last executing test programs:

2.34803013s ago: executing program 2 (id=1287):
r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x40, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20)
io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0)

2.284762456s ago: executing program 2 (id=1288):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, '\x00'/13}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r1 = io_uring_setup(0x664b, &(0x7f0000000500))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
close_range(r1, 0xffffffffffffffff, 0x0)

2.225110817s ago: executing program 0 (id=1291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004005}, 0x800)

2.136287418s ago: executing program 2 (id=1292):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
r2 = semget$private(0x0, 0x6, 0x3b1)
recvmsg$unix(r1, 0x0, 0x40010002)
semop(r2, &(0x7f0000000000), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
inotify_init()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000240)=[{r0, 0x8092}], 0x1, 0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
r4 = socket(0x8, 0x6, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
socket(0x28, 0x5, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0), 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r6, &(0x7f0000000000)='3', 0x4e)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000100)=0xfffffffffffffffb)

1.344469158s ago: executing program 2 (id=1294):
set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000001240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16], 0x15)

1.295425374s ago: executing program 0 (id=1295):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)

1.237878622s ago: executing program 0 (id=1297):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5557, &(0x7f0000006440)="$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")

1.167558325s ago: executing program 2 (id=1298):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x3, {0x4, 0x21}, 0x90, 0x1})

1.167347786s ago: executing program 2 (id=1299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0)
close(r0)

888.179736ms ago: executing program 0 (id=1306):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_dellink={0x3c, 0x13, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040)

888.018994ms ago: executing program 0 (id=1307):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x4e20, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x5, @mcast1}}, {{0xa, 0x4e22, 0x0, @mcast1, 0xffff4f12}}]}, 0x190)

887.986462ms ago: executing program 0 (id=1308):
syz_usb_connect(0x5, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12014101a7107440d1121f1c18ef0102030109021f2d00010000102009046507000202ff000524060000052400ff010d240f01b94c0000000008000404"], 0x0)

338.091298ms ago: executing program 1 (id=1309):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

113.678016ms ago: executing program 1 (id=1310):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSRS485(r0, 0x542f, 0x0)

113.522233ms ago: executing program 1 (id=1311):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x231, &(0x7f0000000340)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvMGKZxyVejt0v0g9V6hlZsYGNVT+BfN2TDBaSYv2FjGyCiIOawMDAz3zJgPyMziABnEwMAw+U/EvQcskgwiYLPWXArKnHJVlOOf2KmW5avMOu8zzOiYlsbAaDCLg4GBQe+I7kw7A95uJqiZINMSc3JSi4rPoLiT+cBkxv1MiowgdWf+Xg1+wGjH0B3LwMggt8FfbfG3P1KVGzfVR06viqiZ2t10c+n6OIZt+n+vmEi9n5gR9v/BIUEti7z8D/NklL5vbpjzoabuiYljZ6PyXP7Wy3/fvY+pLU5QY3os3lXIxp/gplXzydnJzfLx3PTq9i3Figuy0lwmHpt68W/C8bUMDJMvPLHVrzlzKF4xhlPKrXJuzF23eEGuZern694wMByM+jyRgY2BcT8TA8PMsJ17IP5igwQ6AzQyGJgZGBhUGBgYmBhYGNIyc1INPBgYGZihHEMWNNVMDBxgCb3k/JyUdgZGcBIAa1vOwAI3w/AxAyucY4TMMbZogJrE0A6lVaC0B5ReDqUfM0DcKo+WbFjAJvRDeRoNIGUViSUlRYYg5RAWXMwILmYkALeZCWrrXCZUzx1nYhgFo2AUjIJRMApGwSgYBaNgFIyCkQwAAQAA//93N7Mw")

113.358113ms ago: executing program 1 (id=1312):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x6e2a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0)

7.716208ms ago: executing program 1 (id=1313):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=1314):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="55af0b00"})

0s ago: executing program 1 (id=1315):
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4)
write(r0, &(0x7f0000000000)="01", 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44545' (ED25519) to the list of known hosts.
syzkaller login: [   42.032652][ T5521] cgroup: Unknown subsys name 'net'
[   42.114206][ T5521] cgroup: Unknown subsys name 'cpuset'
[   42.117496][ T5521] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.351480][ T5521] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.020975][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.027834][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.030709][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.035040][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.038029][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.071054][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.086721][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.090165][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.094562][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.098165][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.106260][ T4986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.109682][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.113285][ T4986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.115612][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.119374][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.375994][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.378502][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.380813][ T5595] bridge_slave_0: entered allmulticast mode
[   47.384278][ T5595] bridge_slave_0: entered promiscuous mode
[   47.389485][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.391682][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.394761][ T5595] bridge_slave_1: entered allmulticast mode
[   47.397313][ T5595] bridge_slave_1: entered promiscuous mode
[   47.415587][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.425819][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.461139][ T5595] team0: Port device team_slave_0 added
[   47.471431][ T5595] team0: Port device team_slave_1 added
[   47.490273][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.492675][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.500667][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.509791][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.512186][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.520247][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.571758][ T5595] hsr_slave_0: entered promiscuous mode
[   47.575078][ T5595] hsr_slave_1: entered promiscuous mode
[   47.787538][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.790161][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.792655][ T5602] bridge_slave_0: entered allmulticast mode
[   47.795534][ T5602] bridge_slave_0: entered promiscuous mode
[   47.806818][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.809139][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.811630][ T5602] bridge_slave_1: entered allmulticast mode
[   47.814527][ T5602] bridge_slave_1: entered promiscuous mode
[   47.846371][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.850422][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.869928][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.872576][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.875081][ T5601] bridge_slave_0: entered allmulticast mode
[   47.877788][ T5601] bridge_slave_0: entered promiscuous mode
[   47.881215][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.883775][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.886012][ T5601] bridge_slave_1: entered allmulticast mode
[   47.889404][ T5601] bridge_slave_1: entered promiscuous mode
[   47.904409][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.913088][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.916798][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.922975][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.936851][ T5602] team0: Port device team_slave_0 added
[   47.939038][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.945304][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.948553][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.954451][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.970363][ T5602] team0: Port device team_slave_1 added
[   47.987948][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.992692][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.013151][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.015589][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.024493][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.038743][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.041036][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.049461][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.058002][ T5601] team0: Port device team_slave_0 added
[   48.066033][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.068637][ T5595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.071482][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.073969][ T5595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.079407][ T5601] team0: Port device team_slave_1 added
[   48.115632][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.117931][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.126309][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.139515][ T5602] hsr_slave_0: entered promiscuous mode
[   48.142928][ T5602] hsr_slave_1: entered promiscuous mode
[   48.145872][ T5602] debugfs: 'hsr0' already exists in 'hsr'
[   48.148227][ T5602] Cannot create hsr debugfs directory
[   48.151029][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.153265][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.162372][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.227539][ T5601] hsr_slave_0: entered promiscuous mode
[   48.230611][ T5601] hsr_slave_1: entered promiscuous mode
[   48.234318][ T5601] debugfs: 'hsr0' already exists in 'hsr'
[   48.236832][ T5601] Cannot create hsr debugfs directory
[   48.336264][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.340274][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.397563][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.427321][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[   48.430933][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.438275][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.445827][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.448010][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.450771][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.456873][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.459945][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.466802][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.469960][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.474601][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.491043][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.493291][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.541341][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.545683][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.550274][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.554225][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.556734][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.561101][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.568679][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.575014][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.621442][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.647210][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[   48.660032][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.662355][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.667058][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.669285][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.722367][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.744182][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[   48.754693][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.757024][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.765339][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.767639][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.878003][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.926921][ T5595] veth0_vlan: entered promiscuous mode
[   48.942420][ T5595] veth1_vlan: entered promiscuous mode
[   48.947248][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.977817][ T5595] veth0_macvtap: entered promiscuous mode
[   48.986405][ T5595] veth1_macvtap: entered promiscuous mode
[   49.018842][ T5602] veth0_vlan: entered promiscuous mode
[   49.028442][ T5602] veth1_vlan: entered promiscuous mode
[   49.043075][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.054207][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.068400][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.071552][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.083920][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.086615][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.090404][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.099184][ T5602] veth0_macvtap: entered promiscuous mode
[   49.121760][ T5602] veth1_macvtap: entered promiscuous mode
[   49.124337][   T54] Bluetooth: hci0: command tx timeout
[   49.155159][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.155278][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.157878][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.172418][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.185038][ T5601] veth0_vlan: entered promiscuous mode
[   49.187039][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.189654][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.200602][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.204028][   T54] Bluetooth: hci1: command tx timeout
[   49.205972][ T5605] Bluetooth: hci2: command tx timeout
[   49.209788][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.220190][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.220760][ T5601] veth1_vlan: entered promiscuous mode
[   49.224834][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.275987][ T5601] veth0_macvtap: entered promiscuous mode
[   49.284830][ T5601] veth1_macvtap: entered promiscuous mode
[   49.287254][ T5595] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.295206][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.301074][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.331140][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.349582][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.350163][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.358870][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.368707][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.375641][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.387924][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.393809][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.445084][ T5710] netlink: 'syz.1.2': attribute type 11 has an invalid length.
[   49.453393][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.461543][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.492645][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.495532][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.942160][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   50.094380][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[   50.098412][   T24] usb 2-1: config 1 has an invalid interface number: 244 but max is 0
[   50.101627][   T24] usb 2-1: config 1 has no interface number 0
[   50.103949][   T24] usb 2-1: config 1 interface 244 has no altsetting 0
[   50.108138][   T24] usb 2-1: New USB device found, idVendor=33a6, idProduct=6e1b, bcdDevice=cb.45
[   50.111045][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.113753][   T24] usb 2-1: Product: syz
[   50.115072][   T24] usb 2-1: Manufacturer: syz
[   50.116513][   T24] usb 2-1: SerialNumber: syz
[   50.271958][ T5707] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   50.335186][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   50.338809][ T5737] netlink: 'syz.0.14': attribute type 30 has an invalid length.
[   50.340191][   T24] rndis_host 2-1:1.244: rndis: master #0/0000000000000000 slave #1/0000000000000000
[   50.350804][   T24] usb 2-1: USB disconnect, device number 2
[   50.359528][ T5737] vxlan0: entered promiscuous mode
[   50.361371][ T5737] vxlan0: entered allmulticast mode
[   50.364599][ T5661] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   50.367557][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   50.368277][ T5661] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   50.370500][ T5737] netlink: 'syz.0.14': attribute type 30 has an invalid length.
[   50.376713][ T5661] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   50.384687][ T5737] vxlan1: entered promiscuous mode
[   50.386334][ T5737] vxlan1: entered allmulticast mode
[   50.388696][ T5661] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   50.389603][ T5737] Zero length message leads to an empty skb
[   50.422516][ T5707] usb 3-1: Using ep0 maxpacket: 16
[   50.426594][ T5707] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.430601][ T5707] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.432969][ T5739] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   50.438934][ T5707] usb 3-1: config 0 interface 0 has no altsetting 0
[   50.441185][ T5707] usb 3-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00
[   50.444209][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.451389][ T5707] usb 3-1: config 0 descriptor??
[   50.885641][ T5707] input: HID 046d:c215 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C215.0001/input/input4
[   50.932002][ T5663] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   50.993094][ T5707] logitech 0003:046D:C215.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.2-1/input0
[   51.076584][ T5662] usb 3-1: USB disconnect, device number 2
[   51.092222][ T5663] usb 1-1: Using ep0 maxpacket: 8
[   51.099743][ T5663] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[   51.111975][ T5663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   51.128237][ T5663] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   51.132557][ T5663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.141389][ T5663] usb 1-1: Product: syz
[   51.145996][ T5663] usb 1-1: Manufacturer: syz
[   51.147588][ T5663] usb 1-1: SerialNumber: syz
[   51.151626][ T5663] usb 1-1: config 0 descriptor??
[   51.158824][ T5663] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[   51.212292][ T5605] Bluetooth: hci0: command tx timeout
[   51.292293][ T5605] Bluetooth: hci2: command tx timeout
[   51.366294][ T5747] process 'syz.0.19' launched './file0' with NULL argv: empty string added
[   51.372990][ T5668] usb 1-1: USB disconnect, device number 2
[   51.482166][ T5707] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   51.632001][ T5707] usb 2-1: Using ep0 maxpacket: 16
[   51.644547][ T5707] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   51.651979][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.660032][ T5707] usb 2-1: config 0 descriptor??
[   51.667800][ T5707] gspca_main: sonixj-2.14.0 probing 0471:0327
[   51.690840][ T5778] FAULT_INJECTION: forcing a failure.
[   51.690840][ T5778] name failslab, interval 1, probability 0, space 0, times 1
[   51.695251][ T5778] CPU: 1 UID: 0 PID: 5778 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) 
[   51.695262][ T5778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   51.695267][ T5778] Call Trace:
[   51.695270][ T5778]  <TASK>
[   51.695274][ T5778]  dump_stack_lvl+0xe8/0x150
[   51.695288][ T5778]  should_fail_ex+0x40c/0x560
[   51.695303][ T5778]  should_failslab+0xa8/0x100
[   51.695332][ T5778]  __kmalloc_noprof+0xfe/0x720
[   51.695342][ T5778]  ? rcu_is_watching+0x15/0xb0
[   51.695354][ T5778]  ? tomoyo_realpath_from_path+0xef/0x640
[   51.695364][ T5778]  ? tomoyo_realpath_from_path+0xef/0x640
[   51.695377][ T5778]  tomoyo_realpath_from_path+0xef/0x640
[   51.695392][ T5778]  tomoyo_check_open_permission+0x229/0x470
[   51.695403][ T5778]  ? tomoyo_check_open_permission+0x1d3/0x470
[   51.695412][ T5778]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[   51.695421][ T5778]  ? __asan_memset+0x22/0x50
[   51.695431][ T5778]  ? seqcount_lockdep_reader_access+0xea/0x100
[   51.695452][ T5778]  security_file_open+0xa9/0x240
[   51.695461][ T5778]  do_dentry_open+0x4a0/0x1380
[   51.695473][ T5778]  vfs_open+0x3b/0x340
[   51.695480][ T5778]  ? path_openat+0x2e2d/0x3830
[   51.695492][ T5778]  path_openat+0x2e44/0x3830
[   51.695504][ T5778]  ? kasan_save_track+0x3e/0x80
[   51.695513][ T5778]  ? do_sys_openat2+0xcc/0x200
[   51.695521][ T5778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.695535][ T5778]  do_file_open+0x23e/0x4a0
[   51.695548][ T5778]  ? __pfx_do_file_open+0x10/0x10
[   51.695565][ T5778]  ? _raw_spin_unlock+0x28/0x50
[   51.695572][ T5778]  ? alloc_fd+0x651/0x6c0
[   51.695584][ T5778]  do_sys_openat2+0x115/0x200
[   51.695594][ T5778]  ? __pfx_do_sys_openat2+0x10/0x10
[   51.695603][ T5778]  ? exc_page_fault+0x6a/0xc0
[   51.695613][ T5778]  ? do_user_addr_fault+0xc4a/0x1340
[   51.695624][ T5778]  __x64_sys_openat+0x138/0x170
[   51.695633][ T5778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.695643][ T5778]  do_syscall_64+0x174/0x580
[   51.695651][ T5778]  ? trace_irq_disable+0x3b/0x140
[   51.695661][ T5778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.695668][ T5778] RIP: 0033:0x7f156ad5e98e
[   51.695676][ T5778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   51.695682][ T5778] RSP: 002b:00007f156bbcbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   51.695691][ T5778] RAX: ffffffffffffffda RBX: 00007f156bbcc6c0 RCX: 00007f156ad5e98e
[   51.695696][ T5778] RDX: 0000000000000005 RSI: 00007f156bbcbc00 RDI: ffffffffffffff9c
[   51.695701][ T5778] RBP: 00007f156bbcbc00 R08: 0000000000000000 R09: 0000000000000000
[   51.695705][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   51.695709][ T5778] R13: 00007f156b026038 R14: 00007f156b025fa0 R15: 00007ffe28bd14c8
[   51.695720][ T5778]  </TASK>
[   51.695774][ T5778] ERROR: Out of memory at tomoyo_realpath_from_path.
[   51.773357][ T5605] Bluetooth: hci1: command tx timeout
[   52.251991][ T5668] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   52.262171][ T5653] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   52.406411][ T5668] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   52.410257][ T5668] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   52.414342][ T5668] usb 3-1: config 0 interface 0 has no altsetting 0
[   52.416657][ T5668] usb 3-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00
[   52.419870][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.425929][ T5653] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[   52.429537][ T5668] usb 3-1: config 0 descriptor??
[   52.431283][ T5653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.434106][ T5653] usb 1-1: Product: syz
[   52.435485][ T5653] usb 1-1: Manufacturer: syz
[   52.439830][ T5653] usb 1-1: SerialNumber: syz
[   52.448466][ T5653] usb 1-1: config 0 descriptor??
[   52.452491][ T5653] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[   52.460848][ T5653] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   52.465043][ T5653] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[   52.467793][ T5653] usb 1-1: media controller created
[   52.483944][ T5653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   52.509424][ T5653] DVB: Unable to find symbol mt352_attach()
[   52.523727][ T5653] DVB: Unable to find symbol nxt6000_attach()
[   52.526119][ T5653] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[   52.531462][ T5653] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[   52.538179][ T5653] dvb-usb: schedule remote query interval to 1000 msecs.
[   52.540352][ T5653] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[   52.543989][ T5653] dvb-usb: bulk message failed: -22 (7/0)
[   52.546148][ T5653] dvb-usb: bulk message failed: -22 (7/0)
[   52.669718][  T761] usb 1-1: USB disconnect, device number 3
[   52.691613][ T5707] usb 2-1: USB disconnect, device number 3
[   52.718074][  T761] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[   52.851069][ T5668] asus 0003:0B05:1807.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.2-1/input0
[   53.049811][ T5707] usb 3-1: USB disconnect, device number 3
[   53.223542][ T5668] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   53.230173][ T5668] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   53.255739][ T5803] netlink: 'syz.1.43': attribute type 1 has an invalid length.
[   53.283035][ T5605] Bluetooth: hci0: command tx timeout
[   53.288047][ T5806] netlink: 276 bytes leftover after parsing attributes in process `syz.1.44'.
[   53.343845][ T5810] loop1: detected capacity change from 0 to 256
[   53.350392][ T5810] =======================================================
[   53.350392][ T5810] WARNING: The mand mount option has been deprecated and
[   53.350392][ T5810]          and is ignored by this kernel. Remove the mand
[   53.350392][ T5810]          option from the mount to silence this warning.
[   53.350392][ T5810] =======================================================
[   53.375137][ T5605] Bluetooth: hci2: command tx timeout
[   53.380707][ T5810] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf3aaca9f, utbl_chksum : 0xe619d30d)
[   53.493262][ T5668] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   53.741965][  T761] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   53.785067][ T5825] loop2: detected capacity change from 0 to 512
[   53.789917][ T5825] EXT4-fs: Ignoring removed oldalloc option
[   53.801484][ T5825] EXT4-fs (loop2): 1 truncate cleaned up
[   53.804094][ T5825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.843115][ T5605] Bluetooth: hci1: command tx timeout
[   53.853203][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.892509][  T761] usb 2-1: Using ep0 maxpacket: 16
[   53.898679][  T761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   53.903233][  T761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   53.907741][  T761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   53.914107][  T761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   53.920210][  T761] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   53.928374][  T761] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   53.931128][  T761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.937387][  T761] usb 2-1: config 0 descriptor??
[   54.004173][  T761] rc_core: IR keymap rc-hauppauge not found
[   54.006038][  T761] Registered IR keymap rc-empty
[   54.007720][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.014918][ T5668] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[   54.032372][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.056752][  T761] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   54.067316][  T761] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[   54.094670][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.111989][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.132473][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.151960][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.171978][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.193041][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.214137][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.244330][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.246757][ T5799] ceph: No mds server is up or the cluster is laggy
[   54.262235][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.284233][  T761] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   54.315574][  T761] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[   54.326515][  T761] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   54.341038][  T761] usb 2-1: USB disconnect, device number 4
[   55.035318][ T5852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.62'.
[   55.053341][ T5850] loop0: detected capacity change from 0 to 4096
[   55.362227][ T5605] Bluetooth: hci0: command tx timeout
[   55.444193][ T5605] Bluetooth: hci2: command tx timeout
[   55.783212][ T5873] loop2: detected capacity change from 0 to 4096
[   55.790328][ T5873] EXT4-fs: Ignoring removed mblk_io_submit option
[   55.807432][ T5873] EXT4-fs (loop2): Invalid log block size: 458754
[   56.268111][ T5883] FAULT_INJECTION: forcing a failure.
[   56.268111][ T5883] name failslab, interval 1, probability 0, space 0, times 0
[   56.272832][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) 
[   56.272877][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.272883][ T5883] Call Trace:
[   56.272887][ T5883]  <TASK>
[   56.272892][ T5883]  dump_stack_lvl+0xe8/0x150
[   56.272906][ T5883]  should_fail_ex+0x40c/0x560
[   56.272922][ T5883]  should_failslab+0xa8/0x100
[   56.272934][ T5883]  __kmalloc_cache_node_noprof+0xaa/0x630
[   56.272946][ T5883]  ? __raw_spin_lock_init+0x45/0x100
[   56.272954][ T5883]  ? sbitmap_queue_init_node+0x1dc/0x4d0
[   56.272964][ T5883]  ? sbitmap_queue_init_node+0x1dc/0x4d0
[   56.272974][ T5883]  ? __init_waitqueue_head+0xa8/0x150
[   56.272983][ T5883]  sbitmap_queue_init_node+0x1dc/0x4d0
[   56.272994][ T5883]  blk_mq_init_tags+0x1a3/0x2d0
[   56.273003][ T5883]  blk_mq_alloc_map_and_rqs+0xc8/0x9d0
[   56.273013][ T5883]  ? kfree+0x1c5/0x640
[   56.273020][ T5883]  ? blk_mq_map_queues+0x3ea/0x490
[   56.273030][ T5883]  ? blk_mq_map_queues+0x3ea/0x490
[   56.273038][ T5883]  ? trace_kmalloc+0x2a/0xf0
[   56.273047][ T5883]  blk_mq_alloc_set_map_and_rqs+0x1a0/0x810
[   56.273062][ T5883]  blk_mq_alloc_tag_set+0x8e5/0x1000
[   56.273076][ T5883]  loop_add+0x436/0xb40
[   56.273084][ T5883]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   56.273093][ T5883]  ? __pfx_loop_add+0x10/0x10
[   56.273110][ T5883]  loop_control_ioctl+0x12b/0x5a0
[   56.273118][ T5883]  ? __fget_files+0x2a/0x420
[   56.273127][ T5883]  ? __pfx_loop_control_ioctl+0x10/0x10
[   56.273133][ T5883]  ? __fget_files+0x2a/0x420
[   56.273143][ T5883]  ? bpf_lsm_file_ioctl+0x9/0x20
[   56.273151][ T5883]  ? __pfx_loop_control_ioctl+0x10/0x10
[   56.273159][ T5883]  __se_sys_ioctl+0xfc/0x170
[   56.273165][ T5883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.273173][ T5883]  do_syscall_64+0x174/0x580
[   56.273182][ T5883]  ? trace_irq_disable+0x3b/0x140
[   56.273193][ T5883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.273200][ T5883] RIP: 0033:0x7f156ad9e159
[   56.273207][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.273214][ T5883] RSP: 002b:00007f156bbcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   56.273222][ T5883] RAX: ffffffffffffffda RBX: 00007f156b025fa0 RCX: 00007f156ad9e159
[   56.273228][ T5883] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004
[   56.273234][ T5883] RBP: 00007f156ae3506b R08: 0000000000000000 R09: 0000000000000000
[   56.273238][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.273243][ T5883] R13: 00007f156b026038 R14: 00007f156b025fa0 R15: 00007ffe28bd14c8
[   56.273254][ T5883]  </TASK>
[   56.274706][ T5883] blk-mq: reduced tag depth (128 -> 64)
[   56.692156][ T5707] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   56.702004][ T5668] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   56.981425][ T5668] usb 1-1: unable to get BOS descriptor or descriptor too short
[   56.985054][ T5707] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   56.988440][ T5707] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[   56.992647][ T5668] usb 1-1: config 114 has an invalid interface number: 32 but max is 0
[   56.995158][ T5668] usb 1-1: config 114 has no interface number 0
[   56.997238][ T5668] usb 1-1: config 114 interface 32 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[   57.000773][ T5668] usb 1-1: config 114 interface 32 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[   57.003922][ T5668] usb 1-1: config 114 interface 32 has no altsetting 0
[   57.006607][ T5707] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[   57.009377][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.011767][ T5707] usb 3-1: Product: syz
[   57.013571][ T5707] usb 3-1: Manufacturer: syz
[   57.015157][ T5707] usb 3-1: SerialNumber: syz
[   57.017300][ T5668] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60
[   57.021074][ T5668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.023891][ T5668] usb 1-1: Product: syz
[   57.026875][ T5668] usb 1-1: Manufacturer: syz
[   57.028528][ T5668] usb 1-1: SerialNumber: syz
[   57.032609][ T5887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   57.236353][ T5707] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   57.256540][ T5668] usb 1-1: USB disconnect, device number 4
[   57.285013][ T5707] usb 3-1: USB disconnect, device number 4
[   57.309416][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   57.954351][ T5914] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   57.960746][ T5914] overlayfs: failed to set xattr on upper
[   57.966089][ T5914] overlayfs: ...falling back to redirect_dir=nofollow.
[   57.974840][ T5914] overlayfs: ...falling back to index=off.
[   57.981196][ T5914] overlayfs: ...falling back to uuid=null.
[   58.000703][ T5914] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   58.009313][ T5914] overlayfs: failed to set xattr on upper
[   58.013683][ T5914] overlayfs: ...falling back to redirect_dir=nofollow.
[   58.017827][ T5914] overlayfs: ...falling back to index=off.
[   58.026077][ T5914] overlayfs: ...falling back to uuid=null.
[   58.354336][ T5928] xt_hashlimit: overflow, try lower: 1125899906842624/134217732
[   58.663654][ T5940] netlink: 'syz.1.101': attribute type 10 has an invalid length.
[   58.828392][ T5951] loop1: detected capacity change from 0 to 8
[   58.856100][ T5951] SQUASHFS error: zlib decompression failed, data probably corrupt
[   58.859952][ T5951] SQUASHFS error: Failed to read block 0x4de: -5
[   58.863632][ T5951] SQUASHFS error: zlib decompression failed, data probably corrupt
[   58.867018][ T5951] SQUASHFS error: Failed to read block 0x4df: -5
[   58.869882][ T5951] SQUASHFS error: zlib decompression failed, data probably corrupt
[   58.873393][ T5951] SQUASHFS error: Failed to read block 0x4e0: -5
[   58.876470][ T5951] SQUASHFS error: zlib decompression failed, data probably corrupt
[   58.879883][ T5951] SQUASHFS error: Failed to read block 0x4de: -5
[   58.883007][   T34] audit: type=1800 audit(1789987865.016:2): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.106" name="file1" dev="loop1" ino=5 res=0 errno=0
[   59.335044][ T5955] loop1: detected capacity change from 0 to 131072
[   59.339623][ T5955] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[   59.342074][ T5955] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   59.345832][ T5955] F2FS-fs (loop1): invalid crc value
[   59.377713][ T5955] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   59.384629][ T5955] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   59.387220][ T5955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   59.767293][   T34] audit: type=1400 audit(1789987865.896:3): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5974 comm="syz.2.117"
[   59.772514][   T31] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   59.875937][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'.
[   59.879103][ T5979] netlink: 'syz.1.116': attribute type 7 has an invalid length.
[   59.882258][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   59.888234][ T5979] erspan0: entered promiscuous mode
[   59.890692][ T5979] gretap0: entered promiscuous mode
[   59.943720][   T31] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[   59.946945][   T31] usb 1-1: config 0 has no interface number 0
[   59.951654][   T31] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   59.955792][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.960223][   T31] usb 1-1: Product: syz
[   59.965804][   T31] usb 1-1: Manufacturer: syz
[   59.969008][   T31] usb 1-1: SerialNumber: syz
[   59.977759][   T31] usb 1-1: config 0 descriptor??
[   60.486509][ T5993] CIFS: Attempting to mount //127.0.0.1/share
[   60.567421][ T5996] loop1: detected capacity change from 0 to 1024
[   60.589566][ T5996] hfsplus: failed to load root directory
[   60.796679][   T31] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   60.800014][   T31] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   60.804488][   T31] asix 1-1:0.251: probe with driver asix failed with error -71
[   60.810488][   T31] usb 1-1: USB disconnect, device number 5
[   60.878901][ T6014] loop1: detected capacity change from 0 to 256
[   60.885770][ T6014] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   60.904142][ T6014] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   60.907562][ T6014] FAT-fs (loop1): Filesystem has been set read-only
[   61.140269][ T6018] netlink: Setting conntrack mark requires 'commit' flag.
[   61.144048][ T6018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.318419][ T5993] CIFS: VFS: Error connecting to socket. Aborting operation.
[   61.332547][ T5993] CIFS: VFS: cifs_mount failed w/return code = -4
[   61.359702][ T6027] loop0: detected capacity change from 0 to 512
[   61.502731][ T6038] netlink: 'syz.2.144': attribute type 3 has an invalid length.
[   61.505469][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   61.696124][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'.
[   61.803785][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.857648][ T6074] xt_TCPMSS: Only works on TCP SYN packets
[   61.920630][ T6085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.160'.
[   61.972260][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[   62.107504][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   62.191683][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[   62.420894][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'.
[   62.595670][ T6155] Illegal XDP return value 4294967294 on prog  (id 12) dev N/A, expect packet loss!
[   62.838924][ T6168] vlan2: entered promiscuous mode
[   62.840534][ T6168] team0: entered promiscuous mode
[   62.843162][ T6168] team_slave_0: entered promiscuous mode
[   62.845026][ T6168] team_slave_1: entered promiscuous mode
[   63.368310][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'.
[   63.459316][ T6196] loop2: detected capacity change from 0 to 4096
[   64.921950][ T6234] capability: warning: `syz.0.224' uses deprecated v2 capabilities in a way that may be insecure
[   65.203761][ T6260] loop2: detected capacity change from 0 to 2048
[   65.218030][ T6260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.061516][ T6306] netlink: 'syz.0.252': attribute type 2 has an invalid length.
[   66.083105][ T6303] bond1: invalid ARP target 0.0.0.0 specified for addition
[   66.087296][ T6303] bond1: option arp_ip_target: invalid value (0)
[   66.093090][ T6303] bond1 (unregistering): Released all slaves
[   66.325754][   T34] audit: type=1326 audit(1789987872.456:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.338921][   T34] audit: type=1326 audit(1789987872.456:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.345979][   T34] audit: type=1326 audit(1789987872.466:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.352076][ T5663] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   66.354890][   T34] audit: type=1326 audit(1789987872.466:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.354908][   T34] audit: type=1326 audit(1789987872.466:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.354924][   T34] audit: type=1326 audit(1789987872.466:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.354939][   T34] audit: type=1326 audit(1789987872.466:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.354953][   T34] audit: type=1326 audit(1789987872.466:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.354967][   T34] audit: type=1326 audit(1789987872.466:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.354982][   T34] audit: type=1326 audit(1789987872.466:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.1.267" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   66.417688][ T6324] loop2: detected capacity change from 0 to 128
[   66.552191][ T5663] usb 1-1: Using ep0 maxpacket: 8
[   66.555303][ T5663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   66.558424][ T5663] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   66.564419][ T5663] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[   66.568065][ T5663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.573426][ T5663] usb 1-1: Product: syz
[   66.574674][ T5663] usb 1-1: Manufacturer: syz
[   66.578135][ T5663] usb 1-1: SerialNumber: syz
[   66.590413][ T5663] usb 1-1: config 0 descriptor??
[   66.601550][ T5663] radioshark 1-1:0.0: Invalid radioSHARK device
[   66.604784][ T5663] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[   66.610737][ T5663] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   66.697169][ T6343] loop2: detected capacity change from 0 to 8192
[   66.806413][   T31] usb 1-1: USB disconnect, device number 6
[   67.356655][ T6366] __nla_validate_parse: 4 callbacks suppressed
[   67.356666][ T6366] netlink: 180 bytes leftover after parsing attributes in process `syz.0.287'.
[   67.801403][ T6388] pimreg: entered allmulticast mode
[   67.810697][ T6388] pimreg: left allmulticast mode
[   67.882060][ T6396] sd 0:0:0:0: PR command failed: 1026
[   67.884142][ T6396] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   67.886688][ T6396] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   68.136284][ T6423] loop2: detected capacity change from 0 to 512
[   68.140726][ T6423] EXT4-fs: Invalid journal IO priority (must be 0-7)
[   68.178198][ T6427] netlink: 324 bytes leftover after parsing attributes in process `syz.0.309'.
[   68.356200][ T6429] loop2: detected capacity change from 0 to 32768
[   68.402249][ T6429] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   68.415562][ T6429] XFS (loop2): Ending clean mount
[   68.434843][ T5602] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   69.381045][ T6493] xt_hashlimit: size too large, truncated to 1048576
[   69.393165][   T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   69.541966][   T31] usb 1-1: Using ep0 maxpacket: 8
[   69.546335][   T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[   69.551957][   T31] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   69.562067][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   69.565662][   T31] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   69.570550][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   69.577486][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   69.591010][   T31] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   69.595227][   T31] usb 1-1: config 168 interface 0 has no altsetting 0
[   69.599431][   T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[   69.601684][   T31] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   69.606343][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   69.614305][   T31] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   69.621962][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   69.626909][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   69.633878][   T31] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   69.642043][   T31] usb 1-1: config 168 interface 0 has no altsetting 0
[   69.651538][   T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[   69.653854][   T31] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[   69.658296][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   69.672382][   T31] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   69.675809][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   69.679068][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   69.691982][   T31] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[   69.696122][   T31] usb 1-1: config 168 interface 0 has no altsetting 0
[   69.700818][   T31] usb 1-1: string descriptor 0 read error: -22
[   69.703060][   T31] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   69.706259][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.721542][   T31] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   70.034857][ T5663] usb 1-1: USB disconnect, device number 7
[   70.037255][ T6534] usb 1-1: Couldn't submit interrupt_out_urb -19
[   70.405071][ T6551] netlink: 'syz.2.362': attribute type 12 has an invalid length.
[   70.407416][ T6551] netlink: 240 bytes leftover after parsing attributes in process `syz.2.362'.
[   70.410167][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'.
[   70.662630][   T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   70.831957][   T31] usb 3-1: Using ep0 maxpacket: 8
[   70.835727][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.839951][   T31] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[   70.843721][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.848541][   T31] usb 3-1: config 0 descriptor??
[   70.857983][   T31] rndis_host 3-1:0.0: missing cdc header descriptor
[   70.860500][   T31] cdc_acm 3-1:0.0: Control and data interfaces are not separated!
[   70.863399][   T31] cdc_acm 3-1:0.0: This needs exactly 3 endpoints
[   70.865633][   T31] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22
[   71.061025][   T31] usb 3-1: USB disconnect, device number 5
[   71.284709][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[   71.694550][ T6582] warning: `syz.2.373' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.001141][ T6614] netlink: 120 bytes leftover after parsing attributes in process `syz.0.388'.
[   72.008535][ T6614] netlink: 88 bytes leftover after parsing attributes in process `syz.0.388'.
[   72.094044][ T6622] Invalid option length (1048488) for dns_resolver key
[   72.152206][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'.
[   72.526154][ T6635] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   72.541972][ T6635] CIFS: Attempting to mount //127.0.0.1/share
[   72.593581][ T6641] 9p: Bad value for 'wfdno'
[   73.059415][ T6635] CIFS: VFS: Error connecting to socket. Aborting operation.
[   73.062366][ T6635] CIFS: VFS: cifs_mount failed w/return code = -4
[   73.400146][ T6710] batadv_slave_0: entered promiscuous mode
[   73.402804][ T6710] batadv_slave_0: left promiscuous mode
[   73.447558][ T6715] binder: 6714:6715 ioctl c0306201 200000000680 returned -14
[   73.848034][ T6741] loop2: detected capacity change from 0 to 32768
[   73.863289][ T6741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.449 (6741)
[   73.882345][ T6741] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.885810][ T6741] BTRFS info (device loop2): using sha256 checksum algorithm
[   73.925242][ T6741] BTRFS info (device loop2): enabling ssd optimizations
[   73.927864][ T6741] BTRFS info (device loop2): turning on async discard
[   73.930212][ T6741] BTRFS info (device loop2): enabling free space tree
[   73.991330][ T6759] BTRFS info (device loop2): device stats zeroed by syz.2.449 (6759)
[   74.579513][ T5602] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   74.760976][ T6773] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   74.966827][ T6789] FAULT_INJECTION: forcing a failure.
[   74.966827][ T6789] name failslab, interval 1, probability 0, space 0, times 0
[   74.971400][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.2.463 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   74.971430][ T6789] Tainted: [L]=SOFTLOCKUP
[   74.971433][ T6789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.971438][ T6789] Call Trace:
[   74.971442][ T6789]  <TASK>
[   74.971446][ T6789]  dump_stack_lvl+0xe8/0x150
[   74.971460][ T6789]  should_fail_ex+0x40c/0x560
[   74.971474][ T6789]  should_failslab+0xa8/0x100
[   74.971486][ T6789]  __kmalloc_cache_noprof+0xa8/0x660
[   74.971496][ T6789]  ? rcu_is_watching+0x15/0xb0
[   74.971507][ T6789]  ? report_access+0xd7/0x4e0
[   74.971517][ T6789]  ? report_access+0xd7/0x4e0
[   74.971529][ T6789]  report_access+0xd7/0x4e0
[   74.971539][ T6789]  ? yama_ptrace_access_check+0x7a/0xb20
[   74.971550][ T6789]  ? yama_ptrace_access_check+0x7a/0xb20
[   74.971560][ T6789]  yama_ptrace_access_check+0x8b2/0xb20
[   74.971570][ T6789]  ? yama_ptrace_access_check+0x7a/0xb20
[   74.971580][ T6789]  security_ptrace_access_check+0xd9/0x260
[   74.971590][ T6789]  ptrace_attach+0x216/0x8c0
[   74.971601][ T6789]  __se_sys_ptrace+0x1a3/0x3a0
[   74.971610][ T6789]  ? __pfx___se_sys_futex+0x10/0x10
[   74.971621][ T6789]  ? __pfx___se_sys_ptrace+0x10/0x10
[   74.971632][ T6789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.971640][ T6789]  do_syscall_64+0x174/0x580
[   74.971649][ T6789]  ? trace_irq_disable+0x3b/0x140
[   74.971659][ T6789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.971666][ T6789] RIP: 0033:0x7f156ad9e159
[   74.971674][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.971680][ T6789] RSP: 002b:00007f156bbcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[   74.971689][ T6789] RAX: ffffffffffffffda RBX: 00007f156b025fa0 RCX: 00007f156ad9e159
[   74.971694][ T6789] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[   74.971698][ T6789] RBP: 00007f156ae3506b R08: 0000000000000000 R09: 0000000000000000
[   74.971703][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.971708][ T6789] R13: 00007f156b026038 R14: 00007f156b025fa0 R15: 00007ffe28bd14c8
[   74.971719][ T6789]  </TASK>
[   76.297216][   T34] kauditd_printk_skb: 9 callbacks suppressed
[   76.297225][   T34] audit: type=1326 audit(1789987882.426:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.0.493" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9deb79e159 code=0x0
[   76.375052][   T34] audit: type=1326 audit(1789987882.506:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.0.493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb79e159 code=0x7ffc0000
[   76.383260][   T34] audit: type=1326 audit(1789987882.506:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.0.493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb79e159 code=0x7ffc0000
[   76.391072][   T34] audit: type=1326 audit(1789987882.506:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.0.493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb79e159 code=0x7ffc0000
[   76.399593][   T34] audit: type=1326 audit(1789987882.506:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.0.493" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9deb79e159 code=0x7ffc0000
[   76.412116][   T34] audit: type=1326 audit(1789987882.506:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.0.493" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9deb79e159 code=0x7ffc0000
[   76.652870][ T6874] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a
[   77.081526][ T6890] loop2: detected capacity change from 0 to 32768
[   77.117784][ T6890] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   77.124656][ T6890] JBD2: Ignoring recovery information on journal
[   77.166104][ T6890] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   77.321337][ T6890] (syz.2.507,6890,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[   77.385992][ T5602] ocfs2: Unmounting device (7,2) on (node local)
[   77.617680][ T6900] Bluetooth: MGMT ver 1.23
[   77.691064][ T6906] loop2: detected capacity change from 0 to 512
[   77.701783][ T6906] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   77.709975][ T6906] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.513: bg 0: block 4: invalid block bitmap
[   77.714392][ T6906] loop2: lost filesystem error report for type 5 error -117
[   77.715937][ T6906] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   77.722070][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   77.722110][    C1] EXT4-fs (loop2): initial error at time 1789987883: ext4_validate_block_bitmap:432
[   77.722125][    C1] EXT4-fs (loop2): last error at time 1789987883: ext4_validate_block_bitmap:432
[   77.733814][ T6906] loop2: lost filesystem error report for type 5 error -117
[   77.734018][ T6906] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.513: invalid indirect mapped block 1 (level 1)
[   77.741381][ T6906] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   77.743949][ T6906] EXT4-fs (loop2): 1 truncate cleaned up
[   77.750623][ T6906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.760113][   T34] audit: type=1800 audit(1789987883.886:29): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.513" name="bus" dev="loop2" ino=18 res=0 errno=0
[   77.761400][ T6906] Invalid ELF header magic: != ELF
[   77.783394][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.820163][ T6910] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in;
[   77.820163][ T6910]    program syz.2.514 not setting count and/or reply_len properly
[   77.884426][   T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   77.924970][ T6916] tmpfs: Bad value for 'mpol'
[   78.076698][   T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   78.082842][   T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   78.086731][ T6924] loop2: detected capacity change from 0 to 128
[   78.089286][   T31] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[   78.093282][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   78.097010][   T31] usb 1-1: Product: syz
[   78.098864][   T31] usb 1-1: Manufacturer: syz
[   78.120020][ T6924] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   78.121382][   T31] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[   78.139074][ T6924] hpfs: filesystem error: improperly stopped
[   78.146263][ T6924] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   78.150009][ T6924] hpfs: You really don't want any checks? You are crazy...
[   78.153803][ T6924] hpfs: Code page index out of array
[   78.155894][ T6924] hpfs: code page support is disabled
[   78.158197][ T6924] hpfs: hpfs_map_4sectors(): unaligned read
[   78.160450][ T6924] hpfs: hpfs_map_4sectors(): unaligned read
[   78.162945][ T6924] hpfs: filesystem error: unable to find root dir
[   78.178143][ T6924] hpfs: hpfs_map_4sectors(): unaligned read
[   78.280283][ T6936] loop2: detected capacity change from 0 to 4096
[   78.285451][ T6936] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   78.308442][ T6936] ntfs3(loop2): ino=19, mi_enum_attr
[   78.313465][ T6936] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   78.328275][ T6936] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   78.494181][ T6951] netlink: 124 bytes leftover after parsing attributes in process `syz.2.534'.
[   78.770866][ T6967] syzkaller1: entered promiscuous mode
[   78.774124][ T6967] syzkaller1: entered allmulticast mode
[   78.950035][ T6973] loop2: detected capacity change from 0 to 8
[   79.067866][ T6980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.548'.
[   79.234673][ T6990] netlink: 'syz.2.553': attribute type 1 has an invalid length.
[   79.238869][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[   79.473765][ T7008] jffs2: notice: (7008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   79.514227][ T7011] fuse: Bad value for 'fd'
[   79.542027][ T5653] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   79.615423][ T7016] Invalid ELF header magic: != ELF
[   79.694664][ T5653] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   79.697868][ T5653] usb 3-1: config 0 has no interface number 0
[   79.702722][ T5653] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[   79.706239][ T5653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.709011][ T5653] usb 3-1: Product: syz
[   79.710304][ T5653] usb 3-1: Manufacturer: syz
[   79.711783][ T5653] usb 3-1: SerialNumber: syz
[   79.715916][ T5653] usb 3-1: config 0 descriptor??
[   79.723174][ T5653] usb 3-1: selecting invalid altsetting 1
[   79.725643][ T5653] dvb_ttusb_budget: ttusb_init_controller: error
[   79.727573][ T5653] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   79.747554][ T5653] DVB: Unable to find symbol stv0299_attach()
[   79.766127][ T5653] DVB: Unable to find symbol tda8083_attach()
[   79.768107][ T5653] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[   79.927546][ T5662] usb 3-1: USB disconnect, device number 6
[   79.943584][   T31] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[   79.956844][   T31] usb 1-1: USB disconnect, device number 8
[   79.968506][   T31] mos7840 1-1:1.0: device disconnected
[   80.452818][ T7026] usb usb8: usbfs: process 7026 (syz.2.568) did not claim interface 0 before use
[   80.503147][ T7030] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   80.666105][ T7048] UBIFS error (pid: 7048): cannot open "c:::", error -22
[   80.693129][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.582'.
[   80.719530][ T7058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.584'.
[   80.771936][ T5653] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   80.936817][ T5653] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.955532][ T5653] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[   80.963055][ T5653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.967582][ T5653] usb 3-1: Product: syz
[   80.970855][ T5653] usb 3-1: Manufacturer: syz
[   80.976699][ T5653] usb 3-1: SerialNumber: syz
[   81.192319][ T5653] dvbdev: DVB: registering new adapter (DEC3000-s)
[   81.199751][ T5653] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)...
[   81.237359][ T7094] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[   81.255642][ T7094] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.278121][ T7094] bond1: (slave geneve2): making interface the new active one
[   81.284216][ T7094] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   81.392474][ T5653] usb 3-1: selecting invalid altsetting 8
[   81.448008][ T7107] capability: warning: `syz.1.602' uses 32-bit capabilities (legacy support in use)
[   81.537613][   T32] cfg80211: failed to load regulatory.db
[   81.593702][   T32] usb 3-1: USB disconnect, device number 7
[   82.137760][ T7124] netlink: 256 bytes leftover after parsing attributes in process `syz.0.611'.
[   82.175299][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.612'.
[   82.182863][ T7127] netlink: 144 bytes leftover after parsing attributes in process `syz.0.612'.
[   82.186194][ T7127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.612'.
[   82.396109][ T7144] loop2: detected capacity change from 0 to 512
[   82.399959][ T7144] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   82.409119][ T7144] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   82.418188][ T7144] EXT4-fs (loop2): 1 truncate cleaned up
[   82.421584][ T7144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.455532][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.536456][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'.
[   82.983848][   T34] audit: type=1326 audit(1789987889.116:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   82.994044][   T34] audit: type=1326 audit(1789987889.126:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.005302][   T34] audit: type=1326 audit(1789987889.126:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.017436][   T34] audit: type=1326 audit(1789987889.126:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.031495][   T34] audit: type=1326 audit(1789987889.126:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.045694][   T34] audit: type=1326 audit(1789987889.126:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.055407][ T7186] Option '?o냟W(d̛p^ï8	XKt..+jXpszgH{&}()eH/k;RE<' to dns_resolver key: bad/missing value
[   83.061353][   T34] audit: type=1326 audit(1789987889.126:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.082964][   T34] audit: type=1326 audit(1789987889.126:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.100290][   T34] audit: type=1326 audit(1789987889.126:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.114955][   T34] audit: type=1326 audit(1789987889.126:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f10d959e159 code=0x7ffc0000
[   83.135615][ T7192] gretap0: entered promiscuous mode
[   83.142756][ T7192] 0{X: renamed from gretap0
[   83.150090][ T7192] 0{X: left promiscuous mode
[   83.155050][ T7192] 0{X: entered allmulticast mode
[   83.257658][ T7198] fuse: Bad value for 'fd'
[   83.689387][ T7236] loop2: detected capacity change from 0 to 1024
[   83.722743][ T7236] syz.2.663: attempt to access beyond end of device
[   83.722743][ T7236] loop2: rw=8390665, sector=262, nr_sectors = 65274 limit=1024
[   83.826931][ T7242] __nla_validate_parse: 3 callbacks suppressed
[   83.826940][ T7242] netlink: 68 bytes leftover after parsing attributes in process `syz.0.666'.
[   83.968751][ T7254] TCP: TCP_TX_DELAY enabled
[   84.232060][ T5653] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   84.413519][ T5653] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   84.421905][ T5653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.427047][ T5653] usb 1-1: config 0 descriptor??
[   84.431155][ T5653] cp210x 1-1:0.0: cp210x converter detected
[   85.111034][ T7260] loop2: detected capacity change from 0 to 40427
[   85.115498][ T5653] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71
[   85.121313][ T7260] F2FS-fs (loop2): invalid crc value
[   85.123951][ T5653] cp210x 1-1:0.0: GPIO initialisation failed: -71
[   85.163593][ T7260] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.168982][ T7260] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[   85.172248][ T7260] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[   85.176124][ T7260] F2FS-fs (loop2): Start checkpoint disabled!
[   85.180983][ T7260] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[   85.184107][ T7260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   85.277224][ T5653] usb 1-1: cp210x converter now attached to ttyUSB0
[   85.283271][ T5653] usb 1-1: USB disconnect, device number 9
[   85.288072][ T5653] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   85.290988][ T5653] cp210x 1-1:0.0: device disconnected
[   85.419023][ T7264] syz.2.674: attempt to access beyond end of device
[   85.419023][ T7264] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.432130][ T7264] syz.2.674: attempt to access beyond end of device
[   85.432130][ T7264] loop2: rw=2049, sector=45104, nr_sectors = 48 limit=40427
[   85.791048][ T7269] SET target dimension over the limit!
[   85.879029][   T37] kworker/u10:1: attempt to access beyond end of device
[   85.879029][   T37] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[   85.899468][   T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u10:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   85.899487][   T37] Tainted: [L]=SOFTLOCKUP
[   85.899491][   T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.899498][   T37] Workqueue: writeback wb_workfn (flush-7:2)
[   85.899515][   T37] Call Trace:
[   85.899518][   T37]  <TASK>
[   85.899522][   T37]  dump_stack_lvl+0xe8/0x150
[   85.899533][   T37]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   85.899547][   T37]  f2fs_write_end_io+0x124b/0x1710
[   85.899563][   T37]  __submit_merged_bio+0x258/0x6a0
[   85.899569][   T37]  ? rcu_is_watching+0x15/0xb0
[   85.899583][   T37]  __submit_merged_write_cond+0x3c9/0x4e0
[   85.899600][   T37]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   85.899631][   T37]  f2fs_write_data_pages+0x2a27/0x36f0
[   85.899667][   T37]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.899683][   T37]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   85.899748][   T37]  ? lockdep_unlock+0x5d/0xd0
[   85.899767][   T37]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   85.899783][   T37]  ? __lock_acquire+0x683/0x2cf0
[   85.899798][   T37]  ? set_raw_inline+0x28b/0x390
[   85.899808][   T37]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[   85.899818][   T37]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.899827][   T37]  do_writepages+0x338/0x560
[   85.899839][   T37]  ? reacquire_held_locks+0x104/0x190
[   85.899849][   T37]  ? writeback_sb_inodes+0x450/0x1b00
[   85.899864][   T37]  __writeback_single_inode+0x12e/0xf90
[   85.899882][   T37]  writeback_sb_inodes+0x9de/0x1b00
[   85.899895][   T37]  ? __lock_acquire+0x683/0x2cf0
[   85.899924][   T37]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   85.899964][   T37]  ? rcu_is_watching+0x15/0xb0
[   85.899978][   T37]  ? queue_io+0x2d3/0x470
[   85.899988][   T37]  wb_writeback+0x41c/0xad0
[   85.899997][   T37]  ? queue_io+0x2b1/0x470
[   85.900007][   T37]  ? __pfx_wb_writeback+0x10/0x10
[   85.900014][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[   85.900027][   T37]  wb_workfn+0x431/0x10f0
[   85.900041][   T37]  ? __pfx_wb_workfn+0x10/0x10
[   85.900047][   T37]  ? rcu_is_watching+0x15/0xb0
[   85.900057][   T37]  ? trace_hrtimer_start+0x82/0x200
[   85.900072][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[   85.900085][   T37]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   85.900121][   T37]  ? process_scheduled_works+0xa20/0x14e0
[   85.900135][   T37]  ? process_scheduled_works+0xa20/0x14e0
[   85.900147][   T37]  ? rcu_is_watching+0x15/0xb0
[   85.900158][   T37]  ? process_scheduled_works+0xa20/0x14e0
[   85.900165][   T37]  process_scheduled_works+0xa8e/0x14e0
[   85.900183][   T37]  ? __pfx_process_scheduled_works+0x10/0x10
[   85.900193][   T37]  ? assign_work+0x3cf/0x5d0
[   85.900202][   T37]  worker_thread+0xa47/0xfb0
[   85.900220][   T37]  kthread+0x388/0x470
[   85.900229][   T37]  ? __pfx_worker_thread+0x10/0x10
[   85.900239][   T37]  ? __pfx_kthread+0x10/0x10
[   85.900254][   T37]  ret_from_fork+0x514/0xb70
[   85.900272][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[   85.900287][   T37]  ? __switch_to+0xc89/0x1420
[   85.900302][   T37]  ? __pfx_kthread+0x10/0x10
[   85.900316][   T37]  ret_from_fork_asm+0x1a/0x30
[   85.900333][   T37]  </TASK>
[   85.900368][   T37] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   86.461285][ T7273] netlink: 2 bytes leftover after parsing attributes in process `syz.2.678'.
[   86.650879][ T7277] acpi-nfit pcspkr: error -ENODEV: No ACPI companion
[   86.952812][ T5662] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   87.112958][ T5662] usb 3-1: Using ep0 maxpacket: 16
[   87.116552][ T5662] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.120679][ T5662] usb 3-1: config 0 interface 0 has no altsetting 0
[   87.124115][ T5662] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   87.127131][ T5662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.135032][ T5662] usb 3-1: config 0 descriptor??
[   87.553262][ T5662] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   87.555928][ T5662] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   87.558549][ T5662] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   87.561297][ T5662] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   87.565062][ T5662] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   87.568593][ T5662] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   87.761774][    C0] usb 3-1: input irq status -75 received
[   87.964783][   T31] usb 3-1: USB disconnect, device number 8
[   89.312003][   T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   89.581624][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.596774][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40
[   89.606439][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   89.615995][   T31] usb 1-1: SerialNumber: syz
[   89.679472][   T31] cdc_ether 1-1:1.0: skipping garbage
[   89.691415][   T31] cdc_ether 1-1:1.0: GUID doesn't match
[   89.881169][   T31] usb 1-1: USB disconnect, device number 10
[   89.906437][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.909791][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.990797][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.998114][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.104785][ T5661] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.109375][ T5661] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.114338][ T5661] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.117019][ T5661] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.205367][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.705'.
[   90.214768][   T31] Process accounting resumed
[   90.385365][ T7359] fuse: fd is not a fuse device
[   90.416926][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'.
[   90.627155][ T7383] xt_hashlimit: size too large, truncated to 1048576
[   90.982185][ T5662] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   91.133719][ T5662] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.137368][ T5662] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   91.144559][ T5662] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[   91.148246][ T5662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.150713][ T5662] usb 1-1: Product: syz
[   91.152559][ T5662] usb 1-1: Manufacturer: syz
[   91.154059][ T5662] usb 1-1: SerialNumber: syz
[   91.160022][ T5662] usb 1-1: NFC: intf ffff88811567b000 id ffffffff8f635c00
[   91.363156][  T761] usb 1-1: USB disconnect, device number 11
[   91.649090][ T5661] tipc: Subscription rejected, illegal request
[   91.784173][   T34] kauditd_printk_skb: 4 callbacks suppressed
[   91.784184][   T34] audit: type=1800 audit(1789987897.906:44): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.735" name="features" dev="configfs" ino=12335 res=0 errno=0
[   92.045314][ T7446] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   92.045314][ T7446] Please contact the netfilter-devel mailing list or update your nftables rules.
[   92.758747][   T32] kernel write not supported for file /423/net/fib_triestat (pid: 32 comm: kworker/1:2)
[   93.265118][ T7501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.770'.
[   93.268211][ T7501] tipc: Enabling of bearer <udg:s> rejected, media not registered
[   93.347864][ T7508] loop2: detected capacity change from 0 to 1024
[   93.367650][ T7508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.372369][ T7508] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.400479][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   93.450583][ T7514] mmap: syz.2.775 (7514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   93.560467][ T7520] loop2: detected capacity change from 0 to 2048
[   93.590991][ T7520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.595797][ T7520] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.619490][ T7526] binder: BINDER_SET_CONTEXT_MGR already set
[   93.623379][ T7526] binder: 7525:7526 ioctl 4018620d 200000000100 returned -16
[   93.636695][ T7526] binder: BINDER_SET_CONTEXT_MGR already set
[   93.640525][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.645180][ T7526] binder: 7525:7526 ioctl 4018620d 200000004a80 returned -16
[   94.651423][ T7565] tap0: tun_chr_ioctl cmd 1074025677
[   94.653638][ T7565] tap0: linktype set to 776
[   94.793989][ T7565] syzkaller1: entered promiscuous mode
[   94.796053][ T7565] syzkaller1: entered allmulticast mode
[   95.793770][ T7607] loop2: detected capacity change from 0 to 256
[   95.823062][ T7607] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   96.092041][ T5653] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   96.242775][ T5653] usb 3-1: too many configurations: 23, using maximum allowed: 8
[   96.255871][ T5653] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[   96.259383][ T5653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19
[   96.262341][ T5653] usb 3-1: SerialNumber: syz
[   96.283115][ T5653] usb 3-1: config 0 descriptor??
[   96.293119][ T5653] rndis_host 3-1:0.0: rndis: master #0/ffff88816817c000 slave #1/0000000000000000
[   96.553870][ T7630] exFAT-fs (loop2): start_clu is invalid cluster(0x0)
[   96.582564][ T5653] usb 3-1: USB disconnect, device number 9
[   97.145097][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[   97.152747][ T7681] batadv0: entered promiscuous mode
[   97.155776][ T7681] macsec1: entered promiscuous mode
[   97.157574][ T7681] macsec1: entered allmulticast mode
[   97.159196][ T7681] batadv0: entered allmulticast mode
[   97.161466][ T7681] 8021q: adding VLAN 0 to HW filter on device macsec1
[   97.164385][ T7681] batadv0: left allmulticast mode
[   97.166050][ T7681] batadv0: left promiscuous mode
[   97.622821][ T5653] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   97.734875][ T7705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.772912][ T5653] usb 3-1: Using ep0 maxpacket: 32
[   97.776546][ T5653] usb 3-1: config 253 has an invalid interface number: 193 but max is 0
[   97.779099][ T5653] usb 3-1: config 253 has no interface number 0
[   97.781039][ T5653] usb 3-1: config 253 interface 193 has no altsetting 0
[   97.785203][ T5653] usb 3-1: New USB device found, idVendor=04b8, idProduct=0002, bcdDevice=24.0e
[   97.788136][ T5653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.791117][ T5653] usb 3-1: Product: syz
[   97.793195][ T5653] usb 3-1: Manufacturer: syz
[   97.795034][ T5653] usb 3-1: SerialNumber: syz
[   98.179477][ T5653] usb 3-1: USB disconnect, device number 10
[   98.350267][ T7733] netlink: 'syz.0.863': attribute type 29 has an invalid length.
[   98.353826][ T7733] netlink: 'syz.0.863': attribute type 3 has an invalid length.
[   98.813476][ T7742] loop2: detected capacity change from 0 to 2048
[   98.871830][ T7742]  loop2: p1 < > p3
[   98.893991][ T7742] loop2: p3 size 134217728 extends beyond EOD, truncated
[   98.984985][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   98.990890][ T5598] udevd[5598]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   99.019513][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   99.025416][ T5598] udevd[5598]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   99.140185][ T7751] netlink: 'syz.2.871': attribute type 1 has an invalid length.
[   99.683995][ T7769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.209702][ T7794] loop2: detected capacity change from 0 to 4096
[  100.216339][ T7794] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  100.388804][   T34] audit: type=1800 audit(1789987906.516:45): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.894" name="dbroot" dev="configfs" ino=13588 res=0 errno=0
[  100.932006][   T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  100.979383][ T7834] netlink: 'syz.1.909': attribute type 9 has an invalid length.
[  101.091974][   T31] usb 3-1: Using ep0 maxpacket: 32
[  101.095919][   T31] usb 3-1: config 128 has an invalid interface number: 127 but max is 0
[  101.099181][   T31] usb 3-1: config 128 has no interface number 0
[  101.102101][   T31] usb 3-1: config 128 interface 127 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  101.105984][   T31] usb 3-1: config 128 interface 127 altsetting 127 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  101.112196][   T31] usb 3-1: config 128 interface 127 altsetting 127 has an endpoint descriptor with address 0x9C, changing to 0x8C
[  101.116544][   T31] usb 3-1: config 128 interface 127 altsetting 127 endpoint 0x8C has an invalid bInterval 216, changing to 7
[  101.120361][   T31] usb 3-1: config 128 interface 127 altsetting 127 endpoint 0x8C has invalid maxpacket 9550, setting to 1024
[  101.124286][   T31] usb 3-1: config 128 interface 127 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  101.128665][   T31] usb 3-1: config 128 interface 127 has no altsetting 0
[  101.134318][   T31] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=d6.67
[  101.137454][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.141947][   T31] usb 3-1: Product: syz
[  101.143884][   T31] usb 3-1: Manufacturer: syz
[  101.146991][   T31] usb 3-1: SerialNumber: syz
[  101.181987][ T5668] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  101.228932][ T7847] xt_limit: Overflow, try lower: 268435456/134217728
[  101.334995][ T5668] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.338291][ T5668] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  101.341333][ T5668] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  101.344896][ T5668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.349251][ T5668] usb 1-1: config 0 descriptor??
[  101.372990][   T31] usb 3-1: USB disconnect, device number 11
[  101.758535][ T5668] Bluetooth: Can't get state to change to load configuration err
[  101.761666][ T5668] Bluetooth: Loading sysconfig file failed
[  101.763607][ T5668] ath3k 1-1:0.0: probe with driver ath3k failed with error -16
[  101.769563][ T5668] usb 1-1: USB disconnect, device number 12
[  101.967467][ T7858] vti0: entered promiscuous mode
[  101.969341][ T7858] vti0: entered allmulticast mode
[  102.113252][   T54] Bluetooth: hci3: sending frame failed (-49)
[  102.119898][ T5605] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  102.298591][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.930'.
[  102.416797][ T5605] Bluetooth: hci1: link tx timeout
[  102.419030][ T5605] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  102.434782][   T54] Bluetooth: hci1: link tx timeout
[  102.436645][   T54] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  102.439000][   T54] Bluetooth: hci1: link tx timeout
[  102.440465][   T54] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  102.863576][ T7899] ip_tables: iptables: counters copy to user failed while replacing table
[  103.250408][ T5663] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  103.403466][ T5663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.411681][ T5663] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  103.418136][ T5663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.638581][ T5663] usb 1-1: USB disconnect, device number 13
[  103.792026][ T5668] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  103.944766][ T5668] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  103.948865][ T5668] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  103.953684][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  103.957822][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  103.961516][ T5668] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  103.970745][ T5668] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  103.976127][ T5668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.982131][ T5668] usb 3-1: Product: syz
[  103.985803][ T5668] usb 3-1: Manufacturer: syz
[  103.989366][ T5668] usb 3-1: SerialNumber: syz
[  103.998137][ T5668] usb 3-1: config 0 descriptor??
[  104.010753][ T5668] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  104.239371][ T5663] usb 3-1: USB disconnect, device number 12
[  104.487476][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  104.531391][ T7974] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.973'.
[  104.862102][   T34] audit: type=1400 audit(1789987910.986:46): apparmor="STATUS" operation="profile_load" profile="unconfined" name=66226F pid=7996 comm="syz.2.984"
[  105.552101][ T5663] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  105.704430][ T5663] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  105.709698][ T5663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.719750][ T5663] usb 1-1: config 0 descriptor??
[  105.726382][ T5663] cp210x 1-1:0.0: cp210x converter detected
[  106.189557][ T5663] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  106.204788][ T5663] usb 1-1: cp210x converter now attached to ttyUSB0
[  106.456426][ T5663] usb 1-1: USB disconnect, device number 14
[  106.469298][ T5663] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  106.477712][ T5663] cp210x 1-1:0.0: device disconnected
[  107.372850][ T8063] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  107.407938][ T8068] sit0: entered promiscuous mode
[  107.444522][ T8068] netlink: 'syz.2.1015': attribute type 1 has an invalid length.
[  107.466179][ T8068] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1015'.
[  107.646514][ T8081] FAULT_INJECTION: forcing a failure.
[  107.646514][ T8081] name failslab, interval 1, probability 0, space 0, times 0
[  107.652563][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: syz.0.1021 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  107.652608][ T8081] Tainted: [L]=SOFTLOCKUP
[  107.652613][ T8081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.652621][ T8081] Call Trace:
[  107.652626][ T8081]  <TASK>
[  107.652632][ T8081]  dump_stack_lvl+0xe8/0x150
[  107.652655][ T8081]  should_fail_ex+0x40c/0x560
[  107.652679][ T8081]  should_failslab+0xa8/0x100
[  107.652698][ T8081]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  107.652713][ T8081]  ? mas_alloc_nodes+0x291/0x350
[  107.652725][ T8081]  ? mas_alloc_nodes+0x291/0x350
[  107.652742][ T8081]  mas_alloc_nodes+0x291/0x350
[  107.652758][ T8081]  mas_preallocate+0x2cf/0x630
[  107.652771][ T8081]  ? rcu_is_watching+0x15/0xb0
[  107.652789][ T8081]  ? __pfx_mas_preallocate+0x10/0x10
[  107.652807][ T8081]  ? anon_vma_name+0x61/0x210
[  107.652823][ T8081]  ? __mas_set_range+0x11a/0x3a0
[  107.652843][ T8081]  __split_vma+0x318/0xa50
[  107.652861][ T8081]  ? __pfx___split_vma+0x10/0x10
[  107.652881][ T8081]  ? can_vma_merge_right+0x193/0x420
[  107.652901][ T8081]  vma_modify+0x84a/0x1c70
[  107.652927][ T8081]  vma_modify_flags+0x24b/0x330
[  107.652943][ T8081]  ? arch_stack_walk+0xfb/0x150
[  107.652956][ T8081]  ? __pfx_vma_modify_flags+0x10/0x10
[  107.652980][ T8081]  ? ima_match_policy+0x106/0x21c0
[  107.652998][ T8081]  ? ima_match_policy+0x2125/0x21c0
[  107.653016][ T8081]  madvise_vma_behavior+0x1dd6/0x4340
[  107.653037][ T8081]  ? __lock_acquire+0x683/0x2cf0
[  107.653051][ T8081]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  107.653081][ T8081]  ? __lock_acquire+0x683/0x2cf0
[  107.653105][ T8081]  ? do_raw_spin_lock+0x12b/0x2f0
[  107.653123][ T8081]  ? rcu_is_watching+0x15/0xb0
[  107.653140][ T8081]  ? trace_hrtimer_start+0x82/0x200
[  107.653155][ T8081]  ? hrtimer_start_range_ns_common+0x83b/0xb90
[  107.653190][ T8081]  ? mas_prev_slot+0xb76/0xbf0
[  107.653213][ T8081]  ? find_vma_prev+0x123/0x1b0
[  107.653227][ T8081]  ? __pfx_find_vma_prev+0x10/0x10
[  107.653242][ T8081]  ? __resched_curr+0x23e/0x530
[  107.653269][ T8081]  madvise_walk_vmas+0x576/0xb00
[  107.653291][ T8081]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  107.653310][ T8081]  ? blk_start_plug+0x6e/0x1b0
[  107.653348][ T8081]  madvise_do_behavior+0x385/0x540
[  107.653369][ T8081]  ? __pfx_madvise_do_behavior+0x10/0x10
[  107.653397][ T8081]  do_madvise+0x327/0x3a0
[  107.653414][ T8081]  ? __pfx_do_madvise+0x10/0x10
[  107.653438][ T8081]  ? __se_sys_futex+0x3a8/0x450
[  107.653461][ T8081]  ? rcu_is_watching+0x15/0xb0
[  107.653480][ T8081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.653493][ T8081]  __x64_sys_madvise+0xa6/0xc0
[  107.653510][ T8081]  do_syscall_64+0x174/0x580
[  107.653523][ T8081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.653539][ T8081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.653550][ T8081] RIP: 0033:0x7f9deb79e159
[  107.653561][ T8081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.653570][ T8081] RSP: 002b:00007f9dec625028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  107.653608][ T8081] RAX: ffffffffffffffda RBX: 00007f9deba25fa0 RCX: 00007f9deb79e159
[  107.653617][ T8081] RDX: 000000000000000a RSI: 86ac726dff2f4713 RDI: 0000200000bdc000
[  107.653626][ T8081] RBP: 00007f9deb83506b R08: 0000000000000000 R09: 0000000000000000
[  107.653633][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.653640][ T8081] R13: 00007f9deba26038 R14: 00007f9deba25fa0 R15: 00007ffd4c5770e8
[  107.653660][ T8081]  </TASK>
[  108.256277][ T5668] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  108.297913][ T8108] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.401529][ T8110] netlink: 'syz.1.1034': attribute type 219 has an invalid length.
[  108.416197][ T5668] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.420360][ T5668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  108.431136][ T5668] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  108.435008][ T5668] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  108.439595][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.637883][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.646983][ T8126] 8021q: adding VLAN 0 to HW filter on device team0
[  108.653452][ T8126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.681097][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.684703][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.690103][ T8126] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  108.699428][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.702150][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.713236][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.715414][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.790062][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'.
[  108.858042][ T5668] cxacru 3-1:1.0: send of cm 0x91 failed (-71)
[  108.862514][ T5668] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  108.865088][ T5668] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  108.872286][ T5653] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  108.877972][ T5668] cxacru 3-1:1.0: probe with driver cxacru failed with error -71
[  108.883123][ T5668] usb 3-1: USB disconnect, device number 13
[  109.021928][ T5653] usb 1-1: Using ep0 maxpacket: 8
[  109.025110][ T5653] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  109.027636][ T5653] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  109.030612][ T5653] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  109.033891][ T5653] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  109.036906][ T5653] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.041129][ T5653] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  109.047715][ T5653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.255551][ T5653] usb 1-1: usb_control_msg returned -32
[  109.257327][ T5653] usbtmc 1-1:16.0: can't read capabilities
[  109.486933][ T8146] loop2: detected capacity change from 0 to 64
[  109.852175][ T8169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1060'.
[  109.963243][ T8178] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 0
[  110.127393][ T8192] fuse: fd is not a fuse device
[  110.166472][ T5653] usb 1-1: USB disconnect, device number 15
[  110.173055][   T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  110.343935][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  110.346783][   T31] usb 3-1: not running at top speed; connect to a high speed hub
[  110.350022][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.353337][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  110.356223][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.361358][   T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  110.364908][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  110.367670][   T31] usb 3-1: Product: syz
[  110.368989][   T31] usb 3-1: Manufacturer: syz
[  110.580197][   T31] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[  110.583006][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 3: -71 (exp. 1).
[  110.586212][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1).
[  110.589303][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 10 on unit 3: -71 (exp. 1).
[  110.592828][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 3: -71 (exp. 1).
[  110.595920][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 3: -71 (exp. 1).
[  110.599010][   T31] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 3: -71 (exp. 1).
[  110.602450][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 16 on unit 3: -71 (exp. 1).
[  110.605477][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 3: -71 (exp. 1).
[  110.608634][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 3: -71 (exp. 1).
[  110.612197][   T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 3: -71 (exp. 1).
[  110.615206][   T31] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770.
[  110.618049][   T31] uvcvideo 3-1:1.0: Failed to create links for entity 3
[  110.620154][   T31] uvcvideo 3-1:1.0: Failed to register entities (-22).
[  110.626324][   T31] usb 3-1: USB disconnect, device number 14
[  111.136504][ T8237] loop2: detected capacity change from 0 to 128
[  111.145390][ T8237] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  111.161271][ T8237] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  111.176097][ T8237] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.1075: No space for directory leaf checksum. Please run e2fsck -D.
[  111.188512][ T8237] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.1075: checksumming directory block 0
[  111.288937][ T5602] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.343712][ T8251] modprobe (8251) used greatest stack depth: 20408 bytes left
[  111.832646][ T8295] gfs2: error -5 reading superblock
[  112.169729][ T8325] ip_tables: iptables: counters copy to user failed while replacing table
[  112.333297][ T8337] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1102'.
[  112.336891][ T8337] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1102'.
[  112.401464][ T8333] loop2: detected capacity change from 0 to 32768
[  112.417084][ T8333] (syz.2.1101,8333,1):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[  112.426909][ T8333] (syz.2.1101,8333,1):ocfs2_fill_super:1177 ERROR: status = -22
[  112.920718][ T8353] loop2: detected capacity change from 0 to 131072
[  112.925271][ T8353] F2FS-fs (loop2): invalid crc value
[  112.956982][ T8353] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.962934][ T8353] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  112.984280][   T34] audit: type=1800 audit(1789987919.116:47): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1109" name="file1" dev="loop2" ino=7 res=0 errno=0
[  113.443751][ T8381] Device name cannot be null; rc = [-22]
[  113.587053][ T8393] IPv6: NLM_F_CREATE should be specified when creating new route
[  113.590048][ T8393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.594070][ T8393] IPv6: NLM_F_CREATE should be set when creating new route
[  113.596852][ T8393] IPv6: NLM_F_CREATE should be set when creating new route
[  113.599516][ T8393] IPv6: NLM_F_CREATE should be set when creating new route
[  113.610027][ T8393] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1127'.
[  113.983292][   T34] audit: type=1326 audit(1789987920.116:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.1130" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9deb79e159 code=0x0
[  114.919418][ T8428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.964861][ T8434] loop2: detected capacity change from 0 to 1024
[  114.981738][ T8434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.996636][ T8434] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.1142: bit already cleared for inode 15
[  115.004857][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  115.030487][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.097842][ T8445] loop2: detected capacity change from 0 to 4096
[  115.117912][ T8445] ntfs3(loop2): failed to convert "0080" to macinuit
[  115.126857][ T8445] ntfs3(loop2): failed to convert "0080" to macinuit
[  115.129200][ T8445] ntfs3(loop2): failed to convert name for inode 1e.
[  115.134486][ T8445] ntfs3(loop2): ino=1f, mi_enum_attr
[  115.136624][ T8445] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  115.176483][ T8453] FAULT_INJECTION: forcing a failure.
[  115.176483][ T8453] name failslab, interval 1, probability 0, space 0, times 0
[  115.181599][ T8453] CPU: 1 UID: 0 PID: 8453 Comm: syz.2.1152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.181611][ T8453] Tainted: [L]=SOFTLOCKUP
[  115.181614][ T8453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.181619][ T8453] Call Trace:
[  115.181623][ T8453]  <TASK>
[  115.181627][ T8453]  dump_stack_lvl+0xe8/0x150
[  115.181641][ T8453]  should_fail_ex+0x40c/0x560
[  115.181655][ T8453]  should_failslab+0xa8/0x100
[  115.181667][ T8453]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  115.181676][ T8453]  ? fdb_create+0x1ae/0x1330
[  115.181686][ T8453]  ? fdb_create+0x1ae/0x1330
[  115.181698][ T8453]  fdb_create+0x1ae/0x1330
[  115.181709][ T8453]  ? rcu_read_lock_any_held+0x33/0x90
[  115.181720][ T8453]  ? br_fdb_find+0x82/0x210
[  115.181732][ T8453]  ? __pfx_fdb_create+0x10/0x10
[  115.181741][ T8453]  ? br_fdb_find+0x82/0x210
[  115.181751][ T8453]  ? br_fdb_find+0x82/0x210
[  115.181763][ T8453]  fdb_add_local+0x121/0x250
[  115.181774][ T8453]  br_fdb_changeaddr+0x300/0x470
[  115.181787][ T8453]  br_device_event+0x699/0x9c0
[  115.181796][ T8453]  ? net_generic+0x1e/0x240
[  115.181808][ T8453]  ? __pfx_br_device_event+0x10/0x10
[  115.181818][ T8453]  ? lockdep_rtnl_is_held+0x26/0x40
[  115.181827][ T8453]  notifier_call_chain+0x1a5/0x3d0
[  115.181863][ T8453]  call_netdevice_notifiers+0x90/0xd0
[  115.181873][ T8453]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[  115.181882][ T8453]  ? __pfx___mutex_lock+0x10/0x10
[  115.181890][ T8453]  ? full_name_hash+0x92/0xe0
[  115.181900][ T8453]  ? dev_ifsioc+0x645/0x1360
[  115.181909][ T8453]  ? netdev_need_ops_lock+0xbe/0xf0
[  115.181920][ T8453]  dev_ifsioc+0x65a/0x1360
[  115.181930][ T8453]  ? dev_load+0x21/0x1f0
[  115.181939][ T8453]  dev_ioctl+0x7b4/0x1150
[  115.181951][ T8453]  sock_do_ioctl+0x23e/0x320
[  115.181960][ T8453]  ? __pfx_sock_do_ioctl+0x10/0x10
[  115.181967][ T8453]  ? hook_file_ioctl+0x1f0/0x5f0
[  115.181982][ T8453]  sock_ioctl+0x57a/0x7e0
[  115.181990][ T8453]  ? __pfx_sock_ioctl+0x10/0x10
[  115.181997][ T8453]  ? __fget_files+0x2a/0x420
[  115.182006][ T8453]  ? __fget_files+0x3a2/0x420
[  115.182014][ T8453]  ? __fget_files+0x2a/0x420
[  115.182023][ T8453]  ? bpf_lsm_file_ioctl+0x9/0x20
[  115.182031][ T8453]  ? __pfx_sock_ioctl+0x10/0x10
[  115.182038][ T8453]  __se_sys_ioctl+0xfc/0x170
[  115.182045][ T8453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.182052][ T8453]  do_syscall_64+0x174/0x580
[  115.182063][ T8453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.182070][ T8453] RIP: 0033:0x7f156ad9e159
[  115.182078][ T8453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.182084][ T8453] RSP: 002b:00007f156bbcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.182094][ T8453] RAX: ffffffffffffffda RBX: 00007f156b025fa0 RCX: 00007f156ad9e159
[  115.182102][ T8453] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000007
[  115.182128][ T8453] RBP: 00007f156ae3506b R08: 0000000000000000 R09: 0000000000000000
[  115.182135][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.182141][ T8453] R13: 00007f156b026038 R14: 00007f156b025fa0 R15: 00007ffe28bd14c8
[  115.182158][ T8453]  </TASK>
[  115.853427][   T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  116.011955][   T24] usb 3-1: Using ep0 maxpacket: 16
[  116.014832][   T24] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  116.017380][   T24] usb 3-1: config 0 has no interface number 0
[  116.019246][   T24] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  116.022479][   T24] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  116.027298][   T24] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  116.030128][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.032769][   T24] usb 3-1: Product: syz
[  116.034064][   T24] usb 3-1: Manufacturer: syz
[  116.035617][   T24] usb 3-1: SerialNumber: syz
[  116.038727][   T24] usb 3-1: config 0 descriptor??
[  116.040775][ T8482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  116.043271][ T8482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  116.251658][ T8482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  116.259340][ T8482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  116.465686][   T24] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  116.570438][ T8528] netlink: 'syz.0.1188': attribute type 4 has an invalid length.
[  116.597139][ T8528] netlink: 'syz.0.1188': attribute type 4 has an invalid length.
[  117.013600][ T8541] netlink: 'syz.1.1194': attribute type 21 has an invalid length.
[  117.016213][ T8541] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.304554][ T8561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.647707][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1206'.
[  118.234108][   T31] IPVS: starting estimator thread 0...
[  118.325736][ T8604] openvswitch: netlink: IPv4 tunnel dst address is zero
[  118.352902][ T8598] IPVS: using max 82 ests per chain, 196800 per kthread
[  118.504920][   T24] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  118.513850][   T24] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  118.522485][   T24] asix 3-1:0.34: probe with driver asix failed with error -71
[  118.531376][   T24] usb 3-1: USB disconnect, device number 15
[  119.131245][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1236'.
[  119.318867][ T8657] FAULT_INJECTION: forcing a failure.
[  119.318867][ T8657] name fail_futex, interval 1, probability 0, space 0, times 1
[  119.323060][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: syz.2.1247 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.323074][ T8657] Tainted: [L]=SOFTLOCKUP
[  119.323076][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.323081][ T8657] Call Trace:
[  119.323085][ T8657]  <TASK>
[  119.323088][ T8657]  dump_stack_lvl+0xe8/0x150
[  119.323103][ T8657]  should_fail_ex+0x40c/0x560
[  119.323117][ T8657]  get_futex_key+0x1b3/0x1580
[  119.323128][ T8657]  ? __lock_acquire+0x683/0x2cf0
[  119.323139][ T8657]  ? kasan_save_track+0x3e/0x80
[  119.323149][ T8657]  ? __kasan_slab_free+0x5c/0x80
[  119.323157][ T8657]  ? kmem_cache_free+0x182/0x650
[  119.323167][ T8657]  ? __pfx_get_futex_key+0x10/0x10
[  119.323180][ T8657]  futex_wake+0x119/0x5f0
[  119.323190][ T8657]  ? __pfx_futex_wake+0x10/0x10
[  119.323204][ T8657]  do_futex+0x458/0x4e0
[  119.323217][ T8657]  ? __pfx_do_futex+0x10/0x10
[  119.323226][ T8657]  ? kmem_cache_free+0x182/0x650
[  119.323238][ T8657]  __se_sys_futex+0x3a8/0x450
[  119.323254][ T8657]  ? __pfx___se_sys_futex+0x10/0x10
[  119.323265][ T8657]  ? rcu_is_watching+0x15/0xb0
[  119.323277][ T8657]  ? __x64_sys_futex+0x21/0xf0
[  119.323287][ T8657]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.323295][ T8657]  do_syscall_64+0x174/0x580
[  119.323304][ T8657]  ? trace_irq_disable+0x3b/0x140
[  119.323315][ T8657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.323322][ T8657] RIP: 0033:0x7f156ad9e159
[  119.323330][ T8657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.323336][ T8657] RSP: 002b:00007f156bbcc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  119.323345][ T8657] RAX: ffffffffffffffda RBX: 00007f156b025fa8 RCX: 00007f156ad9e159
[  119.323350][ T8657] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f156b025fac
[  119.323354][ T8657] RBP: 00007f156b025fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  119.323359][ T8657] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  119.323363][ T8657] R13: 00007f156b026038 R14: 00007ffe28bd13e0 R15: 00007ffe28bd14c8
[  119.323374][ T8657]  </TASK>
[  119.470663][   T34] audit: type=1326 audit(1789987925.596:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156ad9e159 code=0x7ffc0000
[  119.481619][   T34] audit: type=1326 audit(1789987925.596:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156ad9e159 code=0x7ffc0000
[  119.488494][   T34] audit: type=1326 audit(1789987925.606:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f156ad5e98e code=0x7ffc0000
[  119.496299][   T34] audit: type=1326 audit(1789987925.606:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f156ad9ddeb code=0x7ffc0000
[  119.503310][   T34] audit: type=1326 audit(1789987925.606:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f156ad9ddeb code=0x7ffc0000
[  119.510731][   T34] audit: type=1326 audit(1789987925.606:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f156ad9ddeb code=0x7ffc0000
[  119.518117][   T34] audit: type=1326 audit(1789987925.606:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f156ad9ddeb code=0x7ffc0000
[  119.582621][   T34] audit: type=1326 audit(1789987925.716:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f156ad9ddeb code=0x7ffc0000
[  119.655573][   T34] audit: type=1326 audit(1789987925.786:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f156ad9ddeb code=0x7ffc0000
[  119.712388][ T5662] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  119.716613][   T34] audit: type=1326 audit(1789987925.846:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f156ad9ddeb code=0x7ffc0000
[  119.882446][ T5662] usb 3-1: Using ep0 maxpacket: 16
[  119.885789][ T5662] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  119.889681][ T5662] usb 3-1: config 0 interface 0 has no altsetting 0
[  119.891814][ T5662] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  119.894964][ T5662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.901733][ T5662] usb 3-1: config 0 descriptor??
[  120.241697][ T5662] usbhid 3-1:0.0: can't add hid device: -71
[  120.244364][ T5662] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  120.248187][ T5662] usb 3-1: USB disconnect, device number 16
[  120.739614][ T8691] netlink: 'syz.1.1263': attribute type 2 has an invalid length.
[  120.942289][ T5662] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  121.092214][ T5662] usb 1-1: Using ep0 maxpacket: 16
[  121.096252][ T5662] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.100176][ T5662] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  121.105552][ T5662] usb 1-1: config 0 interface 0 has no altsetting 0
[  121.108120][ T5662] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  121.111720][ T5662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.119239][ T5662] usb 1-1: config 0 descriptor??
[  121.496086][ T8710] xt_hashlimit: size too large, truncated to 1048576
[  121.537644][ T5662] input: HID 0810:0002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0810:0002.0004/input/input9
[  121.560865][ T5662] pantherlord 0003:0810:0002.0004: input,hidraw0: USB HID v0.09 Joystick [HID 0810:0002] on usb-dummy_hcd.0-1/input0
[  121.568914][ T5662] pantherlord 0003:0810:0002.0004: no output reports found
[  121.604253][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1273'.
[  121.710082][ T8724] openvswitch: netlink: Unknown key attributes 1
[  121.744305][   T24] usb 1-1: USB disconnect, device number 16
[  122.230249][ T8730] geneve3: entered allmulticast mode
[  122.237545][ T5661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.242315][ T5661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.245770][ T5661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.249268][ T5661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.505330][ T8749] futex_wake_op: syz.1.1290 tries to shift op by 144; fix this program
[  122.508021][ T8749] futex_wake_op: syz.1.1290 tries to shift op by 144; fix this program
[  122.733400][ T8756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1291'.
[  122.997302][ T8758] Trying to write to read-only block-device nullb0
[  123.085047][ T8759] FAULT_INJECTION: forcing a failure.
[  123.085047][ T8759] name failslab, interval 1, probability 0, space 0, times 0
[  123.089968][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: syz.2.1292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  123.089981][ T8759] Tainted: [L]=SOFTLOCKUP
[  123.089985][ T8759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.089990][ T8759] Call Trace:
[  123.089993][ T8759]  <TASK>
[  123.089997][ T8759]  dump_stack_lvl+0xe8/0x150
[  123.090012][ T8759]  should_fail_ex+0x40c/0x560
[  123.090027][ T8759]  should_failslab+0xa8/0x100
[  123.090040][ T8759]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  123.090050][ T8759]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[  123.090058][ T8759]  ? mempool_init_node+0x1f4/0x4f0
[  123.090067][ T8759]  ? mempool_init_node+0x1f4/0x4f0
[  123.090077][ T8759]  ? __pfx_mempool_alloc_slab+0x10/0x10
[  123.090086][ T8759]  mempool_init_node+0x1f4/0x4f0
[  123.090098][ T8759]  ? __pfx_mempool_alloc_slab+0x10/0x10
[  123.090108][ T8759]  mempool_create_node_noprof+0xb8/0x150
[  123.090117][ T8759]  ? __pfx_mempool_free_slab+0x10/0x10
[  123.090127][ T8759]  ceph_osdc_init+0x4fa/0x900
[  123.090141][ T8759]  ceph_create_client+0x246/0x310
[  123.090151][ T8759]  ceph_get_tree+0x1ca/0x1a40
[  123.090160][ T8759]  ? apparmor_capable+0x126/0x170
[  123.090170][ T8759]  vfs_get_tree+0x92/0x2a0
[  123.090183][ T8759]  vfs_cmd_create+0xa2/0x200
[  123.090192][ T8759]  __se_sys_fsconfig+0x6b9/0x810
[  123.090202][ T8759]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  123.090208][ T8759]  ? ksys_write+0x242/0x270
[  123.090219][ T8759]  ? __pfx_ksys_write+0x10/0x10
[  123.090231][ T8759]  ? __x64_sys_fsconfig+0x20/0xc0
[  123.090238][ T8759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.090246][ T8759]  do_syscall_64+0x174/0x580
[  123.090254][ T8759]  ? trace_irq_disable+0x3b/0x140
[  123.090267][ T8759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.090274][ T8759] RIP: 0033:0x7f156ad9e159
[  123.090281][ T8759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.090287][ T8759] RSP: 002b:00007f156bbab028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  123.090296][ T8759] RAX: ffffffffffffffda RBX: 00007f156b026090 RCX: 00007f156ad9e159
[  123.090302][ T8759] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  123.090306][ T8759] RBP: 00007f156ae3506b R08: 0000000000000000 R09: 0000000000000000
[  123.090310][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.090315][ T8759] R13: 00007f156b026128 R14: 00007f156b026090 R15: 00007ffe28bd14c8
[  123.090327][ T8759]  </TASK>
[  124.111984][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  124.212611][ T5663] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  124.263366][   T24] usb 1-1: config index 0 descriptor too short (expected 11551, got 45)
[  124.266058][   T24] usb 1-1: config 1 has an invalid interface descriptor of length 4, skipping
[  124.268754][   T24] usb 1-1: config 1 has no interfaces?
[  124.272463][   T24] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18
[  124.275146][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.277518][   T24] usb 1-1: Product: syz
[  124.278757][   T24] usb 1-1: Manufacturer: syz
[  124.280468][   T24] usb 1-1: SerialNumber: syz
[  124.496121][ T5668] usb 1-1: USB disconnect, device number 17
[  124.524034][ T5663] usb 3-1: config index 0 descriptor too short (expected 50, got 32)
[  124.532153][ T5663] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.545391][ T5663] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  124.549044][ T5663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.552986][ T5663] usb 3-1: Product: syz
[  124.554736][ T5663] usb 3-1: Manufacturer: syz
[  124.556659][ T5663] usb 3-1: SerialNumber: syz
[  124.563453][ T5663] usb_debug 3-1:1.0: debug converter detected
[  124.574342][ T5663] usb 3-1: debug converter now attached to ttyUSB0
[  124.649105][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'.
[  124.652666][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'.
[  124.664310][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.664374][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'.
[  124.667740][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.667774][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.667798][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.673101][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'.
[  124.780320][ T5662] usb 3-1: USB disconnect, device number 17
[  124.798754][ T5662] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  124.805868][ T5662] usb_debug 3-1:1.0: device disconnected
[  124.818955][ T8814] ------------[ cut here ]------------
[  124.822133][ T8814] skb_assert_len
[  124.823611][ T8814] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x1fb8/0x3820, CPU#1: syz.1.1315/8814
[  124.827824][ T8814] Modules linked in:
[  124.830555][ T8814] CPU: 1 UID: 0 PID: 8814 Comm: syz.1.1315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  124.835115][ T8814] Tainted: [L]=SOFTLOCKUP
[  124.838138][ T8814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.842456][ T8814] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820
[  124.844896][ T8814] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 08 fc 26 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d 38 d5 c6 06 48 c7 c6 91 ac 43 8e <67> 48 0f b9 3a 80 3d 43 e3 a0 06 01 0f 85 86 03 00 00 e8 da fb 26
[  124.852852][ T8814] RSP: 0018:ffffc900017cf520 EFLAGS: 00010246
[  124.855216][ T8814] RAX: ffffffff899fd7b1 RBX: ffff88810e52b5d0 RCX: 0000000000000002
[  124.858277][ T8814] RDX: ffff888169438000 RSI: ffffffff8e43ac91 RDI: ffffffff9066cac0
[  124.861209][ T8814] RBP: ffffc900017cf7d0 R08: ffff8881be1828a7 R09: 1ffff11037c30514
[  124.864275][ T8814] R10: dffffc0000000000 R11: ffffed1037c30515 R12: dffffc0000000000
[  124.867241][ T8814] R13: 1ffff920002f9ec4 R14: 0000000000000000 R15: ffff88810e52b5d0
[  124.869961][ T8814] FS:  00007f10da4496c0(0000) GS:ffff8882a8f59000(0000) knlGS:0000000000000000
[  124.872940][ T8814] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.875012][ T8814] CR2: 000000110c3e040f CR3: 0000000171538000 CR4: 00000000000006f0
[  124.877540][ T8814] Call Trace:
[  124.878533][ T8814]  <TASK>
[  124.879423][ T8814]  ? __alloc_skb+0x4cc/0x7a0
[  124.880797][ T8814]  ? alloc_skb_with_frags+0x6b3/0x760
[  124.882719][ T8814]  ? __lock_acquire+0x683/0x2cf0
[  124.884296][ T8814]  ? skb_set_owner_w+0x263/0x3d0
[  124.885928][ T8814]  ? __pfx___dev_queue_xmit+0x10/0x10
[  124.887864][ T8814]  ? sock_alloc_send_pskb+0x896/0x990
[  124.889655][ T8814]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  124.891741][ T8814]  ? packet_parse_headers+0x4c5/0x7a0
[  124.893627][ T8814]  ? packet_parse_headers+0x571/0x7a0
[  124.895253][ T8814]  ? __pfx_packet_parse_headers+0x10/0x10
[  124.896952][ T8814]  ? packet_xmit+0x68/0x330
[  124.898322][ T8814]  packet_sendmsg+0x2a78/0x5040
[  124.899816][ T8814]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  124.901438][ T8814]  ? __pfx_packet_sendmsg+0x10/0x10
[  124.903533][ T8814]  ? aa_sk_perm+0x6d5/0x900
[  124.905259][ T8814]  ? aa_sock_msg_perm+0xf1/0x1b0
[  124.906786][ T8814]  ? __pfx_packet_sendmsg+0x10/0x10
[  124.908325][ T8814]  sock_sendmsg_nosec+0x13a/0x180
[  124.910003][ T8814]  sock_write_iter+0x2de/0x3e0
[  124.911621][ T8814]  ? __pfx_sock_write_iter+0x10/0x10
[  124.913726][ T8814]  ? bpf_lsm_file_permission+0x9/0x20
[  124.915802][ T8814]  ? security_file_permission+0x75/0x260
[  124.917581][ T8814]  vfs_write+0x612/0xba0
[  124.919076][ T8814]  ? __pfx_vfs_write+0x10/0x10
[  124.920660][ T8814]  ? __fget_files+0x2a/0x420
[  124.922240][ T8814]  ksys_write+0x150/0x270
[  124.923605][ T8814]  ? __pfx_ksys_write+0x10/0x10
[  124.925182][ T8814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.927198][ T8814]  do_syscall_64+0x174/0x580
[  124.928650][ T8814]  ? trace_irq_disable+0x3b/0x140
[  124.930178][ T8814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.932159][ T8814] RIP: 0033:0x7f10d959e159
[  124.933551][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.939757][ T8814] RSP: 002b:00007f10da449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  124.942826][ T8814] RAX: ffffffffffffffda RBX: 00007f10d9825fa0 RCX: 00007f10d959e159
[  124.945951][ T8814] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  124.948671][ T8814] RBP: 00007f10d963506b R08: 0000000000000000 R09: 0000000000000000
[  124.951735][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.954968][ T8814] R13: 00007f10d9826038 R14: 00007f10d9825fa0 R15: 00007fffe04167c8
[  124.957986][ T8814]  </TASK>
[  124.959194][ T8814] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  124.962058][ T8814] CPU: 1 UID: 0 PID: 8814 Comm: syz.1.1315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  124.966179][ T8814] Tainted: [L]=SOFTLOCKUP
[  124.967862][ T8814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.971714][ T8814] Call Trace:
[  124.973043][ T8814]  <TASK>
[  124.974199][ T8814]  vpanic+0x56c/0xa60
[  124.975802][ T8814]  ? __pfx__printk+0x10/0x10
[  124.977653][ T8814]  ? __pfx_vpanic+0x10/0x10
[  124.979399][ T8814]  ? is_bpf_text_address+0x292/0x2b0
[  124.981138][ T8814]  ? is_bpf_text_address+0x26/0x2b0
[  124.982845][ T8814]  panic+0xc5/0xd0
[  124.984025][ T8814]  ? __pfx_panic+0x10/0x10
[  124.985783][ T8814]  __warn+0x315/0x4c0
[  124.987396][ T8814]  ? __dev_queue_xmit+0x1fb8/0x3820
[  124.989426][ T8814]  ? __dev_queue_xmit+0x1fb8/0x3820
[  124.991465][ T8814]  __report_bug+0x276/0x570
[  124.993278][ T8814]  ? packet_sendmsg+0xe2b/0x5040
[  124.995205][ T8814]  ? sock_sendmsg_nosec+0x13a/0x180
[  124.997272][ T8814]  ? sock_write_iter+0x2de/0x3e0
[  124.999189][ T8814]  ? __dev_queue_xmit+0x1fb8/0x3820
[  125.001231][ T8814]  ? __pfx___report_bug+0x10/0x10
[  125.003234][ T8814]  report_bug_entry+0x19a/0x290
[  125.005168][ T8814]  ? __dev_queue_xmit+0x1fbf/0x3820
[  125.007208][ T8814]  ? __dev_queue_xmit+0x1fc4/0x3820
[  125.009245][ T8814]  handle_bug+0xce/0x200
[  125.010632][ T8814]  exc_invalid_op+0x1a/0x50
[  125.012212][ T8814]  asm_exc_invalid_op+0x1a/0x20
[  125.013971][ T8814] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820
[  125.016246][ T8814] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 08 fc 26 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d 38 d5 c6 06 48 c7 c6 91 ac 43 8e <67> 48 0f b9 3a 80 3d 43 e3 a0 06 01 0f 85 86 03 00 00 e8 da fb 26
[  125.023712][ T8814] RSP: 0018:ffffc900017cf520 EFLAGS: 00010246
[  125.026062][ T8814] RAX: ffffffff899fd7b1 RBX: ffff88810e52b5d0 RCX: 0000000000000002
[  125.029181][ T8814] RDX: ffff888169438000 RSI: ffffffff8e43ac91 RDI: ffffffff9066cac0
[  125.032280][ T8814] RBP: ffffc900017cf7d0 R08: ffff8881be1828a7 R09: 1ffff11037c30514
[  125.035410][ T8814] R10: dffffc0000000000 R11: ffffed1037c30515 R12: dffffc0000000000
[  125.038066][ T8814] R13: 1ffff920002f9ec4 R14: 0000000000000000 R15: ffff88810e52b5d0
[  125.040839][ T8814]  ? __dev_queue_xmit+0x1e1/0x3820
[  125.042907][ T8814]  ? __alloc_skb+0x4cc/0x7a0
[  125.044807][ T8814]  ? alloc_skb_with_frags+0x6b3/0x760
[  125.046922][ T8814]  ? __lock_acquire+0x683/0x2cf0
[  125.048929][ T8814]  ? skb_set_owner_w+0x263/0x3d0
[  125.050917][ T8814]  ? __pfx___dev_queue_xmit+0x10/0x10
[  125.053030][ T8814]  ? sock_alloc_send_pskb+0x896/0x990
[  125.055204][ T8814]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  125.057442][ T8814]  ? packet_parse_headers+0x4c5/0x7a0
[  125.059513][ T8814]  ? packet_parse_headers+0x571/0x7a0
[  125.061212][ T8814]  ? __pfx_packet_parse_headers+0x10/0x10
[  125.063242][ T8814]  ? packet_xmit+0x68/0x330
[  125.064992][ T8814]  packet_sendmsg+0x2a78/0x5040
[  125.066977][ T8814]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  125.069166][ T8814]  ? __pfx_packet_sendmsg+0x10/0x10
[  125.071262][ T8814]  ? aa_sk_perm+0x6d5/0x900
[  125.072712][ T8814]  ? aa_sock_msg_perm+0xf1/0x1b0
[  125.074214][ T8814]  ? __pfx_packet_sendmsg+0x10/0x10
[  125.075760][ T8814]  sock_sendmsg_nosec+0x13a/0x180
[  125.077249][ T8814]  sock_write_iter+0x2de/0x3e0
[  125.078696][ T8814]  ? __pfx_sock_write_iter+0x10/0x10
[  125.080265][ T8814]  ? bpf_lsm_file_permission+0x9/0x20
[  125.081916][ T8814]  ? security_file_permission+0x75/0x260
[  125.083577][ T8814]  vfs_write+0x612/0xba0
[  125.084937][ T8814]  ? __pfx_vfs_write+0x10/0x10
[  125.086466][ T8814]  ? __fget_files+0x2a/0x420
[  125.087951][ T8814]  ksys_write+0x150/0x270
[  125.089599][ T8814]  ? __pfx_ksys_write+0x10/0x10
[  125.091475][ T8814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.093940][ T8814]  do_syscall_64+0x174/0x580
[  125.095811][ T8814]  ? trace_irq_disable+0x3b/0x140
[  125.097797][ T8814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.100015][ T8814] RIP: 0033:0x7f10d959e159
[  125.101516][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.107165][ T8814] RSP: 002b:00007f10da449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  125.109596][ T8814] RAX: ffffffffffffffda RBX: 00007f10d9825fa0 RCX: 00007f10d959e159
[  125.112052][ T8814] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  125.114767][ T8814] RBP: 00007f10d963506b R08: 0000000000000000 R09: 0000000000000000
[  125.117076][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.119452][ T8814] R13: 00007f10d9826038 R14: 00007f10d9825fa0 R15: 00007fffe04167c8
[  125.121846][ T8814]  </TASK>
[  125.123484][ T8814] Kernel Offset: disabled
[  125.124869][ T8814] Rebooting in 86400 seconds..
