last executing test programs:

6m20.475379126s ago: executing program 1 (id=2649):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xfffffe04, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x1b}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x2004800c)

6m20.356366129s ago: executing program 1 (id=2652):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x80, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

6m19.946672294s ago: executing program 1 (id=2657):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

6m19.638825191s ago: executing program 1 (id=2663):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

6m19.48623483s ago: executing program 1 (id=2666):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x40400)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

6m19.048139825s ago: executing program 1 (id=2675):
syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff00070581020002000705", @ANYBLOB="bd27c3"], 0x0)

6m18.946968506s ago: executing program 32 (id=2675):
syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff00070581020002000705", @ANYBLOB="bd27c3"], 0x0)

6m12.59079183s ago: executing program 0 (id=2750):
r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(r0, &(0x7f0000002440)=""/181, 0xb5)

6m10.979702814s ago: executing program 0 (id=2757):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000c400000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000003}, 0x94)

6m10.918716416s ago: executing program 0 (id=2758):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x300400c1}, 0x814)

6m10.869735384s ago: executing program 0 (id=2759):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

6m10.815370364s ago: executing program 0 (id=2760):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1eb6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

6m10.689778153s ago: executing program 0 (id=2761):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa8}]}, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

6m10.689643661s ago: executing program 33 (id=2761):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa8}]}, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

3m44.067316351s ago: executing program 4 (id=4438):
clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0xfffffffffffffff8, 0x8, 0x8, 0x1820000000000, 0x3, 0x7, 0x8, 0x100, 0x8000000000000001, 0x80, 0xb15, 0xff62, 0xa69e, 0xf, 0x5, 0x8000, 0x3, 0x9, 0x5, 0xbc2, 0x8, 0x1, 0x4, 0x1})

3m43.997640348s ago: executing program 4 (id=4440):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0))
read$dsp(r0, &(0x7f0000000280)=""/189, 0xbd)

3m43.077051599s ago: executing program 4 (id=4448):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@flushpolicy={0x18, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840)

3m43.017786671s ago: executing program 4 (id=4449):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace(0x10, r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x2200, 0x80000a, 0x0, 0x8001, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x4, 0x18, 0xd, 0x0, 0x8, 0x6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

3m42.86668143s ago: executing program 4 (id=4450):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m42.467050703s ago: executing program 4 (id=4453):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x9, @void}, 0x10)

3m42.3011343s ago: executing program 34 (id=4453):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x9, @void}, 0x10)

2m41.495723069s ago: executing program 5 (id=5215):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r2=>0x0, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r2, 0x0, 0x9, 0x232b23, 0x1, &(0x7f00000001c0)="a5", 0x10004})

2m41.495313694s ago: executing program 5 (id=5217):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="8ad44a33ee106daa", 0x8}], 0x1}}], 0x1, 0x40085)

2m41.416157232s ago: executing program 5 (id=5218):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000003000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m41.367349644s ago: executing program 5 (id=5220):
mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0)

2m41.301230958s ago: executing program 5 (id=5224):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m40.886058707s ago: executing program 5 (id=5234):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

2m40.67239317s ago: executing program 35 (id=5234):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

2.47074721s ago: executing program 3 (id=7138):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
write$binfmt_elf32(r4, &(0x7f0000002180)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xc, 0x2, 0x5, 0xf, 0x2, 0x3e, 0xe7d26f7, 0x65, 0x38, 0x212, 0x0, 0x7, 0x20, 0x1, 0x7, 0x4, 0x8001}, [{0x5, 0xfffffffe, 0x1, 0x3, 0x9, 0x9, 0x5}]}, 0x58)
getpriority(0x2, r5)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)

1.601584145s ago: executing program 6 (id=7142):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x7dba}, 0x8)

1.434009671s ago: executing program 3 (id=7144):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

1.218862821s ago: executing program 6 (id=7146):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0)

1.110165785s ago: executing program 2 (id=7147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0fc5:1', 0x6)

1.109728629s ago: executing program 3 (id=7148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}, {0x8008, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x8000, 0xfffffff7, 0x1, 0x0, 0x0, 0x100001}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x80, 0x7, 0x400000, 0x7, 0x4, 0x53}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0)

942.452078ms ago: executing program 2 (id=7149):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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")
pipe(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x82c0, 0x101)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)

861.276839ms ago: executing program 3 (id=7150):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x8, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdrdstopts={{0x18, 0x29, 0x3b, {0xf04a70bee95f8f64}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x58}, 0x0)

786.489776ms ago: executing program 6 (id=7151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f0000000500), 0x0}, 0x20)

672.610114ms ago: executing program 2 (id=7152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x40008d4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c000080"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)

672.39314ms ago: executing program 3 (id=7153):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r0, &(0x7f0000000600)='dir .', 0x5)
syz_mount_image$erofs(&(0x7f0000000840), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1b0, &(0x7f00000008c0)="$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")
write(r0, &(0x7f0000000700)='bind', 0x4)

563.582901ms ago: executing program 6 (id=7154):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x18}, 0x18)

512.304965ms ago: executing program 2 (id=7155):
r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0xb04e, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x38414761, 0x2, @discrete={0x2, 0x40}})

379.240667ms ago: executing program 6 (id=7156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0)

379.091986ms ago: executing program 2 (id=7157):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

298.239223ms ago: executing program 3 (id=7158):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)

114.263561ms ago: executing program 6 (id=7159):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
bind(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e24, 0x3, @empty, 0x3}}}, 0x80)

0s ago: executing program 2 (id=7160):
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4)
write(r0, &(0x7f0000000000)="01", 0x1)

kernel console output (not intermixed with test programs):

[  531.110497][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'.
[  531.402182][ T5381] 8021q: adding VLAN 0 to HW filter on device eth6
[  531.783533][T18801] loop3: detected capacity change from 0 to 32768
[  531.856493][T18801] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  531.873601][T18801] XFS (loop3): Ending clean mount
[  531.969358][ T5381] 8021q: adding VLAN 0 to HW filter on device eth7
[  532.160605][T12346] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  532.666374][ T5381] 8021q: adding VLAN 0 to HW filter on device eth8
[  532.680738][   T55] Bluetooth: hci2: command tx timeout
[  532.855094][T18708] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  532.912081][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  532.927611][T18708] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  532.948173][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  533.029743][   T12] hsr_slave_0: left promiscuous mode
[  533.032555][   T12] hsr_slave_1: left promiscuous mode
[  533.035052][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.037870][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.043245][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.046023][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.093317][   T12] veth1_macvtap: left promiscuous mode
[  533.100072][   T12] veth0_macvtap: left promiscuous mode
[  533.128475][   T12] veth1_vlan: left promiscuous mode
[  533.131127][   T12] veth0_vlan: left promiscuous mode
[  533.299157][T18865] loop3: detected capacity change from 0 to 1024
[  533.349374][T18865] EXT4-fs: Ignoring removed oldalloc option
[  533.356261][T18865] EXT4-fs: Ignoring removed oldalloc option
[  533.386716][T18865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.650903][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.865607][   T12] team0 (unregistering): Port device team_slave_1 removed
[  533.886327][   T12] team0 (unregistering): Port device team_slave_0 removed
[  534.065773][T18708] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  534.091517][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  534.095304][T18708] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  534.129830][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  534.248617][T18914] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 2
[  534.270147][T18902] hsr0 speed is unknown, defaulting to 1000
[  534.464566][T18918] netlink: 'syz.2.5300': attribute type 16 has an invalid length.
[  534.471399][T18918] netlink: 'syz.2.5300': attribute type 17 has an invalid length.
[  534.511450][T18919] syzkaller1: entered promiscuous mode
[  534.513862][T18919] syzkaller1: entered allmulticast mode
[  534.545192][T18918] tunl0: left promiscuous mode
[  534.550668][    T9] hsr0 speed is unknown, defaulting to 1000
[  534.568156][T18918] syz_tun: left promiscuous mode
[  534.624051][  T803] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  534.627246][    T9] syz2: Port: 1 Link DOWN
[  534.675607][T18918] bridge0: port 1(veth0) entered blocking state
[  534.678518][T18918] bridge0: port 1(veth0) entered forwarding state
[  534.736779][T18918] geneve2: left allmulticast mode
[  534.750653][   T55] Bluetooth: hci2: command tx timeout
[  534.759913][T18918] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  534.841491][ T5795] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  534.860758][  T803] hsr0 speed is unknown, defaulting to 1000
[  534.863318][  T803] syz2: Port: 1 Link ACTIVE
[  534.933950][T18708] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.045566][T18708] 8021q: adding VLAN 0 to HW filter on device team0
[  535.059291][T14324] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.061973][T14324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.074220][T14324] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.076963][T14324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.414944][T18708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.475198][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5308'.
[  535.499969][T18708] veth0_vlan: entered promiscuous mode
[  535.516529][T18956] netlink: 'syz.2.5309': attribute type 3 has an invalid length.
[  535.525079][T18708] veth1_vlan: entered promiscuous mode
[  535.555466][T18708] veth0_macvtap: entered promiscuous mode
[  535.565900][T18708] veth1_macvtap: entered promiscuous mode
[  535.595945][T18708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.614532][T18708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.625691][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.628727][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.633168][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.636385][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.118934][T14324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.136324][T14324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.226124][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.229593][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.373703][T18964] smbdirect: ib_dev[syz2] removed
[  536.830539][   T55] Bluetooth: hci2: command tx timeout
[  537.426964][T19000] loop3: detected capacity change from 0 to 32768
[  537.536831][T19008] netlink: 'syz.6.5331': attribute type 8 has an invalid length.
[  537.539783][T19008] bridge0: entered allmulticast mode
[  537.817818][T19025] loop3: detected capacity change from 0 to 128
[  537.826401][T19025] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  537.837551][T19025] hpfs: filesystem error: improperly stopped
[  537.879700][T19025] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  537.900218][T19025] hpfs: You really don't want any checks? You are crazy...
[  537.911844][T19025] hpfs: Code page index out of array
[  537.914975][T19025] hpfs: code page support is disabled
[  537.921541][T19025] hpfs: hpfs_map_4sectors(): unaligned read
[  537.926896][T19025] hpfs: hpfs_map_4sectors(): unaligned read
[  537.930031][T19025] hpfs: filesystem error: unable to find root dir
[  537.942288][T19034] loop6: detected capacity change from 0 to 256
[  538.023026][T19036] loop3: detected capacity change from 0 to 128
[  538.045426][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'.
[  538.447575][T19043] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  538.634541][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5348'.
[  538.910922][  T803] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  539.075406][T19061] loop3: detected capacity change from 0 to 1024
[  539.078616][  T803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  539.083221][  T803] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  539.092784][  T803] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  539.099085][  T803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  539.107687][  T803] usb 7-1: SerialNumber: syz
[  539.179996][T19061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  539.194834][T19061] ext4 filesystem being mounted at /880/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.244689][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  539.346928][  T803] usb 7-1: 0:2 : does not exist
[  539.419258][  T803] usb 7-1: USB disconnect, device number 2
[  539.453940][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  540.250526][   T32] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  540.400537][   T32] usb 7-1: Using ep0 maxpacket: 8
[  540.405481][   T32] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[  540.412180][   T32] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  540.416636][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.422901][   T32] usb 7-1: Product: syz
[  540.424986][   T32] usb 7-1: Manufacturer: syz
[  540.427019][   T32] usb 7-1: SerialNumber: syz
[  540.431356][   T32] usb 7-1: config 0 descriptor??
[  540.443395][   T32] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  540.447929][   T32] usb 7-1: setting power ON
[  540.450132][   T32] dvb-usb: bulk message failed: -22 (2/0)
[  540.455216][   T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  540.460563][   T32] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  540.464435][   T32] usb 7-1: media controller created
[  540.497446][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  540.527188][   T32] usb 7-1: selecting invalid altsetting 6
[  540.529942][   T32] usb 7-1: digital interface selection failed (-22)
[  540.533364][   T32] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  540.537833][   T32] usb 7-1: setting power OFF
[  540.547218][   T32] dvb-usb: bulk message failed: -22 (2/0)
[  540.549759][   T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  540.553561][   T32] (NULL device *): no alternate interface
[  540.597132][T19096] loop3: detected capacity change from 0 to 512
[  540.606413][T19096] EXT4-fs: Ignoring removed nomblk_io_submit option
[  540.616702][T19096] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  540.622005][T19096] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.5367: corrupted in-inode xattr: e_value size too large
[  540.628424][   T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  540.628764][T19096] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  540.635257][T19096] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5367: couldn't read orphan inode 15 (err -117)
[  540.644453][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  540.644479][    C0] EXT4-fs (loop3): initial error at time 2000000255: ext4_iget_extra_inode:5180: inode 15
[  540.644511][    C0] EXT4-fs (loop3): last error at time 2000000255: ext4_iget_extra_inode:5180: inode 15
[  540.661533][T19096] loop3: lost filesystem error report for type 5 error -117
[  540.663162][T19096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  540.717319][ T5840] usb 7-1: USB disconnect, device number 3
[  540.770453][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.566842][T19128] tipc: Failed to remove unknown binding: 66,0,0/0:811765572/811765573
[  541.572222][T19128] tipc: Failed to remove unknown binding: 66,0,0/0:811765572/811765573
[  543.455425][T19234] loop3: detected capacity change from 0 to 128
[  543.461175][T19234] hpfs: hpfs_map_sector(): read error
[  543.464398][T19234] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  543.483328][T19234] hpfs: hpfs_map_sector(): read error
[  544.501219][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5443'.
[  544.738441][T19284] loop6: detected capacity change from 0 to 512
[  544.748056][T19284] EXT4-fs: Ignoring removed i_version option
[  544.763936][T19284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  544.828523][T19284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  544.863298][T19284] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  544.941889][T19298] netlink: 'syz.2.5453': attribute type 5 has an invalid length.
[  545.070966][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.236599][T19321] loop3: detected capacity change from 0 to 256
[  545.242667][T19321] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  545.256109][   T35] audit: type=1800 audit(2000000259.710:7594): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5460" name="file1" dev="loop3" ino=1048754 res=0 errno=0
[  545.293520][   T35] audit: type=1800 audit(2000000259.710:7595): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5460" name="file1" dev="loop3" ino=1048754 res=0 errno=0
[  545.316394][T19322] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  545.350161][T19322] FAT-fs (loop3): Filesystem has been set read-only
[  545.366606][T19322] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  545.388097][T19322] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  545.810676][ T5795] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  545.961002][ T5795] usb 7-1: Using ep0 maxpacket: 8
[  545.969095][ T5795] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  545.973758][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.977366][ T5795] usb 7-1: Product: syz
[  545.981721][ T5795] usb 7-1: Manufacturer: syz
[  545.984926][ T5795] usb 7-1: SerialNumber: syz
[  545.989355][ T5795] usb 7-1: config 0 descriptor??
[  546.074445][T19346] loop3: detected capacity change from 0 to 32768
[  546.091459][T19346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5468 (19346)
[  546.123360][T19346] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  546.134025][T19346] BTRFS info (device loop3): using sha256 checksum algorithm
[  546.199456][ T5795] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  546.226115][T19346] BTRFS info (device loop3): enabling ssd optimizations
[  546.240051][T19346] BTRFS info (device loop3): turning on async discard
[  546.244088][T19346] BTRFS info (device loop3): enabling free space tree
[  546.297876][T12346] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  546.727938][T19375] batman_adv: batadv0: Adding interface: dummy0
[  546.731585][T19375] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.776150][T19375] batman_adv: batadv0: Interface activated: dummy0
[  546.857169][ T5795] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  546.891578][ T5795] usb 7-1: USB disconnect, device number 4
[  546.968128][T19375] batadv0: mtu less than device minimum
[  547.018712][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.026670][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.031262][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.036297][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.041366][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.046264][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.051259][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.056256][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.061314][T19375] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  547.305135][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5482'.
[  547.497246][T19404] netlink: 'syz.2.5486': attribute type 32 has an invalid length.
[  547.942572][ T5809] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  548.093952][ T5809] usb 7-1: config 0 has an invalid interface number: 52 but max is 0
[  548.097924][ T5809] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  548.103099][ T5809] usb 7-1: config 0 has no interface number 0
[  548.107324][ T5809] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  548.116133][ T5809] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  548.129213][ T5809] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  548.135388][ T5809] usb 7-1: config 0 interface 52 has no altsetting 0
[  548.148570][T19430] loop3: detected capacity change from 0 to 1024
[  548.149282][ T5809] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  548.159221][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  548.170910][ T5809] usb 7-1: Product: syz
[  548.176251][ T5809] usb 7-1: SerialNumber: syz
[  548.188067][T19430] hfsplus: small file entry
[  548.196561][ T5809] usb 7-1: config 0 descriptor??
[  548.417649][ T5809] input: syz (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input34
[  548.583147][T19445] nbd: illegal input index -1
[  548.640809][   T33] usb 7-1: USB disconnect, device number 5
[  548.670641][T19447] xt_hashlimit: size too large, truncated to 1048576
[  549.253174][   T55] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  549.273454][   T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u11:0 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  549.273485][   T55] Tainted: [L]=SOFTLOCKUP
[  549.273491][   T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.273500][   T55] Workqueue: hci2 hci_rx_work
[  549.273562][   T55] Call Trace:
[  549.273568][   T55]  <TASK>
[  549.273577][   T55]  dump_stack_lvl+0xe8/0x150
[  549.273602][   T55]  sysfs_create_dir_ns+0x271/0x2a0
[  549.273628][   T55]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  549.273649][   T55]  ? do_raw_spin_unlock+0x4d/0x210
[  549.273666][   T55]  kobject_add_internal+0x622/0xcd0
[  549.273687][   T55]  kobject_add+0x163/0x240
[  549.273708][   T55]  ? __pfx_kobject_add+0x10/0x10
[  549.273728][   T55]  ? get_device_parent+0x366/0x3a0
[  549.273745][   T55]  device_add+0x3fa/0xb80
[  549.273757][   T55]  hci_conn_add_sysfs+0xd5/0x210
[  549.273777][   T55]  le_conn_complete_evt+0xfef/0x1580
[  549.273803][   T55]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  549.273818][   T55]  ? __mutex_unlock_slowpath+0x731/0x900
[  549.273832][   T55]  ? skb_pull_data+0xf0/0x200
[  549.273849][   T55]  hci_le_conn_complete_evt+0x187/0x470
[  549.273869][   T55]  hci_event_packet+0x67a/0xf10
[  549.273887][   T55]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  549.273901][   T55]  ? __pfx_hci_event_packet+0x10/0x10
[  549.273919][   T55]  ? audit_filter_rules+0x3660/0x5d10
[  549.273938][   T55]  ? hci_send_to_monitor+0xe2/0x590
[  549.273957][   T55]  hci_rx_work+0x3ee/0x1020
[  549.273974][   T55]  ? process_scheduled_works+0xa20/0x14e0
[  549.273989][   T55]  process_scheduled_works+0xa8e/0x14e0
[  549.274018][   T55]  ? __pfx_process_scheduled_works+0x10/0x10
[  549.274036][   T55]  ? assign_work+0x3cf/0x5d0
[  549.274052][   T55]  worker_thread+0xa47/0xfb0
[  549.274083][   T55]  kthread+0x388/0x470
[  549.274100][   T55]  ? __pfx_worker_thread+0x10/0x10
[  549.274113][   T55]  ? __pfx_kthread+0x10/0x10
[  549.274129][   T55]  ret_from_fork+0x514/0xb70
[  549.274148][   T55]  ? __pfx_ret_from_fork+0x10/0x10
[  549.274164][   T55]  ? __switch_to+0xc89/0x1420
[  549.274180][   T55]  ? __pfx_kthread+0x10/0x10
[  549.274197][   T55]  ret_from_fork_asm+0x1a/0x30
[  549.274225][   T55]  </TASK>
[  549.274249][   T55] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  549.371244][   T55] Bluetooth: hci2: failed to register connection device
[  549.503140][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5517'.
[  549.506965][T19480] tc_dump_action: action bad kind
[  549.974912][T19486] configfs-gadget.g1 gadget.0: HOST MAC 26:8d:2a:bf:3f:7d
[  549.978321][T19486] configfs-gadget.g1 gadget.0: MAC fe:95:a9:ae:c1:eb
[  550.073977][T19486] configfs-gadget.g1 gadget.0: HOST MAC fe:82:c8:c2:63:ea
[  550.077294][T19486] configfs-gadget.g1 gadget.0: MAC ca:19:d9:0c:1d:9b
[  550.561436][   T33] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  550.723156][   T33] usb 1-1: Dual-Role OTG device on HNP port
[  550.737025][   T33] usb 1-1: New USB device found, idVendor=0000, idProduct=000a, bcdDevice= 7.02
[  550.756330][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.833423][   T33] usb 1-1: No union descriptors
[  550.914328][   T33] cdc_acm 1-1:1.1: ttyACM0: USB ACM device
[  550.932169][T19506] loop3: detected capacity change from 0 to 32768
[  551.025692][T19506] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  551.074621][T19506] XFS (loop3): Ending clean mount
[  551.235848][   T33] rndis_host 1-1:1.3 usb2: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, fe:82:c8:c2:63:ea
[  551.282062][   T33] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  551.371897][ T5795] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  551.691639][ T5795] usb 7-1: Using ep0 maxpacket: 32
[  551.721105][ T5795] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  551.736144][ T5795] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  551.748703][ T5795] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  551.763989][ T5795] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  551.765116][T12346] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  551.788358][ T5795] usb 7-1: config 0 interface 0 has no altsetting 0
[  551.808994][ T5795] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  551.817433][ T5795] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  551.825588][ T5795] usb 7-1: Product: syz
[  551.827774][ T5795] usb 7-1: Manufacturer: syz
[  551.831356][ T5795] usb 7-1: SerialNumber: syz
[  551.847864][ T5795] usb 7-1: config 0 descriptor??
[  551.913219][ T5795] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  551.957182][ T5795] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  552.012655][T19531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5531'.
[  552.026227][T19531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5531'.
[  552.322879][T19542] Cannot find del_set index 4 as target
[  552.544689][ T5788] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  552.589621][T19553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5536'.
[  552.615676][T19553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5536'.
[  552.632172][T19553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5536'.
[  552.702040][ T5788] usb 4-1: Using ep0 maxpacket: 32
[  552.707076][   T33] usb 7-1: USB disconnect, device number 6
[  552.707179][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  552.721686][ T5788] usb 4-1: unable to get BOS descriptor or descriptor too short
[  552.725255][T19516] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  552.733404][ T5788] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 17955, setting to 1024
[  552.738035][ T5788] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 28, changing to 7
[  552.748865][   T33] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  552.751983][ T5788] usb 4-1: config 1 interface 2 has no altsetting 0
[  552.768345][ T5788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  552.772383][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.775999][ T5788] usb 4-1: Product: syz
[  552.777803][ T5788] usb 4-1: Manufacturer: syz
[  552.779708][ T5788] usb 4-1: SerialNumber: syz
[  552.897368][T19564] netlink: 'syz.2.5538': attribute type 1 has an invalid length.
[  553.093833][ T5788] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  553.116282][ T5788] usb 4-1: 2:1 : unsupported sample bitwidth 10 in 255 bytes
[  553.123327][ T5788] usb 4-1: selecting invalid altsetting 0
[  553.213841][ T5788] usb 4-1: USB disconnect, device number 29
[  553.489891][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  553.694138][T19591] loop6: detected capacity change from 0 to 1024
[  553.768473][T19591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  553.824578][T19592] bond0: (slave syz_tun): Releasing backup interface
[  553.927183][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.018573][T19656] loop3: detected capacity change from 0 to 8192
[  555.040455][ T5788] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  555.062579][T19656] Dev loop3: RDB in block 1 has bad checksum
[  555.196921][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  555.200017][ T5788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  555.205502][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  555.209816][ T5788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  555.217361][ T5788] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  555.221990][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.224686][ T5788] usb 7-1: Product: syz
[  555.227831][ T5788] usb 7-1: Manufacturer: syz
[  555.237954][ T5788] usb 7-1: SerialNumber: syz
[  555.247044][ T5788] usb 7-1: config 0 descriptor??
[  555.262273][ T5788] kvaser_usb 7-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  555.273565][ T5788] kvaser_usb 7-1:0.0: error -EMSGSIZE: Failed to initialize card
[  555.285138][ T5788] kvaser_usb 7-1:0.0: probe with driver kvaser_usb failed with error -90
[  555.492695][ T5788] usb 7-1: USB disconnect, device number 7
[  556.197709][T19693] loop6: detected capacity change from 0 to 8
[  556.229022][T19693] unable to read xattr id index table
[  558.095737][T19761] net_ratelimit: 13 callbacks suppressed
[  558.095762][T19761] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  558.341528][T19770] loop6: detected capacity change from 0 to 4096
[  558.348334][T19770] ntfs3(loop6): ino=3, mi_enum_attr
[  559.035979][T19778] loop3: detected capacity change from 0 to 32768
[  559.042752][T19778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5619 (19778)
[  559.071020][T19778] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  559.077024][T19778] BTRFS info (device loop3): using sha256 checksum algorithm
[  559.142611][T19778] BTRFS info (device loop3): enabling ssd optimizations
[  559.153986][T19778] BTRFS info (device loop3): turning on async discard
[  559.165680][T19778] BTRFS info (device loop3): enabling free space tree
[  559.436668][T12346] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  559.902733][T19808] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5624'.
[  559.934595][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5625'.
[  560.465052][  T803] IPVS: starting estimator thread 0...
[  560.547082][T19835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5636'.
[  560.555282][T19829] IPVS: using max 81 ests per chain, 194400 per kthread
[  561.802631][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5650'.
[  562.325960][T19908] loop6: detected capacity change from 0 to 8
[  563.045392][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  563.578700][T19962] netlink: 2452 bytes leftover after parsing attributes in process `syz.6.5682'.
[  563.756802][T19969] loop3: detected capacity change from 0 to 2048
[  563.796133][T19969]  loop3: p1 < > p4
[  563.796133][T19969]  p4: <netbsd: >
[  563.803665][T19969] loop3: p4 size 722688 extends beyond EOD, truncated
[  564.648121][T20013] loop6: detected capacity change from 0 to 128
[  564.664588][T20015] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5705'.
[  564.667662][T20013] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  564.668369][T20015] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5705'.
[  564.677111][T20015] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  564.759473][T20017] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002
[  565.497048][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5714'.
[  565.764341][T20054] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5716'.
[  565.788991][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5717'.
[  565.793452][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5717'.
[  565.802020][T20057] netlink: 'syz.2.5717': attribute type 14 has an invalid length.
[  565.805891][T20057] netlink: 'syz.2.5717': attribute type 13 has an invalid length.
[  566.264610][ T5788] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  566.377279][T20080] loop3: detected capacity change from 0 to 512
[  566.392037][T20080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.402750][T20080] ext4 filesystem being mounted at /1005/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  566.445781][ T5788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  566.449567][ T5788] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  566.463989][ T5788] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  566.469913][ T5788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.501336][ T5788] spcp8x5 7-1:1.0: SPCP8x5 converter detected
[  566.527097][ T5788] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[  566.565867][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.587747][T20081] bond4: entered promiscuous mode
[  566.612112][T20081] 8021q: adding VLAN 0 to HW filter on device bond4
[  566.743093][  T803] usb 7-1: USB disconnect, device number 8
[  566.759014][  T803] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  566.768899][  T803] spcp8x5 7-1:1.0: device disconnected
[  566.843699][T20096] netlink: 'syz.3.5727': attribute type 30 has an invalid length.
[  567.496399][T20108] SET target dimension over the limit!
[  567.598953][T20112] loop6: detected capacity change from 0 to 1024
[  567.632724][T20112] hfsplus: (loop6): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only.
[  567.658254][T20112] hfsplus: Run fsck.hfsplus to repair.
[  567.911914][ T5795] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  568.070917][ T5795] usb 4-1: Using ep0 maxpacket: 16
[  568.076500][ T5795] usb 4-1: unable to get BOS descriptor or descriptor too short
[  568.084038][ T5795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  568.089097][ T5795] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  568.103291][ T5795] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  568.113109][ T5795] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  568.132253][ T5795] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  568.136152][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.139929][ T5795] usb 4-1: Product: syz
[  568.141888][ T5795] usb 4-1: Manufacturer: syz
[  568.145281][ T5795] usb 4-1: SerialNumber: syz
[  568.190109][  T803] usb 7-1: new low-speed USB device number 9 using dummy_hcd
[  568.343667][  T803] usb 7-1: unable to get BOS descriptor or descriptor too short
[  568.350879][  T803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8
[  568.356908][  T803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt
[  568.371798][ T5795] usb 4-1: unknown sample rate
[  568.386927][ T5795] usb 4-1: unknown sample rate
[  568.389577][  T803] usb 7-1: string descriptor 0 read error: -22
[  568.393572][  T803] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  568.399241][  T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.419045][T20122] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  568.426942][T20122] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  568.515050][  T803] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  568.522523][ T5795] usb 4-1: USB disconnect, device number 30
[  568.592463][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  568.768160][  T803] usb 7-1: USB disconnect, device number 9
[  569.169300][T20127] loop3: detected capacity change from 0 to 32768
[  569.175973][T20127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5741 (20127)
[  569.186108][T20127] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  569.190347][T20127] BTRFS info (device loop3): using sha256 checksum algorithm
[  569.357491][T20127] BTRFS info (device loop3): enabling ssd optimizations
[  569.360562][T20127] BTRFS info (device loop3): turning on sync discard
[  569.363335][T20127] BTRFS info (device loop3): enabling free space tree
[  569.398175][   T35] audit: type=1800 audit(2000524571.922:7596): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5741" name="file1" dev="loop3" ino=260 res=0 errno=0
[  570.830818][T20164] loop6: detected capacity change from 0 to 512
[  570.848828][T20164] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  570.861557][T20164] EXT4-fs (loop6): 1 truncate cleaned up
[  570.865525][T20164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.919327][T12346] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  570.993930][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.159985][T20174] loop6: detected capacity change from 0 to 512
[  571.352319][T20179] kAFS: unable to lookup cell '('
[  571.517792][T20184] netlink: 'syz.6.5757': attribute type 11 has an invalid length.
[  571.575372][T20187] netlink: Failed to add k\ helper -22
[  571.577908][T20187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  571.789459][T20205] loop6: detected capacity change from 0 to 512
[  572.136951][T20225] loop3: detected capacity change from 0 to 128
[  572.149599][T20225] EXT4-fs (loop3): Test dummy encryption mode enabled
[  572.162073][T20225] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  572.168057][T20225] ext4 filesystem being mounted at /1023/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  572.200200][T12346] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  572.287004][T20232] tipc: Started in network mode
[  572.289398][T20232] tipc: Node identity 5f0000000000000008, cluster identity 4711
[  572.453516][  T803] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  572.605776][  T803] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  572.610668][  T803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  572.615579][  T803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64
[  572.619470][  T803] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  572.625418][  T803] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  572.628579][  T803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  572.633753][  T803] usb 7-1: SerialNumber: syz
[  572.643550][T20230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  572.682486][T20242] loop3: detected capacity change from 0 to 32768
[  572.686130][T20242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5783 (20242)
[  572.699656][T20242] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  572.711726][T20242] BTRFS info (device loop3): using sha256 checksum algorithm
[  572.781769][T20242] BTRFS info (device loop3): enabling ssd optimizations
[  572.784191][T20242] BTRFS info (device loop3): turning on async discard
[  572.786424][T20242] BTRFS info (device loop3): enabling free space tree
[  572.818117][T12346] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  572.886194][  T803] cdc_acm 7-1:1.0: ttyACM1: USB ACM device
[  572.912378][  T803] usb 7-1: USB disconnect, device number 10
[  573.625295][T20282] loop3: detected capacity change from 0 to 1764
[  573.725511][T20290] jffs2: notice: (20290) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  573.760440][T20292] netlink: 'syz.6.5798': attribute type 9 has an invalid length.
[  574.377225][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5802'.
[  574.381148][T20305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5802'.
[  574.821738][T20313] loop3: detected capacity change from 0 to 2048
[  574.932144][T20313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.973214][T20313] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  574.988409][T20313] EXT4-fs (loop3): Remounting filesystem read-only
[  575.083744][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.872798][T20349] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5823'.
[  576.310721][  T803] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  576.349785][T20373] random: crng reseeded on system resumption
[  576.466072][  T803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  576.482481][  T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  576.495556][  T803] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  576.533400][  T803] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  576.537341][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.542961][  T803] usb 4-1: Product: syz
[  576.546052][  T803] usb 4-1: Manufacturer: syz
[  576.549141][  T803] usb 4-1: SerialNumber: syz
[  576.562096][  T803] cdc_mbim 4-1:1.0: skipping garbage
[  576.564273][  T803] usb 4-1: selecting invalid altsetting 1
[  576.763891][  T803] cdc_mbim 4-1:1.0: bind() failure
[  576.777898][  T803] usb 4-1: USB disconnect, device number 31
[  578.933701][ T5795] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  579.087231][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.112433][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.116606][ T5795] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  579.124168][ T5795] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  579.129082][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.139950][ T5795] usb 7-1: config 0 descriptor??
[  579.560045][ T5795] cm6533_jd 0003:0D8C:0022.0018: unbalanced collection at end of report description
[  579.564855][ T5795] cm6533_jd 0003:0D8C:0022.0018: parse failed
[  579.567419][ T5795] cm6533_jd 0003:0D8C:0022.0018: probe with driver cm6533_jd failed with error -22
[  579.683573][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5869'.
[  579.687402][T20457] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  579.761087][   T33] usb 7-1: USB disconnect, device number 11
[  579.867707][T20460] size and base must be multiples of 4 kiB
[  579.871739][T20460] CPU: 1 UID: 0 PID: 20460 Comm: syz.3.5870 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  579.871767][T20460] Tainted: [L]=SOFTLOCKUP
[  579.871773][T20460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  579.871804][T20460] Call Trace:
[  579.871818][T20460]  <TASK>
[  579.871823][T20460]  dump_stack_lvl+0xe8/0x150
[  579.871853][T20460]  mtrr_add+0xd5/0x100
[  579.871877][T20460]  mtrr_ioctl+0xc98/0x13b0
[  579.871900][T20460]  ? __pfx_mtrr_ioctl+0x10/0x10
[  579.871930][T20460]  ? __fget_files+0x2a/0x420
[  579.871952][T20460]  ? __fget_files+0x3a2/0x420
[  579.871971][T20460]  ? __fget_files+0x2a/0x420
[  579.871990][T20460]  ? __pfx_mtrr_ioctl+0x10/0x10
[  579.872011][T20460]  proc_reg_unlocked_ioctl+0x1d6/0x2c0
[  579.872030][T20460]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  579.872046][T20460]  __se_sys_ioctl+0xfc/0x170
[  579.872064][T20460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.872080][T20460]  do_syscall_64+0x174/0x580
[  579.872094][T20460]  ? trace_irq_disable+0x3b/0x140
[  579.872118][T20460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.872133][T20460] RIP: 0033:0x7f6100f9e0d9
[  579.872148][T20460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.872161][T20460] RSP: 002b:00007f6101d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  579.872178][T20460] RAX: ffffffffffffffda RBX: 00007f6101225fa0 RCX: 00007f6100f9e0d9
[  579.872188][T20460] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003
[  579.872198][T20460] RBP: 00007f6101035024 R08: 0000000000000000 R09: 0000000000000000
[  579.872207][T20460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.872216][T20460] R13: 00007f6101226038 R14: 00007f6101225fa0 R15: 00007ffd3bde4908
[  579.872239][T20460]  </TASK>
[  581.402228][T20486] loop3: detected capacity change from 0 to 40427
[  581.415366][T20486] F2FS-fs: heap/no_heap options were deprecated
[  581.420672][T20486] F2FS-fs (loop3): build fault injection rate: 19
[  581.422900][T20486] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  581.427984][T20486] F2FS-fs (loop3): invalid crc value
[  581.450892][T20486] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  581.501960][T20486] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  581.510433][T20486] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  581.527709][T20486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  581.543332][T20486] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  581.563473][T20486] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  581.570201][T20486] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xdc0
[  581.583866][T20486] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  581.617990][T12346] syz-executor: attempt to access beyond end of device
[  581.617990][T12346] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  581.633646][T12346] CPU: 1 UID: 0 PID: 12346 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  581.633675][T12346] Tainted: [L]=SOFTLOCKUP
[  581.633679][T12346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  581.633688][T12346] Call Trace:
[  581.633694][T12346]  <TASK>
[  581.633701][T12346]  dump_stack_lvl+0xe8/0x150
[  581.633728][T12346]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  581.633749][T12346]  f2fs_write_end_io+0x124b/0x1710
[  581.633780][T12346]  __submit_merged_bio+0x258/0x6a0
[  581.633793][T12346]  ? rcu_is_watching+0x15/0xb0
[  581.633816][T12346]  __submit_merged_write_cond+0x3c9/0x4e0
[  581.633833][T12346]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  581.633869][T12346]  f2fs_write_data_pages+0x2a27/0x36f0
[  581.633885][T12346]  ? __lock_acquire+0x6df/0x2e50
[  581.633915][T12346]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  581.633924][T12346]  ? is_bpf_text_address+0x26/0x2b0
[  581.633940][T12346]  ? arch_stack_walk+0xfb/0x150
[  581.633959][T12346]  ? add_lock_to_list+0xc7/0x100
[  581.633971][T12346]  ? lockdep_unlock+0x5d/0xd0
[  581.633979][T12346]  ? __lock_acquire+0x14b9/0x2e50
[  581.633998][T12346]  ? do_raw_spin_lock+0x12b/0x2f0
[  581.634010][T12346]  ? do_raw_spin_unlock+0x4d/0x210
[  581.634018][T12346]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  581.634028][T12346]  do_writepages+0x338/0x560
[  581.634043][T12346]  ? do_raw_spin_unlock+0x4d/0x210
[  581.634052][T12346]  filemap_fdatawrite+0x1e9/0x2f0
[  581.634066][T12346]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  581.634092][T12346]  ? do_raw_spin_unlock+0x4d/0x210
[  581.634101][T12346]  f2fs_sync_dirty_inodes+0x30e/0x830
[  581.634118][T12346]  f2fs_write_checkpoint+0xa3d/0x2710
[  581.634129][T12346]  ? __lock_acquire+0x6df/0x2e50
[  581.634149][T12346]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  581.634178][T12346]  kill_f2fs_super+0x2f6/0x700
[  581.634190][T12346]  ? __pfx_kill_f2fs_super+0x10/0x10
[  581.634204][T12346]  ? call_rcu+0x64b/0x8b0
[  581.634215][T12346]  ? lockdep_hardirqs_on+0x7a/0x110
[  581.634229][T12346]  deactivate_locked_super+0xbc/0x130
[  581.634243][T12346]  cleanup_mnt+0x3d3/0x460
[  581.634253][T12346]  task_work_run+0x1d9/0x270
[  581.634267][T12346]  ? __pfx_task_work_run+0x10/0x10
[  581.634324][T12346]  exit_to_user_mode_loop+0x1fa/0x730
[  581.634340][T12346]  ? rcu_is_watching+0x15/0xb0
[  581.634354][T12346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.634362][T12346]  do_syscall_64+0x353/0x580
[  581.634370][T12346]  ? trace_irq_disable+0x3b/0x140
[  581.634382][T12346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.634408][T12346] RIP: 0033:0x7f6100f9f317
[  581.634418][T12346] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  581.634425][T12346] RSP: 002b:00007ffd3bde3b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  581.634435][T12346] RAX: 0000000000000000 RBX: 00007f6101034474 RCX: 00007f6100f9f317
[  581.634440][T12346] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3bde3c30
[  581.634445][T12346] RBP: 00007ffd3bde3c30 R08: 00007ffd3bde4c30 R09: 00000000ffffffff
[  581.634450][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3bde4cc0
[  581.634455][T12346] R13: 00007f6101034474 R14: 000000000008e005 R15: 00007ffd3bde4d00
[  581.634467][T12346]  </TASK>
[  581.634506][T12346] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  581.760858][T12346] CPU: 1 UID: 0 PID: 12346 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  581.760877][T12346] Tainted: [L]=SOFTLOCKUP
[  581.760880][T12346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  581.760886][T12346] Call Trace:
[  581.760890][T12346]  <TASK>
[  581.760894][T12346]  dump_stack_lvl+0xe8/0x150
[  581.760915][T12346]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  581.760929][T12346]  f2fs_write_end_io+0x124b/0x1710
[  581.760949][T12346]  __submit_merged_bio+0x258/0x6a0
[  581.760958][T12346]  ? rcu_is_watching+0x15/0xb0
[  581.760973][T12346]  __submit_merged_write_cond+0x3c9/0x4e0
[  581.760985][T12346]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  581.761002][T12346]  f2fs_write_data_pages+0x2a27/0x36f0
[  581.761012][T12346]  ? __lock_acquire+0x6df/0x2e50
[  581.761037][T12346]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  581.761046][T12346]  ? is_bpf_text_address+0x26/0x2b0
[  581.761063][T12346]  ? arch_stack_walk+0xfb/0x150
[  581.761081][T12346]  ? add_lock_to_list+0xc7/0x100
[  581.761093][T12346]  ? lockdep_unlock+0x5d/0xd0
[  581.761101][T12346]  ? __lock_acquire+0x14b9/0x2e50
[  581.761120][T12346]  ? do_raw_spin_lock+0x12b/0x2f0
[  581.761133][T12346]  ? do_raw_spin_unlock+0x4d/0x210
[  581.761141][T12346]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  581.761152][T12346]  do_writepages+0x338/0x560
[  581.761169][T12346]  ? do_raw_spin_unlock+0x4d/0x210
[  581.761179][T12346]  filemap_fdatawrite+0x1e9/0x2f0
[  581.761193][T12346]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  581.761219][T12346]  ? do_raw_spin_unlock+0x4d/0x210
[  581.761228][T12346]  f2fs_sync_dirty_inodes+0x30e/0x830
[  581.761246][T12346]  f2fs_write_checkpoint+0xa3d/0x2710
[  581.761256][T12346]  ? __lock_acquire+0x6df/0x2e50
[  581.761301][T12346]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  581.761332][T12346]  kill_f2fs_super+0x2f6/0x700
[  581.761345][T12346]  ? __pfx_kill_f2fs_super+0x10/0x10
[  581.761359][T12346]  ? call_rcu+0x64b/0x8b0
[  581.761369][T12346]  ? lockdep_hardirqs_on+0x7a/0x110
[  581.761383][T12346]  deactivate_locked_super+0xbc/0x130
[  581.761404][T12346]  cleanup_mnt+0x3d3/0x460
[  581.761414][T12346]  task_work_run+0x1d9/0x270
[  581.761426][T12346]  ? __pfx_task_work_run+0x10/0x10
[  581.761441][T12346]  exit_to_user_mode_loop+0x1fa/0x730
[  581.761451][T12346]  ? rcu_is_watching+0x15/0xb0
[  581.761462][T12346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.761470][T12346]  do_syscall_64+0x353/0x580
[  581.761478][T12346]  ? trace_irq_disable+0x3b/0x140
[  581.761490][T12346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.761498][T12346] RIP: 0033:0x7f6100f9f317
[  581.761527][T12346] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  581.761534][T12346] RSP: 002b:00007ffd3bde3b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  581.761544][T12346] RAX: 0000000000000000 RBX: 00007f6101034474 RCX: 00007f6100f9f317
[  581.761549][T12346] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3bde3c30
[  581.761553][T12346] RBP: 00007ffd3bde3c30 R08: 00007ffd3bde4c30 R09: 00000000ffffffff
[  581.761558][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3bde4cc0
[  581.761563][T12346] R13: 00007f6101034474 R14: 000000000008e005 R15: 00007ffd3bde4d00
[  581.761575][T12346]  </TASK>
[  581.761580][T12346] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  581.928489][T20502] loop6: detected capacity change from 0 to 4096
[  581.932117][T20502] ntfs3: Invalid value for dmask.
[  582.297261][T20527] overlayfs: missing 'workdir'
[  582.527721][T20535] block nbd3: shutting down sockets
[  582.562213][T20547] openvswitch: netlink: Multiple metadata blocks provided
[  582.887140][T20563] sctp: [Deprecated]: syz.3.5916 (pid 20563) Use of int in maxseg socket option.
[  582.887140][T20563] Use struct sctp_assoc_value instead
[  583.056618][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5919'.
[  583.063627][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5919'.
[  583.095545][T20570] loop3: detected capacity change from 0 to 8
[  583.373353][T20570] SQUASHFS error: Unable to read inode 0xa7
[  583.899061][ T5048] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  584.057791][ T5048] usb 7-1: config 0 has no interfaces?
[  584.059788][ T5048] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  584.062896][ T5048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.069101][ T5048] usb 7-1: config 0 descriptor??
[  584.319186][ T5048] usb 7-1: USB disconnect, device number 12
[  586.124774][ T5048] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  586.280141][ T5048] usb 4-1: Using ep0 maxpacket: 32
[  586.294931][ T5048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.299225][ T5048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.303116][ T5048] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  586.306975][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.311853][ T5048] usb 4-1: config 0 descriptor??
[  586.318173][ T5048] hub 4-1:0.0: USB hub found
[  586.463596][ T5795] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  586.521324][ T5048] hub 4-1:0.0: 9 ports detected
[  586.524525][ T5048] hub 4-1:0.0: insufficient power available to use all downstream ports
[  586.613963][ T5795] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.621355][ T5795] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  586.625657][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.628983][ T5795] usb 7-1: Product: syz
[  586.630720][ T5795] usb 7-1: Manufacturer: syz
[  586.633109][ T5795] usb 7-1: SerialNumber: syz
[  586.724946][ T5048] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  586.727416][ T5048] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  586.736969][ T5048] usbhid 4-1:0.0: can't add hid device: -71
[  586.739028][ T5048] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  586.762067][ T5048] usb 4-1: USB disconnect, device number 32
[  586.852914][ T5795] snd-usb-6fire 7-1:1.0: unknown device firmware state received from device: 
[  586.856071][ T5795] eb aa 55 00 00 00 00 00 
[  586.857659][ T5795] snd-usb-6fire 7-1:1.0: probe with driver snd-usb-6fire failed with error -5
[  587.057404][   T33] usb 7-1: USB disconnect, device number 13
[  587.164622][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5965'.
[  587.168446][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5965'.
[  588.345883][T20715] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  588.745140][T20720] SET target dimension over the limit!
[  588.926867][T20724] jffs2: notice: (20724) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  589.117463][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5986'.
[  589.441310][T20741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5991'.
[  589.466518][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5990'.
[  589.499309][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5990'.
[  589.556277][T20744] loop3: detected capacity change from 0 to 256
[  589.559498][T20744] exfat: Deprecated parameter 'namecase'
[  589.572128][T20744] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  589.983732][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6001'.
[  589.989910][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6001'.
[  590.038908][T20765] Unknown status report in ack skb
[  590.320511][T20779] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16)
[  590.405287][T20783] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6011'.
[  590.782650][T20797] SQUASHFS error: Failed to read block 0x0: -5
[  590.901548][   T33] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  590.925673][T20805] binder: 20803:20805 ioctl c018620c 200000000240 returned -22
[  591.057589][   T33] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  591.062404][   T33] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.069467][   T33] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  591.076961][   T33] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  591.080003][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.083258][   T33] usb 7-1: Product: syz
[  591.085134][   T33] usb 7-1: Manufacturer: syz
[  591.086783][   T33] usb 7-1: SerialNumber: syz
[  591.527122][   T33] usb 7-1: cannot create comm data receiver.
[  591.530612][   T33] snd-usb-6fire 7-1:1.0: probe with driver snd-usb-6fire failed with error -8
[  591.726721][ T5795] usb 7-1: USB disconnect, device number 14
[  592.169824][T20822] loop3: detected capacity change from 0 to 32768
[  592.182174][T20822] (syz.3.6030,20822,1):ocfs2_read_virt_blocks:1015 ERROR: Inode #66 contains a hole at offset 0
[  592.197139][T20822] (syz.3.6030,20822,1):ocfs2_read_dir_block:525 ERROR: status = -5
[  592.210851][T20822] (syz.3.6030,20822,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  592.222818][T20822] (syz.3.6030,20822,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  592.222854][T20822] (syz.3.6030,20822,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  592.242485][T20822] (syz.3.6030,20822,1):ocfs2_initialize_super:2195 ERROR: status = -22
[  592.251139][T20822] (syz.3.6030,20822,1):ocfs2_fill_super:1177 ERROR: status = -22
[  592.453481][T20828] loop6: detected capacity change from 0 to 8192
[  592.977739][T20859] loop3: detected capacity change from 0 to 256
[  592.995658][T20849] loop6: detected capacity change from 0 to 32768
[  593.005250][T20859] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  593.028789][   T35] audit: type=1800 audit(2000524851.685:7597): pid=20859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6048" name="file1" dev="loop3" ino=1048757 res=0 errno=0
[  593.045557][T20859] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  593.751043][T20873] loop6: detected capacity change from 0 to 4096
[  593.797676][T20873] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  593.840113][T20873] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 129: 0xbe != 0x00
[  593.847898][T20873] UDF-fs: error (device loop6): udf_read_inode: (ino 1408) failed !bh
[  593.851625][T20873] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=96, partition=0
[  593.945093][   T35] audit: type=1326 audit(2000524852.595:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6058" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x0
[  594.224821][   T32] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  594.286168][T20896] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.433976][   T32] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  594.449322][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.472788][   T32] usb 7-1: Product: syz
[  594.476735][   T32] usb 7-1: Manufacturer: syz
[  594.481371][   T32] usb 7-1: SerialNumber: syz
[  594.490659][   T32] usb 7-1: config 0 descriptor??
[  594.738626][   T32] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  595.155472][   T32] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  595.215393][   T32] usb 7-1: USB disconnect, device number 15
[  595.552018][T20917] loop3: detected capacity change from 0 to 8192
[  595.556567][T20917] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  595.846613][T20936] loop6: detected capacity change from 0 to 256
[  595.854482][T20936] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  597.168196][T20964] netlink: 'syz.6.6093': attribute type 83 has an invalid length.
[  597.299705][   T35] audit: type=1804 audit(2000524855.955:7599): pid=20974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6098" name="/newroot/208/file1" dev="tmpfs" ino=1094 res=1 errno=0
[  597.578038][T20997] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6109'.
[  597.582232][T20997] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6109'.
[  597.800867][T21004] loop3: detected capacity change from 0 to 4096
[  597.808955][T21004] ntfs3(loop3): Failed to load $MFT (-22).
[  597.989095][T21010] syzkaller0: entered promiscuous mode
[  597.991749][T21010] syzkaller0: entered allmulticast mode
[  598.568630][T21028] ubi31: attaching mtd0
[  598.758843][T21037] loop3: detected capacity change from 0 to 128
[  598.778304][T21037] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  598.798825][T21037] hpfs: filesystem error: improperly stopped
[  598.802850][T21037] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  598.808384][T21037] hpfs: You really don't want any checks? You are crazy...
[  598.812878][T21037] hpfs: Code page index out of array
[  598.817704][T21037] hpfs: code page support is disabled
[  598.821635][T21037] hpfs: hpfs_map_4sectors(): unaligned read
[  598.826410][T21037] hpfs: hpfs_map_4sectors(): unaligned read
[  598.929751][T21037] hpfs: filesystem error: unable to find root dir
[  598.941851][T21037] hpfs: hpfs_map_sector(): read error
[  598.944424][T21037] hpfs: hpfs_map_sector(): read error
[  599.238762][T21074] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  599.501405][T21082] loop6: detected capacity change from 0 to 256
[  599.578373][T21084] fuse: blksize only supported for fuseblk
[  600.178673][T21095] loop3: detected capacity change from 0 to 64
[  600.352901][   T55] Bluetooth: hci1: unexpected event for opcode 0x0405
[  600.616110][T21112] loop3: detected capacity change from 0 to 64
[  600.680799][T21114] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  600.742534][ T6074] kworker/u9:16: attempt to access beyond end of device
[  600.742534][ T6074] loop3: rw=8388609, sector=2590, nr_sectors = 2 limit=64
[  600.748641][ T6074] Buffer I/O error on dev loop3, logical block 1295, lost async page write
[  600.851512][T21118] loop3: detected capacity change from 0 to 4096
[  600.856560][T21118] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  600.879753][T21118] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  602.273840][ T5048] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  602.423492][ T5048] usb 4-1: Using ep0 maxpacket: 32
[  602.429447][ T5048] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  602.432177][ T5048] usb 4-1: config 0 has no interface number 0
[  602.437479][ T5048] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  602.440623][ T5048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.445010][ T5048] usb 4-1: Product: syz
[  602.446463][ T5048] usb 4-1: Manufacturer: syz
[  602.448006][ T5048] usb 4-1: SerialNumber: syz
[  602.452069][ T5048] usb 4-1: config 0 descriptor??
[  603.269534][ T5048] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  603.270461][T21194] loop6: detected capacity change from 0 to 2048
[  603.300379][T21194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.342015][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.677673][T21202] loop6: detected capacity change from 0 to 32768
[  603.746179][T21202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6192 (21202)
[  604.146311][T21219] ip_tables: iptables: counters copy to user failed while replacing table
[  604.405232][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  604.409976][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  604.426482][T17352] Bluetooth: hci1: hardware error 0x00
[  604.428261][ T5048] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  604.434844][ T5048] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  604.452439][ T5048] usb 4-1: USB disconnect, device number 33
[  604.743703][T21202] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  604.750191][T21202] BTRFS info (device loop6): using sha256 checksum algorithm
[  604.848330][T21202] BTRFS info (device loop6): enabling ssd optimizations
[  604.864983][T21202] BTRFS info (device loop6): turning on async discard
[  604.867313][T21202] BTRFS info (device loop6): enabling free space tree
[  604.932639][T18708] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  604.983832][T21253] sctp: [Deprecated]: syz.3.6209 (pid 21253) Use of int in max_burst socket option deprecated.
[  604.983832][T21253] Use struct sctp_assoc_value instead
[  605.391619][T21263] loop3: detected capacity change from 0 to 1024
[  605.508436][T21263] hfsplus: request for non-existent node 16777217 in B*Tree
[  605.518088][T21263] hfsplus: request for non-existent node 16777217 in B*Tree
[  605.564632][T21263] hfsplus: xattr search failed
[  605.755935][T21274] loop6: detected capacity change from 0 to 512
[  605.770649][T21274] ext4: Bad value for 'stripe'
[  605.969672][T21285] loop3: detected capacity change from 0 to 1024
[  605.979371][   T35] audit: type=1800 audit(2000524864.635:7600): pid=21287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6225" name="nullb0" dev="tmpfs" ino=11338 res=0 errno=0
[  606.019785][T21285] hfsplus: bad catalog entry type
[  606.269696][T21303] loop3: detected capacity change from 0 to 1024
[  606.277500][T21303] EXT4-fs: Ignoring removed nobh option
[  606.289306][T21303] EXT4-fs: Ignoring removed bh option
[  606.317788][T21303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002]
[  606.320544][T21303] System zones: 0-1, 3-12
[  606.324614][T21303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.345063][   T35] audit: type=1800 audit(2000524865.005:7601): pid=21303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6233" name="file1" dev="loop3" ino=15 res=0 errno=0
[  606.389985][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.550658][T21307] loop3: detected capacity change from 0 to 512
[  606.569868][T21307] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.6234: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  606.590559][T21307] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  606.590934][T21307] EXT4-fs (loop3): Remounting filesystem read-only
[  606.594742][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  606.594762][    C1] EXT4-fs (loop3): initial error at time 2000524865: ext4_iget_extra_inode:5180: inode 15
[  606.594784][    C1] EXT4-fs (loop3): last error at time 2000524865: ext4_iget_extra_inode:5180: inode 15
[  606.627340][T17352] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  606.647951][T21307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.687190][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.818293][T21319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6238'.
[  607.615435][T21351] IPv6: Can't replace route, no match found
[  607.747062][T21356] loop6: detected capacity change from 0 to 164
[  607.811497][T21356] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  607.872536][T21356] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  608.346427][T21373] loop3: detected capacity change from 0 to 8
[  608.378115][T21373] SQUASHFS error: xz decompression failed, data probably corrupt
[  608.391600][T21373] SQUASHFS error: Failed to read block 0x304: -5
[  608.401503][T21373] SQUASHFS error: Unable to read metadata cache entry [302]
[  608.409032][T21373] SQUASHFS error: Unable to read inode 0x11f
[  608.599670][T21371] loop6: detected capacity change from 0 to 32768
[  608.607948][T21371] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6261 (21371)
[  608.621257][T21371] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  608.634754][T21371] BTRFS info (device loop6): using sha256 checksum algorithm
[  608.696694][T21371] BTRFS info (device loop6): enabling ssd optimizations
[  608.700254][T21371] BTRFS info (device loop6): turning on async discard
[  608.703736][T21371] BTRFS info (device loop6): enabling free space tree
[  608.743008][T18708] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  609.134051][T21404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6270'.
[  609.173336][T21404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.353648][ T5048] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  609.513693][ T5048] usb 4-1: Using ep0 maxpacket: 32
[  609.528312][ T5048] usb 4-1: config index 0 descriptor too short (expected 3659, got 75)
[  609.530993][ T5048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  609.540971][T21416] netlink: 'syz.6.6276': attribute type 13 has an invalid length.
[  609.542506][ T5048] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  609.551315][ T5048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.556767][ T5048] usb 4-1: Product: syz
[  609.558181][ T5048] usb 4-1: Manufacturer: syz
[  609.559921][ T5048] usb 4-1: SerialNumber: syz
[  609.569995][ T5048] usb 4-1: config 0 descriptor??
[  609.584273][ T5048] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  609.656008][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6278'.
[  609.749802][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6282'.
[  609.753929][T21427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6282'.
[  609.783603][ T5048] gspca_sunplus: reg_r err -32
[  610.755756][T21445] netlink: 'syz.2.6288': attribute type 1 has an invalid length.
[  610.766901][ T5048] sunplus 4-1:0.0: probe with driver sunplus failed with error -32
[  610.780172][T21445] 8021q: adding VLAN 0 to HW filter on device bond5
[  610.839396][T21445] bond5 (unregistering): Released all slaves
[  610.875831][ T5840] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  611.023913][ T5840] usb 7-1: Using ep0 maxpacket: 8
[  611.031767][ T5840] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  611.037406][ T5840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  611.041662][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  611.046249][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  611.052342][ T5840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  611.059790][ T5840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  611.064867][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.281331][ T5840] usb 7-1: GET_CAPABILITIES returned 0
[  611.281514][T21459] No such timeout policy "syz1"
[  611.284298][ T5840] usbtmc 7-1:16.0: can't read capabilities
[  611.493888][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.497388][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.500868][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.503796][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.507205][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.510020][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.513006][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.524136][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.527167][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.530082][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.532905][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.535702][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.539138][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.574613][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.577754][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  611.580518][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  611.590588][T21469] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32
[  611.597806][   T32] usb 7-1: USB disconnect, device number 16
[  611.750195][T21478] netlink: 'syz.2.6301': attribute type 2 has an invalid length.
[  612.083663][   T32] usb 4-1: USB disconnect, device number 34
[  612.173997][T21491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6307'.
[  612.256218][T21493] loop6: detected capacity change from 0 to 2048
[  612.300972][T21493] nilfs2: Unknown parameter 'norecoVery'
[  612.574741][   T32] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  612.788089][   T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  612.792314][   T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.798653][   T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.807427][   T32] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  612.824609][   T32] usb 4-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00
[  612.828373][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.831432][   T32] usb 4-1: Product: syz
[  612.833279][   T32] usb 4-1: Manufacturer: syz
[  612.834838][   T32] usb 4-1: SerialNumber: syz
[  612.841745][   T32] mos7840 4-1:1.0: missing endpoints
[  613.068833][   T32] usb 4-1: USB disconnect, device number 35
[  614.536388][T21534] loop6: detected capacity change from 0 to 2048
[  614.579458][T21534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.587479][T21534] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  614.618315][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.665795][T21539] device-mapper: ioctl: Invalid ioctl structure: uuid  link UNICAST
[  614.665795][T21539]   devtmpfs, name , dev 2
[  614.852595][T21549] loop6: detected capacity change from 0 to 1024
[  614.883632][T21549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  614.891886][T21549] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  614.985992][T10381] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u9:19: lblock 0 mapped to illegal pblock 0 (length 6)
[  615.004772][T10381] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  615.009802][T10381] EXT4-fs (loop6): This should not happen!! Data will be lost
[  615.009802][T10381] 
[  615.017705][T10381] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u9:19: lblock 8 mapped to illegal pblock 8 (length 8)
[  615.036767][T10381] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  615.048971][T10381] EXT4-fs (loop6): This should not happen!! Data will be lost
[  615.048971][T10381] 
[  615.065277][T18708] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  615.073982][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  615.387682][T21565] xt_hashlimit: invalid rate
[  615.412959][T21567] loop3: detected capacity change from 0 to 2048
[  615.455222][T21567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.466977][T21567] ext4 filesystem being mounted at /1201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  615.551189][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.739083][T21579] block device autoloading is deprecated and will be removed.
[  616.050208][T21597] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6351'.
[  616.056126][T21597] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6351'.
[  616.256543][T21606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6353'.
[  616.683296][   T33] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  616.871640][   T33] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  616.889260][   T33] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  616.902251][   T33] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  616.922132][   T33] usb 7-1: config 0 interface 0 has no altsetting 0
[  616.946763][   T33] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  616.949675][   T33] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  616.954131][   T33] usb 7-1: Product: syz
[  616.955594][   T33] usb 7-1: Manufacturer: syz
[  616.963451][   T33] usb 7-1: SerialNumber: syz
[  616.976107][   T33] usb 7-1: config 0 descriptor??
[  616.989621][   T33] usb 7-1: selecting invalid altsetting 0
[  617.010546][T21620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6359'.
[  617.155507][ T5809] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  617.198047][   T33] usb 7-1: USB disconnect, device number 17
[  617.308321][ T5809] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  617.312556][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 64
[  617.335168][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  617.369869][ T5809] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  617.389635][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.428345][ T5809] usb 4-1: config 0 descriptor??
[  617.441499][T21618] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  617.568648][T21633] xt_HMARK: spi-set and port-set can't be combined
[  617.662419][T21618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.688391][T21618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.910829][ T5809] hid-rmi 0003:06CB:81A7.0019: ignoring exceeding usage max
[  617.919043][ T5809] hid-rmi 0003:06CB:81A7.0019: hidraw0: USB HID v0.05 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0
[  618.140176][ T5809] usb 4-1: USB disconnect, device number 36
[  618.559269][T21666] netlink: 'syz.6.6380': attribute type 7 has an invalid length.
[  618.561808][T21666] netlink: 'syz.6.6380': attribute type 8 has an invalid length.
[  618.741441][T21674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6384'.
[  618.853960][T21682] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6387'.
[  620.863572][T21710] : renamed from vlan0 (while UP)
[  621.352306][T21721] loop6: detected capacity change from 0 to 128
[  622.069097][T21735] loop3: detected capacity change from 0 to 4096
[  622.975326][T21755] loop3: detected capacity change from 0 to 40427
[  622.979129][T21755] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  622.981620][T21755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  622.986077][T21755] F2FS-fs (loop3): invalid crc value
[  623.029951][T21755] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  623.043598][T21755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  623.045823][T21755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  623.576346][T21788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6429'.
[  624.039299][T21808] bridge1: entered promiscuous mode
[  624.042131][T21808] bridge1: entered allmulticast mode
[  624.061249][T21808] team0: Port device bridge1 added
[  624.068826][T21808] bridge0: port 3(team0) entered blocking state
[  624.077128][T21808] bridge0: port 3(team0) entered disabled state
[  624.079379][T21808] team0: entered allmulticast mode
[  624.081901][T21808] team_slave_0: entered allmulticast mode
[  624.084398][T21808] team_slave_1: entered allmulticast mode
[  624.110304][T21808] team0: entered promiscuous mode
[  624.112182][T21808] team_slave_0: entered promiscuous mode
[  624.114453][T21808] team_slave_1: entered promiscuous mode
[  624.117236][T21808] bridge0: port 3(team0) entered blocking state
[  624.125218][T21808] bridge0: port 3(team0) entered forwarding state
[  624.305559][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  624.308617][ T1375] aoe: packet could not be sent on usb0.  consider increasing tx_queue_len
[  624.574481][T21838] loop3: detected capacity change from 0 to 128
[  624.598054][   T35] audit: type=1800 audit(2000524883.255:7602): pid=21838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6450" name="file1" dev="loop3" ino=1048766 res=0 errno=0
[  624.620494][T21838] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  624.643531][T21838] FAT-fs (loop3): Filesystem has been set read-only
[  625.033843][ T5048] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  625.158799][T21872] netlink: 'syz.2.6459': attribute type 8 has an invalid length.
[  625.204104][ T5048] usb 4-1: Using ep0 maxpacket: 32
[  625.218872][T21847] loop3: detected capacity change from 0 to 128
[  625.319656][T21869] loop6: detected capacity change from 0 to 32768
[  625.326316][ T5048] usb 4-1: unable to get BOS descriptor or descriptor too short
[  625.327186][T21869] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6458 (21869)
[  625.329877][ T5048] usb 4-1: unable to read config index 0 descriptor/start: -71
[  625.344532][ T5048] usb 4-1: can't read configurations, error -71
[  625.361769][T21869] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  625.378707][T21869] BTRFS info (device loop6): using crc32c checksum algorithm
[  625.436814][T21869] BTRFS info (device loop6): enabling ssd optimizations
[  625.443927][T21869] BTRFS info (device loop6): turning on async discard
[  625.451023][T21869] BTRFS info (device loop6): enabling free space tree
[  625.494136][T18708] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  626.024967][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6463'.
[  626.269791][T21910] loop6: detected capacity change from 0 to 256
[  626.281764][T21910] vfat: Unknown parameter 'umafk'
[  626.338104][T21910] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6461'.
[  626.398532][T21913] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  626.436329][T14325] Bluetooth: hci3: Frame reassembly failed (-84)
[  626.644464][T21923] loop6: detected capacity change from 0 to 1024
[  626.648918][T21923] EXT4-fs: Ignoring removed oldalloc option
[  626.664228][T21923] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  626.679725][T21923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.717277][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.749025][T21930] fuse: fd is not a fuse device
[  627.123797][T21940] loop6: detected capacity change from 0 to 32768
[  627.139203][T21940] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  627.169128][T21940] XFS (loop6): Ending clean mount
[  627.286212][T18708] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  628.463651][T17352] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  628.463732][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  629.135574][T22004] bond1 (unregistering): Released all slaves
[  629.927649][T22032] PKCS7: Unknown OID: [4] (bad)
[  629.929752][T22032] PKCS7: Only support pkcs7_signedData type
[  630.097754][T22040] loop3: detected capacity change from 0 to 136
[  630.111685][T22040] Attempt to read inode for relocated directory
[  631.147106][T22075] netlink: 91 bytes leftover after parsing attributes in process `syz.2.6533'.
[  631.584363][T22025] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  631.651525][T22095] loop3: detected capacity change from 0 to 512
[  631.663998][T22095] EXT4-fs (loop3): Test dummy encryption mode enabled
[  631.672379][T22095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  631.683551][T22095] EXT4-fs (loop3): 1 truncate cleaned up
[  631.687394][T22095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  632.777391][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.205211][T22123] : renamed from vlan0 (while UP)
[  633.276067][T22125] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  633.823439][   T32] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  634.000812][   T32] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  634.005726][   T32] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  634.010599][   T32] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  634.021082][   T32] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  634.025185][   T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  634.028558][   T32] usb 7-1: SerialNumber: syz
[  634.188336][T22152] netlink: 'syz.2.6567': attribute type 1 has an invalid length.
[  634.191626][T22152] netlink: 'syz.2.6567': attribute type 1 has an invalid length.
[  634.259482][   T32] rndis_host 7-1:253.0: RNDIS init failed, -71
[  634.267825][   T32] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71
[  634.287343][   T32] usb 7-1: USB disconnect, device number 18
[  635.060945][T22189] netlink: 'syz.6.6585': attribute type 1 has an invalid length.
[  635.628357][T22216] loop6: detected capacity change from 0 to 128
[  635.656083][   T35] audit: type=1800 audit(2000524894.315:7603): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6596" name="file2" dev="loop6" ino=1048773 res=0 errno=0
[  635.665600][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.728986][T22216] FAT-fs (loop6): Filesystem has been set read-only
[  635.749314][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.760778][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.783785][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.806412][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.832053][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.862364][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.904409][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.909205][T22216] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  635.957984][T22214] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  636.223391][ T5048] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  636.376379][ T5048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  636.380639][ T5048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  636.385344][ T5048] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  636.390104][ T5048] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  636.397890][ T5048] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  636.404353][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.842533][ T5048] usb 4-1: USB disconnect, device number 39
[  637.035649][T22258] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6615'.
[  637.526775][ T5048] kernel write not supported for file /stat (pid: 5048 comm: kworker/0:3)
[  637.588236][T22274] 9p: Bad value for 'port'
[  638.775240][   T33] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  638.948268][   T33] usb 4-1: unable to get BOS descriptor or descriptor too short
[  638.954453][   T33] usb 4-1: unable to read config index 0 descriptor/start: -71
[  638.958270][   T33] usb 4-1: can't read configurations, error -71
[  640.141135][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6645'.
[  640.864647][T22360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6660'.
[  640.882724][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6659'.
[  641.186953][T22357] loop3: detected capacity change from 0 to 32768
[  641.191255][T22357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6658 (22357)
[  641.227148][T22357] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  641.239094][T22357] BTRFS info (device loop3): using crc32c checksum algorithm
[  641.304764][   T33] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  641.305725][T22385] openvswitch: netlink: Missing valid actions attribute.
[  641.316471][T22385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.352753][T22357] BTRFS info (device loop3): setting nodatasum
[  641.370982][T22357] BTRFS info (device loop3): enabling ssd optimizations
[  641.378808][T22357] BTRFS info (device loop3): enabling free space tree
[  641.390437][T22357] BTRFS info (device loop3): enabling auto defrag
[  641.399506][T22357] BTRFS info (device loop3): max_inline set to 0
[  641.484661][   T33] usb 7-1: Using ep0 maxpacket: 32
[  641.496269][   T33] usb 7-1: config 0 has an invalid interface number: 107 but max is 0
[  641.499039][   T33] usb 7-1: config 0 has no interface number 0
[  641.501104][   T33] usb 7-1: too many endpoints for config 0 interface 107 altsetting 3: 175, using maximum allowed: 30
[  641.505063][   T33] usb 7-1: config 0 interface 107 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 175
[  641.510278][   T33] usb 7-1: config 0 interface 107 has no altsetting 0
[  641.515147][   T33] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  641.518277][   T33] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.522347][   T33] usb 7-1: config 0 descriptor??
[  641.718226][T12346] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  641.893916][   T33] usb 7-1: string descriptor 0 read error: -32
[  641.902118][   T33] gspca_main: sunplus-2.14.0 probing 041e:400b
[  642.017601][T22399] loop3: detected capacity change from 0 to 512
[  642.178675][   T33] gspca_sunplus: reg_w_riv err -71
[  642.220529][   T33] sunplus 7-1:0.107: probe with driver sunplus failed with error -71
[  642.231044][   T33] usb 7-1: USB disconnect, device number 19
[  642.506390][T22404] x_tables: unsorted entry at hook 3
[  642.705388][T22412] netlink: 'syz.3.6678': attribute type 5 has an invalid length.
[  642.913525][T22420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6682'.
[  643.052940][T22422] loop3: detected capacity change from 0 to 32768
[  643.071703][   T35] audit: type=1800 audit(2000524901.725:7604): pid=22422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6683" name="file1" dev="loop3" ino=4 res=0 errno=0
[  643.135385][T22429] scsi_nl_rcv_msg: discarding partial skb
[  643.550562][T22422] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  643.550562][T22422] 
[  643.555678][T22422] ERROR: (device loop3): remounting filesystem as read-only
[  643.741648][T22440] loop6: detected capacity change from 0 to 512
[  643.767707][T22440] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.6691: bg 0: block 4: invalid block bitmap
[  643.778114][T22440] loop6: lost filesystem error report for type 5 error -117
[  643.787938][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  643.793760][    C0] EXT4-fs (loop6): initial error at time 2000524902: ext4_validate_block_bitmap:432
[  643.797537][    C0] EXT4-fs (loop6): last error at time 2000524902: ext4_validate_block_bitmap:432
[  643.804161][T22440] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  643.807532][T22440] loop6: lost filesystem error report for type 5 error -117
[  643.808131][T22440] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6691: invalid indirect mapped block 1 (level 1)
[  643.817209][T22440] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  643.819521][T22440] EXT4-fs (loop6): 1 truncate cleaned up
[  643.828125][T22440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.866553][   T35] audit: type=1800 audit(2000524902.525:7605): pid=22440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6691" name="bus" dev="loop6" ino=18 res=0 errno=0
[  643.879288][T22440] Invalid ELF header magic: != ELF
[  643.919156][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.803422][T22486] overlayfs: failed to clone upperpath
[  646.539189][T22503] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0
[  647.157397][T22522] trusted_key: encrypted_key: master key parameter is missing
[  647.866414][T22538] loop3: detected capacity change from 0 to 32768
[  648.049662][T22538] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  648.071616][T22538] XFS (loop3): Ending clean mount
[  648.262208][T12346] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  649.757168][T22585] cifs: Bad value for 'source'
[  650.018950][T22267] syz.6.6619 (22267) used greatest stack depth: 14688 bytes left
[  650.690923][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'.
[  650.863276][   T33] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  651.015044][   T33] usb 7-1: Using ep0 maxpacket: 32
[  651.029297][   T33] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  651.038881][   T33] usb 7-1: config 0 has no interface number 0
[  651.045231][   T33] usb 7-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  651.061872][   T33] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  651.082827][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.087034][   T33] usb 7-1: Product: syz
[  651.088941][   T33] usb 7-1: Manufacturer: syz
[  651.090949][   T33] usb 7-1: SerialNumber: syz
[  651.101359][   T33] usb 7-1: config 0 descriptor??
[  651.121078][   T33] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  651.125749][   T33] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22
[  651.346453][  T803] usb 7-1: USB disconnect, device number 20
[  651.450674][T22658] 9p: Bad value for 'rfdno'
[  651.525278][T22660] netlink: 'syz.3.6781': attribute type 10 has an invalid length.
[  651.528989][T22660] batman_adv: batadv0: Interface deactivated: dummy0
[  651.570655][T22660] batman_adv: batadv0: Removing interface: dummy0
[  651.591693][T22660] dummy0: entered promiscuous mode
[  651.594052][T22660] dummy0: entered allmulticast mode
[  651.609645][T22660] team0: Port device dummy0 added
[  651.697648][T22670] /dev/nullb0: Can't lookup blockdev
[  651.699869][T22671] Option '?o냟W(d̛p^ï8	XKt..+jXpszgH{&}()eH/k;RE<' to dns_resolver key: bad/missing value
[  651.795796][T22673] loop3: detected capacity change from 0 to 4096
[  651.820958][T22673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.984343][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  651.992994][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.467367][T22695] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  652.529640][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6797'.
[  652.591525][T22703] tmpfs: Bad value for 'size'
[  653.048391][   T32] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  653.203251][   T32] usb 4-1: Using ep0 maxpacket: 8
[  653.207934][   T32] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  653.211281][   T32] usb 4-1: config 179 has no interface number 0
[  653.214966][   T32] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  653.220486][   T32] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  653.225367][   T32] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  653.229648][   T32] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  653.234413][   T32] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  653.239539][   T32] usb 4-1: config 179 interface 65 has no altsetting 0
[  653.242211][   T32] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  653.246075][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.310057][   T32] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input36
[  653.380294][ T5070] input input36: unable to receive magic message: -110
[  653.395215][ T5070] input input36: unable to receive magic message: -32
[  653.430071][ T5645] input input36: unable to receive magic message: -32
[  653.435922][ T5070] input input36: unable to receive magic message: -32
[  653.440501][ T5070] input input36: unable to receive magic message: -32
[  653.449565][ T5070] input input36: unable to receive magic message: -32
[  653.459503][ T5070] input input36: unable to receive magic message: -32
[  653.674533][ T5048] usb 4-1: USB disconnect, device number 42
[  653.674602][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  654.556914][T22732] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  655.995913][T22765] loop3: detected capacity change from 0 to 40427
[  655.999424][T22765] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  656.002210][T22765] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  656.006831][T22765] F2FS-fs (loop3): invalid crc value
[  656.055204][T22765] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  656.071275][T22765] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  656.074680][T22765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  656.923387][T22809] loop3: detected capacity change from 0 to 1024
[  657.025748][T22813] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  657.039324][T22809] hfsplus: keylen 65060 too large
[  657.041607][T22809] hfsplus: xattr search failed
[  657.384755][ T5809] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  657.534004][ T5809] usb 7-1: Using ep0 maxpacket: 16
[  657.545467][ T5809] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  657.548494][ T5809] usb 7-1: config 0 has no interface number 0
[  657.556984][ T5809] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  657.560590][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.563822][T22832] loop3: detected capacity change from 0 to 32768
[  657.566207][ T5809] usb 7-1: Product: syz
[  657.567992][ T5809] usb 7-1: Manufacturer: syz
[  657.574389][ T5809] usb 7-1: SerialNumber: syz
[  657.577696][T22832] JBD2: Ignoring recovery information on journal
[  657.584558][ T5809] usb 7-1: config 0 descriptor??
[  657.598193][ T5809] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  657.602506][T22832] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  657.697654][T12346] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  657.702798][T12346] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  657.711378][T12346] OCFS2: File system is now read-only.
[  657.715111][T12346] (syz-executor,12346,0):_ocfs2_free_suballoc_bits:2913 ERROR: status = -30
[  657.718674][T12346] (syz-executor,12346,0):_ocfs2_free_clusters:3024 ERROR: status = -30
[  657.721823][T12346] (syz-executor,12346,0):ocfs2_sync_local_to_main:994 ERROR: status = -30
[  657.728155][T12346] (syz-executor,12346,0):ocfs2_sync_local_to_main:1007 ERROR: status = -30
[  657.730897][T12346] (syz-executor,12346,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -30
[  657.765454][T12346] ocfs2: Unmounting device (7,3) on (node local)
[  658.399945][ T5809] gspca_spca1528: reg_w err -71
[  658.425932][ T5809] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  658.436608][ T5809] usb 7-1: USB disconnect, device number 21
[  658.498993][T22871] netlink: 'syz.3.6872': attribute type 61 has an invalid length.
[  658.501801][T22871] netlink: 'syz.3.6872': attribute type 62 has an invalid length.
[  659.082532][T22877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6874'.
[  659.151225][T22879] netlink: 'syz.3.6875': attribute type 21 has an invalid length.
[  659.158191][T22879] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6875'.
[  659.162191][T22879] netlink: 'syz.3.6875': attribute type 21 has an invalid length.
[  659.167879][T22879] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6875'.
[  659.454235][ T5795] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  659.535785][T22889] loop6: detected capacity change from 0 to 32768
[  659.539345][T22889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6879 (22889)
[  659.548822][T22889] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  659.556222][T22889] BTRFS info (device loop6): using crc32c checksum algorithm
[  659.720526][ T5795] usb 4-1: Using ep0 maxpacket: 16
[  659.728372][ T5795] usb 4-1: too many configurations: 112, using maximum allowed: 8
[  659.744134][T22889] BTRFS info (device loop6): enabling ssd optimizations
[  659.746235][ T5795] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  659.749719][T22889] BTRFS info (device loop6): turning on flush-on-commit
[  659.753673][ T5795] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  659.754969][T22889] BTRFS info (device loop6): enabling free space tree
[  659.760209][ T5795] usb 4-1: Product: syz
[  659.761779][ T5795] usb 4-1: Manufacturer: syz
[  659.763125][T22889] BTRFS info (device loop6): enabling auto defrag
[  659.767566][T22889] BTRFS info (device loop6): use lzo compression, level 1
[  659.773563][T22889] BTRFS info (device loop6): max_inline set to 4096
[  659.780651][ T5795] r8152-cfgselector 4-1: Unknown version 0x0000
[  659.786172][ T5795] r8152-cfgselector 4-1: config 0 descriptor??
[  659.795066][ T5795] cdc_acm 4-1:0.0: Zero length descriptor references
[  659.805287][ T5795] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22
[  659.826475][T18708] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  660.007044][ T5795] r8152-cfgselector 4-1: USB disconnect, device number 43
[  660.162496][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  660.270319][T22920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6887'.
[  660.352331][T22926] GUP no longer grows the stack in syz.2.6890 (22926): 200000005000-200000008000 (200000004000)
[  660.359382][T22926] CPU: 1 UID: 0 PID: 22926 Comm: syz.2.6890 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  660.359405][T22926] Tainted: [L]=SOFTLOCKUP
[  660.359408][T22926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  660.359415][T22926] Call Trace:
[  660.359421][T22926]  <TASK>
[  660.359425][T22926]  dump_stack_lvl+0xe8/0x150
[  660.359449][T22926]  fixup_user_fault+0x637/0x6f0
[  660.359469][T22926]  fault_in_user_writeable+0x71/0xd0
[  660.359486][T22926]  futex_lock_pi+0x7ba/0xab0
[  660.359497][T22926]  ? futex_unqueue+0x211/0x240
[  660.359514][T22926]  ? __pfx_futex_lock_pi+0x10/0x10
[  660.359538][T22926]  ? __pfx_futex_wake_mark+0x10/0x10
[  660.359556][T22926]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  660.359566][T22926]  ? mas_walk+0x37e/0x490
[  660.359585][T22926]  do_futex+0x330/0x4e0
[  660.359601][T22926]  ? __pfx_do_futex+0x10/0x10
[  660.359614][T22926]  ? __vm_munmap+0x2fe/0x3e0
[  660.359625][T22926]  __se_sys_futex+0x3a8/0x450
[  660.359639][T22926]  ? __pfx___se_sys_futex+0x10/0x10
[  660.359650][T22926]  ? rcu_is_watching+0x15/0xb0
[  660.359665][T22926]  ? __x64_sys_futex+0x21/0xf0
[  660.359676][T22926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.359713][T22926]  do_syscall_64+0x174/0x580
[  660.359724][T22926]  ? trace_irq_disable+0x3b/0x140
[  660.359739][T22926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.359748][T22926] RIP: 0033:0x7f440f19e0d9
[  660.359759][T22926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.359768][T22926] RSP: 002b:00007f44100ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  660.359779][T22926] RAX: ffffffffffffffda RBX: 00007f440f425fa0 RCX: 00007f440f19e0d9
[  660.359787][T22926] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000
[  660.359793][T22926] RBP: 00007f440f235024 R08: 0000000000000000 R09: 0000000000000000
[  660.359799][T22926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.359806][T22926] R13: 00007f440f426038 R14: 00007f440f425fa0 R15: 00007ffefdbcaf08
[  660.359821][T22926]  </TASK>
[  660.490927][T22928] CIFS: VFS: UNC: path must begin with // or \\
[  660.495404][T22928] Malformed UNC in devname
[  660.495404][T22928] 
[  660.498545][T22928] CIFS: VFS: Malformed UNC in devname
[  660.631669][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6896'.
[  660.634049][T22934] loop6: detected capacity change from 0 to 4096
[  660.653431][T22939] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  660.715134][T22938] team1: entered promiscuous mode
[  660.716860][T22938] team1: entered allmulticast mode
[  661.048401][T22959] input: syz1 as /devices/virtual/input/input37
[  661.737652][T22988] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  663.112636][T23041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6942'.
[  663.115932][T23041] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6942'.
[  663.119576][T23041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6942'.
[  663.396964][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b1347800: rx timeout, send abort
[  663.400999][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881b1347800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  663.476381][T23047] loop3: detected capacity change from 0 to 32768
[  663.496747][T23047] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  663.625550][T23055] fuse: fd is not a fuse device
[  663.654199][T23047] (syz.3.6945,23047,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  663.725175][T23047] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256
[  663.740311][T23047] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  663.746770][T23047] OCFS2: File system is now read-only.
[  663.756339][T23047] (syz.3.6945,23047,1):ocfs2_test_suballoc_bit:3237 ERROR: read group 64 failed -30
[  663.760221][T23047] (syz.3.6945,23047,1):ocfs2_test_suballoc_bit:3248 ERROR: status = -30
[  663.765151][T23047] (syz.3.6945,23047,1):ocfs2_test_inode_bit:3313 ERROR: test suballoc bit failed -30
[  663.787783][T23047] (syz.3.6945,23047,1):ocfs2_test_inode_bit:3323 ERROR: status = -30
[  663.800726][T23047] (syz.3.6945,23047,1):ocfs2_get_parent:167 ERROR: test inode bit failed -30
[  663.926193][T12346] ocfs2: Unmounting device (7,3) on (node local)
[  663.938441][T23063] ceph: No mds server is up or the cluster is laggy
[  664.201927][   T35] audit: type=1326 audit(2000524922.855:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23068 comm="syz.2.6954" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x0
[  664.759272][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6967'.
[  666.452039][T23151] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  666.626239][T23161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6993'.
[  666.679754][T23161] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  666.685147][T23161] bond6 (unregistering): Released all slaves
[  666.747296][T23166] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  666.870996][T23168] loop6: detected capacity change from 0 to 4096
[  666.909063][T23168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  667.180465][T18708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.185040][T23180] overlayfs: missing 'lowerdir'
[  667.340983][T23183] tmpfs: Bad value for 'mpol'
[  667.679912][T23195] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7006'.
[  667.779055][T23197] program syz.6.7007 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  667.897512][   T35] audit: type=1326 audit(2000524926.555:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  667.916231][   T35] audit: type=1326 audit(2000524926.555:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  667.959069][   T35] audit: type=1326 audit(2000524926.555:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  667.997009][T23209] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7013'.
[  667.997892][T23191] loop3: detected capacity change from 0 to 40427
[  667.999998][T23209] netlink: 'syz.2.7013': attribute type 1 has an invalid length.
[  668.003482][   T35] audit: type=1326 audit(2000524926.555:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  668.018405][T23191] f2fs: Unknown parameter 'whint_mode'
[  668.029521][   T35] audit: type=1326 audit(2000524926.555:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  668.049298][   T35] audit: type=1326 audit(2000524926.555:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  668.059020][ T5795] logitech-hidpp-device 0005:046D:B012.001A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  668.078776][   T35] audit: type=1326 audit(2000524926.555:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  668.114515][   T35] audit: type=1326 audit(2000524926.555:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  668.124481][   T35] audit: type=1326 audit(2000524926.555:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23200 comm="syz.2.7009" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f440f19e0d9 code=0x7ffc0000
[  668.591225][T23225] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  669.927903][T23244] loop3: detected capacity change from 0 to 1024
[  669.943973][T23244] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  669.952270][T23244] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869)
[  669.963170][T23244] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  669.972852][T23244] EXT4-fs (loop3): filesystem has both journal inode and journal device!
[  670.268544][T23249] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.7031'.
[  673.518811][T23277] netlink: 'syz.3.7044': attribute type 11 has an invalid length.
[  673.838705][T23271] loop6: detected capacity change from 0 to 131072
[  673.843018][T23271] xfs: Deprecated parameter 'ikeep'
[  673.845964][T23271] XFS: ikeep mount option is deprecated.
[  673.911381][T23271] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  674.215105][T23271] XFS (loop6): Starting recovery (logdev: internal)
[  674.343743][T23271] XFS (loop6): Ending recovery (logdev: internal)
[  675.682847][T18708] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  676.005685][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7057'.
[  676.152366][T23323] bond6: entered allmulticast mode
[  676.156109][T23323] 8021q: adding VLAN 0 to HW filter on device bond6
[  677.172235][T23330] fuse: fd is not a fuse device
[  678.261081][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7065'.
[  678.280662][T23345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7065'.
[  679.150421][T23369] loop3: detected capacity change from 0 to 512
[  679.267146][T10380] __quota_error: 4 callbacks suppressed
[  679.267160][T10380] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  679.283465][T23369] EXT4-fs (loop3): 1 orphan inode deleted
[  679.288532][T23369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  679.292964][T10380] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u9:18: Failed to release dquot type 1
[  679.311679][T23369] ext4 filesystem being mounted at /1400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  679.450376][  T803] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  679.622847][  T803] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  679.628243][  T803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.864390][  T803] cdc_acm 7-1:1.0: ttyACM1: USB ACM device
[  679.895324][T12346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.159324][T23389] loop3: detected capacity change from 0 to 4096
[  680.185349][T23389] NILFS (loop3): invalid segment: Checksum error in segment payload
[  680.188960][T23389] NILFS (loop3): trying rollback from an earlier position
[  680.305520][T23389] NILFS (loop3): recovery complete
[  680.315779][T23396] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  681.021898][T23421] nvme_fabrics: no handler found for transport fc-raddrR+0x333:pn-0x0444444444444444+host_traddr?nn-0x11111111111111117x:pn-0x22r222.
[  681.139176][T23429] loop3: detected capacity change from 0 to 64
[  681.657853][T23449] input: syz1 as /devices/virtual/input/input38
[  681.875781][T23457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7114'.
[  682.191603][  T803] usb 7-1: USB disconnect, device number 22
[  683.643363][T23512] loop6: detected capacity change from 0 to 40427
[  683.647218][ T5048] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  683.664875][T23512] F2FS-fs (loop6): invalid crc value
[  683.791923][T23512] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  683.809791][T23512] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  683.812734][T23512] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  683.816802][T23512] F2FS-fs (loop6): Start checkpoint disabled!
[  683.849557][T23512] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  683.853448][T23512] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  683.863098][   T35] audit: type=1800 audit(2000524942.515:7620): pid=23512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7124" name="file1" dev="loop6" ino=10 res=0 errno=0
[  683.905295][T10381] kworker/u9:19: attempt to access beyond end of device
[  683.905295][T10381] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  683.917264][T10381] CPU: 0 UID: 0 PID: 10381 Comm: kworker/u9:19 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  683.917284][T10381] Tainted: [L]=SOFTLOCKUP
[  683.917287][T10381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  683.917292][T10381] Workqueue: writeback wb_workfn (flush-7:6)
[  683.917312][T10381] Call Trace:
[  683.917316][T10381]  <TASK>
[  683.917321][T10381]  dump_stack_lvl+0xe8/0x150
[  683.917336][T10381]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  683.917349][T10381]  f2fs_write_end_io+0x124b/0x1710
[  683.917370][T10381]  __submit_merged_bio+0x258/0x6a0
[  683.917378][T10381]  ? rcu_is_watching+0x15/0xb0
[  683.917393][T10381]  __submit_merged_write_cond+0x3c9/0x4e0
[  683.917405][T10381]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  683.917422][T10381]  f2fs_write_data_pages+0x2a27/0x36f0
[  683.917445][T10381]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  683.917459][T10381]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  683.917482][T10381]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  683.917498][T10381]  ? __lock_acquire+0x6df/0x2e50
[  683.917537][T10381]  ? set_shrinker_bit+0x7c/0x350
[  683.917553][T10381]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  683.917563][T10381]  do_writepages+0x338/0x560
[  683.917577][T10381]  ? reacquire_held_locks+0x117/0x1a0
[  683.917588][T10381]  ? writeback_sb_inodes+0x450/0x1b00
[  683.917601][T10381]  __writeback_single_inode+0x12e/0xf90
[  683.917615][T10381]  writeback_sb_inodes+0x9de/0x1b00
[  683.917625][T10381]  ? __lock_acquire+0x6df/0x2e50
[  683.917639][T10381]  ? lock_acquire+0x115/0x350
[  683.917656][T10381]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  683.917681][T10381]  ? rcu_is_watching+0x15/0xb0
[  683.917692][T10381]  ? queue_io+0x2d3/0x470
[  683.917704][T10381]  wb_writeback+0x41c/0xad0
[  683.917715][T10381]  ? queue_io+0x2d1/0x470
[  683.917727][T10381]  ? __pfx_wb_writeback+0x10/0x10
[  683.917735][T10381]  ? do_raw_spin_lock+0x12b/0x2f0
[  683.917750][T10381]  wb_workfn+0x431/0x10f0
[  683.917765][T10381]  ? __pfx_wb_workfn+0x10/0x10
[  683.917774][T10381]  ? trace_hrtimer_start+0x82/0x200
[  683.917787][T10381]  ? do_raw_spin_lock+0x12b/0x2f0
[  683.917796][T10381]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  683.917805][T10381]  ? lock_acquire+0x115/0x350
[  683.917817][T10381]  ? rcu_is_watching+0x15/0xb0
[  683.917832][T10381]  ? process_scheduled_works+0xa20/0x14e0
[  683.917841][T10381]  process_scheduled_works+0xa8e/0x14e0
[  683.917859][T10381]  ? __pfx_process_scheduled_works+0x10/0x10
[  683.917870][T10381]  ? assign_work+0x3cf/0x5d0
[  683.917879][T10381]  worker_thread+0xa47/0xfb0
[  683.917898][T10381]  kthread+0x388/0x470
[  683.917909][T10381]  ? __pfx_worker_thread+0x10/0x10
[  683.917916][T10381]  ? __pfx_kthread+0x10/0x10
[  683.917926][T10381]  ret_from_fork+0x514/0xb70
[  683.917939][T10381]  ? __pfx_ret_from_fork+0x10/0x10
[  683.917949][T10381]  ? __switch_to+0xc89/0x1420
[  683.917961][T10381]  ? __pfx_kthread+0x10/0x10
[  683.917971][T10381]  ret_from_fork_asm+0x1a/0x30
[  683.917988][T10381]  </TASK>
[  683.918052][T10381] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  684.191240][ T5048] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  684.196923][ T5048] usb 4-1: config 0 interface 0 has no altsetting 0
[  684.200456][ T5048] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  684.205103][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.216682][ T5048] usb 4-1: config 0 descriptor??
[  684.880972][ T5048] kovaplus 0003:1E7D:2D50.001B: collection stack underflow
[  684.896428][ T5048] kovaplus 0003:1E7D:2D50.001B: item 0 0 0 12 parsing failed
[  684.908182][ T5048] kovaplus 0003:1E7D:2D50.001B: parse failed
[  684.924657][ T5048] kovaplus 0003:1E7D:2D50.001B: probe with driver kovaplus failed with error -22
[  685.040437][T23527] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7129'.
[  685.105146][ T5048] usb 4-1: USB disconnect, device number 44
[  685.755145][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  685.758210][ T1375] aoe: packet could not be sent on usb0.  consider increasing tx_queue_len
[  685.761597][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  686.208066][T23549] ip_tables: iptables: counters copy to user failed while replacing table
[  686.594672][T23556] loop6: detected capacity change from 0 to 128
[  686.645416][T23556] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  686.676313][T23556] ext4 filesystem being mounted at /472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  686.814587][T18708] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  687.861055][T23584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7152'.
[  687.867117][T23584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7152'.
[  687.964702][T23586] loop3: detected capacity change from 0 to 16
[  687.970656][T23586] erofs (device loop3): mounted with root inode @ nid 36.
[  687.982041][T23586] CacheFiles: Failed to register: -95
[  688.310941][T23596] 9p: Bad value for 'rfdno'
[  688.416042][   T32] libceph: connect (1)[c::]:6789 error -101
[  688.431154][   T32] libceph: mon0 (1)[c::]:6789 connect error
[  688.582362][T23598] ceph: No mds server is up or the cluster is laggy
[  688.590273][   T32] libceph: connect (1)[c::]:6789 error -101
[  688.611802][T23608] ------------[ cut here ]------------
[  688.615268][T23608] skb_assert_len
[  688.616917][T23608] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x1fb8/0x3820, CPU#0: syz.2.7160/23608
[  688.621420][T23608] Modules linked in:
[  688.625986][T23608] CPU: 0 UID: 0 PID: 23608 Comm: syz.2.7160 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  688.630578][T23608] Tainted: [L]=SOFTLOCKUP
[  688.632459][T23608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  688.636740][T23608] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820
[  688.638948][T23608] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 58 3c 24 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d e8 87 c4 06 48 c7 c6 d4 46 44 8e <67> 48 0f b9 3a 80 3d 22 98 9e 06 01 0f 85 86 03 00 00 e8 2a 3c 24
[  688.647198][T23608] RSP: 0018:ffffc900073e7520 EFLAGS: 00010246
[  688.649742][T23608] RAX: ffffffff89a29121 RBX: ffff888112d323d0 RCX: 0000000000000002
[  688.652962][T23608] RDX: ffff88816b9e8000 RSI: ffffffff8e4446d4 RDI: ffffffff906736e0
[  688.656808][T23608] RBP: ffffc900073e77d0 R08: ffff8880251b88a7 R09: 1ffff11004a37114
[  688.660212][T23608] R10: dffffc0000000000 R11: ffffed1004a37115 R12: dffffc0000000000
[  688.663851][T23608] R13: 1ffff92000e7cec4 R14: 0000000000000000 R15: ffff888112d323d0
[  688.667180][T23608] FS:  00007f44100ce6c0(0000) GS:ffff88818d949000(0000) knlGS:0000000000000000
[  688.670920][T23608] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  688.674275][T23608] CR2: 00007fa7bce896f0 CR3: 00000001be270000 CR4: 00000000000006f0
[  688.677796][T23608] Call Trace:
[  688.679315][T23608]  <TASK>
[  688.680769][T23608]  ? __alloc_skb+0x4cc/0x7a0
[  688.682813][T23608]  ? alloc_skb_with_frags+0x6b3/0x760
[  688.685343][T23608]  ? __lock_acquire+0x6df/0x2e50
[  688.687548][T23608]  ? skb_set_owner_w+0x263/0x3d0
[  688.689732][T23608]  ? __pfx___dev_queue_xmit+0x10/0x10
[  688.692018][T23608]  ? sock_alloc_send_pskb+0x896/0x990
[  688.694434][T23608]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  688.696701][T23608]  ? packet_parse_headers+0x4c5/0x7a0
[  688.698903][T23608]  ? packet_parse_headers+0x571/0x7a0
[  688.700988][T23608]  ? __pfx_packet_parse_headers+0x10/0x10
[  688.703508][T23608]  ? packet_xmit+0x68/0x330
[  688.705445][T23608]  packet_sendmsg+0x2a78/0x5040
[  688.707589][T23608]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  688.709943][T23608]  ? __pfx_packet_sendmsg+0x10/0x10
[  688.712206][T23608]  ? aa_sk_perm+0x6d5/0x900
[  688.714381][T23608]  ? aa_sock_msg_perm+0xf1/0x1b0
[  688.716201][   T32] libceph: mon0 (1)[c::]:6789 connect error
[  688.716525][T23608]  ? __pfx_packet_sendmsg+0x10/0x10
[  688.721023][T23608]  sock_sendmsg_nosec+0x13a/0x180
[  688.723293][T23608]  sock_write_iter+0x2de/0x3e0
[  688.725434][T23608]  ? __pfx_sock_write_iter+0x10/0x10
[  688.727666][T23608]  ? bpf_lsm_file_permission+0x9/0x20
[  688.729959][T23608]  ? security_file_permission+0x75/0x260
[  688.732412][T23608]  vfs_write+0x612/0xba0
[  688.734402][T23608]  ? __pfx_vfs_write+0x10/0x10
[  688.736395][T23608]  ? __fget_files+0x2a/0x420
[  688.738432][T23608]  ksys_write+0x150/0x270
[  688.740348][T23608]  ? __pfx_ksys_write+0x10/0x10
[  688.742517][T23608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.745252][T23608]  do_syscall_64+0x174/0x580
[  688.747302][T23608]  ? trace_irq_disable+0x3b/0x140
[  688.749921][T23608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.752386][T23608] RIP: 0033:0x7f440f19e0d9
[  688.754804][T23608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.762808][T23608] RSP: 002b:00007f44100ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  688.766342][T23608] RAX: ffffffffffffffda RBX: 00007f440f425fa0 RCX: 00007f440f19e0d9
[  688.769686][T23608] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  688.772988][T23608] RBP: 00007f440f235024 R08: 0000000000000000 R09: 0000000000000000
[  688.776507][T23608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.779861][T23608] R13: 00007f440f426038 R14: 00007f440f425fa0 R15: 00007ffefdbcaf08
[  688.783682][T23608]  </TASK>
[  688.785182][T23608] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  688.788091][T23608] CPU: 0 UID: 0 PID: 23608 Comm: syz.2.7160 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  688.792514][T23608] Tainted: [L]=SOFTLOCKUP
[  688.794304][T23608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  688.798428][T23608] Call Trace:
[  688.799840][T23608]  <TASK>
[  688.801097][T23608]  vpanic+0x56c/0xa60
[  688.802747][T23608]  ? __pfx__printk+0x10/0x10
[  688.804658][T23608]  ? __pfx_vpanic+0x10/0x10
[  688.806521][T23608]  ? is_bpf_text_address+0x292/0x2b0
[  688.808747][T23608]  ? is_bpf_text_address+0x26/0x2b0
[  688.810917][T23608]  panic+0xc5/0xd0
[  688.812516][T23608]  ? __pfx_panic+0x10/0x10
[  688.814360][T23608]  __warn+0x315/0x4c0
[  688.816044][T23608]  ? __dev_queue_xmit+0x1fb8/0x3820
[  688.818200][T23608]  ? __dev_queue_xmit+0x1fb8/0x3820
[  688.820315][T23608]  __report_bug+0x276/0x570
[  688.822214][T23608]  ? packet_sendmsg+0xe2b/0x5040
[  688.824277][T23608]  ? sock_sendmsg_nosec+0x13a/0x180
[  688.826422][T23608]  ? sock_write_iter+0x2de/0x3e0
[  688.828512][T23608]  ? __dev_queue_xmit+0x1fb8/0x3820
[  688.830684][T23608]  ? __pfx___report_bug+0x10/0x10
[  688.832794][T23608]  report_bug_entry+0x19a/0x290
[  688.834807][T23608]  ? __dev_queue_xmit+0x1fbf/0x3820
[  688.836954][T23608]  ? __dev_queue_xmit+0x1fc4/0x3820
[  688.839096][T23608]  handle_bug+0xce/0x200
[  688.840879][T23608]  exc_invalid_op+0x1a/0x50
[  688.842758][T23608]  asm_exc_invalid_op+0x1a/0x20
[  688.844692][T23608] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820
[  688.846986][T23608] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 58 3c 24 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d e8 87 c4 06 48 c7 c6 d4 46 44 8e <67> 48 0f b9 3a 80 3d 22 98 9e 06 01 0f 85 86 03 00 00 e8 2a 3c 24
[  688.854539][T23608] RSP: 0018:ffffc900073e7520 EFLAGS: 00010246
[  688.856883][T23608] RAX: ffffffff89a29121 RBX: ffff888112d323d0 RCX: 0000000000000002
[  688.859915][T23608] RDX: ffff88816b9e8000 RSI: ffffffff8e4446d4 RDI: ffffffff906736e0
[  688.862866][T23608] RBP: ffffc900073e77d0 R08: ffff8880251b88a7 R09: 1ffff11004a37114
[  688.866016][T23608] R10: dffffc0000000000 R11: ffffed1004a37115 R12: dffffc0000000000
[  688.869099][T23608] R13: 1ffff92000e7cec4 R14: 0000000000000000 R15: ffff888112d323d0
[  688.872336][T23608]  ? __dev_queue_xmit+0x1e1/0x3820
[  688.874526][T23608]  ? __alloc_skb+0x4cc/0x7a0
[  688.876468][T23608]  ? alloc_skb_with_frags+0x6b3/0x760
[  688.878728][T23608]  ? __lock_acquire+0x6df/0x2e50
[  688.880844][T23608]  ? skb_set_owner_w+0x263/0x3d0
[  688.882926][T23608]  ? __pfx___dev_queue_xmit+0x10/0x10
[  688.885144][T23608]  ? sock_alloc_send_pskb+0x896/0x990
[  688.887320][T23608]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  688.889601][T23608]  ? packet_parse_headers+0x4c5/0x7a0
[  688.891845][T23608]  ? packet_parse_headers+0x571/0x7a0
[  688.894055][T23608]  ? __pfx_packet_parse_headers+0x10/0x10
[  688.896414][T23608]  ? packet_xmit+0x68/0x330
[  688.898301][T23608]  packet_sendmsg+0x2a78/0x5040
[  688.900571][T23608]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  688.902955][T23608]  ? __pfx_packet_sendmsg+0x10/0x10
[  688.905145][T23608]  ? aa_sk_perm+0x6d5/0x900
[  688.907080][T23608]  ? aa_sock_msg_perm+0xf1/0x1b0
[  688.909144][T23608]  ? __pfx_packet_sendmsg+0x10/0x10
[  688.911296][T23608]  sock_sendmsg_nosec+0x13a/0x180
[  688.913402][T23608]  sock_write_iter+0x2de/0x3e0
[  688.915417][T23608]  ? __pfx_sock_write_iter+0x10/0x10
[  688.917655][T23608]  ? bpf_lsm_file_permission+0x9/0x20
[  688.919826][T23608]  ? security_file_permission+0x75/0x260
[  688.922140][T23608]  vfs_write+0x612/0xba0
[  688.923946][T23608]  ? __pfx_vfs_write+0x10/0x10
[  688.925945][T23608]  ? __fget_files+0x2a/0x420
[  688.927907][T23608]  ksys_write+0x150/0x270
[  688.929715][T23608]  ? __pfx_ksys_write+0x10/0x10
[  688.931680][T23608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.933954][T23608]  do_syscall_64+0x174/0x580
[  688.935908][T23608]  ? trace_irq_disable+0x3b/0x140
[  688.938043][T23608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.940435][T23608] RIP: 0033:0x7f440f19e0d9
[  688.942326][T23608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.950183][T23608] RSP: 002b:00007f44100ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  688.953683][T23608] RAX: ffffffffffffffda RBX: 00007f440f425fa0 RCX: 00007f440f19e0d9
[  688.956966][T23608] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  688.960183][T23608] RBP: 00007f440f235024 R08: 0000000000000000 R09: 0000000000000000
[  688.963512][T23608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.966810][T23608] R13: 00007f440f426038 R14: 00007f440f425fa0 R15: 00007ffefdbcaf08
[  688.970050][T23608]  </TASK>
[  688.972182][T23608] Kernel Offset: disabled
[  688.973871][T23608] Rebooting in 86400 seconds..
