2/0x1e0
[  115.455572][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.455595][  T323]  ? blk_start_plug+0x51/0x1b0
[  115.455614][  T323]  f2fs_write_node_pages+0x312/0x700
[  115.455636][  T323]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  115.455659][  T323]  ? f2fs_update_inode+0x13d9/0x2620
[  115.455679][  T323]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  115.455697][  T323]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  115.455716][  T323]  do_writepages+0x32e/0x550
[  115.455743][  T323]  ? reacquire_held_locks+0x104/0x190
[  115.455758][  T323]  ? writeback_sb_inodes+0x463/0x19d0
[  115.455785][  T323]  __writeback_single_inode+0x133/0x10e0
[  115.455815][  T323]  ? do_raw_spin_unlock+0x4d/0x210
[  115.455835][  T323]  writeback_sb_inodes+0x979/0x19d0
[  115.455855][  T323]  ? __lock_acquire+0x6b5/0x2cf0
[  115.455898][  T323]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  115.455917][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.455960][  T323]  ? rcu_is_watching+0x15/0xb0
[  115.455981][  T323]  wb_writeback+0x445/0xb00
[  115.456003][  T323]  ? queue_io+0x291/0x470
[  115.456028][  T323]  ? __pfx_wb_writeback+0x10/0x10
[  115.456044][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.456068][  T323]  wb_workfn+0x3f8/0xf10
[  115.456077][  T323]  ? __lock_acquire+0x6b5/0x2cf0
[  115.456088][  T323]  ? look_up_lock_class+0x57/0x110
[  115.456105][  T323]  ? __pfx_wb_workfn+0x10/0x10
[  115.456116][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.456124][  T323]  ? lock_acquire+0x106/0x350
[  115.456136][  T323]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  115.456147][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.456160][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.456174][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.456184][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.456195][  T323]  process_scheduled_works+0xb5d/0x1860
[  115.456219][  T323]  ? __pfx_process_scheduled_works+0x10/0x10
[  115.456233][  T323]  ? assign_work+0x3d5/0x5e0
[  115.456274][  T323]  worker_thread+0xa53/0xfc0
[  115.456302][  T323]  kthread+0x388/0x470
[  115.456312][  T323]  ? __pfx_worker_thread+0x10/0x10
[  115.456322][  T323]  ? __pfx_kthread+0x10/0x10
[  115.456331][  T323]  ret_from_fork+0x514/0xb70
[  115.456346][  T323]  ? __pfx_ret_from_fork+0x10/0x10
[  115.456357][  T323]  ? __switch_to+0xc79/0x1410
[  115.456369][  T323]  ? __pfx_kthread+0x10/0x10
[  115.456377][  T323]  ret_from_fork_asm+0x1a/0x30
[  115.456393][  T323]  </TASK>
[  115.459970][  T323] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  115.765300][  T323] CPU: 1 UID: 0 PID: 323 Comm: kworker/u10:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.765330][  T323] Tainted: [L]=SOFTLOCKUP
[  115.765335][  T323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.765343][  T323] Workqueue: writeback wb_workfn (flush-7:3)
[  115.765376][  T323] Call Trace:
[  115.765382][  T323]  <TASK>
[  115.765389][  T323]  dump_stack_lvl+0xe8/0x150
[  115.765414][  T323]  f2fs_handle_critical_error+0x37c/0x540
[  115.765441][  T323]  f2fs_write_end_io+0x1273/0x1740
[  115.765474][  T323]  __submit_merged_bio+0x256/0x6a0
[  115.765500][  T323]  f2fs_submit_merged_write+0x284/0x390
[  115.765523][  T323]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  115.765557][  T323]  f2fs_sync_node_pages+0x14bf/0x1680
[  115.765610][  T323]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  115.765630][  T323]  ? __percpu_counter_sum+0x1c2/0x1e0
[  115.765675][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.765698][  T323]  ? blk_start_plug+0x51/0x1b0
[  115.765717][  T323]  f2fs_write_node_pages+0x312/0x700
[  115.765742][  T323]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  115.765766][  T323]  ? f2fs_update_inode+0x13d9/0x2620
[  115.765786][  T323]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  115.765810][  T323]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  115.765830][  T323]  do_writepages+0x32e/0x550
[  115.765863][  T323]  ? reacquire_held_locks+0x104/0x190
[  115.765878][  T323]  ? writeback_sb_inodes+0x463/0x19d0
[  115.765905][  T323]  __writeback_single_inode+0x133/0x10e0
[  115.765920][  T323]  ? do_raw_spin_unlock+0x4d/0x210
[  115.765941][  T323]  writeback_sb_inodes+0x979/0x19d0
[  115.765960][  T323]  ? __lock_acquire+0x6b5/0x2cf0
[  115.766006][  T323]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  115.766025][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.766074][  T323]  ? rcu_is_watching+0x15/0xb0
[  115.766097][  T323]  wb_writeback+0x445/0xb00
[  115.766121][  T323]  ? queue_io+0x291/0x470
[  115.766148][  T323]  ? __pfx_wb_writeback+0x10/0x10
[  115.766166][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.766198][  T323]  wb_workfn+0x3f8/0xf10
[  115.766214][  T323]  ? __lock_acquire+0x6b5/0x2cf0
[  115.766259][  T323]  ? look_up_lock_class+0x57/0x110
[  115.766294][  T323]  ? __pfx_wb_workfn+0x10/0x10
[  115.766316][  T323]  ? do_raw_spin_lock+0x12b/0x2f0
[  115.766330][  T323]  ? lock_acquire+0x106/0x350
[  115.766352][  T323]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  115.766372][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.766394][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.766420][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.766438][  T323]  ? process_scheduled_works+0xa70/0x1860
[  115.766459][  T323]  process_scheduled_works+0xb5d/0x1860
[  115.766507][  T323]  ? __pfx_process_scheduled_works+0x10/0x10
[  115.766533][  T323]  ? assign_work+0x3d5/0x5e0
[  115.766557][  T323]  worker_thread+0xa53/0xfc0
[  115.766601][  T323]  kthread+0x388/0x470
[  115.766618][  T323]  ? __pfx_worker_thread+0x10/0x10
[  115.766636][  T323]  ? __pfx_kthread+0x10/0x10
[  115.766653][  T323]  ret_from_fork+0x514/0xb70
[  115.766680][  T323]  ? __pfx_ret_from_fork+0x10/0x10
[  115.766702][  T323]  ? __switch_to+0xc79/0x1410
[  115.766724][  T323]  ? __pfx_kthread+0x10/0x10
[  115.766741][  T323]  ret_from_fork_asm+0x1a/0x30
[  115.766773][  T323]  </TASK>
[  115.770458][  T323] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  117.154358][ T7051] loop2: detected capacity change from 0 to 4096
[  117.163014][ T7051] EXT4-fs: Conflicting test_dummy_encryption options
[  117.326244][ T7055] hsr0: entered promiscuous mode
[  117.334376][ T7055] macsec1: entered allmulticast mode
[  117.338055][ T7055] hsr0: entered allmulticast mode
[  117.341558][ T7055] hsr_slave_0: entered allmulticast mode
[  117.345556][ T7055] hsr_slave_1: entered allmulticast mode
[  117.359163][ T7039] loop0: detected capacity change from 0 to 32768
[  117.361662][ T7055] hsr0: left allmulticast mode
[  117.363239][ T7055] hsr_slave_0: left allmulticast mode
[  117.364943][ T7055] hsr_slave_1: left allmulticast mode
[  117.528432][ T7059] process 'syz.3.452' launched './file1' with NULL argv: empty string added
[  117.579327][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  117.582298][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  118.372361][ T7075] loop0: detected capacity change from 0 to 256
[  118.388406][ T7075] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  118.644911][ T7081] loop3: detected capacity change from 0 to 8
[  118.734242][ T7081] SQUASHFS error: xz decompression failed, data probably corrupt
[  118.769302][ T7081] SQUASHFS error: Failed to read block 0x108: -5
[  118.778287][ T7081] SQUASHFS error: Unable to read metadata cache entry [106]
[  118.788437][ T7081] SQUASHFS error: Unable to read inode 0x11f
[  119.201892][ T5857] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  119.366941][ T5857] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[  119.379879][ T5857] usb 3-1: config 5 has no interface number 0
[  119.394287][ T5857] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  119.415607][ T5857] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 30768, setting to 64
[  119.432115][ T5857] usb 3-1: config 5 interface 123 has no altsetting 0
[  119.442107][ T5857] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  119.450823][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.465213][ T5857] usb 3-1: Product: syz
[  119.470664][ T5857] usb 3-1: Manufacturer: syz
[  119.476461][ T5857] usb 3-1: SerialNumber: syz
[  119.492514][ T7088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  119.782538][ T5857] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  119.813987][ T5857] usb 3-1: USB disconnect, device number 11
[  120.117204][ T7104] loop0: detected capacity change from 0 to 32768
[  120.126453][ T7104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.473 (7104)
[  120.219584][ T7104] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.232971][ T7104] BTRFS info (device loop0): using sha256 checksum algorithm
[  120.543847][ T7104] BTRFS info (device loop0): rebuilding free space tree
[  120.569374][ T7104] BTRFS info (device loop0): enabling ssd optimizations
[  120.572008][ T7104] BTRFS info (device loop0): using spread ssd allocation scheme
[  120.574622][ T7104] BTRFS info (device loop0): turning on async discard
[  120.576588][ T7104] BTRFS info (device loop0): enabling free space tree
[  120.578520][ T7104] BTRFS info (device loop0): force clearing of disk cache
[  120.604934][ T5829] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.685422][ T5891] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  120.876096][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  120.887847][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.911326][ T5891] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  120.923704][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.947743][ T5891] usb 4-1: config 0 descriptor??
[  121.263053][ T7138] loop2: detected capacity change from 0 to 128
[  121.316011][ T7138] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.327435][ T7138] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.365316][ T5834] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.457896][ T5891] kye 0003:0458:5016.0004: control desc unexpectedly large
[  121.488153][ T7143] loop0: detected capacity change from 0 to 512
[  121.496551][ T7143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  121.518963][ T7143] EXT4-fs (loop0): orphan cleanup on readonly fs
[  121.524113][ T5891] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0004/input/input7
[  121.550001][ T7143] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  121.592462][ T7143] EXT4-fs (loop0): 1 truncate cleaned up
[  121.595045][ T7143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  121.662354][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.669106][ T5891] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0004/input/input8
[  121.714730][ T5857] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  121.763192][ T5891] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0
[  121.874965][ T5857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.883469][ T5857] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  121.895896][ T5857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  121.901019][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  121.904894][ T5857] usb 3-1: SerialNumber: syz
[  121.918192][ T5857] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  121.924016][ T5857] usb-storage 3-1:1.0: USB Mass Storage device detected
[  121.938087][ T5857] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  122.596406][    C1] kye 0003:0458:5016.0004: usb_submit_urb(ctrl) failed: -1
[  122.980657][ T7166] nbd: must specify at least one socket
[  123.040489][ T5857] usb 3-1: USB disconnect, device number 12
[  123.366477][ T7175] xt_hashlimit: size too large, truncated to 1048576
[  123.436397][ T5891] usb 4-1: USB disconnect, device number 4
[  124.194878][ T7189] loop3: detected capacity change from 0 to 40427
[  124.206271][ T7189] F2FS-fs (loop3): invalid crc value
[  124.246972][ T7189] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  124.253314][ T7189] F2FS-fs (loop3): Start checkpoint disabled!
[  124.263157][ T7189] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  124.266526][ T7189] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  125.190249][ T7197] loop0: detected capacity change from 0 to 256
[  125.219111][ T7197] exfat: Deprecated parameter 'utf8'
[  125.258830][ T7197] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  125.618058][ T3510] kworker/u10:4: attempt to access beyond end of device
[  125.618058][ T3510] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.634672][ T3510] CPU: 1 UID: 0 PID: 3510 Comm: kworker/u10:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  125.634690][ T3510] Tainted: [L]=SOFTLOCKUP
[  125.634694][ T3510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.634700][ T3510] Workqueue: writeback wb_workfn (flush-7:3)
[  125.634722][ T3510] Call Trace:
[  125.634726][ T3510]  <TASK>
[  125.634731][ T3510]  dump_stack_lvl+0xe8/0x150
[  125.634747][ T3510]  f2fs_handle_critical_error+0x37c/0x540
[  125.634764][ T3510]  f2fs_write_end_io+0x1273/0x1740
[  125.634782][ T3510]  __submit_merged_bio+0x256/0x6a0
[  125.634797][ T3510]  __submit_merged_write_cond+0x3c9/0x4e0
[  125.634813][ T3510]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  125.634844][ T3510]  f2fs_write_data_pages+0x287e/0x34f0
[  125.634865][ T3510]  ? f2fs_build_free_nids+0xdc/0x1810
[  125.634906][ T3510]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.634925][ T3510]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  125.634950][ T3510]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  125.634971][ T3510]  ? __lock_acquire+0x6b5/0x2cf0
[  125.635014][ T3510]  ? set_shrinker_bit+0x7c/0x350
[  125.635037][ T3510]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.635056][ T3510]  do_writepages+0x32e/0x550
[  125.635081][ T3510]  ? reacquire_held_locks+0x104/0x190
[  125.635094][ T3510]  ? writeback_sb_inodes+0x463/0x19d0
[  125.635127][ T3510]  __writeback_single_inode+0x133/0x10e0
[  125.635143][ T3510]  ? do_raw_spin_unlock+0x4d/0x210
[  125.635164][ T3510]  writeback_sb_inodes+0x979/0x19d0
[  125.635183][ T3510]  ? __lock_acquire+0x6b5/0x2cf0
[  125.635220][ T3510]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  125.635238][ T3510]  ? do_raw_spin_lock+0x12b/0x2f0
[  125.635284][ T3510]  ? rcu_is_watching+0x15/0xb0
[  125.635308][ T3510]  wb_writeback+0x445/0xb00
[  125.635331][ T3510]  ? queue_io+0x291/0x470
[  125.635358][ T3510]  ? __pfx_wb_writeback+0x10/0x10
[  125.635377][ T3510]  ? do_raw_spin_lock+0x12b/0x2f0
[  125.635407][ T3510]  wb_workfn+0x3f8/0xf10
[  125.635426][ T3510]  ? __lock_acquire+0x6b5/0x2cf0
[  125.635442][ T3510]  ? look_up_lock_class+0x57/0x110
[  125.635472][ T3510]  ? __pfx_wb_workfn+0x10/0x10
[  125.635490][ T3510]  ? do_raw_spin_lock+0x12b/0x2f0
[  125.635504][ T3510]  ? lock_acquire+0x106/0x350
[  125.635551][ T3510]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  125.635570][ T3510]  ? process_scheduled_works+0xa70/0x1860
[  125.635592][ T3510]  ? process_scheduled_works+0xa70/0x1860
[  125.635614][ T3510]  ? process_scheduled_works+0xa70/0x1860
[  125.635632][ T3510]  ? process_scheduled_works+0xa70/0x1860
[  125.635652][ T3510]  process_scheduled_works+0xb5d/0x1860
[  125.635696][ T3510]  ? __pfx_process_scheduled_works+0x10/0x10
[  125.635723][ T3510]  ? assign_work+0x3d5/0x5e0
[  125.635746][ T3510]  worker_thread+0xa53/0xfc0
[  125.635786][ T3510]  kthread+0x388/0x470
[  125.635802][ T3510]  ? __pfx_worker_thread+0x10/0x10
[  125.635819][ T3510]  ? __pfx_kthread+0x10/0x10
[  125.635834][ T3510]  ret_from_fork+0x514/0xb70
[  125.635857][ T3510]  ? __pfx_ret_from_fork+0x10/0x10
[  125.635876][ T3510]  ? __switch_to+0xc79/0x1410
[  125.635897][ T3510]  ? __pfx_kthread+0x10/0x10
[  125.635913][ T3510]  ret_from_fork_asm+0x1a/0x30
[  125.635942][ T3510]  </TASK>
[  125.638224][ T3510] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  130.988049][    C0] sched: DL replenish lagged too much
[  131.371255][  T955] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  139.169224][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  139.175866][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  186.890365][ T5214] Bluetooth: hci1: command 0x0406 tx timeout
[  200.662500][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  200.673975][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  217.165474][ T5214] Bluetooth: hci2: command 0x040f tx timeout
[  233.289734][ T5214] Bluetooth: hci0: command 0x0406 tx timeout
[  262.823218][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  262.831684][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  322.944547][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  322.951108][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  358.099976][   T34] INFO: task kworker/u8:1:13 blocked for more than 154 seconds.
[  358.112866][   T34]       Tainted: G             L      syzkaller #0
[  358.115211][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  358.117771][   T34] task:kworker/u8:1    state:D stack:24824 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00080000
[  358.350182][   T34] Workqueue: ipv6_addrconf addrconf_verify_work
[  358.364001][   T34] Call Trace:
[  358.365282][   T34]  <TASK>
[  358.366462][   T34]  __schedule+0x17b4/0x5680
[  358.368233][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  358.370159][   T34]  ? __pfx___schedule+0x10/0x10
[  362.584010][   T34]  ? schedule+0x90/0x360
[  362.585677][   T34]  schedule+0x164/0x360
[  362.587256][   T34]  schedule_preempt_disabled+0x13/0x30
[  362.589314][   T34]  __mutex_lock+0x7f5/0x1550
[  362.601470][   T34]  ? __mutex_lock+0x606/0x1550
[  362.603315][   T34]  ? addrconf_verify_work+0x19/0x30
[  362.605357][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  362.607255][   T34]  ? process_scheduled_works+0xa70/0x1860
[  362.609403][   T34]  addrconf_verify_work+0x19/0x30
[  364.764820][   T34]  ? process_scheduled_works+0xa70/0x1860
[  364.766992][   T34]  process_scheduled_works+0xb5d/0x1860
[  364.769180][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  364.788488][   T34]  ? assign_work+0x3d5/0x5e0
[  364.790270][   T34]  worker_thread+0xa53/0xfc0
[  366.546241][   T34]  kthread+0x388/0x470
[  366.547680][   T34]  ? __pfx_worker_thread+0x10/0x10
[  366.558698][   T34]  ? __pfx_kthread+0x10/0x10
[  366.560421][   T34]  ret_from_fork+0x514/0xb70
[  366.571772][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  366.573850][   T34]  ? __switch_to+0xc79/0x1410
[  366.575717][   T34]  ? __pfx_kthread+0x10/0x10
[  366.577524][   T34]  ret_from_fork_asm+0x1a/0x30
[  366.579307][   T34]  </TASK>
[  366.580578][   T34] INFO: task kworker/1:2:955 blocked for more than 162 seconds.
