last executing test programs:

1m30.517087869s ago: executing program 1 (id=551):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
getdents(r0, 0x0, 0x1517f)

1m30.348221587s ago: executing program 1 (id=555):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x20080, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = open(&(0x7f0000000300)='./file1\x00', 0x18e97e, 0x13e)
lseek(r0, 0x2, 0x1)

1m30.034884471s ago: executing program 1 (id=561):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f00000002c0), &(0x7f0000000340)=0x14)

1m29.845670792s ago: executing program 1 (id=562):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
chdir(&(0x7f0000000600)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

1m29.845334034s ago: executing program 1 (id=563):
r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x8)
ppoll(&(0x7f0000000040)=[{r0, 0x202}], 0x1, 0x0, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000000)=[{{}, 0x0, 0x1, 0x3}], 0x48)

1m29.470445548s ago: executing program 1 (id=565):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fallocate(r0, 0x0, 0x1, 0x7)

1m29.196405227s ago: executing program 32 (id=565):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fallocate(r0, 0x0, 0x1, 0x7)

3.90002288s ago: executing program 0 (id=1529):
syz_usb_connect(0x5, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0)

2.849760417s ago: executing program 3 (id=1540):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2})

2.849580992s ago: executing program 3 (id=1541):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x505, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xf4240, 0x1000}}}}]}, 0x4c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000500)=@req={0x1000, 0x3, 0x1000, 0x3}, 0x10)
mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x3, 0x11, r3, 0x0)
pipe2(&(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write(r5, &(0x7f0000000700)="010000000000000010", 0x9)
read(r4, &(0x7f0000008000)=""/12, 0xc)
sendmsg(r3, &(0x7f0000000800)={&(0x7f0000000900)=@ll={0x11, 0x300, r1}, 0x80, 0x0}, 0x0)

2.780632396s ago: executing program 3 (id=1542):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)

2.618911928s ago: executing program 0 (id=1544):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0}], 0x1})

1.429679332s ago: executing program 2 (id=1550):
r0 = socket(0x1e, 0x1, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)

1.429537332s ago: executing program 0 (id=1551):
openat$zero(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0)

1.358940084s ago: executing program 2 (id=1552):
rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0)
syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)

1.286070171s ago: executing program 0 (id=1553):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="700000001200050926bd7000fbdbdf250a0904004e224e66fbffffff240900000600000006000000fdffffff050000002100000002000000", @ANYRES32=0x0, @ANYBLOB="0a0000000010000006000000ffffffff2100010008080000001d"], 0x70}, 0x1, 0x0, 0x0, 0x26000001}, 0x800)

1.189283043s ago: executing program 0 (id=1554):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
splice(r0, 0x0, r2, 0x0, 0x6, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x6, 0xc)
writev(r2, &(0x7f0000000800)=[{&(0x7f0000000100)='t', 0x1}], 0x1)

1.07973808s ago: executing program 3 (id=1555):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

999.286433ms ago: executing program 3 (id=1556):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000005c0)={0x8c, 0xffffffffffffffff, 0x8000200000000000, 0x40, 0x85c, 0x18000000})

906.452288ms ago: executing program 0 (id=1557):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005"], 0x21e)
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)

579.019735ms ago: executing program 3 (id=1558):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

397.752955ms ago: executing program 2 (id=1559):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getpeername$inet(r0, 0x0, 0x0)

228.855529ms ago: executing program 2 (id=1560):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0xffffffffffffffff}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x5}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x7, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0x20000ffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x7e}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x105}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0xd, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x8001}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

108.937µs ago: executing program 2 (id=1561):
r0 = syz_open_dev$video(&(0x7f0000000080), 0xad47, 0x1)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0xe, @output={0x1000, 0x0, {0x2, 0x2}, 0x104, 0x7fffffff}})

0s ago: executing program 2 (id=1562):
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf4243, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000, 0x1, 0x6})

kernel console output (not intermixed with test programs):

154 phy0 wpan0: encryption failed: -22
[  132.831654][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  132.893671][  T992] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[  133.160513][  T992] rc_core: IR keymap rc-imon-pad not found
[  133.160573][  T992] Registered IR keymap rc-empty
[  133.160752][  T992] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  133.160763][  T992] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  133.294173][  T992] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  133.296964][  T992] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10
[  133.298113][  T992] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:18> initialized
[  133.356951][   T27] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  133.357297][   T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  133.358545][   T27] usb 1-1: USB disconnect, device number 10
[  133.482486][    C1] imon 3-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0)
[  133.682658][    C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  133.684211][   T27] usb 3-1: USB disconnect, device number 18
[  133.982866][ T8079] FAULT_INJECTION: forcing a failure.
[  133.982866][ T8079] name failslab, interval 1, probability 0, space 0, times 0
[  133.982935][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.0.909 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.982962][ T8079] Tainted: [L]=SOFTLOCKUP
[  133.982966][ T8079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.982971][ T8079] Call Trace:
[  133.982975][ T8079]  <TASK>
[  133.982979][ T8079]  dump_stack_lvl+0xe8/0x150
[  133.982994][ T8079]  should_fail_ex+0x410/0x560
[  133.983007][ T8079]  should_failslab+0xa8/0x100
[  133.983018][ T8079]  ? anon_vma_fork+0x158/0x540
[  133.983030][ T8079]  kmem_cache_alloc_noprof+0xa1/0x600
[  133.983042][ T8079]  ? trace_kmem_cache_alloc+0x29/0xe0
[  133.983053][ T8079]  ? anon_vma_fork+0x88/0x540
[  133.983063][ T8079]  ? kmem_cache_alloc_noprof+0x156/0x600
[  133.983074][ T8079]  ? anon_vma_fork+0x158/0x540
[  133.983088][ T8079]  anon_vma_fork+0x158/0x540
[  133.983100][ T8079]  ? dup_mmap+0x875/0x1dc0
[  133.983113][ T8079]  dup_mmap+0x954/0x1dc0
[  133.983131][ T8079]  ? __pfx_dup_mmap+0x10/0x10
[  133.983143][ T8079]  ? do_raw_spin_lock+0x12b/0x2f0
[  133.983158][ T8079]  ? lock_acquire+0x115/0x350
[  133.983172][ T8079]  copy_mm+0x11a/0x480
[  133.983182][ T8079]  ? copy_process+0xd3c/0x43e0
[  133.983191][ T8079]  copy_process+0x1e75/0x43e0
[  133.983204][ T8079]  ? copy_process+0xd3c/0x43e0
[  133.983219][ T8079]  ? __pfx_copy_process+0x10/0x10
[  133.983234][ T8079]  kernel_clone+0x2d7/0x940
[  133.983253][ T8079]  ? __pfx_kernel_clone+0x10/0x10
[  133.983304][ T8079]  ? do_futex+0x3e7/0x4e0
[  133.983322][ T8079]  __x64_sys_clone+0x1b6/0x230
[  133.983343][ T8079]  ? __pfx___x64_sys_clone+0x10/0x10
[  133.983368][ T8079]  ? __pfx___se_sys_futex+0x10/0x10
[  133.983383][ T8079]  ? __pfx_ksys_write+0x10/0x10
[  133.983402][ T8079]  do_syscall_64+0x166/0x520
[  133.983414][ T8079]  ? trace_irq_disable+0x3b/0x140
[  133.983425][ T8079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.983442][ T8079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.983455][ T8079] RIP: 0033:0x7f91fe19e159
[  133.983467][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.983476][ T8079] RSP: 002b:00007f91ff010fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  133.983492][ T8079] RAX: ffffffffffffffda RBX: 00007f91fe425fa0 RCX: 00007f91fe19e159
[  133.983502][ T8079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  133.983510][ T8079] RBP: 00007f91fe235024 R08: 0000000000000000 R09: 0000000000000000
[  133.983520][ T8079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  133.983528][ T8079] R13: 00007f91fe426038 R14: 00007f91fe425fa0 R15: 00007ffcf7647848
[  133.983547][ T8079]  </TASK>
[  134.266770][ T8092] loop2: detected capacity change from 0 to 256
[  134.415963][ T8087] loop0: detected capacity change from 0 to 40427
[  134.433097][ T8087] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  134.446486][ T8087] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  134.451216][ T8087] F2FS-fs (loop0): invalid crc value
[  134.528879][ T8087] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  134.538434][ T8087] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  134.541642][ T8087] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  134.567034][   T36] audit: type=1800 audit(1788966261.093:608): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.912" name="file1" dev="loop0" ino=10 res=0 errno=0
[  134.594413][ T5606] syz-executor: attempt to access beyond end of device
[  134.594413][ T5606] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  134.618375][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  134.618409][ T5606] Tainted: [L]=SOFTLOCKUP
[  134.618412][ T5606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.618417][ T5606] Call Trace:
[  134.618421][ T5606]  <TASK>
[  134.618425][ T5606]  dump_stack_lvl+0xe8/0x150
[  134.618439][ T5606]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  134.618452][ T5606]  f2fs_write_end_bio+0x1211/0x16e0
[  134.618461][ T5606]  ? blkg_put+0x22/0x240
[  134.618476][ T5606]  __submit_merged_bio+0x258/0x6a0
[  134.618486][ T5606]  ? rcu_is_watching+0x16/0xb0
[  134.618497][ T5606]  __submit_merged_write_cond+0x3c9/0x4e0
[  134.618510][ T5606]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  134.618528][ T5606]  f2fs_write_data_pages+0x2a27/0x36f0
[  134.618551][ T5606]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.618561][ T5606]  ? is_bpf_text_address+0x26/0x2b0
[  134.618573][ T5606]  ? arch_stack_walk+0xfb/0x150
[  134.618592][ T5606]  ? add_lock_to_list+0xc7/0x100
[  134.618602][ T5606]  ? lockdep_unlock+0x5c/0xd0
[  134.618612][ T5606]  ? __lock_acquire+0x14b9/0x2e50
[  134.618628][ T5606]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.618642][ T5606]  ? do_raw_spin_unlock+0x4d/0x200
[  134.618651][ T5606]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.618662][ T5606]  do_writepages+0x338/0x560
[  134.618677][ T5606]  ? do_raw_spin_unlock+0x4d/0x200
[  134.618688][ T5606]  filemap_fdatawrite+0x1e9/0x2f0
[  134.618697][ T5606]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  134.618720][ T5606]  ? do_raw_spin_unlock+0x4d/0x200
[  134.618731][ T5606]  f2fs_sync_dirty_inodes+0x30e/0x830
[  134.618744][ T5606]  f2fs_write_checkpoint+0xa3d/0x2710
[  134.618751][ T5606]  ? __lock_acquire+0x6df/0x2e50
[  134.618768][ T5606]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  134.618801][ T5606]  kill_f2fs_super+0x2dd/0x700
[  134.618815][ T5606]  ? __pfx_kill_f2fs_super+0x10/0x10
[  134.618829][ T5606]  ? call_rcu+0x64d/0x8b0
[  134.618837][ T5606]  ? lockdep_hardirqs_on+0x7b/0x110
[  134.618853][ T5606]  deactivate_locked_super+0xbc/0x110
[  134.618865][ T5606]  cleanup_mnt+0x3d3/0x460
[  134.618875][ T5606]  task_work_run+0x1d9/0x270
[  134.618884][ T5606]  ? __pfx_task_work_run+0x10/0x10
[  134.618895][ T5606]  exit_to_user_mode_loop+0x204/0x770
[  134.618903][ T5606]  ? rcu_is_watching+0x16/0xb0
[  134.618913][ T5606]  do_syscall_64+0x328/0x520
[  134.618919][ T5606]  ? trace_irq_disable+0x3b/0x140
[  134.618926][ T5606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.618936][ T5606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.618943][ T5606] RIP: 0033:0x7f91fe19f397
[  134.618951][ T5606] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  134.618958][ T5606] RSP: 002b:00007ffcf7646ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  134.618967][ T5606] RAX: 0000000000000000 RBX: 00007f91fe234474 RCX: 00007f91fe19f397
[  134.618972][ T5606] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf7646b70
[  134.618976][ T5606] RBP: 00007ffcf7646b70 R08: 00007ffcf7647b70 R09: 00000000ffffffff
[  134.618982][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf7647c00
[  134.618986][ T5606] R13: 00007f91fe234474 R14: 0000000000020d3c R15: 00007ffcf7647c40
[  134.618998][ T5606]  </TASK>
[  134.734803][ T5606] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  135.024032][ T8115] loop0: detected capacity change from 0 to 512
[  135.025825][ T8115] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  135.194674][ T8121] gadgetfs: bound to dummy_udc driver
[  135.304906][ T8123] loop0: detected capacity change from 0 to 4096
[  135.333912][ T8123] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  135.343237][ T8123] ntfs3(loop0): Failed to load $Extend (-22).
[  135.345428][ T8123] ntfs3(loop0): Failed to initialize $Extend.
[  135.581394][ T8125] loop0: detected capacity change from 0 to 32768
[  135.632841][   T36] audit: type=1326 audit(1788966262.163:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.3.927" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cd79e159 code=0x7ffc0000
[  135.640073][   T36] audit: type=1326 audit(1788966262.163:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.3.927" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cd79e159 code=0x7ffc0000
[  135.643224][    C1] vcan0: j1939_tp_rxtimer: 0xffff88817757c800: rx timeout, send abort
[  135.649214][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88817757c800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  135.657306][   T36] audit: type=1326 audit(1788966262.173:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.3.927" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cd79e159 code=0x7ffc0000
[  135.657331][   T36] audit: type=1326 audit(1788966262.173:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.3.927" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cd79e159 code=0x7ffc0000
[  135.657346][   T36] audit: type=1326 audit(1788966262.173:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.3.927" exe="/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa2cd79e159 code=0x7ffc0000
[  135.657360][   T36] audit: type=1326 audit(1788966262.183:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.3.927" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cd79e159 code=0x7ffc0000
[  135.657375][   T36] audit: type=1326 audit(1788966262.183:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.3.927" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cd79e159 code=0x7ffc0000
[  135.738822][ T8131] loop3: detected capacity change from 0 to 2048
[  135.746647][ T8131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.853169][ T8137] loop3: detected capacity change from 0 to 512
[  135.856208][ T8137] EXT4-fs: Ignoring removed oldalloc option
[  135.872539][ T8137] EXT4-fs (loop3): filesystem is read-only
[  135.874668][ T8137] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  135.881744][ T8137] EXT4-fs (loop3): failed to initialize system zone (-117)
[  135.884259][ T8137] EXT4-fs (loop3): mount failed
[  136.072886][ T8148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.123645][ T8152] FAULT_INJECTION: forcing a failure.
[  136.123645][ T8152] name failslab, interval 1, probability 0, space 0, times 0
[  136.123705][ T8152] CPU: 1 UID: 0 PID: 8152 Comm: syz.0.940 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  136.123732][ T8152] Tainted: [L]=SOFTLOCKUP
[  136.123736][ T8152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.123741][ T8152] Call Trace:
[  136.123745][ T8152]  <TASK>
[  136.123749][ T8152]  dump_stack_lvl+0xe8/0x150
[  136.123764][ T8152]  should_fail_ex+0x410/0x560
[  136.123775][ T8152]  should_failslab+0xa8/0x100
[  136.123787][ T8152]  __kmalloc_cache_noprof+0xa3/0x600
[  136.123796][ T8152]  ? sctp_v6_to_sk_saddr+0x100/0x1c0
[  136.123808][ T8152]  ? sctp_association_new+0x89/0x25d0
[  136.123815][ T8152]  ? sctp_association_new+0x89/0x25d0
[  136.123825][ T8152]  sctp_association_new+0x89/0x25d0
[  136.123836][ T8152]  sctp_connect_new_asoc+0x2e4/0x6b0
[  136.123844][ T8152]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  136.123854][ T8152]  ? sctp_get_af_specific+0x29/0x80
[  136.123863][ T8152]  ? sctp_inet6_send_verify+0x80/0x300
[  136.123873][ T8152]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  136.123885][ T8152]  __sctp_connect+0x5cb/0xdc0
[  136.123898][ T8152]  ? __pfx___sctp_connect+0x10/0x10
[  136.123909][ T8152]  ? sctp_setsockopt+0x21c/0x12c0
[  136.123921][ T8152]  ? security_sctp_bind_connect+0x7e/0x2c0
[  136.123934][ T8152]  ? __sctp_setsockopt_connectx+0xc7/0x190
[  136.123945][ T8152]  sctp_setsockopt+0x70b/0x12c0
[  136.123956][ T8152]  ? sock_common_setsockopt+0x36/0xc0
[  136.123967][ T8152]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  136.123978][ T8152]  do_sock_setsockopt+0x17c/0x1b0
[  136.123989][ T8152]  __x64_sys_setsockopt+0x13d/0x1b0
[  136.123999][ T8152]  do_syscall_64+0x166/0x520
[  136.124006][ T8152]  ? trace_irq_disable+0x3b/0x140
[  136.124013][ T8152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.124022][ T8152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.124030][ T8152] RIP: 0033:0x7f91fe19e159
[  136.124037][ T8152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.124044][ T8152] RSP: 002b:00007f91ff011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  136.124053][ T8152] RAX: ffffffffffffffda RBX: 00007f91fe425fa0 RCX: 00007f91fe19e159
[  136.124059][ T8152] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  136.124063][ T8152] RBP: 00007f91fe235024 R08: 000000000000001c R09: 0000000000000000
[  136.124068][ T8152] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000
[  136.124072][ T8152] R13: 00007f91fe426038 R14: 00007f91fe425fa0 R15: 00007ffcf7647848
[  136.124084][ T8152]  </TASK>
[  136.366187][ T8150] loop3: detected capacity change from 0 to 32768
[  136.372044][ T8150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.939 (8150)
[  136.383170][ T8156] loop2: detected capacity change from 0 to 32768
[  136.388428][ T8150] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.393515][ T8150] BTRFS info (device loop3): using crc32c checksum algorithm
[  136.397151][ T8156] BTRFS info: device /dev/loop2 (7:2) using temp-fsid c2895553-6df5-4968-9ee7-81bdfeacc9a7
[  136.405775][ T8156] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.942 (8156)
[  136.417872][ T8156] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.417929][ T8156] BTRFS info (device loop2): using crc32c checksum algorithm
[  136.476428][ T8150] BTRFS info (device loop3): enabling ssd optimizations
[  136.476465][ T8150] BTRFS info (device loop3): turning on flush-on-commit
[  136.476508][ T8150] BTRFS info (device loop3): enabling free space tree
[  136.476532][ T8150] BTRFS info (device loop3): enabling auto defrag
[  136.476557][ T8150] BTRFS info (device loop3): use lzo compression, level 1
[  136.476583][ T8150] BTRFS info (device loop3): max_inline set to 4096
[  136.531412][ T8156] BTRFS info (device loop2): enabling ssd optimizations
[  136.531461][ T8156] BTRFS info (device loop2): turning on flush-on-commit
[  136.531516][ T8156] BTRFS info (device loop2): enabling free space tree
[  136.531549][ T8156] BTRFS info (device loop2): enabling auto defrag
[  136.531582][ T8156] BTRFS info (device loop2): use lzo compression, level 1
[  136.531615][ T8156] BTRFS info (device loop2): max_inline set to 4096
[  136.559803][ T7095] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.668107][ T5599] BTRFS info (device loop2): last unmount of filesystem c2895553-6df5-4968-9ee7-81bdfeacc9a7
[  136.898655][ T8206] erofs (device loop0): invalid checksum 0x214173a2, 0xa48ae4e5 expected
[  136.966097][ T8209] IPv6: addrconf: prefix option has invalid lifetime
[  137.062068][ T8212] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  137.062187][ T8214] netlink: 'syz.3.955': attribute type 1 has an invalid length.
[  137.069279][ T8212] UDF-fs: Scanning with blocksize 512 failed
[  137.084847][ T8212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.202550][ T8228] set_capacity_and_notify: 2 callbacks suppressed
[  137.203023][ T8228] loop2: detected capacity change from 0 to 256
[  137.274111][ T8232] netlink: 358 bytes leftover after parsing attributes in process `syz.2.964'.
[  137.363787][ T8230] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  137.400483][ T5666] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  137.413537][ T8240] loop2: detected capacity change from 0 to 512
[  137.427830][ T8240] EXT4-fs: test_dummy_encryption requires encrypt feature
[  137.451065][ T8242] loop3: detected capacity change from 0 to 128
[  137.454285][ T8242] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  137.925372][ T8239] ima: policy update failed
[  138.273657][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  138.276000][   T36] audit: type=1807 audit(1788966264.453:618): UNKNOWN=? res=0
[  138.279419][   T36] audit: type=1802 audit(1788966264.453:619): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.967" res=0 errno=0
[  138.286003][   T36] audit: type=1802 audit(1788966264.453:620): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.967" res=0 errno=0
[  138.320905][ T5666] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  138.321815][ T5666] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  138.321826][ T5666] usb 1-1: config 1 has no interface number 0
[  138.323544][ T5666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.323554][ T5666] usb 1-1: Product: syz
[  138.323560][ T5666] usb 1-1: Manufacturer: syz
[  138.323565][ T5666] usb 1-1: SerialNumber: syz
[  138.342313][ T5666] usb 1-1: 3:1 : does not exist
[  138.342363][ T5666] usb 1-1: 3:2 : does not exist
[  138.543051][ T8262] loop2: detected capacity change from 0 to 256
[  138.672074][ T8266] vlan3: entered allmulticast mode
[  138.673807][ T8266] bond0: entered allmulticast mode
[  138.675722][ T8266] bond_slave_0: entered allmulticast mode
[  138.678093][ T8266] bond_slave_1: entered allmulticast mode
[  138.830098][ T8283] netlink: 'syz.3.986': attribute type 29 has an invalid length.
[  138.838806][ T8283] netlink: 'syz.3.986': attribute type 29 has an invalid length.
[  138.844054][ T8283] netlink: 'syz.3.986': attribute type 29 has an invalid length.
[  138.897494][ T8290] Format for deleting device is "id" (uint).
[  138.936450][ T8293] loop3: detected capacity change from 0 to 1024
[  138.939947][ T8293] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  138.944161][ T8293] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  138.948052][ T8293] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  138.952474][ T8293] EXT4-fs error (device loop3): ext4_get_journal_inode:5927: inode #32: comm syz.3.991: iget: special inode unallocated
[  138.957450][ T8293] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  138.957649][ T8293] EXT4-fs (loop3): no journal found
[  138.961361][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  138.961371][    C0] EXT4-fs (loop3): initial error at time 1788966265: ext4_get_journal_inode:5927: inode 32
[  138.961383][    C0] EXT4-fs (loop3): last error at time 1788966265: ext4_get_journal_inode:5927: inode 32
[  138.962005][ T8293] EXT4-fs (loop3): can't get journal size
[  138.972468][ T8293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  138.997583][ T7095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.120541][ T5659] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  139.134330][  T992] usb 1-1: USB disconnect, device number 11
[  139.191341][ T8298] loop3: detected capacity change from 0 to 32768
[  139.207161][ T8298] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[  139.207161][ T8298] 
[  139.212264][ T8298] ERROR: (device loop3): remounting filesystem as read-only
[  139.272487][ T5659] usb 3-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00
[  139.277793][ T5659] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.282607][ T5659] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  139.290040][ T5659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.293880][ T5659] usb 3-1: Product: syz
[  139.295673][ T5659] usb 3-1: Manufacturer: syz
[  139.297380][ T5659] usb 3-1: SerialNumber: syz
[  139.308421][ T5659] usb 3-1: unsupported MDLM descriptors
[  139.335223][ T8300] loop3: detected capacity change from 0 to 2048
[  139.394620][ T8300]  loop3: p1 < > p4 < >
[  139.394672][ T8300] loop3: partition table partially beyond EOD, truncated
[  139.398305][ T8300] loop3: p4 start 42112 is beyond EOD, truncated
[  139.510180][ T5659] usb 3-1: USB disconnect, device number 19
[  139.910408][   T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  140.061943][   T27] usb 1-1: Using ep0 maxpacket: 16
[  140.062864][   T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  140.064647][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.064690][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.064883][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.067329][   T27] usb 1-1: config 0 descriptor??
[  140.229279][   T36] audit: type=1326 audit(1788966266.753:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.2.1003" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f261559e159 code=0x0
[  140.494290][   T27] hid_parser_main: 11 callbacks suppressed
[  140.494652][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494681][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494691][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494700][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494709][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494718][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494728][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494736][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494745][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.494754][   T27] apple 0003:05AC:024B.0005: unknown main item tag 0x0
[  140.498890][   T27] apple 0003:05AC:024B.0005: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0
[  140.677108][ T5658] usb 1-1: USB disconnect, device number 12
[  141.927688][ T8369] xt_hashlimit: size too large, truncated to 1048576
[  142.620800][   T27] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  142.791371][   T27] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  142.792363][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  142.794181][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.794192][   T27] usb 3-1: Product: syz
[  142.794199][   T27] usb 3-1: Manufacturer: syz
[  142.794205][   T27] usb 3-1: SerialNumber: syz
[  142.797475][   T27] usb 3-1: config 0 descriptor??
[  142.798082][ T8373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  142.798133][ T8373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  142.801703][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[  142.803237][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[  142.805951][   T27] port100 3-1:0.0: NFC: Could not get supported command types
[  142.847833][ T8375] loop3: detected capacity change from 0 to 32768
[  143.046013][   T27] usb 3-1: USB disconnect, device number 20
[  143.094526][   T36] audit: type=1400 audit(1788966269.623:622): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8376 comm="syz.3.1029"
[  143.314032][ T8381] loop3: detected capacity change from 0 to 32768
[  143.317733][ T8381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1031 (8381)
[  143.339234][ T8381] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.339289][ T8381] BTRFS info (device loop3): using crc32c checksum algorithm
[  143.402980][ T8381] BTRFS info (device loop3): enabling ssd optimizations
[  143.407085][ T8381] BTRFS info (device loop3): turning on flush-on-commit
[  143.407163][ T8381] BTRFS info (device loop3): enabling free space tree
[  143.407195][ T8381] BTRFS info (device loop3): enabling auto defrag
[  143.407229][ T8381] BTRFS info (device loop3): use lzo compression, level 1
[  143.407262][ T8381] BTRFS info (device loop3): max_inline set to 4096
[  143.435363][   T36] audit: type=1800 audit(1788966269.963:623): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1031" name="file1" dev="loop3" ino=260 res=0 errno=0
[  143.472839][ T7095] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.686038][ T8400] netlink: 'syz.2.1034': attribute type 10 has an invalid length.
[  143.686096][ T8400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1034'.
[  143.693579][ T8400] dummy0: entered promiscuous mode
[  143.702260][ T8400] bridge0: port 3(dummy0) entered blocking state
[  143.705266][ T8400] bridge0: port 3(dummy0) entered disabled state
[  143.708111][ T8400] dummy0: entered allmulticast mode
[  143.712845][ T8400] bridge0: port 3(dummy0) entered blocking state
[  143.712977][ T8400] bridge0: port 3(dummy0) entered forwarding state
[  143.848542][ T8412] loop2: detected capacity change from 0 to 1764
[  143.951269][ T5657] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  143.961255][ T8416] program syz.2.1041 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  143.970466][ T8414] loop3: detected capacity change from 0 to 32768
[  143.971882][ T8414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1040 (8414)
[  143.974994][ T8414] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.975007][ T8414] BTRFS info (device loop3): using sha256 checksum algorithm
[  144.034825][ T8414] BTRFS info (device loop3): enabling ssd optimizations
[  144.034937][ T8414] BTRFS info (device loop3): turning on sync discard
[  144.034967][ T8414] BTRFS info (device loop3): enabling free space tree
[  144.047937][   T36] audit: type=1800 audit(1788966270.573:624): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1040" name="file1" dev="loop3" ino=260 res=0 errno=0
[  144.106426][ T5657] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  144.114337][ T5657] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[  144.114389][ T5657] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[  144.114448][ T5657] usb 1-1: config 0 interface 0 has no altsetting 0
[  144.128615][ T5657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.128662][ T5657] usb 1-1: Product: syz
[  144.128715][ T5657] usb 1-1: Manufacturer: syz
[  144.128748][ T5657] usb 1-1: SerialNumber: syz
[  144.146803][ T5657] usb 1-1: config 0 descriptor??
[  144.156904][ T5657] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  144.164037][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  144.176181][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  144.179444][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  144.184351][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  144.184539][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  144.184753][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  144.205819][ T5657] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  144.226018][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  144.230996][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  144.234375][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  144.238219][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  144.242428][ T5657] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  144.260054][ T5657] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  144.364067][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'.
[  144.379312][ T5666] usb 1-1: USB disconnect, device number 13
[  144.442241][ T8435] ipvlan1: entered promiscuous mode
[  144.444803][ T5666] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  144.463962][ T5666] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  144.464477][ T5666] keyspan 1-1:0.0: device disconnected
[  144.481396][ T8435] ipvlan1: left promiscuous mode
[  144.558556][ T7095] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.714585][ T8443] vcan0: tx address claim with different name
[  144.847974][ T8453] loop2: detected capacity change from 0 to 256
[  145.002210][   T36] audit: type=1326 audit(1788966271.533:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.011722][   T36] audit: type=1326 audit(1788966271.543:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.019460][   T36] audit: type=1326 audit(1788966271.543:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.027308][   T36] audit: type=1326 audit(1788966271.553:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.034035][   T36] audit: type=1326 audit(1788966271.563:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.040902][   T36] audit: type=1326 audit(1788966271.573:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.049396][   T36] audit: type=1326 audit(1788966271.573:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.056458][   T36] audit: type=1326 audit(1788966271.583:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f91fe19e159 code=0x7ffc0000
[  145.360571][ T5658] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  145.534496][ T5658] usb 1-1: Using ep0 maxpacket: 8
[  145.537447][ T5658] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  145.539544][ T5658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.545872][ T5658] usb 1-1: config 0 descriptor??
[  145.556864][ T8482] program syz.2.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  145.579862][ T5658] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  145.579932][ T5658] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  145.603204][ T5658] usb-storage 1-1:0.0: USB Mass Storage device detected
[  145.626033][ T5658] usb-storage 1-1:0.0: device ignored
[  145.769739][   T27] usb 1-1: USB disconnect, device number 14
[  145.812741][ T8498] loop3: detected capacity change from 0 to 512
[  145.815640][ T8498] FAT-fs (loop3): bogus logical sector size 65535
[  145.823997][ T8498] FAT-fs (loop3): Can't find a valid FAT filesystem
[  146.180926][ T5658] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  146.332705][ T8510] kAFS: bad VL server IP address
[  146.351055][ T5658] usb 3-1: Using ep0 maxpacket: 16
[  146.358209][ T5658] usb 3-1: unable to get BOS descriptor or descriptor too short
[  146.358292][ T5658] usb 3-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  146.367568][ T5658] usb 3-1: config 1 has an invalid interface number: 237 but max is 0
[  146.371084][ T5658] usb 3-1: config 1 has no interface number 0
[  146.373891][ T5658] usb 3-1: config 1 interface 237 has no altsetting 0
[  146.379215][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.383040][ T5658] usb 3-1: Product: syz
[  146.383052][ T5658] usb 3-1: Manufacturer: syz
[  146.383061][ T5658] usb 3-1: SerialNumber: syz
[  146.605168][ T5658] ipaq 3-1:1.237: PocketPC PDA converter detected
[  146.609741][ T5658] ipaq 3-1:1.237: probe with driver ipaq failed with error -71
[  146.615907][ T5658] usb 3-1: USB disconnect, device number 21
[  146.893556][ T8519] loop3: detected capacity change from 0 to 512
[  146.908981][ T8519] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  147.056236][ T8519] loop3: detected capacity change from 0 to 40427
[  147.059659][ T8519] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  147.063055][ T8519] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  147.119302][ T8519] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.141871][ T8519] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  147.144835][ T8519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  147.480647][ T8541] netlink: 'syz.2.1085': attribute type 3 has an invalid length.
[  147.529005][ T8537] loop3: detected capacity change from 0 to 40427
[  147.529828][ T8537] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  147.529858][ T8537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  147.530765][ T8537] F2FS-fs (loop3): invalid crc value
[  147.571410][ T8537] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.578477][ T8537] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  147.578527][ T8537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  147.934180][ T8558] netlink: 768 bytes leftover after parsing attributes in process `syz.2.1090'.
[  148.142814][ T8568] input: syz1 as /devices/virtual/input/input11
[  148.394599][ T8580] ip6gre1: entered promiscuous mode
[  148.394665][ T8580] ip6gre1: entered allmulticast mode
[  148.410144][ T5463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.413018][ T5463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.421424][   T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.616453][ T8596] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  148.687481][ T8600] loop0: detected capacity change from 0 to 64
[  148.722493][   T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.729704][ T8600] Bad inode number on dev loop0: 2 is out of range
[  148.733836][ T8600] Bad inode number on dev loop0: 2 is out of range
[  148.738481][ T8600] Bad inode number on dev loop0: 2 is out of range
[  148.742919][ T8600] Bad inode number on dev loop0: 2 is out of range
[  148.743633][ T8600] Bad inode number on dev loop0: 2 is out of range
[  148.793567][ T2256] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  148.851290][   T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.902909][ T8609] loop0: detected capacity change from 0 to 2048
[  148.935398][ T8609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.935485][ T8609] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  148.973011][ T2256] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  148.973925][ T2256] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  148.973936][ T2256] usb 3-1: config 1 has no interface number 0
[  148.973952][ T2256] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  148.973962][ T2256] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 80
[  148.973972][ T2256] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  148.975602][ T2256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.975611][ T2256] usb 3-1: Product: syz
[  148.975617][ T2256] usb 3-1: Manufacturer: syz
[  148.975623][ T2256] usb 3-1: SerialNumber: syz
[  148.982223][ T8587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  149.036900][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.131314][ T8616] netlink: 'syz.0.1113': attribute type 153 has an invalid length.
[  149.134792][ T8616] netlink: 5316 bytes leftover after parsing attributes in process `syz.0.1113'.
[  149.192534][ T8587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  149.194129][ T2256] usb 3-1: No status endpoint found
[  149.398660][ T5658] usb 3-1: USB disconnect, device number 22
[  150.353348][ T8654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1128'.
[  150.678769][ T8660] loop2: detected capacity change from 0 to 128
[  150.688266][ T8660] FAT-fs (loop2): bogus number of reserved sectors
[  150.688355][ T8660] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors)
[  150.688365][ T8660] FAT-fs (loop2): Can't find a valid FAT filesystem
[  151.451743][ T8674] loop2: detected capacity change from 0 to 32768
[  151.466988][ T8674] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.487612][ T8674] XFS (loop2): Ending clean mount
[  151.509186][ T5599] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.630111][ T8687] loop3: detected capacity change from 0 to 128
[  151.634548][ T8687] FAT-fs (loop3): Directory bread(block 1048) failed
[  151.634562][ T8687] FAT-fs (loop3): Directory bread(block 1049) failed
[  151.634571][ T8687] FAT-fs (loop3): Directory bread(block 1050) failed
[  151.634579][ T8687] FAT-fs (loop3): Directory bread(block 1051) failed
[  151.634588][ T8687] FAT-fs (loop3): Directory bread(block 1052) failed
[  151.634596][ T8687] FAT-fs (loop3): Directory bread(block 1053) failed
[  151.634605][ T8687] FAT-fs (loop3): Directory bread(block 1054) failed
[  151.634612][ T8687] FAT-fs (loop3): Directory bread(block 1055) failed
[  151.666001][ T8687] syz.3.1138: attempt to access beyond end of device
[  151.666001][ T8687] loop3: rw=8390659, sector=1096, nr_sectors = 8 limit=128
[  151.756764][ T8695] loop3: detected capacity change from 0 to 2048
[  151.759116][ T8695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.858824][ T8699] loop3: detected capacity change from 0 to 256
[  151.903648][ T8701] loop0: detected capacity change from 0 to 512
[  151.927679][ T8701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.927761][ T8701] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.945857][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.970386][ T5658] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  152.009903][ T8708] netlink: 'syz.0.1148': attribute type 5 has an invalid length.
[  152.110410][ T5666] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  152.120504][ T5658] usb 3-1: Using ep0 maxpacket: 16
[  152.121213][ T5658] usb 3-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  152.122282][ T5658] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  152.122311][ T5658] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  152.122328][ T5658] usb 3-1: config 0 interface 0 has no altsetting 0
[  152.122351][ T5658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.127428][ T5658] usb 3-1: config 0 descriptor??
[  152.261320][ T5666] usb 4-1: not running at top speed; connect to a high speed hub
[  152.261374][ T5666] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  152.263563][ T5666] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  152.263573][ T5666] usb 4-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config
[  152.263582][ T5666] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  152.263602][ T5666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.472747][ T5666] usb 4-1: string descriptor 0 read error: -71
[  152.472863][ T5666] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  152.473193][ T5666] uvcvideo 4-1:1.0: No valid video chain found.
[  152.481058][ T5666] usb 4-1: USB disconnect, device number 5
[  152.536121][ T5658] hid_parser_main: 59 callbacks suppressed
[  152.536186][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536218][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536229][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536238][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536247][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536257][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536266][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536275][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536285][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.536294][ T5658] logitech-djreceiver 0003:046D:C51B.0006: unknown main item tag 0x0
[  152.581916][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  152.630482][   T27] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  152.738288][  T992] usb 3-1: USB disconnect, device number 23
[  152.793586][   T27] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  152.799040][   T27] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  152.804689][   T27] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.810200][   T27] usb 1-1: config 0 interface 0 has no altsetting 0
[  152.813269][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.818856][   T27] usb 1-1: config 0 descriptor??
[  152.822459][ T8715] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  153.235799][   T27] kye 0003:0458:501A.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  153.243495][   T27] kye 0003:0458:501A.0007: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0
[  153.247908][   T27] kye 0003:0458:501A.0007: tablet-enabling feature report not found
[  153.251272][   T27] kye 0003:0458:501A.0007: tablet enabling failed
[  153.270391][ T2256] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  153.287200][ T8719] sock: sock_timestamping_bind_phc: sock not bind to device
[  153.430403][ T2256] usb 4-1: Using ep0 maxpacket: 32
[  153.431164][ T5658] usb 1-1: USB disconnect, device number 15
[  153.439889][ T2256] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  153.444627][ T2256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.451549][ T2256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.451583][ T2256] usb 4-1: Product: syz
[  153.451611][ T2256] usb 4-1: Manufacturer: syz
[  153.451634][ T2256] usb 4-1: SerialNumber: syz
[  153.468876][ T2256] usb 4-1: config 0 descriptor??
[  153.475115][ T2256] cdc_ether 4-1:0.0: missing cdc header descriptor
[  153.481183][ T2256] usb 4-1: unsupported MDLM descriptors
[  153.523909][ T8728] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1157'.
[  153.675291][ T5658] usb 4-1: USB disconnect, device number 6
[  155.014038][ T8753] loop3: detected capacity change from 0 to 4096
[  155.050666][ T8754] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.065673][ T8753] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  155.323693][ T8764] loop0: detected capacity change from 0 to 512
[  155.360522][ T8764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.365673][ T8764] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.382125][ T8764] EXT4-fs error (device loop0): ext4_empty_dir:3093: inode #12: block 32: comm syz.0.1173: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  155.405376][ T8764] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #12: comm syz.0.1173: directory missing '.'
[  155.425342][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.737446][   T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  155.743253][ T5658] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  155.880860][   T27] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  155.881776][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.881786][   T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  155.881805][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.884570][   T27] usb 4-1: config 0 descriptor??
[  155.897995][ T5658] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  155.902702][ T5658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.906955][ T5658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.907013][ T5658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.916749][ T5658] usb 1-1: config 0 descriptor??
[  156.293134][   T27] Bluetooth: Can't get state to change to load configuration err
[  156.293180][   T27] Bluetooth: Loading sysconfig file failed
[  156.293217][   T27] ath3k 4-1:0.0: probe with driver ath3k failed with error -16
[  156.296700][   T27] usb 4-1: USB disconnect, device number 7
[  156.353916][ T8774] loop2: detected capacity change from 0 to 1024
[  156.357394][ T8774] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  156.357429][ T8774] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  156.357498][ T8774] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  156.415075][ T8774] EXT4-fs (loop2): failed to open journal device unknown-block(11,8) -ENXIO
[  156.528185][ T5658] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71
[  156.534391][ T5658] usb 1-1: USB disconnect, device number 16
[  156.614084][ T8784] loop2: detected capacity change from 0 to 1024
[  156.617050][ T8784] EXT4-fs: Ignoring removed nomblk_io_submit option
[  156.621232][ T8784] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  156.627528][ T8784] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002]
[  156.631190][ T8784] System zones: 0-1, 3-36
[  156.636114][ T8784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.659561][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.853503][ T8792] loop3: detected capacity change from 0 to 736
[  156.889746][ T8792] rock: directory entry would overflow storage
[  156.889791][ T8792] rock: sig=0x3b10, size=4, remaining=3
[  156.961225][   T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  157.112198][   T27] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  157.113374][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  157.113391][   T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  157.113406][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  157.113421][   T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  157.113445][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.128168][   T27] usb 3-1: config 0 descriptor??
[  157.170971][ T5658] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  157.330449][ T5658] usb 4-1: Using ep0 maxpacket: 32
[  157.335703][ T5658] usb 4-1: unable to get BOS descriptor or descriptor too short
[  157.335768][ T5658] usb 4-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice= 0.40
[  157.347284][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.347320][ T5658] usb 4-1: Product: syz
[  157.347361][ T5658] usb 4-1: Manufacturer: syz
[  157.347384][ T5658] usb 4-1: SerialNumber: syz
[  157.350673][   T27] hdpvr 3-1:0.0: unexpected answer of status request, len -71
[  157.350683][   T27] hdpvr 3-1:0.0: device init failed
[  157.350715][   T27] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  157.353881][   T27] usb 3-1: USB disconnect, device number 24
[  157.372237][ T5658] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  157.379716][ T5658] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  157.384717][ T5658] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  157.388579][ T5658] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  157.394139][ T5658] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  157.423342][ T8808] loop0: detected capacity change from 0 to 32768
[  157.426841][ T8808] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  157.427478][ T8808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1190 (8808)
[  157.450110][ T5658] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  157.464358][ T8808] BTRFS info (device loop0 state S): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.464408][ T8808] BTRFS info (device loop0 state S): using sha256 checksum algorithm
[  157.464531][ T8808] BTRFS error (device loop0 state S): ignoremetacsums must be used with ro mount option
[  157.464582][ T8808] BTRFS error (device loop0 state S): open_ctree failed: -EINVAL
[  157.485422][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.586074][ T5666] usb 4-1: USB disconnect, device number 8
[  157.637990][ T8815] comedi comedi1: Minor 3 could not be opened
[  157.885889][ T8827] loop0: detected capacity change from 0 to 8192
[  157.904548][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  157.904629][   T36] audit: type=1804 audit(1788966284.423:634): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1199" name="/newroot/392/bus/bus" dev="loop0" ino=1048644 res=1 errno=0
[  158.161379][ T5659] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  158.330594][ T5659] usb 3-1: Using ep0 maxpacket: 16
[  158.332705][ T5659] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  158.336406][ T5659] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  158.342298][ T5659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.345599][ T5659] usb 3-1: Product: syz
[  158.347453][ T5659] usb 3-1: Manufacturer: syz
[  158.349456][ T5659] usb 3-1: SerialNumber: syz
[  158.358071][ T5659] r8152-cfgselector 3-1: Unknown version 0x0000
[  158.358120][ T5659] r8152-cfgselector 3-1: config 0 descriptor??
[  158.428820][ T8834] loop3: detected capacity change from 0 to 32768
[  158.446125][ T8834] read_mapping_page failed!
[  158.448103][ T8834] ERROR: (device loop3): txCommit: 
[  158.448103][ T8834] 
[  158.502098][ T4996] Bluetooth: hci1: command 0x2016 tx timeout
[  158.773258][ T5659] r8152-cfgselector 3-1: USB disconnect, device number 25
[  158.991242][ T8844] loop0: detected capacity change from 0 to 512
[  159.005156][ T8844] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  159.007103][ T8844] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.1207: corrupted in-inode xattr: e_value size too large
[  159.007123][ T8844] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  159.007249][ T8844] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1207: couldn't read orphan inode 15 (err -117)
[  159.007261][ T8844] loop0: lost filesystem error report for type 5 error -117
[  159.008252][ T8844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.049007][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.166057][ T8851] bonding: . is being created...
[  159.277454][ T8854] loop0: detected capacity change from 0 to 1024
[  159.288300][ T8854] EXT4-fs: Ignoring removed orlov option
[  159.310138][ T8854] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  159.310189][ T8854] EXT4-fs (loop0): group descriptors corrupted!
[  159.443858][ T8864] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.455642][ T8862] syz.0.1215: attempt to access beyond end of device
[  159.455642][ T8862] loop0: rw=8912896, sector=2097320, nr_sectors = 8 limit=4096
[  159.466804][ T8862] syz.0.1215: attempt to access beyond end of device
[  159.466804][ T8862] loop0: rw=8388608, sector=2097320, nr_sectors = 8 limit=4096
[  159.476385][   T36] audit: type=1800 audit(1788966286.003:635): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1215" name="file2" dev="loop0" ino=16 res=0 errno=0
[  159.767757][ T8868] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  159.783037][ T8868] XFS (loop0): Ending clean mount
[  160.097063][ T5606] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  160.245957][ T8891] set_capacity_and_notify: 2 callbacks suppressed
[  160.248593][ T8891] loop0: detected capacity change from 0 to 128
[  160.255819][ T8891] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  160.260006][ T8891] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  160.293291][ T5606] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.400784][ T5659] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  160.551339][ T5659] usb 3-1: Using ep0 maxpacket: 32
[  160.554720][ T5659] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  160.558541][ T5659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.562280][ T5659] usb 3-1: config 0 descriptor??
[  160.573884][ T5659] gspca_main: sq930x-2.14.0 probing 041e:403c
[  160.614672][ T8901] loop3: detected capacity change from 0 to 2048
[  160.623630][ T8902] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.632392][ T8901] syz.3.1226: attempt to access beyond end of device
[  160.632392][ T8901] loop3: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048
[  160.639134][ T8901] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1)
[  160.675506][ T8904] FAULT_INJECTION: forcing a failure.
[  160.675506][ T8904] name failslab, interval 1, probability 0, space 0, times 0
[  160.675559][ T8904] CPU: 0 UID: 0 PID: 8904 Comm: syz.3.1227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  160.675586][ T8904] Tainted: [L]=SOFTLOCKUP
[  160.675591][ T8904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.675596][ T8904] Call Trace:
[  160.675599][ T8904]  <TASK>
[  160.675603][ T8904]  dump_stack_lvl+0xe8/0x150
[  160.675618][ T8904]  should_fail_ex+0x410/0x560
[  160.675646][ T8904]  should_failslab+0xa8/0x100
[  160.675658][ T8904]  __kvmalloc_node_noprof+0x176/0x820
[  160.675667][ T8904]  ? __mutex_unlock_slowpath+0x731/0x900
[  160.675678][ T8904]  ? v4l2_ctrl_new+0xa5a/0x1820
[  160.675687][ T8904]  ? v4l2_ctrl_new+0xa5a/0x1820
[  160.675698][ T8904]  v4l2_ctrl_new+0xa5a/0x1820
[  160.675711][ T8904]  v4l2_ctrl_new_custom+0x5b4/0x7f0
[  160.675727][ T8904]  ? __pfx_v4l2_ctrl_new_custom+0x10/0x10
[  160.675737][ T8904]  ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0
[  160.675750][ T8904]  ? __kvmalloc_node_noprof+0x345/0x820
[  160.675761][ T8904]  ? v4l2_ctrl_handler_init_class+0x20d/0x2e0
[  160.675773][ T8904]  vicodec_open+0x2b9/0xbf0
[  160.675785][ T8904]  v4l2_open+0x1bc/0x3a0
[  160.675797][ T8904]  chrdev_open+0x4d9/0x600
[  160.675811][ T8904]  ? __pfx_chrdev_open+0x10/0x10
[  160.675825][ T8904]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  160.675841][ T8904]  ? __pfx_chrdev_open+0x10/0x10
[  160.675854][ T8904]  do_dentry_open+0x816/0x1380
[  160.675870][ T8904]  vfs_open+0x3b/0x340
[  160.675879][ T8904]  ? path_openat+0x1428/0x1d60
[  160.675889][ T8904]  path_openat+0x1443/0x1d60
[  160.675936][ T8904]  do_file_open+0x23e/0x4a0
[  160.675947][ T8904]  ? __pfx_do_file_open+0x10/0x10
[  160.675963][ T8904]  ? _raw_spin_unlock+0x28/0x50
[  160.675974][ T8904]  ? alloc_fd+0x651/0x6c0
[  160.675989][ T8904]  do_sys_openat2+0x115/0x200
[  160.675999][ T8904]  ? __se_sys_futex+0x3a8/0x450
[  160.676010][ T8904]  ? __pfx_do_sys_openat2+0x10/0x10
[  160.676020][ T8904]  ? exc_page_fault+0x6a/0xc0
[  160.676032][ T8904]  ? rcu_is_watching+0x16/0xb0
[  160.676043][ T8904]  __x64_sys_openat+0x138/0x170
[  160.676054][ T8904]  do_syscall_64+0x166/0x520
[  160.676061][ T8904]  ? trace_irq_disable+0x3b/0x140
[  160.676069][ T8904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.676078][ T8904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.676086][ T8904] RIP: 0033:0x7fa2cd75e98e
[  160.676094][ T8904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  160.676100][ T8904] RSP: 002b:00007fa2ce699b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  160.676110][ T8904] RAX: ffffffffffffffda RBX: 00007fa2ce69a6c0 RCX: 00007fa2cd75e98e
[  160.676116][ T8904] RDX: 0000000000000002 RSI: 00007fa2ce699c00 RDI: ffffffffffffff9c
[  160.676121][ T8904] RBP: 00007fa2ce699c00 R08: 0000000000000000 R09: 0000000000000000
[  160.676125][ T8904] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  160.676131][ T8904] R13: 00007fa2cda26038 R14: 00007fa2cda25fa0 R15: 00007ffe3da12ec8
[  160.676143][ T8904]  </TASK>
[  160.751531][ T8906] loop3: detected capacity change from 0 to 128
[  160.980490][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  161.130412][  T992] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  161.210765][ T5659] gspca_sq930x: reg_w 0305 fd00 failed -71
[  161.210848][ T5659] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[  161.213644][ T5659] usb 3-1: USB disconnect, device number 26
[  161.290626][  T992] usb 4-1: Using ep0 maxpacket: 16
[  161.293710][  T992] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  161.302036][  T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.327312][  T992] usb 4-1: config 0 descriptor??
[  161.334235][  T992] gspca_main: sonixj-2.14.0 probing 0471:0327
[  161.560455][ T5666] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  161.711174][ T5666] usb 1-1: Using ep0 maxpacket: 16
[  161.712682][ T5666] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  161.713932][ T5666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.713952][ T5666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.713967][ T5666] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  161.713994][ T5666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.725800][ T5666] usb 1-1: config 0 descriptor??
[  162.138047][ T5666] microsoft 0003:045E:07DA.0009: report is too long
[  162.138097][ T5666] microsoft 0003:045E:07DA.0009: item 0 2 0 11 parsing failed
[  162.138801][ T5666] microsoft 0003:045E:07DA.0009: parse failed
[  162.138841][ T5666] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22
[  162.185568][ T8931] [U] 
[  162.186510][ T8930] [U] 
[  162.233689][ T8933] loop2: detected capacity change from 0 to 4096
[  162.239076][ T8933] ntfs3(loop2): ino=0, mi_enum_attr
[  162.243716][ T8933] ntfs3(loop2): ino=0, mi_enum_attr
[  162.243781][ T8933] ntfs3(loop2): ino=0, mi_enum_attr
[  162.305829][ T8935] loop2: detected capacity change from 0 to 128
[  162.341269][ T5666] usb 1-1: USB disconnect, device number 17
[  162.354562][   T10] usb 4-1: USB disconnect, device number 9
[  162.365203][ T8937] loop2: detected capacity change from 0 to 2048
[  162.378750][ T8938] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.422394][ T8938] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  162.422454][ T8938] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  162.422769][ T8938] Remounting filesystem read-only
[  162.426268][ T5599] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  162.957455][ T8958] capability: warning: `syz.0.1252' uses 32-bit capabilities (legacy support in use)
[  163.160408][   T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  163.320407][   T27] usb 4-1: Using ep0 maxpacket: 16
[  163.323271][   T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  163.328902][   T27] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  163.333557][   T27] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  163.339206][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  163.344019][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  163.363447][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.366671][   T27] usb 4-1: Product: syz
[  163.368248][   T27] usb 4-1: Manufacturer: syz
[  163.370424][   T27] usb 4-1: SerialNumber: syz
[  163.382956][   T27] usb 4-1: config 0 descriptor??
[  163.716212][   T27] appledisplay 4-1:0.0: Error while getting initial brightness: -110
[  163.752923][   T27] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110
[  163.772562][   T27] usb 4-1: USB disconnect, device number 10
[  165.237211][ T8983] loop3: detected capacity change from 0 to 4096
[  165.262874][ T8985] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.296202][ T8983] overlayfs: upper fs does not support tmpfile.
[  165.296903][ T8983] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  165.296955][ T8983] overlayfs: failed to set xattr on upper
[  165.296976][ T8983] overlayfs: ...falling back to redirect_dir=nofollow.
[  165.296997][ T8983] overlayfs: ...falling back to index=off.
[  165.297018][ T8983] overlayfs: ...falling back to uuid=null.
[  165.376471][ T7095] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  165.379962][ T7095] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  165.393275][ T7095] Remounting filesystem read-only
[  165.395334][ T7095] NILFS (loop3): error -5 truncating bmap (ino=12)
[  165.404790][ T7095] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  165.675411][ T8994] Invalid source name
[  165.675501][ T8994] UBIFS error (pid: 8994): cannot open "./file0", error -22
[  165.872979][ T9004] Bluetooth: hci0: unsupported parameter 5135
[  165.873239][ T9004] Bluetooth: hci0: unsupported parameter 8192
[  165.873302][ T9004] Bluetooth: hci0: unsupported parameter 5135
[  165.873311][ T9004] Bluetooth: hci0: unsupported parameter 8192
[  165.930448][   T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  166.082338][   T27] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  166.089848][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.089937][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  166.089983][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  166.090020][   T27] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.116483][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.119965][   T27] usb 4-1: Product: syz
[  166.120034][   T27] usb 4-1: Manufacturer: syz
[  166.120068][   T27] usb 4-1: SerialNumber: syz
[  166.136446][ T9000] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  166.137193][ T9000] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  166.146422][   T27] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  166.151539][   T27] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  166.154711][   T27] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  166.252552][ T9012] loop0: detected capacity change from 0 to 32768
[  166.331734][ T9012] JBD2: Ignoring recovery information on journal
[  166.421140][   T27] usb 4-1: USB disconnect, device number 11
[  166.455260][ T9012] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  166.463689][   T27] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  166.482401][   T27] cyberjack 4-1:1.0: device disconnected
[  166.635546][ T5606] ocfs2: Unmounting device (7,0) on (node local)
[  167.096830][ T9032] loop3: detected capacity change from 0 to 512
[  167.162227][   T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  167.312571][   T27] usb 1-1: Using ep0 maxpacket: 8
[  167.316572][   T27] usb 1-1: unable to get BOS descriptor or descriptor too short
[  167.319440][   T27] usb 1-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c
[  167.324927][   T27] usb 1-1: config 7 has an invalid interface number: 171 but max is 0
[  167.324962][   T27] usb 1-1: config 7 has no interface number 0
[  167.325008][   T27] usb 1-1: config 7 interface 171 has no altsetting 0
[  167.340918][   T27] usb 1-1: string descriptor 0 read error: -22
[  167.340995][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.353074][   T27] gspca_main: spca505-2.14.0 probing 041e:401d
[  167.757784][   T27] gspca_spca505: reg write: error -71
[  167.757871][   T27] spca505 1-1:7.171: probe with driver spca505 failed with error -5
[  167.766596][   T27] usb 1-1: USB disconnect, device number 18
[  167.770674][ T5657] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  167.930963][ T5657] usb 4-1: New USB device found, idVendor=046d, idProduct=c132, bcdDevice= 0.00
[  167.934975][ T5657] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.938683][ T5657] usb 4-1: config 0 interface 0 has no altsetting 0
[  167.941159][ T5657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.945325][ T5657] usb 4-1: config 0 descriptor??
[  168.158465][   T27] usb 4-1: USB disconnect, device number 12
[  168.639509][ T9064] loop0: detected capacity change from 0 to 512
[  168.743774][ T9064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.744102][ T9064] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.767870][ T9064] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.1296: corrupted xattr block 33: invalid ea_ino
[  168.787422][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.960967][   T27] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  169.112812][   T27] usb 4-1: not running at top speed; connect to a high speed hub
[  169.112871][   T27] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  169.122049][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.122121][   T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  169.122189][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.141445][   T27] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  169.144407][   T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[  169.150166][   T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  169.153076][   T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  169.164523][   T27] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  169.172078][   T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  169.176279][   T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  169.180630][   T27] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  169.345933][   T27] usb 4-1: USB disconnect, device number 13
[  169.366645][   T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  169.377382][   T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  169.380891][   T27] keyspan 4-1:1.0: device disconnected
[  169.486705][ T9079] loop0: detected capacity change from 0 to 40427
[  169.491026][ T9079] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  169.491060][ T9079] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  169.557911][ T9079] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.564652][ T9079] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  169.567134][ T9079] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  170.055266][ T9091] No such timeout policy "syz1"
[  170.321488][ T9099] tmpfs: Cannot enable quota on remount
[  170.398878][ T9101] loop3: detected capacity change from 0 to 4096
[  170.485235][ T9106] loop0: detected capacity change from 0 to 512
[  170.516206][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'.
[  170.543340][ T9108] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.583437][ T9111] loop9: detected capacity change from 0 to 7
[  170.591528][ T9111] Dev loop9: unable to read RDB block 7
[  170.591570][ T9111]  loop9: unable to read partition table
[  170.591682][ T9111] loop9: partition table beyond EOD, truncated
[  170.591736][ T9111] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5)
[  170.685989][ T9114] loop0: detected capacity change from 0 to 1024
[  170.688926][ T9115] loop2: detected capacity change from 0 to 1024
[  170.741435][ T5597] Bluetooth: hci1: command 0x2016 tx timeout
[  170.741478][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  170.765284][ T9114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.770071][ T9114] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.789207][ T9114] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.1313: lblock 0 mapped to illegal pblock 0 (length 1)
[  170.804836][ T9114] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  170.809241][ T9114] EXT4-fs (loop0): This should not happen!! Data will be lost
[  170.809241][ T9114] 
[  170.820060][ T9114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1313: bg 0: block 112: padding at end of block bitmap is not set
[  170.855806][ T9114] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  170.878666][ T9114] EXT4-fs (loop0): This should not happen!! Data will be lost
[  170.878666][ T9114] 
[  170.878720][ T9114] EXT4-fs (loop0): Total free blocks count 0
[  170.878744][ T9114] EXT4-fs (loop0): Free/Dirty block details
[  170.878796][ T9114] EXT4-fs (loop0): free_blocks=0
[  170.878832][ T9114] EXT4-fs (loop0): dirty_blocks=64
[  170.878856][ T9114] EXT4-fs (loop0): Block reservation details
[  171.178109][ T9134] loop2: detected capacity change from 0 to 512
[  171.250377][ T5657] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  171.346427][ T9143] loop2: detected capacity change from 0 to 128
[  171.369627][ T9143] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  171.374285][ T9143] qnx6: wrong signature (magic) in superblock #1.
[  171.376653][ T9143] qnx6: unable to read the first superblock
[  171.412042][ T5657] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  171.415655][ T5657] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  171.415705][ T5657] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.415731][ T5657] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  171.415766][ T5657] usb 4-1: config 1 has no interface number 1
[  171.415799][ T5657] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  171.415832][ T5657] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x74, changing to 0x4
[  171.415860][ T5657] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  171.439666][ T5657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.439702][ T5657] usb 4-1: Product: syz
[  171.439762][ T5657] usb 4-1: Manufacturer: syz
[  171.439785][ T5657] usb 4-1: SerialNumber: syz
[  171.747990][ T9150] loop2: detected capacity change from 0 to 4096
[  171.827134][ T9150] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  171.875514][ T5657] usb 4-1: No MIDI endpoints found
[  171.877916][ T5657] usb 4-1: Failed to parse MIDI 2.0 interface
[  171.877985][ T5657] usb 4-1: 0:2: cannot create sequencer device
[  171.931278][ T9150] ntfs3(loop2): Failed to load $Extend (-22).
[  171.931440][ T9150] ntfs3(loop2): Failed to initialize $Extend.
[  172.091957][ T5657] usb 4-1: USB disconnect, device number 14
[  172.175392][ T9176] FAULT_INJECTION: forcing a failure.
[  172.175392][ T9176] name failslab, interval 1, probability 0, space 0, times 0
[  172.181645][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.2.1327 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  172.181677][ T9176] Tainted: [L]=SOFTLOCKUP
[  172.181681][ T9176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.181686][ T9176] Call Trace:
[  172.181690][ T9176]  <TASK>
[  172.181694][ T9176]  dump_stack_lvl+0xe8/0x150
[  172.181710][ T9176]  should_fail_ex+0x410/0x560
[  172.181722][ T9176]  should_failslab+0xa8/0x100
[  172.181762][ T9176]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  172.181778][ T9176]  ? kobject_set_name_vargs+0x61/0x110
[  172.181793][ T9176]  ? kobject_set_name_vargs+0x61/0x110
[  172.181811][ T9176]  kvasprintf+0xeb/0x1a0
[  172.181822][ T9176]  ? __pfx_kvasprintf+0x10/0x10
[  172.181831][ T9176]  ? rcu_is_watching+0x16/0xb0
[  172.181840][ T9176]  ? kfree+0x4d/0x650
[  172.181850][ T9176]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  172.181861][ T9176]  ? kvasprintf_const+0xe1/0x240
[  172.181871][ T9176]  kobject_set_name_vargs+0x61/0x110
[  172.181881][ T9176]  dev_set_name+0xe2/0x140
[  172.181893][ T9176]  ? __pfx_dev_set_name+0x10/0x10
[  172.181903][ T9176]  ? __kmalloc_cache_noprof+0x14d/0x600
[  172.181911][ T9176]  ? nfc_allocate_device+0x129/0x560
[  172.181918][ T9176]  ? nfc_allocate_device+0x129/0x560
[  172.181928][ T9176]  nfc_allocate_device+0x1d6/0x560
[  172.181937][ T9176]  nci_allocate_device+0x1da/0x380
[  172.181947][ T9176]  virtual_ncidev_open+0x75/0x1a0
[  172.181957][ T9176]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  172.181964][ T9176]  misc_open+0x2d5/0x350
[  172.181975][ T9176]  chrdev_open+0x4d9/0x600
[  172.181985][ T9176]  ? __pfx_chrdev_open+0x10/0x10
[  172.181994][ T9176]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  172.182005][ T9176]  ? __pfx_chrdev_open+0x10/0x10
[  172.182013][ T9176]  do_dentry_open+0x816/0x1380
[  172.182026][ T9176]  vfs_open+0x3b/0x340
[  172.182035][ T9176]  ? path_openat+0x1428/0x1d60
[  172.182043][ T9176]  path_openat+0x1443/0x1d60
[  172.182058][ T9176]  do_file_open+0x23e/0x4a0
[  172.182067][ T9176]  ? __pfx_do_file_open+0x10/0x10
[  172.182083][ T9176]  ? _raw_spin_unlock+0x28/0x50
[  172.182092][ T9176]  ? alloc_fd+0x651/0x6c0
[  172.182106][ T9176]  do_sys_openat2+0x115/0x200
[  172.182116][ T9176]  ? __se_sys_futex+0x3a8/0x450
[  172.182125][ T9176]  ? __pfx_do_sys_openat2+0x10/0x10
[  172.182135][ T9176]  ? __fget_files+0x2a/0x420
[  172.182152][ T9176]  ? rcu_is_watching+0x16/0xb0
[  172.182162][ T9176]  __x64_sys_openat+0x138/0x170
[  172.182173][ T9176]  do_syscall_64+0x166/0x520
[  172.182181][ T9176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.182190][ T9176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.182199][ T9176] RIP: 0033:0x7f261559e159
[  172.182207][ T9176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.182214][ T9176] RSP: 002b:00007f261641e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  172.182223][ T9176] RAX: ffffffffffffffda RBX: 00007f2615825fa0 RCX: 00007f261559e159
[  172.182229][ T9176] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  172.182234][ T9176] RBP: 00007f2615635024 R08: 0000000000000000 R09: 0000000000000000
[  172.182239][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.182243][ T9176] R13: 00007f2615826038 R14: 00007f2615825fa0 R15: 00007ffe2bb5b098
[  172.182254][ T9176]  </TASK>
[  173.277047][ T9216] loop3: detected capacity change from 0 to 131072
[  173.284201][ T9216] F2FS-fs (loop3): invalid crc value
[  173.352215][ T9216] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.361355][ T9216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  174.229612][   T36] audit: type=1326 audit(1788966300.753:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1339" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91fe19e159 code=0x0
[  174.419490][ T9278] vlan2: entered promiscuous mode
[  174.422427][ T9278] bridge0: entered promiscuous mode
[  174.484217][ T9282] wg0: entered promiscuous mode
[  174.487622][ T9282] netlink: 'syz.0.1347': attribute type 1 has an invalid length.
[  174.492947][ T9282] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1347'.
[  174.588384][ T9288] nvme_fabrics: missing parameter 'nqn=%s'
[  174.626327][ T9290] loop0: detected capacity change from 0 to 256
[  174.629235][ T9290] vfat: Unknown parameter 'non'
[  174.633242][ T9290] device-mapper: ioctl: Invalid ioctl structure: uuid pr>wC"devtmpfs, name , dev f3
[  174.794255][ T9299] loop2: detected capacity change from 0 to 4096
[  174.799301][ T9299] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  174.826260][ T9299] ntfs3(loop2): failed to convert "076c" to cp932
[  175.015507][   T36] audit: type=1400 audit(1788966301.543:637): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A02 pid=9310 comm="syz.3.1360"
[  175.310358][ T5657] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  175.324785][ T9323] loop2: detected capacity change from 0 to 32768
[  175.470942][ T5657] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  175.475209][ T5657] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.475262][ T5657] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.475298][ T5657] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.475333][ T5657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.500023][ T5657] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -22
[  175.567076][ T9331] loop2: detected capacity change from 0 to 512
[  175.576803][ T9331] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  175.579429][ T9331] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  175.588347][ T9331] EXT4-fs (loop2): 1 truncate cleaned up
[  175.592378][ T9331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.598678][ T9331] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.1370: Logical block already allocated
[  175.604414][ T9331] EXT4-fs: group quota file already specified
[  175.620097][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.708367][ T5657] usb 4-1: USB disconnect, device number 15
[  175.975376][ T9339] loop2: detected capacity change from 0 to 40427
[  175.982193][ T9339] F2FS-fs (loop2): invalid crc value
[  176.021384][ T9339] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  176.027117][ T9339] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  176.029559][ T9339] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  176.033657][ T9339] F2FS-fs (loop2): Start checkpoint disabled!
[  176.044209][ T9339] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  176.047647][ T9339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  176.060480][ T9315] loop0: detected capacity change from 0 to 32768
[  176.075864][ T9315] OCFS2: ERROR (device loop0): int ocfs2_validate_slot_map_block(struct super_block *, struct buffer_head *): Invalid Slot Map Buffer Head Block Number : 0, Should be >= 2
[  176.075914][ T9315] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  176.075954][ T9315] OCFS2: File system is now read-only.
[  176.075976][ T9315] (syz.0.1361,9315,1):ocfs2_map_slot_buffers:410 ERROR: status = -30
[  176.076003][ T9315] (syz.0.1361,9315,1):ocfs2_init_slot_info:448 ERROR: status = -30
[  176.076040][ T9315] (syz.0.1361,9315,1):ocfs2_initialize_super:2218 ERROR: status = -30
[  176.076267][ T9315] (syz.0.1361,9315,1):ocfs2_fill_super:1177 ERROR: status = -30
[  176.218135][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'.
[  176.259912][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1375'.
[  176.376109][ T9352] loop0: detected capacity change from 0 to 256
[  176.380912][ T9352] exfat: Deprecated parameter 'namecase'
[  176.384970][ T9352] exfat: Deprecated parameter 'utf8'
[  176.406850][ T9352] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  176.529345][ T9339] syz.2.1373: attempt to access beyond end of device
[  176.529345][ T9339] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  176.690436][  T992] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  176.841995][  T992] usb 4-1: Using ep0 maxpacket: 16
[  176.847279][  T992] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  176.851203][  T992] usb 4-1: too many configurations: 112, using maximum allowed: 8
[  176.928550][  T992] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  176.931832][  T992] usb 4-1: Product: syz
[  176.931840][  T992] usb 4-1: Manufacturer: syz
[  176.982342][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  177.007529][  T992] r8152-cfgselector 4-1: Unknown version 0x0000
[  177.010427][  T992] r8152-cfgselector 4-1: config 0 descriptor??
[  177.271065][  T992] r8152-cfgselector 4-1: USB disconnect, device number 16
[  178.022676][  T992] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  178.060345][ T5657] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  178.170357][  T992] usb 3-1: Using ep0 maxpacket: 16
[  178.172705][  T992] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  178.179360][  T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.182180][  T992] usb 3-1: Product: syz
[  178.182188][  T992] usb 3-1: Manufacturer: syz
[  178.182194][  T992] usb 3-1: SerialNumber: syz
[  178.191167][  T992] usb 3-1: config 0 descriptor??
[  178.195339][  T992] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  178.210914][ T5657] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  178.214799][ T5657] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.219167][ T5657] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  178.223844][ T5657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  178.227358][ T5657] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.233760][ T5657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.236394][ T5657] usb 4-1: Product: syz
[  178.237992][ T5657] usb 4-1: Manufacturer: syz
[  178.239746][ T5657] usb 4-1: SerialNumber: syz
[  178.249633][ T5657] usb 4-1: config 0 descriptor??
[  178.257713][ T5657] xbox_remote_probe: Unexpected endpoint_in
[  178.397517][  T992] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  178.401137][  T992] visor 3-1:0.0: probe with driver visor failed with error -5
[  178.466220][ T5657] usb 4-1: USB disconnect, device number 17
[  178.600003][  T992] usb 3-1: USB disconnect, device number 27
[  179.410411][  T992] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  179.561304][  T992] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  179.566699][  T992] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.572045][  T992] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  179.576338][  T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.588706][ T9403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  179.608717][  T992] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  179.819859][ T2256] usb 3-1: USB disconnect, device number 28
[  180.120139][ T9413] netlink: 'syz.0.1404': attribute type 4 has an invalid length.
[  180.127018][ T9413] netlink: 'syz.0.1404': attribute type 4 has an invalid length.
[  181.704112][ T9426] loop2: detected capacity change from 0 to 32768
[  181.733471][ T9426] JBD2: Ignoring recovery information on journal
[  181.759671][ T9426] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  181.836692][ T5599] ocfs2: Unmounting device (7,2) on (node local)
[  182.330454][  T992] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  182.481212][  T992] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  182.486778][  T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.491951][  T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.496387][  T992] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  182.505398][  T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.515081][  T992] usb 3-1: config 0 descriptor??
[  182.931182][  T992] steelseries 0003:1038:1410.000A: item fetching failed at offset 4/7
[  182.935274][  T992] steelseries 0003:1038:1410.000A: parse failed
[  182.939717][  T992] steelseries 0003:1038:1410.000A: probe with driver steelseries failed with error -22
[  183.133704][  T992] usb 3-1: USB disconnect, device number 29
[  183.865144][ T9452] tmpfs: Bad value for 'mpol'
[  184.128384][ T9456] loop2: detected capacity change from 0 to 32768
[  184.138432][ T9456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1423 (9456)
[  184.174886][ T9456] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.180781][ T9456] BTRFS info (device loop2): using crc32c checksum algorithm
[  184.316611][ T9456] BTRFS info (device loop2): setting nodatasum
[  184.320829][ T9456] BTRFS info (device loop2): setting nodatacow
[  184.320881][ T9456] BTRFS info (device loop2): disabling tree log
[  184.320916][ T9456] BTRFS info (device loop2): turning on async discard
[  184.320950][ T9456] BTRFS info (device loop2): enabling free space tree
[  184.320985][ T9456] BTRFS info (device loop2): max_inline set to 0
[  184.453122][ T5599] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.649865][ T9475] loop3: detected capacity change from 0 to 4096
[  184.761145][ T9475] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  184.785313][ T9475] ntfs3(loop3): Failed to load $Extend (-22).
[  184.787429][ T9475] ntfs3(loop3): Failed to initialize $Extend.
[  185.019811][ T9486] FAULT_INJECTION: forcing a failure.
[  185.019811][ T9486] name failslab, interval 1, probability 0, space 0, times 0
[  185.028912][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.2.1430 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  185.028943][ T9486] Tainted: [L]=SOFTLOCKUP
[  185.028947][ T9486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.028952][ T9486] Call Trace:
[  185.028958][ T9486]  <TASK>
[  185.028962][ T9486]  dump_stack_lvl+0xe8/0x150
[  185.028978][ T9486]  should_fail_ex+0x410/0x560
[  185.028989][ T9486]  should_failslab+0xa8/0x100
[  185.029001][ T9486]  __kmalloc_cache_noprof+0xa3/0x600
[  185.029010][ T9486]  ? __kmalloc_cache_noprof+0x14d/0x600
[  185.029018][ T9486]  ? resv_map_alloc+0x88/0x2c0
[  185.029025][ T9486]  ? resv_map_alloc+0x88/0x2c0
[  185.029035][ T9486]  resv_map_alloc+0x88/0x2c0
[  185.029044][ T9486]  hugetlbfs_get_inode+0x5f/0x660
[  185.029058][ T9486]  hugetlb_file_setup+0x28f/0x630
[  185.029070][ T9486]  newseg+0x467/0xc70
[  185.029082][ T9486]  ? __pfx_newseg+0x10/0x10
[  185.029094][ T9486]  ipcget+0x1db/0xf20
[  185.029103][ T9486]  ? do_futex+0x3e7/0x4e0
[  185.029122][ T9486]  ? __pfx_do_futex+0x10/0x10
[  185.029131][ T9486]  ? mntput+0x65/0xc0
[  185.029141][ T9486]  ? __pfx_ipcget+0x10/0x10
[  185.029151][ T9486]  ? __se_sys_futex+0x3a8/0x450
[  185.029161][ T9486]  __x64_sys_shmget+0x140/0x190
[  185.029173][ T9486]  ? __pfx___x64_sys_shmget+0x10/0x10
[  185.029186][ T9486]  do_syscall_64+0x166/0x520
[  185.029195][ T9486]  ? trace_irq_disable+0x3b/0x140
[  185.029202][ T9486]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.029212][ T9486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.029219][ T9486] RIP: 0033:0x7f261559e159
[  185.029227][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.029234][ T9486] RSP: 002b:00007f261641e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  185.029244][ T9486] RAX: ffffffffffffffda RBX: 00007f2615825fa0 RCX: 00007f261559e159
[  185.029250][ T9486] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000
[  185.029255][ T9486] RBP: 00007f2615635024 R08: 0000000000000000 R09: 0000000000000000
[  185.029260][ T9486] R10: 0000200000b7d000 R11: 0000000000000246 R12: 0000000000000000
[  185.029266][ T9486] R13: 00007f2615826038 R14: 00007f2615825fa0 R15: 00007ffe2bb5b098
[  185.029278][ T9486]  </TASK>
[  185.104157][ T9488] loop0: detected capacity change from 0 to 128
[  185.168024][ T9488] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  185.168546][ T9488] hpfs: filesystem error: improperly stopped
[  185.168676][ T9488] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  185.174957][ T9488] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  185.174965][ T9488] hpfs: You really don't want any checks? You are crazy...
[  185.175694][ T9488] hpfs: hpfs_map_sector(): read error
[  185.175748][ T9488] hpfs: code page support is disabled
[  185.185390][ T9488] hpfs: hpfs_map_4sectors(): unaligned read
[  185.185673][ T9488] hpfs: hpfs_map_4sectors(): unaligned read
[  185.185679][ T9488] hpfs: filesystem error: unable to find root dir
[  185.399271][   T36] audit: type=1400 audit(1788966311.923:638): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9489 comm="syz.2.1433"
[  185.597192][ T9501] xt_hashlimit: size too large, truncated to 1048576
[  185.732053][ T9512] loop0: detected capacity change from 0 to 1024
[  185.756341][ T9512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.802885][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.007681][   T36] audit: type=1800 audit(1788966312.533:639): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1448" name="file0" dev="overlay" ino=2791 res=0 errno=0
[  186.110504][   T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  186.122754][ T9532] loop2: detected capacity change from 0 to 512
[  186.141897][ T9532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.145949][ T9532] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.157169][ T9532] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.1450: corrupted xattr block 33: invalid checksum
[  186.201801][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.262965][   T27] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  186.268222][   T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.268310][   T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  186.268348][   T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  186.268387][   T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.268439][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.613929][  T992] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  186.761772][  T992] usb 4-1: Using ep0 maxpacket: 8
[  186.765256][  T992] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  186.772644][  T992] usb 4-1: config 0 interface 0 has no altsetting 0
[  186.772704][  T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.786256][  T992] usb 4-1: config 0 descriptor??
[  187.201407][ T9552] nvme_fcloop: unknown parameter or missing value 'r'
[  187.212251][   T27] gud 1-1:1.0: Unexpected status OK for failed transfer
[  187.215703][   T27] gud 1-1:1.0: Failed to get connectors (error=-32)
[  187.218061][   T27] gud 1-1:1.0: probe with driver gud failed with error -32
[  187.312617][  T992] hid_parser_main: 17 callbacks suppressed
[  187.315005][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.317648][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.321626][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.321666][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.326471][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.329081][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.329094][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.334166][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.334186][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.334195][  T992] samsung 0003:0419:0600.000B: unknown main item tag 0x0
[  187.353388][  T992] samsung 0003:0419:0600.000B: hidraw0: USB HID v0.04 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0
[  187.411248][  T992] usb 1-1: USB disconnect, device number 19
[  187.522187][   T27] usb 4-1: USB disconnect, device number 18
[  187.973247][ T9554] loop0: detected capacity change from 0 to 512
[  187.985622][ T9554] EXT4-fs (loop0): Test dummy encryption mode enabled
[  187.985671][ T9554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  188.000704][ T9554] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.1459: bad orphan inode 131083
[  188.000756][ T9554] loop0: lost filesystem error report for type 5 error -117
[  188.007906][ T9554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.069897][ T9554] fscrypt: AES-256-XTS using blk-crypto-fallback
[  188.178498][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.190420][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.329641][ T9566] loop3: detected capacity change from 0 to 2048
[  188.367678][ T9566]  loop3: p1 < > p4 < >
[  188.438450][ T9570] netlink: Unknown conntrack attr (0)
[  188.552051][ T9575] loop3: detected capacity change from 0 to 16
[  188.555946][ T9575] erofs (device loop3): mounted with root inode @ nid 36.
[  188.559688][ T9575] syz.3.1467: attempt to access beyond end of device
[  188.559688][ T9575] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16
[  188.572854][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  188.572896][ T9575] erofs (device loop3): read error -117 @ 0 of nid 89
[  188.580859][   T36] audit: type=1800 audit(1788966315.103:640): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1467" name="file2" dev="loop3" ino=89 res=0 errno=0
[  188.593827][ T9575] syz.3.1467: attempt to access beyond end of device
[  188.593827][ T9575] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16
[  188.594046][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  188.595628][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  188.595667][ T9575] erofs (device loop3): read error -117 @ 1 of nid 89
[  188.595813][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  188.595842][ T9575] erofs (device loop3): read error -117 @ 1 of nid 89
[  188.617660][ T9575] syz.3.1467: attempt to access beyond end of device
[  188.617660][ T9575] loop3: rw=0, sector=16, nr_sectors = 8 limit=16
[  188.617784][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  188.617822][ T9575] erofs (device loop3): read error -5 @ 2 of nid 89
[  188.618221][ T9575] syz.3.1467: attempt to access beyond end of device
[  188.618221][ T9575] loop3: rw=0, sector=16, nr_sectors = 8 limit=16
[  188.618389][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  188.618421][ T9575] erofs (device loop3): read error -5 @ 2 of nid 89
[  188.618525][ T9575] syz.3.1467: attempt to access beyond end of device
[  188.618525][ T9575] loop3: rw=0, sector=16, nr_sectors = 8 limit=16
[  188.618587][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  188.618617][ T9575] erofs (device loop3): read error -5 @ 2 of nid 89
[  188.618752][ T9575] syz.3.1467: attempt to access beyond end of device
[  188.618752][ T9575] loop3: rw=0, sector=16, nr_sectors = 8 limit=16
[  188.618813][ T9575] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  188.618842][ T9575] erofs (device loop3): read error -5 @ 2 of nid 89
[  188.950406][   T27] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  188.978456][ T9581] loop2: detected capacity change from 0 to 1024
[  188.985412][ T9581] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  189.018098][ T9581] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.1470: Freeing blocks not in datazone - block = 0, count = 4096
[  189.027574][ T9581] loop2: lost filesystem error report for type 5 error -117
[  189.027823][ T9581] EXT4-fs (loop2): Remounting filesystem read-only
[  189.030935][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  189.030948][    C1] EXT4-fs (loop2): initial error at time 1788966315: ext4_free_blocks:6719
[  189.030963][    C1] EXT4-fs (loop2): last error at time 1788966315: ext4_free_blocks:6719
[  189.044052][ T9581] EXT4-fs (loop2): 1 orphan inode deleted
[  189.047972][ T9581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.067093][ T1111] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  189.072875][ T1111] Quota error (device loop2): write_blk: dquota write failed
[  189.079631][ T1111] Quota error (device loop2): remove_free_dqentry: Can't write block (2) with free entries
[  189.083999][ T1111] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  189.084016][ T1111] Quota error (device loop2): write_blk: dquota write failed
[  189.084024][ T1111] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list
[  189.084092][ T1111] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  189.084104][ T1111] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  189.107621][   T27] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  189.112981][   T27] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  189.113029][   T27] usb 4-1: config 0 has no interface number 0
[  189.113101][   T27] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  189.113141][   T27] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.131092][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.134541][   T27] usb 4-1: Product: syz
[  189.136446][   T27] usb 4-1: Manufacturer: syz
[  189.136457][   T27] usb 4-1: SerialNumber: syz
[  189.145738][   T27] usb 4-1: config 0 descriptor??
[  189.148921][ T9578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  189.154088][   T27] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  189.163353][   T27] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  189.184729][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.360861][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  189.568554][  T992] usb 4-1: USB disconnect, device number 19
[  189.589905][ T9594] random: crng reseeded on system resumption
[  189.605195][  T992] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  189.605482][  T992] cyberjack 4-1:0.69: device disconnected
[  189.640042][ T9594] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  189.749138][ T9598] loop0: detected capacity change from 0 to 1024
[  189.752657][ T9598] EXT4-fs: Ignoring removed bh option
[  189.780018][ T9598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.823839][ T9598] FAULT_INJECTION: forcing a failure.
[  189.823839][ T9598] name failslab, interval 1, probability 0, space 0, times 0
[  189.823886][ T9598] CPU: 1 UID: 0 PID: 9598 Comm: syz.0.1477 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  189.823913][ T9598] Tainted: [L]=SOFTLOCKUP
[  189.823917][ T9598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.823922][ T9598] Call Trace:
[  189.823926][ T9598]  <TASK>
[  189.823929][ T9598]  dump_stack_lvl+0xe8/0x150
[  189.823944][ T9598]  should_fail_ex+0x410/0x560
[  189.823956][ T9598]  should_failslab+0xa8/0x100
[  189.823968][ T9598]  __kmalloc_noprof+0xfe/0x720
[  189.823976][ T9598]  ? bdev_getblk+0x58b/0x6e0
[  189.823985][ T9598]  ? ext4_xattr_block_set+0x353/0x29a0
[  189.823997][ T9598]  ? ext4_xattr_block_set+0x353/0x29a0
[  189.824010][ T9598]  ext4_xattr_block_set+0x353/0x29a0
[  189.824030][ T9598]  ? __pfx___ext4_get_inode_loc+0x10/0x10
[  189.824051][ T9598]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  189.824063][ T9598]  ? xattr_find_entry+0x236/0x280
[  189.824075][ T9598]  ? ext4_xattr_block_find+0xce/0x320
[  189.824087][ T9598]  ext4_expand_extra_isize_ea+0x111b/0x1ec0
[  189.824112][ T9598]  __ext4_expand_extra_isize+0x30d/0x400
[  189.824128][ T9598]  __ext4_mark_inode_dirty+0x4e8/0x7b0
[  189.824143][ T9598]  ext4_dirty_inode+0xd0/0x110
[  189.824155][ T9598]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  189.824166][ T9598]  __mark_inode_dirty+0x3a8/0x13b0
[  189.824179][ T9598]  file_update_time_flags+0x399/0x440
[  189.824191][ T9598]  ext4_write_checks+0x9f/0x220
[  189.824204][ T9598]  ext4_buffered_write_iter+0xb0/0x380
[  189.824213][ T9598]  ? __pfx_futex_wake_mark+0x10/0x10
[  189.824226][ T9598]  ext4_file_write_iter+0xae4/0x1cd0
[  189.824240][ T9598]  ? lock_acquire+0x115/0x350
[  189.824250][ T9598]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  189.824264][ T9598]  vfs_write+0x612/0xba0
[  189.824276][ T9598]  ? __pfx_vfs_write+0x10/0x10
[  189.824287][ T9598]  ? __fget_files+0x2a/0x420
[  189.824301][ T9598]  __x64_sys_pwrite64+0x196/0x220
[  189.824310][ T9598]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  189.824323][ T9598]  do_syscall_64+0x166/0x520
[  189.824331][ T9598]  ? trace_irq_disable+0x3b/0x140
[  189.824338][ T9598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.824348][ T9598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.824356][ T9598] RIP: 0033:0x7f91fe19e159
[  189.824365][ T9598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.824372][ T9598] RSP: 002b:00007f91ff011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  189.824382][ T9598] RAX: ffffffffffffffda RBX: 00007f91fe425fa0 RCX: 00007f91fe19e159
[  189.824388][ T9598] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[  189.824393][ T9598] RBP: 00007f91fe235024 R08: 0000000000000000 R09: 0000000000000000
[  189.824400][ T9598] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[  189.824406][ T9598] R13: 00007f91fe426038 R14: 00007f91fe425fa0 R15: 00007ffcf7647848
[  189.824418][ T9598]  </TASK>
[  189.953555][ T5606] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /490/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  189.964677][ T5606] EXT4-fs (loop0): Remounting filesystem read-only
[  190.011107][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.386795][ T9621] netlink: 'syz.3.1487': attribute type 10 has an invalid length.
[  190.389930][ T9621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1487'.
[  190.394250][ T9621] dummy0: entered promiscuous mode
[  190.396904][ T9621] bridge0: port 3(dummy0) entered blocking state
[  190.399935][ T9621] bridge0: port 3(dummy0) entered disabled state
[  190.403846][ T9621] dummy0: entered allmulticast mode
[  190.412751][ T9621] bridge0: port 3(dummy0) entered blocking state
[  190.413955][ T9621] bridge0: port 3(dummy0) entered forwarding state
[  190.437000][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1487'.
[  190.550756][ T5658] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  190.682130][ T9630] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  190.701548][ T5658] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  190.710533][ T5658] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30
[  190.710697][ T5658] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  190.710823][ T5658] usb 3-1: config 0 interface 0 has no altsetting 0
[  190.710965][ T5658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.726991][ T5658] usb 3-1: config 0 descriptor??
[  191.218188][ T5658] magicmouse 0003:05AC:0324.000C: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0
[  191.332851][ T9640] process 'syz.3.1496' launched './file1' with NULL argv: empty string added
[  191.352803][  T992] usb 3-1: USB disconnect, device number 30
[  191.458745][ T9642] loop3: detected capacity change from 0 to 64
[  191.474450][ T9642] BFS-fs: bfs_iget(): Unknown vtype=3842 loop3:00000002
[  191.853987][ T9646] FAULT_INJECTION: forcing a failure.
[  191.853987][ T9646] name failslab, interval 1, probability 0, space 0, times 0
[  191.859400][ T9646] CPU: 1 UID: 0 PID: 9646 Comm: syz.0.1499 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  191.859432][ T9646] Tainted: [L]=SOFTLOCKUP
[  191.859436][ T9646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.859441][ T9646] Call Trace:
[  191.859446][ T9646]  <TASK>
[  191.859450][ T9646]  dump_stack_lvl+0xe8/0x150
[  191.859487][ T9646]  should_fail_ex+0x410/0x560
[  191.859498][ T9646]  should_failslab+0xa8/0x100
[  191.859509][ T9646]  __kmalloc_cache_noprof+0xa3/0x600
[  191.859518][ T9646]  ? snd_seq_port_use_ptr+0x29/0x260
[  191.859526][ T9646]  ? snd_seq_port_connect+0x6b/0x3a0
[  191.859534][ T9646]  ? snd_seq_port_connect+0x6b/0x3a0
[  191.859545][ T9646]  snd_seq_port_connect+0x6b/0x3a0
[  191.859553][ T9646]  ? snd_seq_port_use_ptr+0x29/0x260
[  191.859561][ T9646]  ? snd_seq_port_use_ptr+0x29/0x260
[  191.859569][ T9646]  ? snd_seq_port_use_ptr+0x229/0x260
[  191.859578][ T9646]  snd_seq_ioctl_subscribe_port+0x351/0x790
[  191.859590][ T9646]  ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10
[  191.859599][ T9646]  ? clientptr+0x17/0x160
[  191.859606][ T9646]  ? clientptr+0x17/0x160
[  191.859612][ T9646]  ? clientptr+0x17/0x160
[  191.859622][ T9646]  snd_seq_oss_midi_open+0x558/0x890
[  191.859636][ T9646]  ? __pfx_snd_seq_oss_midi_open+0x10/0x10
[  191.859665][ T9646]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  191.859679][ T9646]  ? snd_seq_oss_midi_get_addr+0x19e/0x260
[  191.859691][ T9646]  snd_seq_oss_synth_setup_midi+0x12d/0x530
[  191.859706][ T9646]  snd_seq_oss_open+0x94f/0xf40
[  191.859717][ T9646]  ? __pfx_snd_seq_oss_open+0x10/0x10
[  191.859738][ T9646]  ? rcu_is_watching+0x16/0xb0
[  191.859746][ T9646]  ? trace_contention_end+0x3d/0x140
[  191.859763][ T9646]  ? __pfx___mutex_lock+0x10/0x10
[  191.859773][ T9646]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[  191.859782][ T9646]  ? __pfx_free_devinfo+0x10/0x10
[  191.859791][ T9646]  ? do_raw_spin_unlock+0x4d/0x200
[  191.859803][ T9646]  ? soundcore_open+0x2da/0x490
[  191.859813][ T9646]  odev_open+0x67/0xa0
[  191.859822][ T9646]  chrdev_open+0x4d9/0x600
[  191.859833][ T9646]  ? __pfx_chrdev_open+0x10/0x10
[  191.859842][ T9646]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  191.859853][ T9646]  ? __pfx_chrdev_open+0x10/0x10
[  191.859861][ T9646]  do_dentry_open+0x816/0x1380
[  191.859875][ T9646]  vfs_open+0x3b/0x340
[  191.859882][ T9646]  ? path_openat+0x1428/0x1d60
[  191.859891][ T9646]  path_openat+0x1443/0x1d60
[  191.859906][ T9646]  do_file_open+0x23e/0x4a0
[  191.859915][ T9646]  ? __pfx_do_file_open+0x10/0x10
[  191.859931][ T9646]  ? _raw_spin_unlock+0x28/0x50
[  191.859946][ T9646]  ? alloc_fd+0x651/0x6c0
[  191.859960][ T9646]  do_sys_openat2+0x115/0x200
[  191.859970][ T9646]  ? __se_sys_futex+0x3a8/0x450
[  191.859981][ T9646]  ? __pfx_do_sys_openat2+0x10/0x10
[  191.859991][ T9646]  ? ksys_write+0x242/0x270
[  191.859999][ T9646]  ? rcu_is_watching+0x16/0xb0
[  191.860011][ T9646]  __x64_sys_openat+0x138/0x170
[  191.860023][ T9646]  do_syscall_64+0x166/0x520
[  191.860030][ T9646]  ? trace_irq_disable+0x3b/0x140
[  191.860038][ T9646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.860047][ T9646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.860055][ T9646] RIP: 0033:0x7f91fe19e159
[  191.860063][ T9646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.860069][ T9646] RSP: 002b:00007f91ff011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  191.860079][ T9646] RAX: ffffffffffffffda RBX: 00007f91fe425fa0 RCX: 00007f91fe19e159
[  191.860085][ T9646] RDX: 00000000000c0342 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  191.860090][ T9646] RBP: 00007f91fe235024 R08: 0000000000000000 R09: 0000000000000000
[  191.860095][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.860099][ T9646] R13: 00007f91fe426038 R14: 00007f91fe425fa0 R15: 00007ffcf7647848
[  191.860111][ T9646]  </TASK>
[  191.865143][ T9644] loop3: detected capacity change from 0 to 8192
[  191.869961][ T9644] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  192.101230][ T9644] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  192.107869][ T9644] ntfs3(loop3): Failed to load $Extend (-2).
[  192.112828][ T9644] ntfs3(loop3): Failed to initialize $Extend.
[  192.283310][ T9657] smc: net device ip6erspan0 applied user defined pnetid SYZ2
[  192.608310][ T9666] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  192.849232][ T9675] netlink: 'syz.3.1513': attribute type 13 has an invalid length.
[  193.280727][ T9686] loop2: detected capacity change from 0 to 2048
[  193.294738][ T9686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.499979][ T9696] macsec1: entered allmulticast mode
[  193.502248][ T9696] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  193.507927][ T9696] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  193.515265][ T9696] 8021q: adding VLAN 0 to HW filter on device macsec1
[  193.518578][ T9696] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  193.527719][  T992] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  193.637987][ T9698] loop2: detected capacity change from 0 to 8
[  193.688811][ T9698] SQUASHFS error: zstd decompression error: 10
[  193.695561][ T9698] SQUASHFS error: zstd decompression failed, data probably corrupt
[  193.702461][ T9698] SQUASHFS error: Failed to read block 0x4ec: -5
[  193.705380][ T9698] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  193.705395][ T9698] SQUASHFS error: Unable to read inode 0x2011f
[  193.975580][ T9704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.192047][ T5658] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  194.259288][ T9712] loop3: detected capacity change from 0 to 128
[  194.266963][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  194.267681][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  194.286747][ T9712] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.291720][ T9712] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  194.363755][ T9712] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 33: comm syz.3.1530: bad entry in directory: inode out of bounds - offset=988, inode=130816, rec_len=36, size=1024 fake=1
[  194.366008][ T9712] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem
[  194.380986][ T5658] usb 3-1: Using ep0 maxpacket: 16
[  194.382899][ T5658] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  194.387184][ T5658] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.388361][ T5658] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  194.396025][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.396094][ T5658] usb 3-1: Product: syz
[  194.396105][ T5658] usb 3-1: Manufacturer: syz
[  194.396290][ T5658] usb 3-1: SerialNumber: syz
[  194.405628][ T5666] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  194.425916][ T7095] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.442163][ T5658] usb 3-1: config 0 descriptor??
[  194.478480][ T5658] appledisplay 3-1:0.0: Could not find int-in endpoint
[  194.491915][ T5658] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  194.537587][ T9716] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  194.572462][ T5666] usb 1-1: Using ep0 maxpacket: 16
[  194.574103][ T5666] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  194.576563][ T5666] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  194.576624][ T5666] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.576684][ T5666] usb 1-1: config 0 has no interface number 0
[  194.584977][ T5666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.585039][ T5666] usb 1-1: Product: syz
[  194.585046][ T5666] usb 1-1: Manufacturer: syz
[  194.585133][ T5666] usb 1-1: SerialNumber: syz
[  194.599918][ T5666] usb 1-1: config 0 descriptor??
[  194.617127][ T5666] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[  194.617287][ T5666] uvcvideo 1-1:0.105: No valid video chain found.
[  194.667202][  T992] usb 3-1: USB disconnect, device number 31
[  194.809400][ T5657] usb 1-1: USB disconnect, device number 20
[  194.889860][ T9728] comedi comedi3: 8255: I/O base address not correctly aligned
[  194.926400][ T9730] loop3: detected capacity change from 0 to 512
[  194.931807][ T9730] EXT4-fs: Ignoring removed nomblk_io_submit option
[  194.935115][ T9730] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  194.959110][ T9730] EXT4-fs (loop3): 1 truncate cleaned up
[  194.963850][ T9730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.994017][ T7095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.195122][ T9743] veth0: Caught tx_queue_len zero misconfig
[  195.630376][ T5657] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  195.780374][ T5657] usb 1-1: Using ep0 maxpacket: 32
[  195.782879][ T5657] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  195.788164][ T5657] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  195.790988][ T5657] usb 1-1: config 0 has no interface number 0
[  195.793362][  T992] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  195.798606][ T5657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.801493][ T5657] usb 1-1: Product: syz
[  195.803224][ T5657] usb 1-1: Manufacturer: syz
[  195.803336][ T5657] usb 1-1: SerialNumber: syz
[  195.808170][ T5657] usb 1-1: config 0 descriptor??
[  195.814193][ T5657] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  195.817503][ T5657] usb 1-1: selecting invalid altsetting 1
[  195.819802][ T5657] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  195.834980][ T5657] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  195.838930][ T5657] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  195.842020][ T5657] usb 1-1: media controller created
[  195.856357][ T5657] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  195.940614][  T992] usb 4-1: Using ep0 maxpacket: 16
[  195.943042][  T992] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  195.947766][  T992] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.951895][  T992] usb 4-1: config 0 interface 0 has no altsetting 0
[  195.952046][  T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.964205][  T992] usb 4-1: config 0 descriptor??
[  196.037881][ T5657] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  196.040427][ T5657] zl10353_read_register: readreg error (reg=127, ret==-71)
[  196.043860][ T5657] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  196.116728][ T5657] usb 1-1: USB disconnect, device number 21
[  196.372849][ T9747] raw-gadget.1 gadget.3: fail, usb_ep_set_halt returned -11
[  196.384998][  T992] usbhid 4-1:0.0: can't add hid device: -71
[  196.387049][  T992] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  196.394534][  T992] usb 4-1: USB disconnect, device number 20
[  196.517194][ T9766] loop2: detected capacity change from 0 to 8
[  197.228108][ T9785] loop3: detected capacity change from 0 to 32768
[  197.234415][ T9785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1556 (9785)
[  197.246516][ T9785] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.246572][ T9785] BTRFS info (device loop3): using crc32c checksum algorithm
[  197.274273][ T9785] BTRFS info (device loop3): enabling ssd optimizations
[  197.274318][ T9785] BTRFS info (device loop3): turning on flush-on-commit
[  197.274361][ T9785] BTRFS info (device loop3): enabling free space tree
[  197.274469][ T9785] BTRFS info (device loop3): enabling auto defrag
[  197.274494][ T9785] BTRFS info (device loop3): use lzo compression, level 1
[  197.274520][ T9785] BTRFS info (device loop3): max_inline set to 4096
[  197.378311][ T7095] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.831665][ T9809] netlink: zone id is out of range
[  197.838566][ T9809] netlink: zone id is out of range
[  197.841233][ T9809] netlink: zone id is out of range
[  197.844102][ T9809] netlink: zone id is out of range
[  197.860961][ T9809] netlink: zone id is out of range
[  197.863243][ T9809] netlink: zone id is out of range
[  197.865629][ T9809] netlink: zone id is out of range
[  197.868160][ T9809] netlink: zone id is out of range
[  197.870256][ T9809] netlink: zone id is out of range
[  209.540514][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  275.828440][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  302.657256][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  302.665189][    C1] rcu: 	0-...!: (1 GPs behind) idle=157c/1/0x4000000000000000 softirq=42840/42841 fqs=0
[  302.668845][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=33697, q=310 ncpus=2)
[  302.671772][    C1] Sending NMI from CPU 1 to CPUs 0:
[  302.673878][    C0] NMI backtrace for cpu 0
[  302.673914][    C0] CPU: 0 UID: 0 PID: 9788 Comm: syz.0.1557 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  302.673956][    C0] Tainted: [L]=SOFTLOCKUP
[  302.673960][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.673967][    C0] RIP: 0010:_raw_spin_lock_irq+0x45/0x50
[  302.673989][    C0] Code: 00 e8 1f a7 ad f5 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 74 24 08 e8 83 e4 bb f5 48 83 c4 08 48 89 df 5b <e9> e6 89 bc f5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90
[  302.673997][    C0] RSP: 0018:ffffc90000007870 EFLAGS: 00000082
[  302.674004][    C0] RAX: bce61a40f0bae900 RBX: 0000000000000001 RCX: 8000000001000102
[  302.674012][    C0] RDX: 00000000001b76fd RSI: ffffffff8e6fd21d RDI: ffff888121028280
[  302.674021][    C0] RBP: ffff88817846d300 R08: 9e00000000000000 R09: 0000000000080000
[  302.674030][    C0] R10: 0000000000000000 R11: ffff888121028298 R12: ffff888121028280
[  302.674038][    C0] R13: 0000000000000001 R14: ffff888121028520 R15: 1ffff1102420509a
[  302.674046][    C0] FS:  00007f91feff06c0(0000) GS:ffff88818d6d6000(0000) knlGS:0000000000000000
[  302.674057][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  302.674065][    C0] CR2: 00007f71d41825d4 CR3: 0000000179b7c000 CR4: 00000000000006f0
[  302.674100][    C0] Call Trace:
[  302.674109][    C0]  <IRQ>
[  302.674114][    C0]  __hrtimer_run_queues+0x466/0xa10
[  302.674140][    C0]  hrtimer_interrupt+0x4cd/0xaa0
[  302.674164][    C0]  __sysvec_apic_timer_interrupt+0x102/0x430
[  302.674180][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  302.674197][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  302.674210][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80
[  302.674228][    C0] Code: 8b 3d c4 b7 ac 0c 48 89 de 5b e9 53 8b 64 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 58 e7 cc 11 65 48 8b 15 58 e7 cc 11 f7 c2 00 01 00 ff
[  302.674237][    C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00000297
[  302.674247][    C0] RAX: ffffffff89eaec04 RBX: 00000010c6f7a0b5 RCX: ffff888104685a00
[  302.674256][    C0] RDX: 8000000000000100 RSI: 0000000000000000 RDI: 00000010c6f7a0b5
[  302.674264][    C0] RBP: 0000000000000000 R08: 0000000000000100 R09: 0000000000000004
[  302.674271][    C0] R10: dffffc0000000000 R11: fffff52000000f70 R12: ffff8881115fcac0
[  302.674280][    C0] R13: 0019999999999998 R14: 0000000225c17d04 R15: 00000015798ee228
[  302.674291][    C0]  ? pie_calculate_probability+0x274/0x7f0
[  302.674308][    C0]  pie_calculate_probability+0x274/0x7f0
[  302.674325][    C0]  fq_pie_timer+0x27d/0x5a0
[  302.674338][    C0]  ? fq_pie_timer+0x4d/0x5a0
[  302.674352][    C0]  call_timer_fn+0x18d/0x5f0
[  302.674365][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  302.674378][    C0]  ? call_timer_fn+0xd5/0x5f0
[  302.674390][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  302.674406][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  302.674427][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  302.674441][    C0]  __run_timer_base+0x652/0x8b0
[  302.674458][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  302.674472][    C0]  ? ktime_get+0x1f5/0x220
[  302.674484][    C0]  ? lapic_next_event+0x11/0x20
[  302.674498][    C0]  run_timer_softirq+0xb7/0x170
[  302.674511][    C0]  handle_softirqs+0x226/0x860
[  302.674527][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  302.674543][    C0]  __irq_exit_rcu+0xcb/0x220
[  302.674557][    C0]  irq_exit_rcu+0x9/0x30
[  302.674570][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  302.674587][    C0]  </IRQ>
[  302.674591][    C0]  <TASK>
[  302.674596][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  302.674607][    C0] RIP: 0010:lock_acquire+0x232/0x350
[  302.674619][    C0] Code: ff ff ff e8 b0 5b 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 87 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 37 da
[  302.674629][    C0] RSP: 0018:ffffc9000f14fbe8 EFLAGS: 00000286
[  302.674639][    C0] RAX: bce61a40f0bae900 RBX: 0000000000000001 RCX: 0000000000000046
[  302.674647][    C0] RDX: 000000000859fa7d RSI: ffffffff8e6fd21d RDI: ffffffff8c6d9c80
[  302.674656][    C0] RBP: ffff888104685a00 R08: fe00000000000000 R09: 0000000000000000
[  302.674664][    C0] R10: 0000000000000000 R11: ffff88810c2b4378 R12: ffff88810c2b4378
[  302.674672][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246
[  302.674686][    C0]  ? __might_fault+0xaf/0x130
[  302.674703][    C0]  __might_fault+0xcb/0x130
[  302.674718][    C0]  ? __might_fault+0xaf/0x130
[  302.674735][    C0]  do_recvmmsg+0x346/0x7f0
[  302.674752][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  302.674766][    C0]  ? do_futex+0x3e7/0x4e0
[  302.674788][    C0]  __x64_sys_recvmmsg+0x198/0x250
[  302.674803][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  302.674820][    C0]  do_syscall_64+0x166/0x520
[  302.674831][    C0]  ? trace_irq_disable+0x3b/0x140
[  302.674842][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.674855][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.674867][    C0] RIP: 0033:0x7f91fe19e159
[  302.674878][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.674888][    C0] RSP: 002b:00007f91feff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  302.674899][    C0] RAX: ffffffffffffffda RBX: 00007f91fe426090 RCX: 00007f91fe19e159
[  302.674908][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  302.674956][    C0] RBP: 00007f91fe235024 R08: 0000000000000000 R09: 0000000000000000
[  302.674965][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  302.674972][    C0] R13: 00007f91fe426128 R14: 00007f91fe426090 R15: 00007ffcf7647848
[  302.674986][    C0]  </TASK>
[  302.896541][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g33697 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1
[  302.901055][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  302.905145][    C1] rcu: RCU grace-period kthread stack dump:
[  302.907571][    C1] task:rcu_preempt     state:R  running task     stack:27496 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
[  302.913079][    C1] Call Trace:
[  302.914497][    C1]  <TASK>
[  302.915760][    C1]  __schedule+0x17db/0x58f0
[  302.917652][    C1]  ? __lock_acquire+0x6df/0x2e50
[  302.919703][    C1]  ? do_raw_spin_unlock+0x4d/0x200
[  302.921832][    C1]  ? __pfx___schedule+0x10/0x10
[  302.923847][    C1]  ? lock_acquire+0x115/0x350
[  302.925754][    C1]  ? schedule+0x90/0x2b0
[  302.927449][    C1]  schedule+0x164/0x2b0
[  302.929185][    C1]  schedule_timeout+0x152/0x2c0
[  302.931187][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  302.933435][    C1]  ? __pfx_process_timeout+0x10/0x10
[  302.935645][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  302.938088][    C1]  ? prepare_to_swait_event+0x322/0x350
[  302.940391][    C1]  rcu_gp_fqs_loop+0x30c/0x11f0
[  302.942432][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  302.944620][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  302.946786][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  302.949211][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  302.951174][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  302.953307][    C1]  ? __kthread_parkme+0x71/0x1f0
[  302.955401][    C1]  ? __kthread_parkme+0x199/0x1f0
[  302.957524][    C1]  kthread+0x38b/0x480
[  302.959259][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  302.961423][    C1]  ? __pfx_kthread+0x10/0x10
[  302.963376][    C1]  ret_from_fork+0x514/0xb70
[  302.965316][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  302.967435][    C1]  ? __switch_to+0xc89/0x1420
[  302.969418][    C1]  ? __pfx_kthread+0x10/0x10
[  302.971342][    C1]  ret_from_fork_asm+0x1a/0x30
[  302.973357][    C1]  </TASK>
[  302.974662][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  302.977304][    C1] CPU: 1 UID: 0 PID: 9813 Comm: syz.2.1562 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  302.981742][    C1] Tainted: [L]=SOFTLOCKUP
[  302.983430][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.987229][    C1] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500
[  302.989939][    C1] Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 47 49 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 32 44 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 18 44 0c 00
[  302.997719][    C1] RSP: 0018:ffffc9000df7f960 EFLAGS: 00000246
[  303.000225][    C1] RAX: ffffffff81bb7488 RBX: ffff888121043948 RCX: 0000000000080000
[  303.003379][    C1] RDX: ffffc9000fb41000 RSI: 000000000007ffff RDI: 0000000000080000
[  303.006562][    C1] RBP: ffffc9000df7fab0 R08: ffffffff907a197f R09: 1ffffffff20f432f
[  303.009762][    C1] R10: dffffc0000000000 R11: ffffffff81756120 R12: 1ffff11024208729
[  303.012993][    C1] R13: dffffc0000000000 R14: 1ffff1102e597a33 R15: 0000000000000000
[  303.016234][    C1] FS:  00007f261641e6c0(0000) GS:ffff8882a8cd6000(0000) knlGS:0000000000000000
[  303.019932][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  303.022530][    C1] CR2: 00007f261641dff8 CR3: 00000001797d0000 CR4: 00000000000006f0
[  303.025499][    C1] Call Trace:
[  303.026781][    C1]  <TASK>
[  303.027941][    C1]  ? __pfx_retrigger_next_event+0x10/0x10
[  303.030316][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  303.032802][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  303.035202][    C1]  clock_was_set+0x7c6/0x890
[  303.037060][    C1]  ? __pfx_clock_was_set+0x10/0x10
[  303.039157][    C1]  do_adjtimex+0x25d/0x370
[  303.040963][    C1]  ? __pfx_do_adjtimex+0x10/0x10
[  303.042981][    C1]  __x64_sys_clock_adjtime+0x252/0x340
[  303.045221][    C1]  ? __pfx___x64_sys_clock_adjtime+0x10/0x10
[  303.047657][    C1]  ? __pfx_kcov_ioctl+0x10/0x10
[  303.049683][    C1]  do_syscall_64+0x166/0x520
[  303.051546][    C1]  ? trace_irq_disable+0x3b/0x140
[  303.053587][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.056058][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.058470][    C1] RIP: 0033:0x7f261559e159
[  303.060288][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.067982][    C1] RSP: 002b:00007f261641e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[  303.071408][    C1] RAX: ffffffffffffffda RBX: 00007f2615825fa0 RCX: 00007f261559e159
[  303.074389][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[  303.077223][    C1] RBP: 00007f2615635024 R08: 0000000000000000 R09: 0000000000000000
[  303.080170][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.082583][    C1] R13: 00007f2615826038 R14: 00007f2615825fa0 R15: 00007ffe2bb5b098
[  303.085387][    C1]  </TASK>
