last executing test programs:

2m20.566094324s ago: executing program 0 (id=853):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
ioctl$sock_bt_hci(r0, 0x400448dd, 0x0)

2m20.446448834s ago: executing program 0 (id=855):
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x60000526)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

2m19.473546109s ago: executing program 0 (id=858):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r0, 0x0, 0xee01)

2m19.240719351s ago: executing program 0 (id=860):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000340)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x564}}, {}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x8c69}}, {@umask={'umask', 0x3d, 0xf0}}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {@utf8}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)

2m18.896482119s ago: executing program 0 (id=864):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
close(0x3)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0xf}}}}}, 0x0)

2m18.55464312s ago: executing program 0 (id=872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2b805b967dd47dbb, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000200)={0x0, &(0x7f0000000180)})
socket$igmp(0x2, 0x3, 0x2)

2m18.410310237s ago: executing program 32 (id=872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2b805b967dd47dbb, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000200)={0x0, &(0x7f0000000180)})
socket$igmp(0x2, 0x3, 0x2)

1m5.655455135s ago: executing program 2 (id=1637):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [0xffffff00, 0xff, 0xffffff00, 0xff], [0xff, 0xff000000, 0xff], 'gre0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x21, 0x6f, 0x4, 0x10}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "a47cbcb522148bf45497db28ed85ef4fa1d2df714a8a1731a899fb3afd24"}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x9, 0x0, 0x9, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x4b52, &(0x7f0000000000)={0x2, {0xc, 0xe04, 0x6, 0xfffa, 0x500, 0x2}})

1m5.608629879s ago: executing program 2 (id=1638):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1m5.56928952s ago: executing program 2 (id=1639):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4)

1m5.53637246s ago: executing program 2 (id=1640):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

1m5.467611461s ago: executing program 2 (id=1642):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)

1m5.304449575s ago: executing program 2 (id=1643):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)

1m5.251881362s ago: executing program 33 (id=1643):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)

1.200836976s ago: executing program 4 (id=2605):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()

1.055554256s ago: executing program 4 (id=2606):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x1b1c, 0x1c1b, 0x0, 0x0, "0600ff0901a1010902150026ff007508954081020903750895409102c0"}}, 0x131)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)
read(r0, &(0x7f0000001000)=""/4096, 0x1000)

920.607988ms ago: executing program 4 (id=2608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580))
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}}, 0x0)

345.983829ms ago: executing program 1 (id=2614):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x97, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r3 = dup2(r2, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)

319.754828ms ago: executing program 1 (id=2615):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)

245.566679ms ago: executing program 1 (id=2616):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000280)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@nfs}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_lower}, {@numtail}, {@numtail}, {@numtail}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x28c, &(0x7f0000001780)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
getdents64(r0, &(0x7f0000000080)=""/226, 0xe2)

239.262656ms ago: executing program 1 (id=2618):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', r1, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010102}}}}}}, 0x0)

231.39133ms ago: executing program 3 (id=2619):
syz_emit_ethernet(0x4e, &(0x7f0000001c40)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x45, '\x00', @mcast2}}}}}}, 0x0)

185.385197ms ago: executing program 3 (id=2620):
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0x0, "fd2ed89534b48297efb623d3749c3080d20d9bd4c515ab651fcbb7b0e0087d4d", 0x5, 0x334374b438e05585, 0x9, 0x5, 0x4, 0x4, 0x0, 0x400})

183.477968ms ago: executing program 1 (id=2621):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x2004c000)

147.696205ms ago: executing program 1 (id=2622):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4467, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))
add_key(0x0, 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f8efde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e4d7f469653412073656c662d74657374696e67206b65793020170d3634303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67", 0xc5, 0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x4, 0xffffffffffffffff, 0x3ffffc, 0x1, 0x0, 0x0, 0x2401})

129.879223ms ago: executing program 4 (id=2623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000070000100000000000000000007000000", @ANYRES32=r1], 0x2c}}, 0x0)

120.281277ms ago: executing program 3 (id=2624):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x2, 0x0, [0x101, 0x9, 0x2, 0xe9cb, 0x8, 0x6, 0x8, 0x40]})

56.798792ms ago: executing program 3 (id=2625):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}, 0x1c, &(0x7f00000029c0)=[{&(0x7f0000000240)="92", 0x1}], 0x1}}], 0x1, 0x240800d0)

56.602783ms ago: executing program 4 (id=2626):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x20000)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x12, r0, 0x83000000)

53.688221ms ago: executing program 3 (id=2627):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @local, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2afa0c1bc6fc54b71f03985ac33e31d612d97ea6efcda8853b824430503621f06679995d916cb4361795dd7dbae51d07384b7c2e694900"}, 0xd8)
syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f704000000000000009ae5d322348df7"}]}}}}}}}}, 0x0)

19.110384ms ago: executing program 4 (id=2628):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)

0s ago: executing program 3 (id=2629):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x303, 0x8, 0x2b, 0x0, 0x0})

0s ago: executing program 4 (id=2630):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='127.0.0.1', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='7', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0)
write(r2, &(0x7f0000000800)='0', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0)
write(r3, &(0x7f0000000a00)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/cluster/ocfs2/node/node2\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/ocfs2/node/node2/ipv4_address\x00', 0x2, 0x0)
write(r4, &(0x7f0000000d00)='127.0.0.2', 0x9)
write(0xffffffffffffffff, &(0x7f0000000f00)='7', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/cluster/ocfs2/node/node2/num\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/ocfs2/node/node2/local\x00', 0x2, 0x0)
write(r5, &(0x7f0000001300)='0', 0x1)

kernel console output (not intermixed with test programs):

id maxpacket 229, setting to 64
[  147.014130][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  147.018416][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.042120][ T9401] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32
[  147.365209][ T9407] bridge_slave_0: default FDB implementation only supports local addresses
[  147.430613][ T5696] cxacru 4-1:1.0: send of cm 0x91 failed (-71)
[  147.434971][ T5696] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  147.440088][ T5696] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  147.449432][ T5696] cxacru 4-1:1.0: probe with driver cxacru failed with error -71
[  147.458454][ T5696] usb 4-1: USB disconnect, device number 7
[  147.717768][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'.
[  147.721330][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'.
[  147.778926][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1524'.
[  148.011975][ T9437] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1529'.
[  148.075594][   T33] audit: type=1804 audit(1789581819.980:51): pid=9441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1531" name="/newroot/195/file1" dev="tmpfs" ino=1040 res=1 errno=0
[  148.238329][ T9443] loop3: detected capacity change from 0 to 32768
[  148.242666][ T9443] (syz.3.1532,9443,1):ocfs2_parse_param:1356 ERROR: Invalid cluster_stack option
[  148.391959][ T9451] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1536'.
[  148.561543][   T13] net_ratelimit: 80 callbacks suppressed
[  148.561556][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.566148][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  148.671602][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.693300][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.711411][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.734126][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.741083][ T5696] e1000 0000:00:03.0 eth0: Reset adapter
[  148.753810][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.772508][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.793869][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.822629][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  148.979576][ T5696] usb 3-1: USB disconnect, device number 22
[  149.081509][ T9478] loop3: detected capacity change from 0 to 512
[  149.101557][ T9478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  149.148399][ T9478] EXT4-fs (loop3): 1 truncate cleaned up
[  149.156665][ T9478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.655793][ T7811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.673799][ T9492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1545'.
[  150.902322][ T5696] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  153.630652][ T7605] net_ratelimit: 89 callbacks suppressed
[  153.630681][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  153.635735][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  153.740620][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  153.743803][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  153.850592][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  153.853477][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  153.960605][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  153.963576][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  154.070586][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  154.073686][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  154.661336][ T5645] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  158.730209][   T13] net_ratelimit: 82 callbacks suppressed
[  158.730271][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  158.734769][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  158.839682][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  158.842584][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  158.949690][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  158.952460][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  159.059988][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  159.063196][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  159.169586][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  159.172681][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  163.829486][ T5449] net_ratelimit: 82 callbacks suppressed
[  163.829507][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  163.834418][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  163.939215][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  163.941795][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  164.050354][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  164.054758][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  164.158832][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  164.162089][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  164.278767][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  164.282154][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  168.027146][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'.
[  168.113423][ T9532] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  168.116404][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  168.131452][ T9532] vhci_hcd vhci_hcd.0: Device attached
[  168.181257][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'.
[  168.242326][ T9541] FAULT_INJECTION: forcing a failure.
[  168.242326][ T9541] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  168.254110][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.2.1555 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.254125][ T9541] Tainted: [L]=SOFTLOCKUP
[  168.254129][ T9541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.254135][ T9541] Call Trace:
[  168.254139][ T9541]  <TASK>
[  168.254146][ T9541]  dump_stack_lvl+0xe8/0x150
[  168.254171][ T9541]  should_fail_ex+0x410/0x560
[  168.254191][ T9541]  prepare_alloc_pages+0x230/0x650
[  168.254210][ T9541]  __alloc_frozen_pages_noprof+0x12f/0x380
[  168.254224][ T9541]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  168.254236][ T9541]  ? __alloc_frozen_pages_noprof+0x1db/0x380
[  168.254250][ T9541]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  168.254264][ T9541]  ? __pfx_policy_nodemask+0x10/0x10
[  168.254272][ T9541]  ? __vmalloc_noprof+0xd2/0x120
[  168.254283][ T9541]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.254295][ T9541]  ? bpf_prog_alloc+0x3c/0x1a0
[  168.254306][ T9541]  __alloc_pages_noprof+0x10/0x100
[  168.254316][ T9541]  alloc_pages_bulk_noprof+0x5f7/0x7c0
[  168.254330][ T9541]  ? alloc_pages_noprof+0x140/0x2b0
[  168.254339][ T9541]  __kasan_populate_vmalloc+0xb7/0x1c0
[  168.254351][ T9541]  alloc_vmap_area+0xd1a/0x1420
[  168.254364][ T9541]  ? __kasan_kmalloc+0x93/0xb0
[  168.254375][ T9541]  ? __pfx_alloc_vmap_area+0x10/0x10
[  168.254383][ T9541]  ? __kmalloc_cache_node_noprof+0x1f4/0x630
[  168.254394][ T9541]  ? __get_vm_area_node+0x155/0x2f0
[  168.254404][ T9541]  __get_vm_area_node+0x200/0x2f0
[  168.254416][ T9541]  __vmalloc_node_range_noprof+0x358/0x1730
[  168.254425][ T9541]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.254436][ T9541]  ? kasan_save_track+0x4f/0x80
[  168.254446][ T9541]  ? kasan_save_track+0x3e/0x80
[  168.254458][ T9541]  ? __kmalloc_cache_noprof+0x331/0x660
[  168.254468][ T9541]  ? do_seccomp+0x751/0xdc0
[  168.254478][ T9541]  ? do_syscall_64+0x166/0x520
[  168.254489][ T9541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.254505][ T9541]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  168.254519][ T9541]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.254528][ T9541]  __vmalloc_noprof+0xd2/0x120
[  168.254538][ T9541]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.254549][ T9541]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.254559][ T9541]  ? bpf_prog_alloc+0x2a/0x1a0
[  168.254570][ T9541]  bpf_prog_alloc+0x3c/0x1a0
[  168.254581][ T9541]  bpf_prog_create_from_user+0xa7/0x440
[  168.254594][ T9541]  ? __pfx_seccomp_check_filter+0x10/0x10
[  168.254603][ T9541]  do_seccomp+0x793/0xdc0
[  168.254616][ T9541]  ? __se_sys_futex+0x3a8/0x450
[  168.254624][ T9541]  ? __pfx_do_seccomp+0x10/0x10
[  168.254635][ T9541]  ? ksys_write+0x242/0x270
[  168.254644][ T9541]  ? rcu_is_watching+0x16/0xb0
[  168.254655][ T9541]  do_syscall_64+0x166/0x520
[  168.254671][ T9541]  ? trace_irq_disable+0x3b/0x140
[  168.254680][ T9541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.254689][ T9541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.254697][ T9541] RIP: 0033:0x7fea2819e159
[  168.254706][ T9541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.254745][ T9541] RSP: 002b:00007fea28fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  168.254755][ T9541] RAX: ffffffffffffffda RBX: 00007fea28426090 RCX: 00007fea2819e159
[  168.254762][ T9541] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000001
[  168.254767][ T9541] RBP: 00007fea2823506b R08: 0000000000000000 R09: 0000000000000000
[  168.254773][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.254778][ T9541] R13: 00007fea28426128 R14: 00007fea28426090 R15: 00007ffc3b5a8778
[  168.254791][ T9541]  </TASK>
[  168.254968][ T9541] syz.2.1555: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  168.597192][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.2.1555 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.597222][ T9541] Tainted: [L]=SOFTLOCKUP
[  168.597227][ T9541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.597237][ T9541] Call Trace:
[  168.597243][ T9541]  <TASK>
[  168.597249][ T9541]  dump_stack_lvl+0xe8/0x150
[  168.597278][ T9541]  warn_alloc+0x24c/0x270
[  168.597300][ T9541]  ? lockdep_hardirqs_on+0x7b/0x110
[  168.597321][ T9541]  ? __pfx_warn_alloc+0x10/0x10
[  168.597340][ T9541]  ? kfree+0x1c5/0x640
[  168.597361][ T9541]  ? __get_vm_area_node+0x219/0x2f0
[  168.597384][ T9541]  __vmalloc_node_range_noprof+0x37d/0x1730
[  168.597403][ T9541]  ? kasan_save_track+0x4f/0x80
[  168.597420][ T9541]  ? kasan_save_track+0x3e/0x80
[  168.597437][ T9541]  ? __kmalloc_cache_noprof+0x331/0x660
[  168.597453][ T9541]  ? do_seccomp+0x751/0xdc0
[  168.597471][ T9541]  ? do_syscall_64+0x166/0x520
[  168.597486][ T9541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.597514][ T9541]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  168.597539][ T9541]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.597556][ T9541]  __vmalloc_noprof+0xd2/0x120
[  168.597573][ T9541]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.597591][ T9541]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  168.597608][ T9541]  ? bpf_prog_alloc+0x2a/0x1a0
[  168.597627][ T9541]  bpf_prog_alloc+0x3c/0x1a0
[  168.597646][ T9541]  bpf_prog_create_from_user+0xa7/0x440
[  168.597667][ T9541]  ? __pfx_seccomp_check_filter+0x10/0x10
[  168.597684][ T9541]  do_seccomp+0x793/0xdc0
[  168.597705][ T9541]  ? __se_sys_futex+0x3a8/0x450
[  168.597751][ T9541]  ? __pfx_do_seccomp+0x10/0x10
[  168.597770][ T9541]  ? ksys_write+0x242/0x270
[  168.597785][ T9541]  ? rcu_is_watching+0x16/0xb0
[  168.597825][ T9541]  do_syscall_64+0x166/0x520
[  168.597841][ T9541]  ? trace_irq_disable+0x3b/0x140
[  168.597856][ T9541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.597872][ T9541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.597885][ T9541] RIP: 0033:0x7fea2819e159
[  168.597899][ T9541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.597911][ T9541] RSP: 002b:00007fea28fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  168.597928][ T9541] RAX: ffffffffffffffda RBX: 00007fea28426090 RCX: 00007fea2819e159
[  168.597938][ T9541] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000001
[  168.597947][ T9541] RBP: 00007fea2823506b R08: 0000000000000000 R09: 0000000000000000
[  168.597955][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.597963][ T9541] R13: 00007fea28426128 R14: 00007fea28426090 R15: 00007ffc3b5a8778
[  168.597983][ T9541]  </TASK>
[  168.891862][ T9541] Mem-Info:
[  168.893892][ T9541] active_anon:6289 inactive_anon:0 isolated_anon:0
[  168.893892][ T9541]  active_file:10 inactive_file:56812 isolated_file:0
[  168.893892][ T9541]  unevictable:1000 dirty:262 writeback:0
[  168.893892][ T9541]  slab_reclaimable:10432 slab_unreclaimable:85870
[  168.893892][ T9541]  mapped:18499 shmem:1650 pagetables:1097
[  168.893892][ T9541]  sec_pagetables:0 bounce:0
[  168.893892][ T9541]  kernel_misc_reclaimable:0
[  168.893892][ T9541]  free:1120745 free_pcp:19532 free_cma:0
[  168.912624][ T9541] Node 0 active_anon:12384kB inactive_anon:0kB active_file:0kB inactive_file:34564kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:50928kB dirty:140kB writeback:0kB shmem:3368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8016kB pagetables:2632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  168.957457][ T7605] net_ratelimit: 78 callbacks suppressed
[  168.957472][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  168.963817][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  168.992829][ T9541] Node 1 active_anon:12856kB inactive_anon:0kB active_file:40kB inactive_file:192684kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:23068kB dirty:908kB writeback:0kB shmem:3232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4384kB pagetables:1756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  169.019171][ T9533] vhci_hcd: connection closed
[  169.023276][ T5449] vhci_hcd vhci_hcd.2: stop threads
[  169.027200][ T5449] vhci_hcd vhci_hcd.2: release socket
[  169.030874][ T5449] vhci_hcd vhci_hcd.2: disconnect device
[  169.046679][ T9541] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  169.062775][ T9541] lowmem_reserve[]: 0 1582 2112 2112 2112
[  169.067060][ T9541] Node 0 DMA32 free:1550448kB boost:0kB min:24976kB low:31220kB high:37464kB reserved_highatomic:0KB free_highatomic:0KB active_anon:472kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1620928kB mlocked:0kB bounce:0kB free_pcp:15524kB local_pcp:9116kB free_cma:0kB
[  169.081778][ T9541] lowmem_reserve[]: 0 0 530 530 530
[  169.083485][ T9541] Node 0 Normal free:12232kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12016kB inactive_anon:0kB active_file:0kB inactive_file:34556kB unevictable:2000kB writepending:140kB zspages:0kB present:1572868kB managed:542748kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:3808kB free_cma:0kB
[  169.095262][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  169.098023][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  169.100974][ T9541] lowmem_reserve[]: 0 0 0 0 0
[  169.102840][ T9541] Node 1 Normal free:2904700kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12856kB inactive_anon:0kB active_file:40kB inactive_file:192684kB unevictable:2000kB writepending:908kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:57224kB local_pcp:32264kB free_cma:0kB
[  169.113738][ T9541] lowmem_reserve[]: 0 0 0 0 0
[  169.115296][ T9541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  169.119351][ T9541] Node 0 DMA32: 30*4kB (UM) 29*8kB (M) 27*16kB (UME) 19*32kB (M) 26*64kB (M) 17*128kB (UM) 16*256kB (ME) 16*512kB (ME) 11*1024kB (ME) 11*2048kB (UME) 366*4096kB (M) = 1550448kB
[  169.124676][ T9541] Node 0 Normal: 630*4kB (UME) 184*8kB (UME) 174*16kB (UME) 88*32kB (UME) 11*64kB (UME) 3*128kB (UM) 4*256kB (UME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 12216kB
[  169.130874][ T9541] Node 1 Normal: 1159*4kB (UME) 498*8kB (UME) 259*16kB (UE) 735*32kB (UME) 239*64kB (UME) 116*128kB (UME) 53*256kB (UME) 25*512kB (UME) 20*1024kB (UME) 3*2048kB (UM) 680*4096kB (UM) = 2904700kB
[  169.137312][ T9541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.140913][ T9541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.143815][ T9541] 58459 total pagecache pages
[  169.145515][ T9541] 0 pages in swap cache
[  169.147218][ T9541] Free swap  = 124996kB
[  169.149321][ T9541] Total swap = 124996kB
[  169.150845][ T9541] 1834877 pages RAM
[  169.152107][ T9541] 0 pages HighMem/MovableOnly
[  169.153672][ T9541] 391447 pages reserved
[  169.155159][ T9541] 0 pages cma reserved
[  169.227802][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  169.230290][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  169.337830][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  169.340648][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  169.447875][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  169.450965][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  169.779828][   T24] usb usb38-port1: attempt power cycle
[  169.823751][ T9583] loop3: detected capacity change from 0 to 512
[  170.067698][   T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  170.157955][ T5665] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  170.219831][   T31] usb 4-1: not running at top speed; connect to a high speed hub
[  170.222402][   T31] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  170.226168][   T31] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  170.231052][   T31] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  170.233786][   T31] usb 4-1: Product: syz
[  170.235186][   T31] usb 4-1: Manufacturer: syz
[  170.255778][   T31] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4)
[  170.260438][   T31] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770.
[  170.308021][ T5665] usb 3-1: Using ep0 maxpacket: 8
[  170.313214][ T5665] usb 3-1: unable to get BOS descriptor or descriptor too short
[  170.315651][ T5665] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  170.321320][ T5665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.323863][ T5665] usb 3-1: Product: syz
[  170.325126][ T5665] usb 3-1: Manufacturer: syz
[  170.326582][ T5665] usb 3-1: SerialNumber: syz
[  170.332839][ T5665] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  170.369615][   T24] usb usb38-port1: unable to enumerate USB device
[  170.535431][ T5665] usb 3-1: unit 2 not found!
[  170.536927][ T5665] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  170.543741][ T5665] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  170.569771][ T5665] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  170.577115][ T5665] usb 3-1: USB disconnect, device number 23
[  170.593857][ T9585] udevd[9585]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.954814][ T5696] usb 4-1: USB disconnect, device number 8
[  172.883361][ T9643] loop3: detected capacity change from 0 to 32768
[  172.982745][ T9643] read_mapping_page failed!
[  172.985387][ T9643] ERROR: (device loop3): txCommit: 
[  172.985387][ T9643] 
[  172.992827][ T9648] read_mapping_page failed!
[  172.994439][ T9648] ERROR: (device loop3): txCommit: 
[  172.994439][ T9648] 
[  173.009667][ T1104] read_mapping_page failed!
[  173.015292][ T1104] ERROR: (device loop3): txCommit: 
[  173.015292][ T1104] 
[  173.018264][ T1104] jfs_write_inode: jfs_commit_inode failed!
[  173.343509][ T9654] ubi10: attaching mtd0
[  173.345478][ T9654] ubi10 error: ubi_attach_mtd_dev: bad VID header (33022) or data offsets (33086)
[  173.741795][   T31] kernel write not supported for file net/rpc/auth.rpcsec.context/channel (pid: 31 comm: kworker/1:1)
[  173.790369][ T9676] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1617'.
[  173.937347][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  173.997096][ T5449] net_ratelimit: 79 callbacks suppressed
[  173.997117][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  174.003247][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  174.087014][   T24] usb 4-1: Using ep0 maxpacket: 8
[  174.090048][   T24] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  174.095017][   T24] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32
[  174.100688][   T24] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244
[  174.104474][   T24] usb 4-1: config 218 has no interface number 0
[  174.107106][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  174.110416][   T24] usb 4-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  174.110465][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  174.115072][   T24] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[  174.122175][   T24] usb 4-1: config 218 interface 95 has no altsetting 0
[  174.127288][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.130409][   T24] usb 4-1: Product: syz
[  174.132026][   T24] usb 4-1: Manufacturer: syz
[  174.133844][   T24] usb 4-1: SerialNumber: syz
[  174.228924][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  174.231683][ T4989] Bluetooth: hci1: unexpected event for opcode 0x0000
[  174.235684][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  174.348522][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  174.352162][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  174.354546][   T24] usb 4-1: USB disconnect, device number 9
[  174.466862][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  174.469653][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  175.146898][   T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  175.308257][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  175.311565][   T24] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  175.317418][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.321740][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.338339][   T24] gspca_main: spca501-2.14.0 probing 0000:0000
[  175.541444][   T24] gspca_spca501: reg write: error -71
[  175.548305][   T24] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  175.551214][   T24] spca501 4-1:1.0: probe with driver spca501 failed with error -22
[  175.555125][   T24] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[  175.560285][   T24] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  175.564662][   T24] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  175.569824][   T24] uvcvideo 4-1:1.1: Failed to initialize the device (-71).
[  175.573364][   T24] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71
[  175.582088][   T24] usb 4-1: USB disconnect, device number 10
[  175.875915][ T9713] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  175.878834][ T9713] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  175.892640][ T9713] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  175.895236][ T9713] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  175.904296][ T9713] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  176.446023][ T4989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.456564][ T4989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.460918][ T4989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.464673][ T4989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.470388][ T4989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.733135][ T9739] loop3: detected capacity change from 0 to 1024
[  176.752380][ T9739] hfsplus: wrong filesystem version
[  176.885832][ T9766] xt_ecn: cannot match TCP bits for non-tcp packets
[  177.015002][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.017951][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.020870][ T9735] bridge_slave_0: entered allmulticast mode
[  177.024575][ T9735] bridge_slave_0: entered promiscuous mode
[  177.029621][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.033942][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.037758][ T9735] bridge_slave_1: entered allmulticast mode
[  177.042086][ T9735] bridge_slave_1: entered promiscuous mode
[  177.061120][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.069979][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.072484][ T9735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.080753][ T9735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.081277][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.094763][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.101377][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.106050][ T9735] team0: Port device team_slave_0 added
[  177.109601][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.109768][ T9735] team0: Port device team_slave_1 added
[  177.115275][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.122067][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.128337][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.128469][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.130551][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.139756][ T9779] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  177.145648][ T9735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.152050][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.154576][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.163308][ T9735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.194589][ T9735] hsr_slave_0: entered promiscuous mode
[  177.197163][ T9735] hsr_slave_1: entered promiscuous mode
[  177.199249][ T9735] debugfs: 'hsr0' already exists in 'hsr'
[  177.201272][ T9735] Cannot create hsr debugfs directory
[  177.442161][ T9735] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  177.448840][ T9735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  177.452287][ T9735] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  177.463988][ T9735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  177.468864][ T9735] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  177.475021][ T9735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  177.479452][ T9735] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  177.484935][ T9735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  177.533199][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.535962][ T9735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.538998][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.541862][ T9735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.608562][   T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  177.614802][ T9735] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.626384][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.629946][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.642850][ T9735] 8021q: adding VLAN 0 to HW filter on device team0
[  177.653628][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.656093][ T5739] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.667857][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.670569][ T5739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.764605][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  177.769067][   T31] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[  177.775625][   T31] usb 4-1: config 4 has an invalid interface number: 138 but max is 0
[  177.779513][   T31] usb 4-1: config 4 has no interface number 0
[  177.786785][   T31] usb 4-1: config 4 interface 138 has no altsetting 0
[  177.800764][   T31] usb 4-1: string descriptor 0 read error: -22
[  177.806551][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.937336][ T5595] Bluetooth: hci2: command 0x0c1a tx timeout
[  178.045931][   T31] catc 4-1:4.138: Can't set altsetting 1.
[  178.050907][ T9735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.054168][   T31] catc 4-1:4.138: probe with driver catc failed with error -5
[  178.063125][   T31] usb 4-1: USB disconnect, device number 11
[  178.265310][ T9735] veth0_vlan: entered promiscuous mode
[  178.275023][ T9735] veth1_vlan: entered promiscuous mode
[  178.301208][ T9735] veth0_macvtap: entered promiscuous mode
[  178.308898][ T9735] veth1_macvtap: entered promiscuous mode
[  178.323590][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.332469][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.358027][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.366294][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.406674][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.423243][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.463168][ T5739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.469555][ T5739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.496474][ T5595] Bluetooth: hci1: command tx timeout
[  178.516899][ T5739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.520793][ T5739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.923861][ T5595] Bluetooth: hci2: unexpected event for opcode 0x2019
[  179.106123][ T5643] net_ratelimit: 102 callbacks suppressed
[  179.106143][ T5643] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.111644][ T5643] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  179.217265][ T5643] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.223494][ T5643] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  179.336114][ T5643] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.344512][ T5643] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  179.466566][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.488194][ T5643] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.491268][ T5643] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  179.596003][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.786841][ T9901] loop3: detected capacity change from 0 to 512
[  179.804474][ T9901] EXT4-fs (loop3): 1 truncate cleaned up
[  179.812375][ T9901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.858822][ T9901] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.1707: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  179.902838][ T7811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.955556][ T9905] SET target dimension over the limit!
[  180.404953][ T9921] nfsd: exp_rootfh path not found ./export_dir
[  180.433326][ T9917] loop3: detected capacity change from 0 to 32768
[  180.473142][   T33] audit: type=1800 audit(1789581852.386:52): pid=9917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1713" name="file1" dev="loop3" ino=4 res=0 errno=0
[  180.553336][ T9927] Cannot find del_set index 0 as target
[  180.577029][ T5595] Bluetooth: hci1: command tx timeout
[  180.720771][ T9935] loop4: detected capacity change from 0 to 1024
[  180.724340][ T9937] tmpfs: User quota block hardlimit too large.
[  180.751672][ T9935] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  180.755357][ T9935] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  180.758883][ T9935] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  180.761961][ T9935] EXT4-fs error (device loop4): ext4_get_journal_inode:5908: comm syz.4.1723: inode #1: comm syz.4.1723: iget: illegal inode #
[  180.766305][ T9935] loop4: lost filesystem error report for type 5 error -117
[  180.766668][ T9935] EXT4-fs (loop4): no journal found
[  180.770637][ T9935] EXT4-fs (loop4): can't get journal size
[  180.775791][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  180.777882][    C1] EXT4-fs (loop4): initial error at time 1789581852: ext4_get_journal_inode:5908
[  180.781040][    C1] EXT4-fs (loop4): last error at time 1789581852: ext4_get_journal_inode:5908
[  180.792644][ T9935] EXT4-fs (loop4): failed to initialize system zone (-22)
[  180.802664][ T9935] EXT4-fs (loop4): mount failed
[  181.161138][ T9961] loop3: detected capacity change from 0 to 8
[  181.268484][ T9970] jffs2: notice: (9970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  182.106360][ T5665] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  182.253329][T10030] loop4: detected capacity change from 0 to 4096
[  182.267286][ T5665] usb 4-1: Using ep0 maxpacket: 32
[  182.270816][ T5665] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  182.279577][ T5665] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  182.286127][ T5665] usb 4-1: config 0 has no interface number 0
[  182.293921][ T5665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.294574][T10030] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  182.299636][ T5665] usb 4-1: Product: syz
[  182.302336][T10030] ntfs3(loop4): Failed to load root (-22).
[  182.302808][ T5665] usb 4-1: Manufacturer: syz
[  182.310574][ T5665] usb 4-1: SerialNumber: syz
[  182.319774][ T5665] usb 4-1: config 0 descriptor??
[  182.326253][ T5665] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  182.329426][ T5665] usb 4-1: selecting invalid altsetting 1
[  182.333494][ T5665] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  182.356252][ T5665] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  182.368817][ T5665] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  182.388200][ T5665] usb 4-1: media controller created
[  182.411467][ T5665] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.470317][T10043] overlayfs: failed to clone upperpath
[  182.512490][T10047] sctp: [Deprecated]: syz.1.1772 (pid 10047) Use of int in maxseg socket option.
[  182.512490][T10047] Use struct sctp_assoc_value instead
[  182.536489][ T5665] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  182.545713][ T5665] zl10353_read_register: readreg error (reg=127, ret==-71)
[  182.551215][ T5665] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  182.613697][ T5665] usb 4-1: USB disconnect, device number 12
[  182.658007][ T5595] Bluetooth: hci1: command tx timeout
[  182.748362][T10061] netlink: 'syz.4.1779': attribute type 2 has an invalid length.
[  183.235250][T10073] loop3: detected capacity change from 0 to 4096
[  183.328298][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'.
[  183.830999][T10066] loop4: detected capacity change from 0 to 32768
[  183.942756][T10073] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  184.145650][ T7605] net_ratelimit: 78 callbacks suppressed
[  184.145758][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.163329][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  184.275282][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.280953][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  184.395180][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.397491][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  184.498401][ T3159] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  184.505314][ T5643] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.508527][ T5643] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  184.617272][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.623384][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  184.650918][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1797'.
[  184.705477][ T3159] usb 4-1: Using ep0 maxpacket: 16
[  184.710376][ T3159] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  184.717042][ T3159] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.723352][ T3159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  184.731917][ T3159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  184.735342][ T5595] Bluetooth: hci1: command tx timeout
[  184.737356][ T3159] usb 4-1: SerialNumber: syz
[  184.751862][ T3159] usb 4-1: 0:2 : does not exist
[  185.119819][T10109] Cannot find set identified by id 0 to match
[  185.364768][ T3159] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  185.384241][T10123] loop4: detected capacity change from 0 to 1024
[  185.388737][T10123] EXT4-fs: Ignoring removed nomblk_io_submit option
[  185.403107][ T3159] usb 4-1: USB disconnect, device number 13
[  185.431349][T10123] EXT4-fs (loop4): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  185.436380][T10123] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.451535][T10123] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1807: bg 0: block 112: padding at end of block bitmap is not set
[  185.459187][T10123] EXT4-fs (loop4): Remounting filesystem read-only
[  185.482684][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[  185.517095][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1808'.
[  185.547201][T10128] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  185.555322][T10128] 8021q: adding VLAN 0 to HW filter on device bond1
[  185.600894][T10131] netlink: 'syz.4.1809': attribute type 5 has an invalid length.
[  185.935045][ T5645] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  186.084865][ T5645] usb 5-1: Using ep0 maxpacket: 32
[  186.087598][ T5645] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  186.093947][ T5645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.098119][ T5645] usb 5-1: Product: syz
[  186.099903][ T5645] usb 5-1: Manufacturer: syz
[  186.101693][ T5645] usb 5-1: SerialNumber: syz
[  186.115578][ T5645] hub 5-1:1.0: bad descriptor, ignoring hub
[  186.117969][ T5645] hub 5-1:1.0: probe with driver hub failed with error -5
[  186.317178][ T5645] usb 5-1: palm_os_4_probe - error -71 getting connection info
[  186.321622][ T5645] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  186.333151][ T5645] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  186.344034][ T5645] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  186.366426][ T5645] usb 5-1: USB disconnect, device number 2
[  186.412593][ T5645] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  186.422605][ T5645] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  186.429545][ T5645] visor 5-1:1.0: device disconnected
[  186.736528][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'.
[  187.058144][T10166] loop4: detected capacity change from 0 to 1024
[  187.081631][T10168] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1826'.
[  187.483221][T10188] loop4: detected capacity change from 0 to 256
[  188.105436][T10191] netlink: 'syz.1.1836': attribute type 23 has an invalid length.
[  188.567801][ T5449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.776879][ T4989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.800816][ T4989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.807950][ T4989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.814150][ T4989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.830018][ T4989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.868351][ T5449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.952056][ T5449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.021934][ T5449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.154865][   T13] net_ratelimit: 87 callbacks suppressed
[  189.154877][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.174730][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.186596][T10224] loop4: detected capacity change from 0 to 4096
[  189.189327][ T5449] bridge_slave_1: left allmulticast mode
[  189.191111][ T5449] bridge_slave_1: left promiscuous mode
[  189.194698][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.201275][ T5449] bridge_slave_0: left allmulticast mode
[  189.204466][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.208041][ T5449] bridge_slave_0: left promiscuous mode
[  189.212340][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.229065][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.244323][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.264313][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.284363][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.304302][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.324488][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.355216][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.483874][T10227] loop4: detected capacity change from 0 to 32768
[  189.490708][T10227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1845 (10227)
[  189.532951][ T5449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.544959][T10227] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.555696][T10227] BTRFS info (device loop4): using sha256 checksum algorithm
[  189.560200][ T5449] bond_slave_0: left allmulticast mode
[  189.569706][   T33] audit: type=1804 audit(1789581861.488:53): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1848" name="file0" dev="ramfs" ino=22234 res=1 errno=0
[  189.570198][ T5449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.587960][ T5449] bond_slave_1: left allmulticast mode
[  189.591887][ T5449] bond0 (unregistering): Released all slaves
[  189.651399][T10227] BTRFS info (device loop4): enabling ssd optimizations
[  189.662488][T10227] BTRFS info (device loop4): turning on async discard
[  189.675969][T10227] BTRFS info (device loop4): enabling free space tree
[  189.723232][T10209] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.726938][T10209] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.729308][T10209] bridge_slave_0: entered allmulticast mode
[  189.732219][T10209] bridge_slave_0: entered promiscuous mode
[  189.737473][ T9735] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.860279][T10209] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.869422][T10209] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.875968][T10209] bridge_slave_1: entered allmulticast mode
[  189.886033][T10209] bridge_slave_1: entered promiscuous mode
[  189.952352][T10209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.963871][T10209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.099862][T10209] team0: Port device team_slave_0 added
[  190.103965][ T5335] 8021q: adding VLAN 0 to HW filter on device eth5
[  190.111916][ T5449] hsr_slave_0: left promiscuous mode
[  190.118308][ T5449] hsr_slave_1: left promiscuous mode
[  190.120731][ T5449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.123543][ T5449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.126839][ T5449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.129805][ T5449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.138703][ T5449] veth1_macvtap: left promiscuous mode
[  190.140731][ T5449] veth0_macvtap: left promiscuous mode
[  190.142461][ T5449] veth1_vlan: left promiscuous mode
[  190.146606][ T5449] veth0_vlan: left promiscuous mode
[  190.330767][T10274] Bluetooth: hci0: unsupported parameter 5161
[  190.332778][T10274] Bluetooth: hci0: unsupported parameter 8192
[  190.336105][T10274] Bluetooth: hci0: unsupported parameter 5161
[  190.344043][T10274] Bluetooth: hci0: unsupported parameter 8192
[  190.358054][ T5449] team0 (unregistering): Port device team_slave_1 removed
[  190.374771][ T5449] team0 (unregistering): Port device team_slave_0 removed
[  190.457880][T10209] team0: Port device team_slave_1 added
[  190.479300][T10209] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.481520][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.496460][T10209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.507980][T10209] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.517974][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.541208][T10209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.611930][T10209] hsr_slave_0: entered promiscuous mode
[  190.631092][T10209] hsr_slave_1: entered promiscuous mode
[  190.635980][T10209] debugfs: 'hsr0' already exists in 'hsr'
[  190.638966][T10209] Cannot create hsr debugfs directory
[  190.894309][ T4989] Bluetooth: hci2: command tx timeout
[  190.942938][ T5335] 8021q: adding VLAN 0 to HW filter on device eth6
[  191.416938][T10302] loop4: detected capacity change from 0 to 1024
[  191.431896][T10302] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  191.451848][T10302] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  191.460518][T10302] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  191.463541][ T5335] 8021q: adding VLAN 0 to HW filter on device eth7
[  191.466100][T10302] EXT4-fs (loop4): orphan cleanup on readonly fs
[  191.472688][T10302] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.1863: Inode bitmap for bg 0 marked uninitialized
[  191.476987][T10302] loop4: lost filesystem error report for type 5 error -117
[  191.478487][T10302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  191.521068][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.080182][T10328] xt_check_target_common: 1 callbacks suppressed
[  192.080204][T10328] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  192.119964][T10209] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  192.125924][T10209] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  192.128710][T10209] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  192.141324][T10209] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  192.147670][T10209] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  192.152427][T10209] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  192.155969][T10209] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  192.163204][T10209] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  192.197091][T10339] loop4: detected capacity change from 0 to 2048
[  192.204226][T10339] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  192.212410][T10339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.277973][T10209] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.298214][T10209] 8021q: adding VLAN 0 to HW filter on device team0
[  192.306060][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.308389][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.336676][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.339152][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.366045][T10350] CIFS: VFS: UNC: missing share name
[  192.377564][T10350] Malformed UNC in devname
[  192.377564][T10350] 
[  192.382284][T10350] CIFS: VFS: Malformed UNC in devname
[  192.473449][   T31] kernel read not supported for file /input/mice (pid: 31 comm: kworker/1:1)
[  192.613252][T10209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.628616][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'.
[  192.642244][T10379] netlink: 'syz.4.1879': attribute type 8 has an invalid length.
[  192.663497][T10209] veth0_vlan: entered promiscuous mode
[  192.677427][T10209] veth1_vlan: entered promiscuous mode
[  192.709169][T10209] veth0_macvtap: entered promiscuous mode
[  192.724070][T10209] veth1_macvtap: entered promiscuous mode
[  192.746315][T10209] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.752121][T10209] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.815541][ T7605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.829883][ T7605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.891338][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.894748][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.932366][T10384] loop4: detected capacity change from 0 to 256
[  192.933900][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.936188][T10384] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.937241][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.943852][ T5449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.950291][ T5449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.955905][T10384] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  192.973977][ T4989] Bluetooth: hci2: command tx timeout
[  193.089790][T10392] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1883'.
[  193.092530][T10392] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1883'.
[  193.342456][T10404] loop4: detected capacity change from 0 to 8
[  193.556080][T10415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1894'.
[  193.627970][ T5449] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  193.675974][T10426] loop4: detected capacity change from 0 to 1024
[  193.678696][T10426] EXT4-fs: Ignoring removed bh option
[  193.686107][T10426] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  193.704106][T10426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.721376][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.833140][T10443] loop4: detected capacity change from 0 to 128
[  193.848278][T10443] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  194.179736][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  194.184505][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  194.193618][ T5449] net_ratelimit: 157 callbacks suppressed
[  194.193669][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.198731][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  194.243393][ T7974] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  194.303517][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.310465][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  194.393982][ T7974] usb 5-1: Using ep0 maxpacket: 16
[  194.406295][ T7974] usb 5-1: unable to get BOS descriptor or descriptor too short
[  194.412496][ T7974] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  194.422249][ T7974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.424464][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.426679][ T7974] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  194.432188][ T7974] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.437754][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  194.445735][ T7974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.454300][ T7974] usb 5-1: Product: syz
[  194.455693][ T7974] usb 5-1: Manufacturer: syz
[  194.461089][ T7974] usb 5-1: SerialNumber: syz
[  194.542327][T10472] netlink: 'syz.3.1919': attribute type 4 has an invalid length.
[  194.561419][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.572772][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  194.693528][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.707070][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  194.728611][ T7974] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  194.732737][ T7974] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  194.921975][ T7974] usb 5-1: 2:1 : can't get High Capability descriptor
[  195.042971][T10482] loop3: detected capacity change from 0 to 32768
[  195.069275][T10482] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  195.069275][T10482] 
[  195.075072][T10482] ERROR: (device loop3): remounting filesystem as read-only
[  195.131363][ T7974] usb 5-1: USB disconnect, device number 3
[  195.374235][ T4989] Bluetooth: hci2: command tx timeout
[  195.381694][T10497] FAULT_INJECTION: forcing a failure.
[  195.381694][T10497] name failslab, interval 1, probability 0, space 0, times 0
[  195.385936][T10497] CPU: 0 UID: 0 PID: 10497 Comm: syz.3.1931 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  195.385950][T10497] Tainted: [L]=SOFTLOCKUP
[  195.385954][T10497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.385959][T10497] Call Trace:
[  195.385962][T10497]  <TASK>
[  195.385967][T10497]  dump_stack_lvl+0xe8/0x150
[  195.385984][T10497]  should_fail_ex+0x410/0x560
[  195.385995][T10497]  ? open_substream+0x283/0x780
[  195.386006][T10497]  should_failslab+0xa8/0x100
[  195.386022][T10497]  __kvmalloc_node_noprof+0x176/0x870
[  195.386037][T10497]  ? open_substream+0x283/0x780
[  195.386048][T10497]  open_substream+0x283/0x780
[  195.386059][T10497]  rawmidi_open_priv+0x93/0x630
[  195.386072][T10497]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  195.386084][T10497]  snd_rawmidi_open+0x461/0xb00
[  195.386097][T10497]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  195.386105][T10497]  ? __pfx_default_wake_function+0x10/0x10
[  195.386119][T10497]  chrdev_open+0x4d9/0x600
[  195.386130][T10497]  ? __pfx_chrdev_open+0x10/0x10
[  195.386139][T10497]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  195.386154][T10497]  ? __pfx_chrdev_open+0x10/0x10
[  195.386163][T10497]  do_dentry_open+0x816/0x1380
[  195.386180][T10497]  vfs_open+0x3b/0x340
[  195.386191][T10497]  ? path_openat+0x1428/0x1d60
[  195.386202][T10497]  path_openat+0x1443/0x1d60
[  195.386218][T10497]  do_file_open+0x23e/0x4a0
[  195.386229][T10497]  ? __pfx_do_file_open+0x10/0x10
[  195.386245][T10497]  ? _raw_spin_unlock+0x28/0x50
[  195.386253][T10497]  ? alloc_fd+0x651/0x6c0
[  195.386268][T10497]  do_sys_openat2+0x115/0x200
[  195.386279][T10497]  ? __pfx_do_sys_openat2+0x10/0x10
[  195.386290][T10497]  ? exc_page_fault+0x6a/0xc0
[  195.386301][T10497]  ? do_user_addr_fault+0xc4c/0x1340
[  195.386313][T10497]  __x64_sys_openat+0x138/0x170
[  195.386325][T10497]  do_syscall_64+0x166/0x520
[  195.386334][T10497]  ? trace_irq_disable+0x3b/0x140
[  195.386344][T10497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.386355][T10497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.386362][T10497] RIP: 0033:0x7f1c7775e98e
[  195.386371][T10497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  195.386378][T10497] RSP: 002b:00007f1c78606b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  195.386387][T10497] RAX: ffffffffffffffda RBX: 00007f1c786076c0 RCX: 00007f1c7775e98e
[  195.386393][T10497] RDX: 0000000000000000 RSI: 00007f1c78606c00 RDI: ffffffffffffff9c
[  195.386398][T10497] RBP: 00007f1c78606c00 R08: 0000000000000000 R09: 0000000000000000
[  195.386402][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  195.386407][T10497] R13: 00007f1c77a26038 R14: 00007f1c77a25fa0 R15: 00007ffe8aa195d8
[  195.386418][T10497]  </TASK>
[  195.507348][T10499] netlink: 'syz.3.1932': attribute type 1 has an invalid length.
[  195.512491][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1932'.
[  195.717269][T10506] bridge_slave_0: left allmulticast mode
[  195.720503][T10506] bridge_slave_0: left promiscuous mode
[  195.723072][T10506] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.776695][T10512] x_tables: ip6_tables: DSCP target: only valid in mangle table, not syz1
[  196.111743][T10524] loop3: detected capacity change from 0 to 32768
[  196.161461][T10524] JBD2: Ignoring recovery information on journal
[  196.215521][T10524] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  196.251448][T10538] Option '?o냟W(d̛p^ï8	XKt..+jXpszgH{&}()eH/k;RE<' to dns_resolver key: bad/missing value
[  196.488260][T10209] ocfs2: Unmounting device (7,3) on (node local)
[  197.883137][ T7974] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  198.033336][ T7974] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  198.044170][ T7974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  198.055740][ T7974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.060823][ T7974] usb 4-1: Product: syz
[  198.066007][ T7974] usb 4-1: Manufacturer: syz
[  198.068540][ T7974] usb 4-1: SerialNumber: syz
[  198.077713][ T7974] ums-onetouch 4-1:1.0: USB Mass Storage device detected
[  198.279231][ T7974] usb 4-1: USB disconnect, device number 14
[  198.819841][T10627] loop3: detected capacity change from 0 to 128
[  198.825852][T10627] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  198.830474][T10627] hpfs: filesystem error: improperly stopped
[  198.833763][T10627] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  198.836969][T10627] hpfs: You really don't want any checks? You are crazy...
[  198.841426][T10627] hpfs: hpfs_map_sector(): read error
[  198.849408][T10627] hpfs: code page support is disabled
[  198.854952][T10627] hpfs: hpfs_map_4sectors(): unaligned read
[  198.861729][T10627] hpfs: hpfs_map_4sectors(): unaligned read
[  198.869993][T10627] hpfs: filesystem error: unable to find root dir
[  198.876733][T10627] hpfs: hpfs_map_4sectors(): unaligned read
[  198.883959][T10627] hpfs: hpfs_map_sector(): read error
[  199.224678][T10655] vivid-000: disconnect
[  199.229011][T10654] vivid-000: reconnect
[  199.308784][ T5449] net_ratelimit: 82 callbacks suppressed
[  199.308797][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.320996][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  199.432525][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.435073][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  199.452920][ T3159] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  199.542493][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.544986][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  199.585285][T10679] netlink: 'syz.1.2012': attribute type 12 has an invalid length.
[  199.623045][ T3159] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  199.630218][ T3159] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  199.634020][ T3159] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  199.639433][ T3159] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  199.642544][ T3159] usb 5-1: Manufacturer: syz
[  199.644367][ T3159] usb 5-1: SerialNumber: syz
[  199.652499][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.660585][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  199.742467][ T5645] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  199.772939][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.775427][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  199.865875][ T3159] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  199.872571][ T3159] usb 5-1: USB disconnect, device number 4
[  199.893037][ T5645] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  199.897746][ T5645] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  199.901044][ T5645] usb 4-1: config 0 has no interface number 0
[  199.905869][ T5645] usb 4-1: config 0 interface 239 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.910321][ T5645] usb 4-1: config 0 interface 239 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.915692][ T5645] usb 4-1: config 0 interface 239 has no altsetting 0
[  199.918487][ T5645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.924814][ T5645] usb 4-1: config 0 descriptor??
[  200.346610][ T5645] hid_parser_main: 462 callbacks suppressed
[  200.346652][ T5645] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  200.351205][ T5645] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  200.353790][ T5645] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  200.356213][ T5645] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  200.358593][ T5645] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  200.360966][ T5645] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  200.363458][ T5645] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0
[  200.372161][ T5645] logitech-djreceiver 0003:046D:C532.0004: hidraw0: USB HID v0.00 Device [HID 046d:c532] on usb-dummy_hcd.3-1/input239
[  200.555186][ T7974] usb 4-1: USB disconnect, device number 15
[  200.682297][ T5644] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  200.853946][ T5644] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  200.858255][ T5644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.065504][ T5644] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  201.160517][ T7974] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  201.169589][ T7974] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  201.433921][T10736] loop3: detected capacity change from 0 to 64
[  201.621568][T10749] batadv_slave_1: entered promiscuous mode
[  201.628765][T10748] batadv_slave_1: left promiscuous mode
[  201.806092][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'.
[  201.959351][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'.
[  202.178352][T10779] jffs2: notice: (10779) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  203.002092][ T3159] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  203.028239][T10790] sctp: [Deprecated]: syz.1.2063 (pid 10790) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.028239][T10790] Use struct sctp_sack_info instead
[  203.181764][ T3159] usb 4-1: Using ep0 maxpacket: 8
[  203.185485][ T3159] usb 4-1: unable to get BOS descriptor or descriptor too short
[  203.187967][ T3159] usb 4-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a
[  203.192118][ T3159] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  203.194738][ T3159] usb 4-1: config 0 has no interface number 0
[  203.196715][ T3159] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[  203.200229][ T3159] usb 4-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85
[  203.204028][ T3159] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024
[  203.207586][ T3159] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024
[  203.210953][ T3159] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0
[  203.214540][ T3159] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0
[  203.218305][ T3159] usb 4-1: config 0 interface 122 has no altsetting 0
[  203.222721][ T3159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.225786][ T3159] usb 4-1: Product: syz
[  203.227198][ T3159] usb 4-1: Manufacturer: syz
[  203.228866][ T3159] usb 4-1: SerialNumber: syz
[  203.234112][ T3159] usb 4-1: config 0 descriptor??
[  203.237179][T10782] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  203.239525][T10782] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  203.456543][ T3159] pl2303 4-1:0.122: pl2303 converter detected
[  203.459504][ T3159] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  203.463708][ T3159] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71
[  203.466783][ T3159] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  203.471064][ T3159] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71
[  203.474142][ T3159] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  203.477039][ T3159] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71
[  203.479970][ T3159] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  203.483136][ T3159] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71
[  203.486102][ T3159] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0000]: -71
[  203.489004][ T3159] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0001]: -71
[  203.491981][ T3159] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0002]: -71
[  203.497493][ T3159] usb 4-1: pl2303 converter now attached to ttyUSB0
[  203.504905][ T3159] usb 4-1: USB disconnect, device number 16
[  203.517888][ T3159] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  203.522312][ T3159] pl2303 4-1:0.122: device disconnected
[  204.231781][ T7974] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  204.382416][ T7974] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  204.386149][ T7974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.389381][ T7974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.393304][ T7974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  204.397697][ T7974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.401634][ T7605] net_ratelimit: 80 callbacks suppressed
[  204.401644][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.402451][ T7974] usb 4-1: config 0 descriptor??
[  204.404064][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  204.511700][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.514211][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  204.621636][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.624069][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  204.732381][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.735053][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  204.825032][ T7974] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  204.831581][ T7974] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  204.841801][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.851383][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  204.858665][ T7974] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  205.092958][ T7974] usb 4-1: USB disconnect, device number 17
[  205.400989][   T33] audit: type=1800 audit(1789581877.310:54): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2091" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  205.812901][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'.
[  205.815715][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2103'.
[  205.829017][T10875] bridge1: entered promiscuous mode
[  206.284353][T10882] loop3: detected capacity change from 0 to 131072
[  206.289477][T10882] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24)
[  206.292016][T10882] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  206.294565][T10882] F2FS-fs (loop3): Test dummy encryption mode enabled
[  206.297499][T10882] F2FS-fs (loop3): invalid crc value
[  206.321569][T10882] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  206.325499][T10882] loop3: lost filesystem error report for type 5 error -117
[  206.328070][T10882] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  206.339389][T10882] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  206.342471][T10882] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  206.345747][T10882] F2FS-fs (loop3): Start checkpoint disabled!
[  206.357451][T10882] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  206.360629][T10882] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  206.363255][T10882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  206.375436][   T33] audit: type=1800 audit(1789581878.291:55): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2106" name="file1" dev="loop3" ino=7 res=0 errno=0
[  206.575712][ T5665] usb 5-1: USB disconnect, device number 5
[  206.845993][   T33] audit: type=1400 audit(1789581878.761:56): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10902 comm="syz.4.2114" name="unknown" offset=16
[  207.219125][T10912] loop4: detected capacity change from 0 to 32768
[  207.229044][T10912] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.243388][T10912] XFS (loop4): Ending clean mount
[  207.257444][ T9735] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.369064][T10930] sctp: [Deprecated]: syz.4.2123 (pid 10930) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.369064][T10930] Use struct sctp_sack_info instead
[  208.800582][T10968] ip6t_srh: unknown srh match flags  4000
[  208.821161][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  208.980807][   T10] usb 4-1: Using ep0 maxpacket: 32
[  208.985278][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  208.990209][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.993828][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.997987][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.005191][   T10] usb 4-1: config 0 descriptor??
[  209.018762][   T10] hub 4-1:0.0: USB hub found
[  209.221432][   T10] hub 4-1:0.0: 1 port detected
[  209.418814][T10972] netlink: 'syz.4.2143': attribute type 4 has an invalid length.
[  209.426246][   T10] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  209.431377][   T10] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  209.443846][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  209.445929][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  209.460886][   T13] net_ratelimit: 81 callbacks suppressed
[  209.460896][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.467558][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  209.481212][   T10] usb 4-1: USB disconnect, device number 18
[  209.571384][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.575033][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  209.690772][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.693831][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  209.720886][ T5665] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  209.748303][T10988] Process accounting resumed
[  209.800824][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.807177][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  209.870729][ T5665] usb 5-1: Using ep0 maxpacket: 16
[  209.873413][ T5665] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  209.877879][ T5665] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  209.883013][ T5665] usb 5-1: config 0 has no interface number 0
[  209.885461][ T5665] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  209.889673][ T5665] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  209.897896][ T5665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.901701][ T5665] usb 5-1: Product: syz
[  209.904951][ T5665] usb 5-1: Manufacturer: syz
[  209.908327][ T5665] usb 5-1: SerialNumber: syz
[  209.911072][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.915284][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  209.919371][ T5665] usb 5-1: config 0 descriptor??
[  209.924657][T10980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  209.934213][T10980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  210.151871][T10980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  210.159529][T10980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  210.298817][   T33] audit: type=1800 audit(1789581882.211:57): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2169" name="nullb0" dev="tmpfs" ino=2527 res=0 errno=0
[  210.364944][T11033] fuse: fd is not a fuse device
[  210.501187][T11041] macvlan0: entered promiscuous mode
[  210.503602][T11041] netlink: 'syz.1.2175': attribute type 1 has an invalid length.
[  210.506701][T11041] netlink: 'syz.1.2175': attribute type 2 has an invalid length.
[  210.531063][ T5645] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  210.680495][ T5645] usb 4-1: Using ep0 maxpacket: 16
[  210.686795][ T5645] usb 4-1: unable to get BOS descriptor or descriptor too short
[  210.692666][ T5645] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  210.696403][ T5645] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  210.704320][ T5645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.708278][ T5645] usb 4-1: Product: syz
[  210.709621][ T5645] usb 4-1: Manufacturer: syz
[  210.711767][ T5645] usb 4-1: SerialNumber: syz
[  210.898737][T11059] syz.1.2184 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  210.924897][ T5645] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  210.927982][ T5645] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  211.113771][T11069] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  211.325754][ T5645] usb 4-1: 2:1 : bogus bTerminalLink 6
[  211.446365][ T5665] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  211.450141][ T5665] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  211.456276][ T5665] asix 5-1:0.34: probe with driver asix failed with error -71
[  211.460784][ T5665] usb 5-1: USB disconnect, device number 6
[  211.864473][ T5645] usb 4-1: USB disconnect, device number 19
[  211.887159][ T9585] udevd[9585]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.103567][T11093] loop3: detected capacity change from 0 to 512
[  212.110368][T11093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  212.123527][T11093] EXT4-fs error (device loop3): ext4_init_orphan_info:583: inode #5: comm syz.3.2200: unexpected bad inode w/o EXT4_IGET_BAD
[  212.134373][T11093] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  212.134759][T11093] EXT4-fs (loop3): get orphan inode failed
[  212.140873][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  212.140888][    C1] EXT4-fs (loop3): initial error at time 1789581884: ext4_init_orphan_info:583: inode 5
[  212.140912][    C1] EXT4-fs (loop3): last error at time 1789581884: ext4_init_orphan_info:583: inode 5
[  212.158936][T11093] EXT4-fs (loop3): mount failed
[  212.388280][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2207'.
[  212.478761][T11115] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2210'.
[  213.120276][ T5665] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  213.256962][T11135] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2218'.
[  213.311512][ T5665] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  213.324504][ T5665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.333944][ T5665] usb 5-1: config 0 descriptor??
[  213.347395][ T5665] cp210x 5-1:0.0: cp210x converter detected
[  213.402273][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2227'.
[  213.444559][T11154] Illegal XDP return value 2891287927 on prog  (id 129) dev syz_tun, expect packet loss!
[  213.588839][T11167] fuse: fd is not a fuse device
[  213.671687][T11173] fuse: fd is not a fuse device
[  213.700139][ T5696] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  213.749770][ T5665] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  213.761549][ T5665] usb 5-1: cp210x converter now attached to ttyUSB0
[  213.859954][ T5696] usb 4-1: Using ep0 maxpacket: 32
[  213.862617][ T5696] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  213.866451][ T5696] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  213.868945][ T5696] usb 4-1: config 0 has no interface number 0
[  213.871284][ T5696] usb 4-1: config 0 interface 12 has no altsetting 0
[  213.875430][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.878188][ T5696] usb 4-1: Product: syz
[  213.879601][ T5696] usb 4-1: Manufacturer: syz
[  213.881528][ T5696] usb 4-1: SerialNumber: syz
[  213.884847][ T5696] usb 4-1: config 0 descriptor??
[  213.957619][   T10] usb 5-1: USB disconnect, device number 7
[  213.967869][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  213.975964][   T10] cp210x 5-1:0.0: device disconnected
[  214.306341][ T5696] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  214.309716][ T5696] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  214.312849][ T5696] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  214.315983][ T5696] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  214.325669][ T5696] usb 4-1: USB disconnect, device number 20
[  214.470097][   T13] net_ratelimit: 78 callbacks suppressed
[  214.470119][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.476945][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  214.547062][T11181] loop4: detected capacity change from 0 to 128
[  214.562309][T11181] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  214.568916][T11181] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.590711][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.593825][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  214.626062][ T9735] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.701330][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.707813][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  214.819810][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.827650][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  214.910972][T11186] loop4: detected capacity change from 0 to 32768
[  214.952036][   T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.955478][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  215.090207][T11199] loop4: detected capacity change from 0 to 1024
[  215.093708][T11199] EXT4-fs: Ignoring removed orlov option
[  215.117495][T11199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.232470][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.588537][T11207] loop4: detected capacity change from 0 to 65536
[  215.602395][T11207] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  215.615135][T11207] XFS (loop4): Ending clean mount
[  215.644234][ T9735] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  216.010410][T11222] xt_hashlimit: size too large, truncated to 1048576
[  216.014623][T11222] xt_hashlimit: Unknown mode mask A2BF, kernel too old?
[  216.252301][T11238] loop4: detected capacity change from 0 to 512
[  216.287319][T11238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.294856][T11238] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.309061][T11244] FAULT_INJECTION: forcing a failure.
[  216.309061][T11244] name failslab, interval 1, probability 0, space 0, times 0
[  216.314081][T11244] CPU: 1 UID: 0 PID: 11244 Comm: syz.3.2263 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.314094][T11244] Tainted: [L]=SOFTLOCKUP
[  216.314098][T11244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.314102][T11244] Call Trace:
[  216.314106][T11244]  <TASK>
[  216.314110][T11244]  dump_stack_lvl+0xe8/0x150
[  216.314125][T11244]  should_fail_ex+0x410/0x560
[  216.314136][T11244]  ? io_alloc_cache_init+0x42/0x140
[  216.314149][T11244]  should_failslab+0xa8/0x100
[  216.314163][T11244]  __kvmalloc_node_noprof+0x176/0x870
[  216.314176][T11244]  ? __kvmalloc_node_noprof+0x35e/0x870
[  216.314187][T11244]  ? io_alloc_cache_init+0x42/0x140
[  216.314200][T11244]  io_alloc_cache_init+0x42/0x140
[  216.314212][T11244]  io_ring_ctx_alloc+0x512/0xc40
[  216.314226][T11244]  io_uring_create+0x50/0x990
[  216.314238][T11244]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  216.314247][T11244]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  216.314260][T11244]  ? rcu_is_watching+0x16/0xb0
[  216.314272][T11244]  do_syscall_64+0x166/0x520
[  216.314282][T11244]  ? trace_irq_disable+0x3b/0x140
[  216.314291][T11244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.314301][T11244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.314308][T11244] RIP: 0033:0x7f1c7779e159
[  216.314318][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.314324][T11244] RSP: 002b:00007f1c78607028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  216.314333][T11244] RAX: ffffffffffffffda RBX: 00007f1c77a25fa0 RCX: 00007f1c7779e159
[  216.314338][T11244] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000162e
[  216.314343][T11244] RBP: 00007f1c7783506b R08: 0000000000000000 R09: 0000000000000000
[  216.314347][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.314351][T11244] R13: 00007f1c77a26038 R14: 00007f1c77a25fa0 R15: 00007ffe8aa195d8
[  216.314382][T11244]  </TASK>
[  216.377367][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.427610][T11246] loop3: detected capacity change from 0 to 512
[  216.450082][T11246] EXT4-fs: Ignoring removed i_version option
[  216.456880][T11246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  216.477942][T11246] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2265: invalid block
[  216.494469][T11246] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.496115][T11246] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2265: invalid indirect mapped block 4294967295 (level 1)
[  216.500060][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  216.500070][    C1] EXT4-fs (loop3): initial error at time 1789581888: ext4_get_branch:178: inode 11: block 4294967295
[  216.500087][    C1] EXT4-fs (loop3): last error at time 1789581888: ext4_get_branch:178: inode 11: block 4294967295
[  216.514076][T11246] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.517534][T11246] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2265: invalid indirect mapped block 4294967295 (level 1)
[  216.527873][T11246] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.532082][T11246] EXT4-fs (loop3): 2 truncates cleaned up
[  216.538002][T11246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.545926][T11246] EXT4-fs (loop3): shut down requested (1)
[  216.587284][T10209] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.889648][ T5665] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  217.109893][ T5665] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  217.113908][ T5665] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  217.118650][ T5665] usb 4-1: config 0 interface 0 has no altsetting 0
[  217.121154][ T5665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.126728][ T5665] usb 4-1: config 0 descriptor??
[  217.558356][ T5665] hid_parser_main: 13 callbacks suppressed
[  217.558369][ T5665] nintendo 0003:057E:2009.0007: unknown main item tag 0x1
[  217.562847][ T5665] nintendo 0003:057E:2009.0007: unknown main item tag 0x2
[  217.573091][ T5665] nintendo 0003:057E:2009.0007: hidraw0: USB HID v90.01 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0
[  217.635809][ T5665] nintendo 0003:057E:2009.0007: Failed to get joycon info; ret=-38
[  217.640051][ T5665] nintendo 0003:057E:2009.0007: Failed to retrieve controller info; ret=-38
[  217.643091][ T5665] nintendo 0003:057E:2009.0007: Failed to initialize controller; ret=-38
[  217.665662][ T5665] nintendo 0003:057E:2009.0007: probe - fail = -38
[  217.669496][ T5665] nintendo 0003:057E:2009.0007: probe with driver nintendo failed with error -38
[  217.736114][T11281] input: syz0 as /devices/virtual/input/input9
[  217.747203][ T5644] usb 4-1: USB disconnect, device number 21
[  218.361505][T11317] loop4: detected capacity change from 0 to 24
[  218.365628][T11317] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  218.388895][T11317] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  218.511376][T11327] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  218.524022][T11327] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  218.627753][T11339] loop4: detected capacity change from 0 to 256
[  218.661599][T11339] exfat: Deprecated parameter 'utf8'
[  218.667133][T11339] exfat: Deprecated parameter 'utf8'
[  218.698300][T11339] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  218.756347][T11335] netlink: 'syz.1.2304': attribute type 11 has an invalid length.
[  219.076796][T11342] ALSA: mixer_oss: invalid OSS volume ''
[  219.082201][T11342] ALSA: mixer_oss: invalid OSS volume '+--'
[  219.088227][T11342] ALSA: mixer_oss: invalid OSS volume '+--'
[  219.095501][T11342] ALSA: mixer_oss: invalid OSS volume '+--'
[  219.097535][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.100699][T11344] TCP: TCP_TX_DELAY enabled
[  219.104293][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.111651][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.123684][T11342] ALSA: mixer_oss: invalid OSS volume '/31'
[  219.146491][T11342] ALSA: mixer_oss: invalid OSS volume '/8'
[  219.180272][T11342] ALSA: mixer_oss: invalid OSS volume '/8'
[  219.214004][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.256131][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.268339][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.288411][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.301878][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.311221][T11342] ALSA: mixer_oss: invalid OSS volume '+--'
[  219.321361][T11342] ALSA: mixer_oss: invalid OSS volume '+--'
[  219.340954][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.366991][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.390033][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.406645][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.415396][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.429490][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.437314][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.446501][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.456731][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.475133][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.487315][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.497617][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.506231][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.513692][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.526734][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.528752][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.532439][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.534362][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.537211][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.555708][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.566745][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.569647][   T12] net_ratelimit: 82 callbacks suppressed
[  219.569751][   T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.578320][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  219.585747][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.588681][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.592190][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.594719][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.597304][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.601781][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.604372][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.616059][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.626720][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.640301][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.653086][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.666163][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.676286][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.684852][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.693129][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.700505][   T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.709365][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.713371][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  219.716758][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.718978][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.721876][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.724104][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.726950][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.729362][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.731483][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.733886][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.735953][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.737885][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.740042][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.742400][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.744353][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.746476][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.753893][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.756279][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.758640][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.764439][T11342] ALSA: mixer_oss: invalid OSS volume '/24'
[  219.775056][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.778916][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.783437][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.787254][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.791242][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.794801][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.797706][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.802882][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.806612][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.812144][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.816138][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.818079][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.820461][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.823623][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.825853][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.828161][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.830703][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.834068][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.838173][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  219.841040][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.843185][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.845433][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.847507][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.853266][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.855698][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.857956][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.861431][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.863402][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.867940][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.872232][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.876371][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.880923][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.886362][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.891675][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.896948][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.904767][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.911125][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.914161][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.917305][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.919996][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.922232][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.924281][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.926230][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.928295][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.932923][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.934973][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.936941][T11342] ALSA: mixer_oss: invalid OSS volume '+--'
[  219.939204][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.941820][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.943878][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.945911][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.947930][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.950274][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.955084][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.957324][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  219.960015][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.962410][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.964375][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.966390][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.968399][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.973771][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.975895][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.977848][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.980232][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.982155][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.984036][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.985892][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.987671][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.990497][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.992396][T11342] ALSA: mixer_oss: invalid OSS volume '|--'
[  219.994252][T11342] ALSA: mixer_oss: invalid OSS volume '/32'
[  219.996171][T11342] ALSA: mixer_oss: invalid OSS volume ''
[  220.081403][   T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.084023][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  221.701140][T11378] loop4: detected capacity change from 0 to 1024
[  221.783597][T11378] EXT4-fs: Ignoring removed oldalloc option
[  221.790044][T11378] EXT4-fs: Ignoring removed oldalloc option
[  221.813351][T11378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.891708][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.972379][T11392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2326'.
[  221.984222][T11197] syz.3.2246 (11197) used greatest stack depth: 15640 bytes left
[  221.987068][T11392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2326'.
[  222.039028][T11393] loop4: detected capacity change from 0 to 8192
[  222.208680][T11395] loop3: detected capacity change from 0 to 32768
[  222.228790][T11395] blkno = 8ed2c, nblocks = 1
[  222.231408][T11395] ERROR: (device loop3): dbFree: block to be freed is outside the map
[  222.231408][T11395] 
[  222.238324][T11395] ERROR: (device loop3): remounting filesystem as read-only
[  222.240944][T11395] ialloc: diAlloc returned -17!
[  222.312704][T11409] netlink: 'syz.1.2332': attribute type 4 has an invalid length.
[  222.568495][ T5696] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  222.718444][ T5696] usb 4-1: Using ep0 maxpacket: 32
[  222.720703][ T5696] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  222.724900][ T5696] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.728185][ T5696] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 224, changing to 7
[  222.732299][ T5696] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  222.740267][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.743424][ T5696] usb 4-1: Product: syz
[  222.744790][ T5696] usb 4-1: Manufacturer: syz
[  222.746197][ T5696] usb 4-1: SerialNumber: syz
[  222.969866][ T5696] snd-ua101 4-1:1.1: invalid format type
[  222.972514][ T5696] snd-ua101 4-1:1.0: invalid num_altsetting
[  222.981185][ T5696] usb 4-1: USB disconnect, device number 22
[  223.582434][   T33] audit: type=1326 audit(1789581895.504:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.3.2342" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c7779e159 code=0x0
[  223.768455][ T3159] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  223.931338][ T3159] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  223.951979][ T3159] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  223.960465][ T3159] usb 5-1: Product: syz
[  223.963477][ T3159] usb 5-1: Manufacturer: syz
[  223.969361][ T3159] usb 5-1: config 0 descriptor??
[  223.985698][ T3159] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  223.992387][ T3159] ftdi_sio ttyUSB0: unknown device type: 0xa446
[  224.187090][ T3159] usb 5-1: USB disconnect, device number 8
[  224.196520][ T3159] ftdi_sio 5-1:0.0: device disconnected
[  224.618286][ T5449] net_ratelimit: 79 callbacks suppressed
[  224.618298][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.626439][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  224.742298][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.751670][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  224.880241][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.882789][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  224.990564][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.994106][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  225.102312][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  225.105502][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  225.148300][ T5696] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  225.305587][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short
[  225.309433][ T5696] usb 4-1: not running at top speed; connect to a high speed hub
[  225.312209][ T5696] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  225.317749][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.322323][ T5696] usb 4-1: Product: syz
[  225.325328][ T5696] usb 4-1: Manufacturer: syz
[  225.328479][ T5696] usb 4-1: SerialNumber: syz
[  225.371070][ T5696] snd-ua101 4-1:1.1: sample format descriptor not found
[  225.382186][ T5696] snd-ua101 4-1:1.0: invalid num_altsetting
[  225.428722][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'.
[  225.595623][   T10] usb 4-1: USB disconnect, device number 23
[  225.628218][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'.
[  225.649647][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'.
[  225.661757][T11503] netlink: 'syz.1.2375': attribute type 12 has an invalid length.
[  225.664750][T11503] netlink: 'syz.1.2375': attribute type 13 has an invalid length.
[  225.945960][T11515] loop4: detected capacity change from 0 to 32768
[  225.961134][T11515] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.979979][T11515] XFS (loop4): Ending clean mount
[  225.987580][   T33] audit: type=1800 audit(1789581897.904:59): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2381" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  225.999443][T11515] XFS (loop4): User initiated shutdown received.
[  226.002057][T11515] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  226.007265][T11515] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  226.027407][ T9735] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  226.172038][T11529] loop4: detected capacity change from 0 to 512
[  226.293354][ T5696] kernel write not supported for file /uinput (pid: 5696 comm: kworker/0:5)
[  226.417001][T11538] loop4: detected capacity change from 0 to 128
[  226.433475][T11538] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  226.538254][T11541] loop3: detected capacity change from 0 to 1024
[  227.086868][T11553] loop3: detected capacity change from 0 to 8192
[  227.096326][T11553] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  227.356787][T11567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2400'.
[  227.364935][T11567] netlink: 'syz.3.2400': attribute type 7 has an invalid length.
[  227.368407][T11567] netlink: 'syz.3.2400': attribute type 8 has an invalid length.
[  227.370786][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'.
[  227.386698][T11567] erspan0: entered promiscuous mode
[  227.399060][T11567] gretap0: entered promiscuous mode
[  227.404627][T11567] erspan0: left promiscuous mode
[  227.410206][T11567] gretap0: left promiscuous mode
[  227.448241][   T33] audit: type=1326 audit(1789581899.374:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11575 comm="syz.1.2404" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d8439e159 code=0x0
[  227.536279][T11573] loop4: detected capacity change from 0 to 32768
[  227.567162][T11573] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  227.594698][T11573] XFS (loop4): Ending clean mount
[  227.646821][   T33] audit: type=1800 audit(1789581899.564:61): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2402" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  227.693943][ T9735] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  227.834629][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2415'.
[  228.330891][T11620] netlink: 'syz.4.2421': attribute type 2 has an invalid length.
[  228.466652][T11629] Cannot find set identified by id 0 to match
[  228.500361][T11631] loop4: detected capacity change from 0 to 512
[  228.511733][T11631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.515689][T11631] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.549998][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.703877][T11647] loop3: detected capacity change from 0 to 2048
[  228.761177][T11647]  loop3: p1 p2 p3
[  228.761177][T11647]  p1: <netbsd: >
[  228.767377][T11647] loop3: p1 size 16779263 extends beyond EOD, truncated
[  228.826299][T11647] loop3: p2 size 458752 extends beyond EOD, truncated
[  228.831207][T11647] loop3: p3 start 3036741376 is beyond EOD, truncated
[  228.972448][T11664] loop3: detected capacity change from 0 to 1024
[  229.022512][T11664] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  229.102211][T11670] netlink: 'syz.1.2445': attribute type 16 has an invalid length.
[  229.116405][T11670] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2445'.
[  229.270040][T11683] loop3: detected capacity change from 0 to 1024
[  229.297668][T11683] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[  229.297668][T11683] 
[  229.305670][T11683] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  229.585119][T11693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2454 (11693)
[  229.601370][T11693] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.604549][T11693] BTRFS info (device loop3): using crc32c checksum algorithm
[  229.635207][T11693] BTRFS info (device loop3): enabling ssd optimizations
[  229.638760][T11693] BTRFS info (device loop3): turning on async discard
[  229.641077][T11693] BTRFS info (device loop3): enabling free space tree
[  229.653485][T11693] BTRFS critical (device loop3 state E): emergency shutdown
[  229.657403][ T7605] net_ratelimit: 76 callbacks suppressed
[  229.657415][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  229.666739][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  229.669788][T10209] BTRFS info (device loop3 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.789798][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  229.795998][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  229.897942][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  229.903442][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  230.017228][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  230.019818][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  230.127241][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  230.130557][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  230.637321][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2473'.
[  231.304785][T11789] set_capacity_and_notify: 1 callbacks suppressed
[  231.304801][T11789] loop3: detected capacity change from 0 to 32768
[  231.313050][T11789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2492 (11789)
[  231.322483][T11789] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.329933][T11789] BTRFS info (device loop3): using sha256 checksum algorithm
[  231.408048][T11789] BTRFS info (device loop3): enabling ssd optimizations
[  231.410928][T11789] BTRFS info (device loop3): turning on async discard
[  231.415617][T11789] BTRFS info (device loop3): enabling free space tree
[  231.466252][T10209] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.717032][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  231.915197][ T5696] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  232.242652][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  232.316193][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.327208][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  232.336830][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  232.346980][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  232.420134][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  232.424248][   T10] usb 5-1: Product: syz
[  232.426373][   T10] usb 5-1: Manufacturer: syz
[  232.458563][   T10] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  232.461575][ T5696] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  232.468825][   T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[  232.473597][ T5696] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  232.477781][   T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  232.482322][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.487932][ T5696] usb 4-1: Product: syz
[  232.489507][ T5696] usb 4-1: Manufacturer: syz
[  232.491482][ T5696] usb 4-1: SerialNumber: syz
[  232.500159][ T5696] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  232.668992][ T5665] usb 5-1: USB disconnect, device number 9
[  232.680912][ T5665] garmin_gps 5-1:1.0: device disconnected
[  232.716262][ T5696] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  232.740066][ T5696] usb 4-1: USB disconnect, device number 24
[  233.302618][T11877] loop4: detected capacity change from 0 to 7
[  233.305425][T11877] Dev loop4: unable to read RDB block 7
[  233.308920][T11877]  loop4: unable to read partition table
[  233.313228][T11877] loop4: partition table beyond EOD, truncated
[  233.315332][T11877] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5)
[  233.332378][ T5039] Dev loop4: unable to read RDB block 7
[  233.335995][ T5039]  loop4: unable to read partition table
[  233.339006][ T5039] loop4: partition table beyond EOD, truncated
[  233.583274][T11890] loop3: detected capacity change from 0 to 32768
[  233.586179][T11890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2528 (11890)
[  233.590241][ T5665] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  233.597573][T11890] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.600764][T11890] BTRFS info (device loop3): using sha256 checksum algorithm
[  233.625546][T11890] BTRFS info (device loop3): enabling ssd optimizations
[  233.629063][T11890] BTRFS info (device loop3): turning on async discard
[  233.631312][T11890] BTRFS info (device loop3): enabling free space tree
[  233.644816][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'.
[  233.656954][T10209] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.739140][ T5665] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  233.759294][ T5665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.771350][ T5665] usb 5-1: config 0 descriptor??
[  233.889552][T11922] program syz.3.2535 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  233.977820][T11926] zero sized request
[  234.188704][ T5665] ath6kl: Failed to submit usb control message: -71
[  234.190883][ T5665] ath6kl: unable to send the bmi data to the device: -71
[  234.193064][ T5665] ath6kl: Unable to send get target info: -71
[  234.198819][ T5665] ath6kl: Failed to init ath6kl core: -71
[  234.211537][ T5665] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  234.219739][ T5665] usb 5-1: USB disconnect, device number 10
[  234.578258][T11935] xt_ecn: cannot match TCP bits for non-tcp packets
[  234.706574][ T5449] net_ratelimit: 80 callbacks suppressed
[  234.706598][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.712151][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  234.818170][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.821423][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  234.926714][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  234.929314][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  235.036376][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.039659][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  235.317488][   T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  235.320636][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  236.733160][T11986] loop3: detected capacity change from 0 to 32768
[  236.741468][T11986] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2560 (11986)
[  236.762177][T11986] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.775895][T11986] BTRFS info (device loop3): using crc32c checksum algorithm
[  236.839003][T11986] BTRFS info (device loop3): setting nodatasum
[  236.845019][T11986] BTRFS info (device loop3): setting nodatacow
[  236.852432][T11986] BTRFS info (device loop3): disabling tree log
[  236.854437][T11986] BTRFS info (device loop3): turning on async discard
[  236.859047][T11986] BTRFS info (device loop3): enabling free space tree
[  236.862009][T11986] BTRFS info (device loop3): max_inline set to 0
[  236.991799][T10209] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.365938][ T5696] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  237.527231][ T5696] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  237.534647][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.538251][ T5696] usb 4-1: Product: syz
[  237.540097][ T5696] usb 4-1: Manufacturer: syz
[  237.542117][ T5696] usb 4-1: SerialNumber: syz
[  237.631734][ T5696] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  238.057533][   T10] usb 4-1: USB disconnect, device number 25
[  238.175065][T12035] netlink: 'syz.1.2579': attribute type 6 has an invalid length.
[  238.179250][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  238.221971][T12037] sctp: [Deprecated]: syz.1.2580 (pid 12037) Use of int in max_burst socket option.
[  238.221971][T12037] Use struct sctp_assoc_value instead
[  238.649259][ T5696] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  238.663226][ T5696] ath9k_htc: Failed to initialize the device
[  238.695792][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[  238.813531][T12069] netlink: 'syz.1.2596': attribute type 21 has an invalid length.
[  238.819191][T12069] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2596'.
[  238.883278][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.928881][T12061] loop3: detected capacity change from 0 to 32768
[  238.957591][T12061] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  238.982933][T12061] XFS (loop3): Ending clean mount
[  239.030467][T10209] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.455593][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  239.620651][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  239.626166][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  239.632926][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.636685][   T10] usb 4-1: Product: syz
[  239.638544][   T10] usb 4-1: Manufacturer: syz
[  239.640603][   T10] usb 4-1: SerialNumber: syz
[  239.728571][ T5449] net_ratelimit: 76 callbacks suppressed
[  239.728593][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  239.736829][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  239.845600][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  239.852699][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  239.865356][   T10] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device: 
[  239.869173][   T10] eb aa 55 00 00 00 00 00 
[  239.870827][   T10] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -5
[  239.965573][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  239.969835][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  240.075460][   T10] usb 4-1: USB disconnect, device number 26
[  240.087512][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  240.090295][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  240.198479][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  240.202935][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  240.517168][ T5644] hid-generic 0003:1B1C:1C1B.0008: unknown main item tag 0x0
[  240.521196][ T5644] hid-generic 0003:1B1C:1C1B.0008: unknown main item tag 0x0
[  240.525093][ T5644] hid-generic 0003:1B1C:1C1B.0008: unknown main item tag 0x0
[  240.527928][ T5644] hid-generic 0003:1B1C:1C1B.0008: unbalanced collection at end of report description
[  240.532061][ T5644] hid-generic 0003:1B1C:1C1B.0008: probe with driver hid-generic failed with error -22
[  240.695836][T12101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.699364][T12104] loop3: detected capacity change from 0 to 256
[  240.700817][T12104] exfat: Deprecated parameter 'utf8'
[  240.714251][T12104] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  240.761192][T12101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.817640][T12107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.871206][T12106] loop3: detected capacity change from 0 to 32768
[  240.882586][T12106] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2610 (12106)
[  240.894830][T12106] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  240.898547][T12106] BTRFS info (device loop3): using blake2b checksum algorithm
[  240.922392][T12106] BTRFS info (device loop3): enabling ssd optimizations
[  240.924692][T12106] BTRFS info (device loop3): enabling free space tree
[  240.949181][   T33] audit: type=1800 audit(1789581912.877:62): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2610" name="bus" dev="loop3" ino=263 res=0 errno=0
[  241.039230][T10209] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  241.186325][T12125] loop3: detected capacity change from 0 to 2048
[  241.266356][T12125] hpfs: filesystem error: improperly stopped; already mounted read-only
[  241.269026][T12125] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  241.276665][T12125] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000
[  241.643810][T12163] 
[  241.644630][T12163] ======================================================
[  241.646799][T12163] WARNING: possible circular locking dependency detected
[  241.649037][T12163] syzkaller #0 Tainted: G             L     
[  241.650961][T12163] ------------------------------------------------------
[  241.653158][T12163] syz.4.2630/12163 is trying to acquire lock:
[  241.655372][T12163] ffff8881159bc880 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_read_iter+0x70/0x620
[  241.658848][T12163] 
[  241.658848][T12163] but task is already holding lock:
[  241.661312][T12163] ffff88816a4b9cc0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[  241.664905][T12163] 
[  241.664905][T12163] which lock already depends on the new lock.
[  241.664905][T12163] 
[  241.668373][T12163] 
[  241.668373][T12163] the existing dependency chain (in reverse order) is:
[  241.671172][T12163] 
[  241.671172][T12163] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  241.673761][T12163]        __mutex_lock+0x19d/0x1550
[  241.675471][T12163]        ima_file_truncate+0xb6/0x170
[  241.677591][T12163]        security_file_truncate+0x118/0x240
[  241.679868][T12163]        path_openat+0x1569/0x1d60
[  241.681902][T12163]        do_file_open+0x23e/0x4a0
[  241.683828][T12163]        do_sys_openat2+0x115/0x200
[  241.685826][T12163]        __x64_sys_openat+0x138/0x170
[  241.687914][T12163]        do_syscall_64+0x166/0x520
[  241.689957][T12163]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.692418][T12163] 
[  241.692418][T12163] -> #3 (sb_writers#5){.+.+}-{0:0}:
[  241.695336][T12163]        sb_start_write+0x4d/0x1d0
[  241.697374][T12163]        mnt_want_write+0x41/0x90
[  241.699356][T12163]        lookup_open+0x1e6/0x1a40
[  241.701372][T12163]        path_openat+0x677/0x1d60
[  241.703336][T12163]        do_file_open+0x23e/0x4a0
[  241.705302][T12163]        filp_open+0x16d/0x1d0
[  241.707183][T12163]        nvmet_file_ns_enable+0x74/0x350
[  241.709395][T12163]        nvmet_ns_enable+0xaa/0x780
[  241.711337][T12163]        nvmet_ns_enable_store+0xd7/0x170
[  241.713560][T12163]        configfs_write_iter+0x337/0x430
[  241.715749][T12163]        vfs_write+0x612/0xba0
[  241.717613][T12163]        ksys_write+0x150/0x270
[  241.719520][T12163]        do_syscall_64+0x166/0x520
[  241.721465][T12163]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.723913][T12163] 
[  241.723913][T12163] -> #2 (&subsys->lock){+.+.}-{4:4}:
[  241.726775][T12163]        __mutex_lock+0x19d/0x1550
[  241.728786][T12163]        nvmet_ns_buffered_io_store+0xe1/0x200
[  241.731144][T12163]        configfs_write_iter+0x337/0x430
[  241.733393][T12163]        vfs_write+0x612/0xba0
[  241.735029][T12163]        ksys_write+0x150/0x270
[  241.736638][T12163]        do_syscall_64+0x166/0x520
[  241.738395][T12163]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.740371][T12163] 
[  241.740371][T12163] -> #1 (&p->frag_sem){.+.+}-{4:4}:
[  241.743006][T12163]        down_read+0x4a/0x330
[  241.744511][T12163]        configfs_write_iter+0x238/0x430
[  241.746238][T12163]        vfs_write+0x612/0xba0
[  241.747767][T12163]        ksys_write+0x150/0x270
[  241.749390][T12163]        do_syscall_64+0x166/0x520
[  241.751265][T12163]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.753268][T12163] 
[  241.753268][T12163] -> #0 (&buffer->mutex#2){+.+.}-{4:4}:
[  241.755675][T12163]        __lock_acquire+0x1520/0x2cf0
[  241.757524][T12163]        lock_acquire+0x106/0x350
[  241.759106][T12163]        __mutex_lock+0x19d/0x1550
[  241.760656][T12163]        configfs_read_iter+0x70/0x620
[  241.762730][T12163]        __kernel_read+0x4ca/0x960
[  241.764559][T12163]        integrity_kernel_read+0x89/0xd0
[  241.766256][T12163]        ima_calc_file_hash+0x451/0x890
[  241.768096][T12163]        ima_collect_measurement+0x51b/0xa00
[  241.770420][T12163]        process_measurement+0x1272/0x1c10
[  241.772623][T12163]        ima_file_check+0xe1/0x130
[  241.774432][T12163]        security_file_post_open+0xb3/0x260
[  241.776427][T12163]        path_openat+0x1485/0x1d60
[  241.778213][T12163]        do_file_open+0x23e/0x4a0
[  241.779957][T12163]        do_sys_openat2+0x115/0x200
[  241.781773][T12163]        __x64_sys_openat+0x138/0x170
[  241.783524][T12163]        do_syscall_64+0x166/0x520
[  241.785070][T12163]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.787079][T12163] 
[  241.787079][T12163] other info that might help us debug this:
[  241.787079][T12163] 
[  241.790252][T12163] Chain exists of:
[  241.790252][T12163]   &buffer->mutex#2 --> sb_writers#5 --> &ima_iint_mutex_key[depth]
[  241.790252][T12163] 
[  241.794689][T12163]  Possible unsafe locking scenario:
[  241.794689][T12163] 
[  241.797624][T12163]        CPU0                    CPU1
[  241.799681][T12163]        ----                    ----
[  241.801807][T12163]   lock(&ima_iint_mutex_key[depth]);
[  241.803950][T12163]                                lock(sb_writers#5);
[  241.806589][T12163]                                lock(&ima_iint_mutex_key[depth]);
[  241.809748][T12163]   lock(&buffer->mutex#2);
[  241.811562][T12163] 
[  241.811562][T12163]  *** DEADLOCK ***
[  241.811562][T12163] 
[  241.814300][T12163] locks held by syz.4.2630/12163: 1, last CPU#1:
[  241.816259][T12163]  #0: ffff88816a4b9cc0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[  241.819620][T12163] 
[  241.819620][T12163] stack backtrace:
[  241.821541][T12163] CPU: 1 UID: 0 PID: 12163 Comm: syz.4.2630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  241.821555][T12163] Tainted: [L]=SOFTLOCKUP
[  241.821558][T12163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.821564][T12163] Call Trace:
[  241.821570][T12163]  <TASK>
[  241.821575][T12163]  dump_stack_lvl+0xe8/0x150
[  241.821590][T12163]  print_circular_bug+0x2e1/0x300
[  241.821600][T12163]  check_noncircular+0x12e/0x150
[  241.821608][T12163]  __lock_acquire+0x1520/0x2cf0
[  241.821620][T12163]  ? is_bpf_text_address+0x26/0x2b0
[  241.821635][T12163]  ? configfs_read_iter+0x70/0x620
[  241.821645][T12163]  lock_acquire+0x106/0x350
[  241.821655][T12163]  ? configfs_read_iter+0x70/0x620
[  241.821666][T12163]  __mutex_lock+0x19d/0x1550
[  241.821676][T12163]  ? configfs_read_iter+0x70/0x620
[  241.821686][T12163]  ? stack_trace_save+0xa9/0x100
[  241.821696][T12163]  ? configfs_read_iter+0x70/0x620
[  241.821704][T12163]  ? __pfx___mutex_lock+0x10/0x10
[  241.821713][T12163]  ? stack_depot_save_flags+0x33/0x7f0
[  241.821724][T12163]  ? kasan_save_track+0x4f/0x80
[  241.821734][T12163]  ? kasan_save_track+0x3e/0x80
[  241.821744][T12163]  ? __kasan_kmalloc+0x93/0xb0
[  241.821754][T12163]  ? ima_calc_file_hash+0x40f/0x890
[  241.821764][T12163]  ? ima_collect_measurement+0x51b/0xa00
[  241.821774][T12163]  ? process_measurement+0x1272/0x1c10
[  241.821784][T12163]  ? ima_file_check+0xe1/0x130
[  241.821793][T12163]  configfs_read_iter+0x70/0x620
[  241.821802][T12163]  __kernel_read+0x4ca/0x960
[  241.821811][T12163]  ? __pfx___kernel_read+0x10/0x10
[  241.821820][T12163]  integrity_kernel_read+0x89/0xd0
[  241.821829][T12163]  ? __pfx_integrity_kernel_read+0x10/0x10
[  241.821837][T12163]  ? ima_calc_file_hash+0x40f/0x890
[  241.821847][T12163]  ? ima_calc_file_hash+0x40f/0x890
[  241.821858][T12163]  ima_calc_file_hash+0x451/0x890
[  241.821869][T12163]  ? __pfx_ima_calc_file_hash+0x10/0x10
[  241.821884][T12163]  ? generic_fillattr+0x575/0x840
[  241.821895][T12163]  ima_collect_measurement+0x51b/0xa00
[  241.821907][T12163]  ? __pfx_ima_collect_measurement+0x10/0x10
[  241.821919][T12163]  ? trace_contention_end+0x3d/0x140
[  241.821930][T12163]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  241.821940][T12163]  process_measurement+0x1272/0x1c10
[  241.821952][T12163]  ? __pfx_process_measurement+0x10/0x10
[  241.821967][T12163]  ? __pfx___up_read+0x10/0x10
[  241.821976][T12163]  ima_file_check+0xe1/0x130
[  241.821988][T12163]  ? __pfx_ima_file_check+0x10/0x10
[  241.821999][T12163]  security_file_post_open+0xb3/0x260
[  241.822006][T12163]  path_openat+0x1485/0x1d60
[  241.822017][T12163]  do_file_open+0x23e/0x4a0
[  241.822026][T12163]  ? __pfx_do_file_open+0x10/0x10
[  241.822036][T12163]  ? _raw_spin_unlock+0x28/0x50
[  241.822044][T12163]  ? alloc_fd+0x651/0x6c0
[  241.822055][T12163]  do_sys_openat2+0x115/0x200
[  241.822065][T12163]  ? __se_sys_futex+0x3a8/0x450
[  241.822073][T12163]  ? __pfx_do_sys_openat2+0x10/0x10
[  241.822083][T12163]  ? rcu_is_watching+0x16/0xb0
[  241.822090][T12163]  __x64_sys_openat+0x138/0x170
[  241.822101][T12163]  do_syscall_64+0x166/0x520
[  241.822111][T12163]  ? trace_irq_disable+0x3b/0x140
[  241.822120][T12163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.822128][T12163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.822135][T12163] RIP: 0033:0x7f6d0419e159
[  241.822145][T12163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.822152][T12163] RSP: 002b:00007f6d023f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  241.822161][T12163] RAX: ffffffffffffffda RBX: 00007f6d04425fa0 RCX: 00007f6d0419e159
[  241.822166][T12163] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  241.822171][T12163] RBP: 00007f6d0423506b R08: 0000000000000000 R09: 0000000000000000
[  241.822175][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.822179][T12163] R13: 00007f6d04426038 R14: 00007f6d04425fa0 R15: 00007ffdbaa67148
[  241.822187][T12163]  </TASK>
[  241.990635][   T33] audit: type=1800 audit(1789581913.917:63): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2630" name="ipv4_port" dev="configfs" ino=28362 res=0 errno=0
[  241.999331][   T33] audit: type=1800 audit(1789581913.917:64): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2630" name="num" dev="configfs" ino=28363 res=0 errno=0
[  242.007709][   T33] audit: type=1800 audit(1789581913.917:65): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2630" name="local" dev="configfs" ino=28364 res=0 errno=0
[  242.015867][   T33] audit: type=1800 audit(1789581913.917:66): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2630" name="ipv4_address" dev="configfs" ino=28366 res=0 errno=0
[  242.022460][   T33] audit: type=1800 audit(1789581913.917:67): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2630" name="num" dev="configfs" ino=28367 res=0 errno=0
[  242.030377][   T33] audit: type=1800 audit(1789581913.957:68): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2630" name="local" dev="configfs" ino=28368 res=0 errno=0
[  242.038275][   T33] audit: type=1800 audit(1789581913.967:69): pid=12163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2630" name="ipv4_address" dev="configfs" ino=28357 res=0 errno=0
[  244.824956][ T7605] net_ratelimit: 80 callbacks suppressed
[  244.824979][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  244.830339][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  244.934565][ T5449] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  244.937141][ T5449] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  245.044639][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.048246][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  245.154622][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.157896][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  245.264521][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  245.267413][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  249.913682][ T7605] net_ratelimit: 82 callbacks suppressed
[  249.913706][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  249.919105][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  250.023718][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  250.026976][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  250.143729][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  250.147072][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  250.253625][ T7605] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  250.257367][ T7605] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  250.363648][   T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  250.366822][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
