last executing test programs:

3m11.304216149s ago: executing program 2 (id=163):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x26}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

3m11.256949356s ago: executing program 2 (id=164):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x401}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m11.253290117s ago: executing program 2 (id=165):
socket$kcm(0xa, 0x3, 0x3a)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0xfffffffc})
r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})

3m11.149654319s ago: executing program 2 (id=167):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

3m10.653171101s ago: executing program 2 (id=176):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000200000000008000f0fffeffe809005300fff5dd000000100001000c0c100000ecc15d556533e4", 0x58}], 0x1)

3m10.173508666s ago: executing program 2 (id=184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440), 0x20000}, 0x20)

3m10.086883827s ago: executing program 32 (id=184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440), 0x20000}, 0x20)

2m22.832511555s ago: executing program 3 (id=879):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

2m22.621880159s ago: executing program 3 (id=881):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x10, 0x1, 0x1, 0x0, 0x6, @random}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x7, 0xfff, 0x8, 0x8, 0x8158, 0x729})
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x25, 0x0)
write(r0, &(0x7f0000000000)="010000000000000020", 0x9)

2m22.520103824s ago: executing program 3 (id=883):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r0, &(0x7f0000000300)="648d", 0x2)
prlimit64(0x0, 0x7, &(0x7f0000000300)={0x4, 0x53b}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)

2m22.453361425s ago: executing program 3 (id=885):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000)
fallocate(r0, 0x0, 0x0, 0x8800000)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)

2m21.508116845s ago: executing program 3 (id=890):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x2fa77e8ce0582f97, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x400c814)

2m21.043769771s ago: executing program 3 (id=891):
bind$tipc(0xffffffffffffffff, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000440), 0x1000a)
sendfile(r0, r1, &(0x7f0000000080)=0x5, 0xffff)

2m20.703171577s ago: executing program 33 (id=891):
bind$tipc(0xffffffffffffffff, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000440), 0x1000a)
sendfile(r0, r1, &(0x7f0000000080)=0x5, 0xffff)

1.77160793s ago: executing program 1 (id=3106):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)

1.691967726s ago: executing program 1 (id=3107):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1.691581737s ago: executing program 1 (id=3108):
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$NFT_BATCH(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x29, 0xc, "3d3858850810fd271d5d65a0bd479df6b38fb3c52d2dfd0cc20a13acf8c3d287adbb642730"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x601, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x2d, 0xc, "99d5d642fa576530090e22315b2878975c9852366e9591e0374aefb8d5bf16069fc640f4752db97f2d"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x658, 0xc, 0xa, 0x802, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x644, 0x3, 0x0, 0x1, [{0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "33a0dc96c0bd25e93a2613a8f8f88f472abac5dc943231a8db286b4511f12f0088b0188508cac6bbfb4d85220bef46dbbe2c19ff4bb86d76ffce30aa8cda1eab192c58d428536ccdf188fa01a546be2d00fb6a1166f28382e9e814094d8488796f0c78fe57e3bff0851f6626f6d5363d60e6b68792ba53a64818c4bd96e7068782291c6b198ad24ed70c30872d99d1c0ab91f591e44c2fde4a33d8c57157d8201cadeba42eafc19bcbee6814c5920b9fa523677887aa8c37e931b3a3105b02b9b788c3f99f2ff30ff1"}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "87235fe3e1971314767023ff5044c032528a1db29c61354665b82926bdd1af80786fd70ea30fb2a77db203e689f36e7c764839074f02f5865068797cd1bca76cf8cd0a94cc7f2ffde71fd77a7fa64bac52ea38b4e067b9c50b109adbcc937bcaaeca505633ea9347028121be42ce56e68d848a3f1d943af3a6650f6c8416c93e5e9d258a408b3f56c680756301c47a91ef8b345fd156f9296e7d54f018353062dc35b7dffeeb9da8b95be38f163b1ac1d8fe75af4b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x59}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xdd1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x380, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x370, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x338, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x328, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x5c, 0xa, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xad3980b81f2d806d}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_DYNSET_EXPRESSIONS={0x64, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_DYNSET_EXPRESSIONS={0x25c, 0xa, 0x0, 0x1, [{0x258, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x244, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x240, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x201, 0x1, "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"}]}]}}}]}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7f4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000840)

1.621702697s ago: executing program 1 (id=3109):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'veth1_to_team\x00', @ifru_mtu}})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0xb], 0x1}}})
write$tun(r0, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
io_cancel(0x0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

578.469213ms ago: executing program 0 (id=3115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

578.189972ms ago: executing program 0 (id=3116):
setrlimit(0x40000000000008, &(0x7f0000000000))
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000)

548.584512ms ago: executing program 0 (id=3117):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x2, 0x1}, 0x50)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000))

491.266979ms ago: executing program 0 (id=3118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x70bd27, 0x25dfdbff, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c008}, 0x400c890)

490.930977ms ago: executing program 0 (id=3119):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='attr\x00')
openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

438.493104ms ago: executing program 0 (id=3120):
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904"], 0x0)

361.00684ms ago: executing program 4 (id=3123):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
write$UHID_INPUT(r0, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x6)

251.275772ms ago: executing program 4 (id=3124):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
select(0x40, &(0x7f0000000300)={0x8, 0x4, 0x0, 0x4, 0x9, 0x0, 0x0, 0x8}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})

179.859569ms ago: executing program 4 (id=3125):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r4 = dup(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18)
r6 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r6)

90.035909ms ago: executing program 4 (id=3126):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x800)

65.246001ms ago: executing program 1 (id=3127):
r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0)

161.059µs ago: executing program 4 (id=3128):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x14, 0x0, 0x0, 0xfd, 0x1, 0xfe, 0x3}}, 0x1c}, 0x1, 0xffffff7f, 0x0, 0x24000000}, 0xd4)

68.929µs ago: executing program 4 (id=3129):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)

0s ago: executing program 1 (id=3130):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="051a00000e80006558", 0x9}], 0x2)

kernel console output (not intermixed with test programs):

has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.484092][  T810] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  171.487453][  T810] usb 2-1: Manufacturer: syz
[  171.493170][  T810] usb 2-1: config 0 descriptor??
[  171.634102][ T9985] loop0: detected capacity change from 0 to 256
[  171.672956][ T6152] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  171.727359][ T9987] loop0: detected capacity change from 0 to 2048
[  171.738074][ T9987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.753320][  T810] rc_core: IR keymap rc-hauppauge not found
[  171.755206][  T810] Registered IR keymap rc-empty
[  171.756849][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.783476][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.814121][  T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  171.823043][  T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14
[  171.835553][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.862852][ T6152] usb 5-1: Using ep0 maxpacket: 32
[  171.865209][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.869070][ T6152] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.873090][ T6152] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  171.873146][ T6152] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  171.874877][ T9993] loop0: detected capacity change from 0 to 128
[  171.877742][ T9993] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  171.892975][ T6152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.893015][ T6152] usb 5-1: Product: syz
[  171.893112][ T6152] usb 5-1: Manufacturer: syz
[  171.893136][ T6152] usb 5-1: SerialNumber: syz
[  171.901661][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.925900][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.943332][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.973187][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  171.994313][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  172.022900][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  172.042826][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  172.073345][  T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  172.094395][  T810] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  172.099806][  T810] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  172.126391][ T6152] cdc_ncm 5-1:1.0: bind() failure
[  172.140140][ T6152] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  172.142844][ T6152] cdc_ncm 5-1:1.1: bind() failure
[  172.150821][ T6152] usb 5-1: USB disconnect, device number 15
[  172.182608][ T5659] usb 2-1: USB disconnect, device number 30
[  172.719153][T10009] xt_ecn: cannot match TCP bits for non-tcp packets
[  172.755944][T10011] loop1: detected capacity change from 0 to 512
[  172.756592][T10011] EXT4-fs: Ignoring removed nomblk_io_submit option
[  172.756614][T10011] EXT4-fs: Ignoring removed nomblk_io_submit option
[  172.775917][T10011] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  172.816599][T10011] EXT4-fs (loop1): 1 truncate cleaned up
[  172.820015][T10011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.915506][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.178128][T10021] loop1: detected capacity change from 0 to 32768
[  173.236672][T10021] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  173.259774][T10021] XFS (loop1): Ending clean mount
[  173.282452][T10021] XFS (loop1): User initiated shutdown received.
[  173.286921][T10021] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  173.287000][T10021] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  173.339214][ T5602] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  173.408949][T10044] loop4: detected capacity change from 0 to 512
[  173.438919][T10044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.439003][T10044] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.575955][T10054] loop1: detected capacity change from 0 to 512
[  173.580079][   T36] audit: type=1800 audit(1788965591.268:323): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1737" name="file1" dev="loop4" ino=15 res=0 errno=0
[  173.598345][T10054] EXT4-fs: Ignoring removed bh option
[  173.605558][T10054] EXT4-fs (loop1): 1 truncate cleaned up
[  173.606331][T10054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.626943][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.687429][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.861833][T10069] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  173.868691][T10069] ntfs3(loop4): Failed to load $Extend (-22).
[  173.868751][T10069] ntfs3(loop4): Failed to initialize $Extend.
[  173.968119][T10077] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  173.984874][T10077] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10)
[  174.000357][T10077] FAULT_INJECTION: forcing a failure.
[  174.000357][T10077] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  174.005457][T10077] CPU: 1 UID: 0 PID: 10077 Comm: syz.4.1751 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  174.005486][T10077] Tainted: [L]=SOFTLOCKUP
[  174.005490][T10077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.005495][T10077] Call Trace:
[  174.005499][T10077]  <TASK>
[  174.005503][T10077]  dump_stack_lvl+0xe8/0x150
[  174.005517][T10077]  should_fail_ex+0x410/0x560
[  174.005528][T10077]  prepare_alloc_pages+0x223/0x600
[  174.005539][T10077]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  174.005548][T10077]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  174.005564][T10077]  alloc_pages_mpol+0x21e/0x390
[  174.005576][T10077]  alloc_pages_noprof+0xb1/0x2b0
[  174.005586][T10077]  folio_alloc_noprof+0x1e/0x30
[  174.005596][T10077]  filemap_alloc_folio_noprof+0x111/0x460
[  174.005608][T10077]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[  174.005616][T10077]  ? __exfat_iomap_begin+0x9a2/0xca0
[  174.005631][T10077]  __filemap_get_folio_mpol+0x402/0x1000
[  174.005644][T10077]  iomap_write_begin+0x6ab/0x1540
[  174.005660][T10077]  iomap_zero_range+0x548/0xca0
[  174.005674][T10077]  ? __pfx_iomap_zero_range+0x10/0x10
[  174.005691][T10077]  ? filemap_get_entry+0xcd/0x3f0
[  174.005699][T10077]  ? filemap_get_entry+0xcd/0x3f0
[  174.005707][T10077]  ? filemap_get_entry+0xcd/0x3f0
[  174.005722][T10077]  ? __pfx___up_read+0x10/0x10
[  174.005733][T10077]  ? __filemap_get_folio_mpol+0xd03/0x1000
[  174.005745][T10077]  exfat_zero_new_range+0x113/0xd70
[  174.005754][T10077]  ? __pfx_unmap_mapping_range+0x10/0x10
[  174.005767][T10077]  exfat_file_write_iter+0x8a0/0xe10
[  174.005781][T10077]  vfs_write+0x612/0xba0
[  174.005792][T10077]  ? __pfx_vfs_write+0x10/0x10
[  174.005803][T10077]  ? __fget_files+0x2a/0x420
[  174.005823][T10077]  __x64_sys_pwrite64+0x196/0x220
[  174.005832][T10077]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  174.005844][T10077]  do_syscall_64+0x166/0x520
[  174.005852][T10077]  ? trace_irq_disable+0x3b/0x140
[  174.005859][T10077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.005869][T10077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.005876][T10077] RIP: 0033:0x7feb9c99e159
[  174.005884][T10077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.005891][T10077] RSP: 002b:00007feb9d798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  174.005901][T10077] RAX: ffffffffffffffda RBX: 00007feb9cc25fa0 RCX: 00007feb9c99e159
[  174.005906][T10077] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005
[  174.005912][T10077] RBP: 00007feb9ca35024 R08: 0000000000000000 R09: 0000000000000000
[  174.005916][T10077] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[  174.005921][T10077] R13: 00007feb9cc26038 R14: 00007feb9cc25fa0 R15: 00007fff09d19158
[  174.005933][T10077]  </TASK>
[  174.104833][T10077] exFAT-fs (loop4): write: fail to zero from 0 to 3708(-12)
[  175.107415][T10096] set_capacity_and_notify: 2 callbacks suppressed
[  175.107478][T10096] loop4: detected capacity change from 0 to 32768
[  175.129025][T10096] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.154385][T10096] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  175.161822][T10096] XFS (loop4): Starting recovery (logdev: internal)
[  175.179449][T10096] XFS (loop4): Ending recovery (logdev: internal)
[  175.188824][T10096] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  175.188888][T10096] XFS (loop4): Unmount and run xfs_repair
[  175.192410][T10096] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  175.192464][T10096] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.192498][T10096] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.192530][T10096] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  175.192562][T10096] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  175.192608][T10096] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  175.192644][T10096] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.192676][T10096] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.194726][T10096] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.194944][T10096] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 8 error 117
[  175.233047][ T7839] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.233414][ T7839] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  175.247083][ T4996] Bluetooth: hci0: unexpected event for opcode 0x0419
[  175.604313][T10124] overlayfs: failed to clone upperpath
[  175.823174][ T5023] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  175.850361][T10135] loop1: detected capacity change from 0 to 2048
[  175.859211][T10135] NILFS (loop1): invalid segment: Magic number mismatch
[  175.859271][T10135] NILFS (loop1): trying rollback from an earlier position
[  175.864662][T10135] NILFS (loop1): recovery complete
[  175.867600][T10136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.873439][T10135] NILFS (loop1): bad btree node (ino=3, blocknr=8): level = 0, flags = 0x1, nchildren = 0
[  175.873494][T10135] NILFS (loop1): error -5 preparing GC: cannot read source blocks
[  175.973335][ T5023] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[  175.974569][ T5023] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 55, changing to 9
[  175.974589][ T5023] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8496, setting to 1024
[  175.976015][ T5023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  175.976030][ T5023] usb 5-1: Product: syz
[  175.976038][ T5023] usb 5-1: Manufacturer: syz
[  176.180907][T10138] loop1: detected capacity change from 0 to 32768
[  176.187297][T10138] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 65: chain list count 0
[  176.187421][T10138] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  176.187426][T10138] OCFS2: File system is now read-only.
[  176.187430][T10138] (syz.1.1774,10138,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  176.187473][T10138] (syz.1.1774,10138,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  176.187482][T10138] (syz.1.1774,10138,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  176.187490][T10138] (syz.1.1774,10138,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  176.187531][T10138] (syz.1.1774,10138,0):ocfs2_fill_super:1177 ERROR: status = -30
[  176.243841][ T5023] usb 5-1: USB disconnect, device number 16
[  176.810003][T10196] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1790'.
[  176.810050][T10196] ksmbd: Unknown IPC event: 0, ignore.
[  177.113052][   T35] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  177.205336][T10211] loop4: detected capacity change from 0 to 1024
[  177.263374][   T35] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  177.267224][   T35] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  177.267278][   T35] usb 2-1: config 1 has no interface number 0
[  177.267313][   T35] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.267341][   T35] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  177.267372][   T35] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  177.287204][   T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.287239][   T35] usb 2-1: Product: syz
[  177.287280][   T35] usb 2-1: Manufacturer: syz
[  177.287304][   T35] usb 2-1: SerialNumber: syz
[  177.332992][T10217] netlink: 'syz.4.1798': attribute type 23 has an invalid length.
[  177.335733][T10217] netlink: 'syz.4.1798': attribute type 11 has an invalid length.
[  177.796113][T10246] xt_HMARK: spi-set and port-set can't be combined
[  178.108410][   T35] cdc_ncm 2-1:1.1: bind() failure
[  178.315276][ T5666] usb 2-1: USB disconnect, device number 31
[  178.728649][T10262] lo: entered allmulticast mode
[  178.770640][T10266] fuse: Bad value for 'fd'
[  178.903640][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903736][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903766][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903793][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903820][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903846][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903872][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903899][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.903926][T10276] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  178.957600][T10272] loop4: detected capacity change from 0 to 4096
[  178.960504][T10272] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  178.995071][T10272] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  179.445234][T10312] loop4: detected capacity change from 0 to 4096
[  179.473875][T10316] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.708777][T10323] pim6reg: entered allmulticast mode
[  181.272988][ T5666] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  181.434499][ T5666] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  181.435607][ T5666] usb 2-1: config index 0 descriptor too short (expected 69, got 51)
[  181.435625][ T5666] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.435661][ T5666] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  181.437778][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.437794][ T5666] usb 2-1: Product: syz
[  181.437804][ T5666] usb 2-1: Manufacturer: syz
[  181.437814][ T5666] usb 2-1: SerialNumber: syz
[  181.445092][ T5666] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  181.445169][ T5666] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  181.499310][ T5666] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  181.533562][ T7471] udevd[7471]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.559524][   T36] audit: type=1326 audit(1788965599.248:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.559607][   T36] audit: type=1326 audit(1788965599.248:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.561154][   T36] audit: type=1326 audit(1788965599.248:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.561396][   T36] audit: type=1326 audit(1788965599.248:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.567661][   T36] audit: type=1326 audit(1788965599.258:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.567832][   T36] audit: type=1326 audit(1788965599.258:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.567862][   T36] audit: type=1326 audit(1788965599.258:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.568525][   T36] audit: type=1326 audit(1788965599.258:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.568556][   T36] audit: type=1326 audit(1788965599.258:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  181.638256][T10387] fuse: fd is not a fuse device
[  181.658292][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1869'.
[  181.669212][ T5023] usb 2-1: USB disconnect, device number 32
[  182.368141][ T5666] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  182.400960][ T5666] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  182.609527][T10435] gfs2: path_lookup on c::: returned error -2
[  183.047367][T10469] wg0: entered allmulticast mode
[  183.047710][T10469] wg0: left allmulticast mode
[  183.082818][ T6152] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  183.159209][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'.
[  183.159273][T10473] validate_nla: 41 callbacks suppressed
[  183.159339][T10473] netlink: 'syz.1.1910': attribute type 3 has an invalid length.
[  183.235011][ T6152] usb 5-1: Using ep0 maxpacket: 16
[  183.237946][ T6152] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  183.244959][ T6152] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.250552][ T6152] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.250609][ T6152] usb 5-1: config 0 interface 0 has no altsetting 0
[  183.250656][ T6152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.263199][ T6152] usb 5-1: config 0 descriptor??
[  183.686563][ T6152] nzxt-smart2 0003:1E71:2009.000A: item fetching failed at offset 0/5
[  183.695940][ T6152] nzxt-smart2 0003:1E71:2009.000A: probe with driver nzxt-smart2 failed with error -22
[  183.901315][ T5666] usb 5-1: USB disconnect, device number 17
[  184.038626][T10485] syz_tun: entered allmulticast mode
[  184.050372][T10484] syz_tun: left allmulticast mode
[  184.125746][T10493] sctp: [Deprecated]: syz.0.1919 (pid 10493) Use of int in max_burst socket option deprecated.
[  184.125746][T10493] Use struct sctp_assoc_value instead
[  184.167325][T10495] FAULT_INJECTION: forcing a failure.
[  184.167325][T10495] name failslab, interval 1, probability 0, space 0, times 0
[  184.167380][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz.1.1920 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  184.167407][T10495] Tainted: [L]=SOFTLOCKUP
[  184.167411][T10495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.167416][T10495] Call Trace:
[  184.167419][T10495]  <TASK>
[  184.167424][T10495]  dump_stack_lvl+0xe8/0x150
[  184.167440][T10495]  should_fail_ex+0x410/0x560
[  184.167451][T10495]  should_failslab+0xa8/0x100
[  184.167463][T10495]  __kmalloc_cache_noprof+0xa3/0x600
[  184.167471][T10495]  ? do_raw_spin_lock+0x12b/0x2f0
[  184.167482][T10495]  ? sctp_endpoint_new+0xe1/0xa70
[  184.167493][T10495]  ? sctp_endpoint_new+0xe1/0xa70
[  184.167506][T10495]  sctp_endpoint_new+0xe1/0xa70
[  184.167524][T10495]  ? __pfx_sctp_endpoint_new+0x10/0x10
[  184.167539][T10495]  ? __raw_spin_lock_init+0x45/0x100
[  184.167552][T10495]  sctp_init_sock+0x947/0x1380
[  184.167565][T10495]  sctp_v6_init_sock+0x16/0x70
[  184.167577][T10495]  inet6_create+0xefb/0x1270
[  184.167588][T10495]  ? inet6_create+0x80/0x1270
[  184.167600][T10495]  __sock_create+0x4b3/0x9d0
[  184.167614][T10495]  __sys_socket+0xd6/0x1b0
[  184.167626][T10495]  __x64_sys_socket+0x7a/0x90
[  184.167637][T10495]  do_syscall_64+0x166/0x520
[  184.167644][T10495]  ? trace_irq_disable+0x3b/0x140
[  184.167652][T10495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.167661][T10495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.167668][T10495] RIP: 0033:0x7faa8319e159
[  184.167676][T10495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.167683][T10495] RSP: 002b:00007faa8406e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  184.167693][T10495] RAX: ffffffffffffffda RBX: 00007faa83425fa0 RCX: 00007faa8319e159
[  184.167698][T10495] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a
[  184.167703][T10495] RBP: 00007faa83235024 R08: 0000000000000000 R09: 0000000000000000
[  184.167708][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.167712][T10495] R13: 00007faa83426038 R14: 00007faa83425fa0 R15: 00007ffd7df88b08
[  184.167723][T10495]  </TASK>
[  184.533205][ T5666] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  184.608299][T10523] loop4: detected capacity change from 0 to 4096
[  184.620035][T10523] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  184.633085][T10523] ntfs3(loop4): Failed to load $Bitmap (-22).
[  184.682867][ T5666] usb 2-1: Using ep0 maxpacket: 8
[  184.685216][ T5666] usb 2-1: unable to get BOS descriptor or descriptor too short
[  184.685303][ T5666] usb 2-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59
[  184.691181][ T5666] usb 2-1: config 4 has an invalid interface number: 133 but max is 0
[  184.691198][ T5666] usb 2-1: config 4 has no interface number 0
[  184.698045][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.698130][ T5666] usb 2-1: Product: syz
[  184.698170][ T5666] usb 2-1: Manufacturer: syz
[  184.698202][ T5666] usb 2-1: SerialNumber: syz
[  184.910336][ T5666] huawei_cdc_ncm 2-1:4.133: CDC Union missing and no IAD found
[  184.910463][ T5666] huawei_cdc_ncm 2-1:4.133: bind() failure
[  184.914993][ T5666] usb 2-1: USB disconnect, device number 33
[  185.102976][ T5023] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  185.253610][ T5023] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  185.254588][ T5023] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  185.254601][ T5023] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  185.254612][ T5023] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.254623][ T5023] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.254636][ T5023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.260590][ T5023] usb 5-1: config 0 descriptor??
[  185.261231][T10532] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  185.670652][ T5023] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0
[  185.670709][ T5023] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0
[  185.670756][ T5023] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0
[  185.670784][ T5023] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0
[  185.670811][ T5023] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0
[  185.670896][ T5023] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0
[  185.670923][ T5023] lua 0003:1E7D:2C2E.000B: unknown global tag 0xe
[  185.670947][ T5023] lua 0003:1E7D:2C2E.000B: item 0 0 1 14 parsing failed
[  185.671259][ T5023] lua 0003:1E7D:2C2E.000B: parse failed
[  185.671286][ T5023] lua 0003:1E7D:2C2E.000B: probe with driver lua failed with error -22
[  185.872908][ T5023] usb 5-1: USB disconnect, device number 18
[  186.651215][T10554] overlayfs: failed to clone upperpath
[  186.746800][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1950'.
[  186.822843][ T5023] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  186.826611][T10562] loop1: detected capacity change from 0 to 256
[  186.842160][T10562] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d)
[  186.974692][ T5023] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  186.975969][ T5023] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[  186.975989][ T5023] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  186.976002][ T5023] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  186.976053][ T5023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.993297][T10550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  186.998517][ T5023] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  187.043209][ T5023] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  187.121131][   T36] audit: type=1326 audit(1788965604.798:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8319e159 code=0x7ffc0000
[  187.121291][   T36] audit: type=1326 audit(1788965604.798:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8319e159 code=0x7ffc0000
[  187.121314][   T36] audit: type=1326 audit(1788965604.798:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7faa8319e159 code=0x7ffc0000
[  187.121334][   T36] audit: type=1326 audit(1788965604.798:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8319e159 code=0x7ffc0000
[  187.121353][   T36] audit: type=1326 audit(1788965604.798:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8319e159 code=0x7ffc0000
[  187.121375][   T36] audit: type=1326 audit(1788965604.798:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7faa8319e159 code=0x7ffc0000
[  187.121486][   T36] audit: type=1326 audit(1788965604.798:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8319e159 code=0x7ffc0000
[  187.242341][T10550] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90
[  187.247858][ T5666] usb 5-1: USB disconnect, device number 19
[  187.268685][ T5666] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  187.270887][ T5666] cyberjack 5-1:1.0: device disconnected
[  187.367154][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1956'.
[  187.510177][T10583] loop1: detected capacity change from 0 to 512
[  187.511183][T10583] EXT4-fs (loop1): Test dummy encryption mode enabled
[  187.516511][T10583] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1961: inode has both inline data and extents flags
[  187.516564][T10583] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  187.517007][T10583] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1961: couldn't read orphan inode 15 (err -117)
[  187.517051][T10583] loop1: lost filesystem error report for type 5 error -117
[  187.518117][T10583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.545184][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.616323][T10591] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  187.702244][T10601] CIFS: Attempting to mount //::1/share
[  187.796968][T10606] netlink: 'syz.1.1970': attribute type 83 has an invalid length.
[  188.128766][T10627] erspan0: entered promiscuous mode
[  188.292452][T10623] loop4: detected capacity change from 0 to 32768
[  188.365539][   T36] audit: type=1800 audit(1788965605.998:340): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1978" name="file1" dev="loop4" ino=4 res=0 errno=0
[  188.531036][T10637] loop4: detected capacity change from 0 to 128
[  188.566304][T10637] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  188.573742][T10601] CIFS: VFS: cifs_mount failed w/return code = -512
[  188.578634][T10637] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  188.624477][T10631] loop1: detected capacity change from 0 to 131072
[  188.625572][T10631] F2FS-fs (loop1): Invalid segment count (0)
[  188.625583][T10631] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  188.625927][T10631] F2FS-fs (loop1): invalid crc value
[  188.660189][T10631] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:393219,ofs:0,cpver:1219692001,blkaddr:4098]
[  188.662274][T10631] loop1: lost file I/O error report for ino 1 type 5 pos 0x0 len 0x0 error -117
[  188.662384][T10631] F2FS-fs (loop1): Failed to read root inode
[  189.227720][T10646] loop1: detected capacity change from 0 to 16
[  189.251324][T10646] erofs (device loop1): mounted with root inode @ nid 36.
[  189.272911][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  189.447721][ T7839] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.648617][T10670] netlink: 'syz.1.1999': attribute type 1 has an invalid length.
[  189.677652][T10670] bond2: entered promiscuous mode
[  189.680738][T10670] bond2: entered allmulticast mode
[  189.683138][T10670] 8021q: adding VLAN 0 to HW filter on device bond2
[  189.699976][T10670] erspan2: entered allmulticast mode
[  189.705368][T10670] bond2: (slave erspan2): making interface the new active one
[  189.708627][T10670] erspan2: entered promiscuous mode
[  189.717121][T10670] bond2: (slave erspan2): Enslaving as an active interface with an up link
[  189.911631][T10688] loop4: detected capacity change from 0 to 24
[  191.348741][T10720] netlink: 'syz.4.2021': attribute type 1 has an invalid length.
[  191.575366][   T35] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  191.646424][T10733] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  191.650535][T10733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.692669][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'.
[  191.724074][   T35] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  191.725123][   T35] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  191.725135][   T35] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  191.725144][   T35] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  191.728265][   T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.728276][   T35] usb 2-1: Product: syz
[  191.728281][   T35] usb 2-1: Manufacturer: syz
[  191.728286][   T35] usb 2-1: SerialNumber: syz
[  191.730103][T10718] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.730146][T10718] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.731040][   T35] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  191.736808][   T35] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  192.136295][ T5666] usb 2-1: USB disconnect, device number 34
[  192.148403][ T5666] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  192.154451][ T5666] cyberjack 2-1:1.0: device disconnected
[  192.726741][T10791] loop4: detected capacity change from 0 to 512
[  192.750677][T10791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.759141][T10791] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.774454][T10799] 9p: Unknown Cache mode or invalid value m
[  192.785730][T10791] EXT4-fs: Ignoring sb option on remount
[  192.788291][T10791] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  192.791863][T10791] EXT4-fs: Cannot change journaled quota options when quota turned on
[  192.815760][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.077591][T10823] fuse: fd is not a fuse device
[  193.358147][T10837] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2075'.
[  193.358334][T10836] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2075'.
[  193.388391][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2076'.
[  193.388554][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2076'.
[  194.063153][   T35] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  194.223182][   T35] usb 2-1: Using ep0 maxpacket: 32
[  194.225343][   T35] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  194.226960][   T35] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  194.229305][   T35] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  194.229321][   T35] usb 2-1: Product: syz
[  194.229331][   T35] usb 2-1: Manufacturer: syz
[  194.229339][   T35] usb 2-1: SerialNumber: syz
[  194.233268][   T35] usb 2-1: config 0 descriptor??
[  194.233887][T10866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  194.238117][   T35] hub 2-1:0.0: bad descriptor, ignoring hub
[  194.238136][   T35] hub 2-1:0.0: probe with driver hub failed with error -5
[  194.384312][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  194.384373][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  194.584344][   T35] usb 2-1: USB disconnect, device number 35
[  194.755453][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'.
[  195.394133][   T36] audit: type=1326 audit(1788965613.088:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.0.2112" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x0
[  195.426698][T10919] loop4: detected capacity change from 0 to 128
[  195.428244][T10919] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  195.430463][T10919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.647773][T10930] fuse: fd is not a fuse device
[  195.666309][T10930] netlink: zone id is out of range
[  195.666371][T10930] netlink: zone id is out of range
[  195.666408][T10930] netlink: zone id is out of range
[  195.666415][T10930] netlink: zone id is out of range
[  195.666421][T10930] netlink: zone id is out of range
[  195.666425][T10930] netlink: zone id is out of range
[  195.970320][T10945] XFS (nbd4): SB validate failed with error -5.
[  195.991372][T10945] XFS (nbd4): io_pages changed from 0 to 1024, not restoring.
[  195.991436][T10945] XFS (nbd4): ra_pages changed from 0 to 64, not restoring.
[  196.393635][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2132'.
[  196.393698][T10965] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  196.953163][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2141'.
[  196.958265][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2141'.
[  197.128711][T10995] loop1: detected capacity change from 0 to 512
[  197.135761][T10995] EXT4-fs (loop1): Test dummy encryption mode enabled
[  197.142632][T10995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.2144: bg 0: block 7: invalid block bitmap
[  197.150839][T10995] loop1: lost filesystem error report for type 5 error -117
[  197.152778][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  197.152818][    C1] EXT4-fs (loop1): initial error at time 1788965614: ext4_validate_block_bitmap:436
[  197.152909][    C1] EXT4-fs (loop1): last error at time 1788965614: ext4_validate_block_bitmap:436
[  197.168033][T10995] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  197.171719][T10995] loop1: lost filesystem error report for type 5 error -117
[  197.172666][T10995] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #11: comm syz.1.2144: corrupted xattr block 95: invalid header
[  197.181566][T10995] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  197.181972][T10995] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117)
[  197.189646][T10995] EXT4-fs (loop1): 1 orphan inode deleted
[  197.194073][T10995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.644808][T11000] use of bytesused == 0 is deprecated and will be removed in the future,
[  197.644868][T11000] use the actual size instead.
[  197.777428][T11000] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  197.822004][T11000] fscrypt: AES-256-XTS using blk-crypto-fallback
[  198.042957][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.122053][   T36] audit: type=1804 audit(1788965615.808:342): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2156" name="/newroot/373/file1" dev="fuse" ino=1 res=1 errno=0
[  198.130617][   T36] audit: type=1800 audit(1788965615.818:343): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2156" name="/" dev="fuse" ino=1 res=0 errno=0
[  198.606464][T11053] loop1: detected capacity change from 0 to 40427
[  198.609670][T11053] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  198.609727][T11053] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  198.616946][T11053] F2FS-fs (loop1): invalid crc value
[  198.645444][T11053] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  198.653096][T11053] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  198.653133][T11053] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  199.439466][T11070] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2176'.
[  199.450182][T11070] 0: renamed from hsr0 (while UP)
[  199.486269][T11070] 0: entered allmulticast mode
[  199.488478][T11070] hsr_slave_0: entered allmulticast mode
[  199.491091][T11070] hsr_slave_1: entered allmulticast mode
[  199.494974][T11070] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  199.972348][T11078] ublk1: read batch cmd buffer failed
[  199.974040][T11078] ublk1: read batch cmd buffer failed
[  200.925800][T11102] fuse: fd is not a fuse device
[  201.717746][T11138] overlayfs: failed to clone upperpath
[  202.120643][T11124] nvme_tcp: queue 0: failed to receive icresp, error -104
[  202.219561][T11170] loop4: detected capacity change from 0 to 64
[  202.244065][T11170] Trying to free block not in datazone
[  202.363058][   T35] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  202.524781][   T35] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  202.528641][   T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.533425][   T35] usb 2-1: config 0 descriptor??
[  202.538274][   T35] cp210x 2-1:0.0: cp210x converter detected
[  202.940568][   T35] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  202.952930][   T35] usb 2-1: cp210x converter now attached to ttyUSB0
[  203.149894][ T5023] usb 2-1: USB disconnect, device number 36
[  203.161863][   T36] audit: type=1326 audit(1788965620.848:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.161931][   T36] audit: type=1326 audit(1788965620.848:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.167750][ T5023] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  203.180246][ T5023] cp210x 2-1:0.0: device disconnected
[  203.193593][   T36] audit: type=1326 audit(1788965620.888:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.193655][   T36] audit: type=1326 audit(1788965620.888:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.204915][   T36] audit: type=1326 audit(1788965620.888:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.204949][   T36] audit: type=1326 audit(1788965620.888:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.204975][   T36] audit: type=1326 audit(1788965620.888:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.205001][   T36] audit: type=1326 audit(1788965620.888:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.205026][   T36] audit: type=1326 audit(1788965620.888:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.2235" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  203.304281][T11206] loop4: detected capacity change from 0 to 256
[  203.322439][T11206] exFAT-fs (loop4): Invalid exboot-signature(sector = 2): 0x1119abd0
[  203.326034][T11206] exFAT-fs (loop4): Invalid exboot-signature(sector = 5): 0x1119abd0
[  203.329080][T11206] exFAT-fs (loop4): Invalid exboot-signature(sector = 6): 0x00000000
[  203.332480][T11206] exFAT-fs (loop4): Invalid exboot-signature(sector = 7): 0x00000000
[  203.335531][T11206] exFAT-fs (loop4): Invalid exboot-signature(sector = 8): 0x00000000
[  203.340051][T11206] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  203.340087][T11206] exFAT-fs (loop4): invalid boot region
[  203.340114][T11206] exFAT-fs (loop4): failed to recognize exfat type
[  203.398328][T11209] loop4: detected capacity change from 0 to 512
[  203.577305][T11209] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  203.591782][T11209] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.2238: Allocating blocks 41-42 which overlap fs metadata
[  203.592834][T11209] loop4: lost filesystem error report for type 5 error -117
[  203.596938][T11209] EXT4-fs (loop4): Remounting filesystem read-only
[  203.597140][T11209] Quota error (device loop4): write_blk: dquota write failed
[  203.597353][T11209] EXT4-fs (loop4): 1 truncate cleaned up
[  203.598391][T11209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.618242][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.874472][T11219] loop1: detected capacity change from 0 to 40427
[  203.880427][T11219] F2FS-fs (loop1): invalid crc value
[  203.923725][T11219] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  203.930944][T11219] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  203.930988][T11219] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  203.931039][T11219] F2FS-fs (loop1): Start checkpoint disabled!
[  203.949628][T11219] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  203.952558][T11219] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  204.098113][   T31] kworker/u9:1: attempt to access beyond end of device
[  204.098113][   T31] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  204.122856][   T31] CPU: 0 UID: 0 PID: 31 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  204.122897][   T31] Tainted: [L]=SOFTLOCKUP
[  204.122903][   T31] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.122912][   T31] Workqueue: writeback wb_workfn (flush-7:1)
[  204.122935][   T31] Call Trace:
[  204.122941][   T31]  <TASK>
[  204.122946][   T31]  dump_stack_lvl+0xe8/0x150
[  204.122964][   T31]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  204.122983][   T31]  f2fs_write_end_bio+0x1211/0x16e0
[  204.122996][   T31]  ? blkg_put+0x22/0x240
[  204.123021][   T31]  __submit_merged_bio+0x258/0x6a0
[  204.123038][   T31]  ? rcu_is_watching+0x16/0xb0
[  204.123055][   T31]  __submit_merged_write_cond+0x3c9/0x4e0
[  204.123075][   T31]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  204.123106][   T31]  f2fs_write_data_pages+0x2a27/0x36f0
[  204.123145][   T31]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.123205][   T31]  ? __lock_acquire+0x6df/0x2e50
[  204.123230][   T31]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.123249][   T31]  do_writepages+0x338/0x560
[  204.123269][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  204.123288][   T31]  ? reacquire_held_locks+0x117/0x1a0
[  204.123302][   T31]  ? writeback_sb_inodes+0x450/0x1b00
[  204.123322][   T31]  __writeback_single_inode+0x136/0x1220
[  204.123340][   T31]  ? do_raw_spin_unlock+0x4d/0x200
[  204.123359][   T31]  writeback_sb_inodes+0x9de/0x1b00
[  204.123394][   T31]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  204.123439][   T31]  ? rcu_is_watching+0x16/0xb0
[  204.123453][   T31]  ? queue_io+0x2d3/0x470
[  204.123472][   T31]  wb_writeback+0x41c/0xad0
[  204.123490][   T31]  ? queue_io+0x1e1/0x470
[  204.123510][   T31]  ? __pfx_wb_writeback+0x10/0x10
[  204.123525][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  204.123551][   T31]  wb_workfn+0x431/0x10f0
[  204.123577][   T31]  ? __pfx_wb_workfn+0x10/0x10
[  204.123593][   T31]  ? rcu_is_watching+0x16/0xb0
[  204.123607][   T31]  ? trace_hrtimer_start+0x82/0x200
[  204.123629][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  204.123652][   T31]  ? lock_acquire+0x115/0x350
[  204.123670][   T31]  ? rcu_is_watching+0x16/0xb0
[  204.123686][   T31]  ? process_scheduled_works+0x97a/0x1630
[  204.123703][   T31]  process_scheduled_works+0xc3d/0x1630
[  204.123740][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  204.123761][   T31]  ? assign_work+0x3cf/0x5d0
[  204.123780][   T31]  worker_thread+0xa47/0xfb0
[  204.123851][   T31]  kthread+0x38b/0x480
[  204.123865][   T31]  ? __pfx_worker_thread+0x10/0x10
[  204.123880][   T31]  ? __pfx_kthread+0x10/0x10
[  204.123893][   T31]  ret_from_fork+0x514/0xb70
[  204.123907][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  204.123926][   T31]  ? __switch_to+0xc89/0x1420
[  204.123944][   T31]  ? __pfx_kthread+0x10/0x10
[  204.123958][   T31]  ret_from_fork_asm+0x1a/0x30
[  204.123987][   T31]  </TASK>
[  204.169362][   T31] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  204.327268][T11237] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2250'.
[  204.327326][T11237] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2250'.
[  204.434314][T11248] IPv6: addrconf: prefix option has invalid lifetime
[  204.538265][T11256] ip_tables: iptables: counters copy to user failed while replacing table
[  205.165940][T11307] netlink: 'syz.0.2281': attribute type 1 has an invalid length.
[  205.165988][T11307] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2281'.
[  205.511692][T11326] loop1: detected capacity change from 0 to 4096
[  205.525429][T11332] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.662525][T11343] loop4: detected capacity change from 0 to 1024
[  205.702469][T11343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.721541][T11343] EXT4-fs error (device loop4): ext4_get_first_dir_block:3562: inode #11: comm syz.4.2297: directory missing '..'
[  205.740865][T11343] EXT4-fs (loop4): Remounting filesystem read-only
[  205.762255][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.850678][T11351] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.927932][T11354] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2298'.
[  206.034508][T11353] binder: 11352:11353 ioctl 40046205 0 returned -22
[  206.082919][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  206.232892][    T9] usb 2-1: Using ep0 maxpacket: 32
[  206.233963][    T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice= 0.40
[  206.235579][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  206.238197][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.238214][    T9] usb 2-1: Product: syz
[  206.238224][    T9] usb 2-1: Manufacturer: syz
[  206.238233][    T9] usb 2-1: SerialNumber: syz
[  206.449027][    T9] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  206.449092][    T9] usb 2-1: 1:1 : invalid channels 0
[  206.449488][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  206.475292][    T9] usb 2-1: USB disconnect, device number 37
[  206.498350][ T7471] udevd[7471]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.726503][T11365] syz_tun: entered allmulticast mode
[  206.730384][T11365] lo: entered allmulticast mode
[  206.737066][T11364] syz_tun: left allmulticast mode
[  206.737139][T11364] lo: left allmulticast mode
[  206.968024][T11375] loop1: detected capacity change from 0 to 16
[  206.969315][T11375] erofs (device loop1): mounted with root inode @ nid 36.
[  206.973471][ T5666] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  206.991935][T11377] loop1: detected capacity change from 0 to 16
[  206.992957][T11377] erofs (device loop1): mounted with root inode @ nid 36.
[  207.433706][ T5666] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  207.434866][ T5666] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.434887][ T5666] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.434903][ T5666] usb 5-1: config 0 interface 0 has no altsetting 0
[  207.434925][ T5666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.437004][ T5666] usb 5-1: config 0 descriptor??
[  207.499976][T11385] bond1: entered promiscuous mode
[  207.502243][T11385] bond1: entered allmulticast mode
[  207.511175][T11385] 8021q: adding VLAN 0 to HW filter on device bond1
[  207.721794][T11398] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  207.721971][T11398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.846891][ T5666] hid-multitouch 0003:0EEF:72C4.000C: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0
[  207.993145][T11414] overlayfs: failed to clone upperpath
[  208.056450][ T5023] usb 5-1: USB disconnect, device number 20
[  208.192119][T11422] loop1: detected capacity change from 0 to 32768
[  208.247463][T11436] overlayfs: failed to clone upperpath
[  208.736489][T11467] loop1: detected capacity change from 0 to 4096
[  208.740532][T11467] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  208.768492][T11467] ntfs3(loop1): ino=19, mi_enum_attr
[  208.768542][T11467] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  208.769365][T11467] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  208.780001][T11467] ntfs3(loop1): ino=21, "file1" fallocate(0x10) is not supported
[  209.044110][T11497] FAULT_INJECTION: forcing a failure.
[  209.044110][T11497] name failslab, interval 1, probability 0, space 0, times 0
[  209.049331][T11497] CPU: 1 UID: 0 PID: 11497 Comm: syz.4.2365 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  209.049360][T11497] Tainted: [L]=SOFTLOCKUP
[  209.049364][T11497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.049369][T11497] Call Trace:
[  209.049373][T11497]  <TASK>
[  209.049378][T11497]  dump_stack_lvl+0xe8/0x150
[  209.049392][T11497]  should_fail_ex+0x410/0x560
[  209.049403][T11497]  should_failslab+0xa8/0x100
[  209.049414][T11497]  __kmalloc_noprof+0xfe/0x720
[  209.049422][T11497]  ? tomoyo_supervisor+0xc53/0x1560
[  209.049433][T11497]  ? tomoyo_supervisor+0xc53/0x1560
[  209.049445][T11497]  tomoyo_supervisor+0xc53/0x1560
[  209.049460][T11497]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  209.049478][T11497]  ? tomoyo_check_path_acl+0x137/0x1d0
[  209.049487][T11497]  ? tomoyo_check_acl+0x386/0x400
[  209.049500][T11497]  ? __pfx_tomoyo_check_path_acl+0x10/0x10
[  209.049509][T11497]  tomoyo_path_permission+0x262/0x3b0
[  209.049519][T11497]  tomoyo_check_open_permission+0x2b2/0x470
[  209.049528][T11497]  ? tomoyo_check_open_permission+0x1d3/0x470
[  209.049536][T11497]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  209.049545][T11497]  ? __asan_memset+0x22/0x50
[  209.049564][T11497]  ? tomoyo_file_open+0x163/0x220
[  209.049576][T11497]  security_file_open+0xa9/0x240
[  209.049583][T11497]  do_dentry_open+0x4a0/0x1380
[  209.049598][T11497]  vfs_open+0x3b/0x340
[  209.049606][T11497]  ? path_openat+0x1428/0x1d60
[  209.049615][T11497]  path_openat+0x1443/0x1d60
[  209.049629][T11497]  do_file_open+0x23e/0x4a0
[  209.049639][T11497]  ? __pfx_do_file_open+0x10/0x10
[  209.049654][T11497]  ? _raw_spin_unlock+0x28/0x50
[  209.049665][T11497]  ? alloc_fd+0x651/0x6c0
[  209.049678][T11497]  do_sys_openat2+0x115/0x200
[  209.049687][T11497]  ? __se_sys_futex+0x3a8/0x450
[  209.049696][T11497]  ? __pfx_do_sys_openat2+0x10/0x10
[  209.049708][T11497]  ? rcu_is_watching+0x16/0xb0
[  209.049750][T11497]  __x64_sys_openat+0x138/0x170
[  209.049772][T11497]  do_syscall_64+0x166/0x520
[  209.049784][T11497]  ? trace_irq_disable+0x3b/0x140
[  209.049796][T11497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.049806][T11497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.049813][T11497] RIP: 0033:0x7feb9c95e98e
[  209.049821][T11497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  209.049828][T11497] RSP: 002b:00007feb9d797f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  209.049837][T11497] RAX: ffffffffffffffda RBX: 00007feb9d7986c0 RCX: 00007feb9c95e98e
[  209.049843][T11497] RDX: 0000000000000000 RSI: 00007feb9ca3475f RDI: ffffffffffffff9c
[  209.049848][T11497] RBP: 00007feb9ca35024 R08: 0000000000000000 R09: 0000000000000000
[  209.049853][T11497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.049857][T11497] R13: 00007feb9cc26038 R14: 00007feb9cc25fa0 R15: 00007fff09d19158
[  209.049869][T11497]  </TASK>
[  209.246501][ T5023] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  209.395394][ T5023] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  209.397505][ T5023] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.401810][ T5023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.401825][ T5023] usb 2-1: Product: syz
[  209.401834][ T5023] usb 2-1: Manufacturer: syz
[  209.401842][ T5023] usb 2-1: SerialNumber: syz
[  209.416872][T11509] loop4: detected capacity change from 0 to 32768
[  209.422324][T11509] XFS (loop4): invalid logbufsize: 2097152 [not 16k,32k,64k,128k or 256k]
[  209.609357][ T5023] snd-usb-6fire 2-1:1.0: invalid firmware version in device: 00 00 00 00. please reconnect to power. if this failure still happens, check your firmware installation.
[  209.609433][ T5023] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -22
[  209.811037][T11542] loop4: detected capacity change from 0 to 8
[  209.814847][   T27] usb 2-1: USB disconnect, device number 38
[  209.832127][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.838655][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.840941][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  209.841544][   T36] audit: type=1800 audit(1788965627.528:353): pid=11542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2386" name="file1" dev="loop4" ino=5 res=0 errno=0
[  209.852489][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.854550][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.854668][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.854824][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.854901][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.854996][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.855070][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.855167][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.855242][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.855335][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.855412][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.858301][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.858383][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.858482][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.858558][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.858653][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.858761][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.858905][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.860991][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861080][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861158][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861237][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861312][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861390][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861467][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861552][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861630][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861735][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861820][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861900][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.861977][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.862055][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  209.862133][T11542] SQUASHFS error: Failed to read block 0x4de: -5
[  210.288085][T11551] netlink: 'syz.0.2390': attribute type 2 has an invalid length.
[  210.426636][T11555] loop1: detected capacity change from 0 to 1024
[  210.718662][T11564] loop4: detected capacity change from 0 to 16
[  210.727111][T11564] erofs (device loop4): mounted with root inode @ nid 36.
[  211.077799][   T67] Bluetooth: hci3: Frame reassembly failed (-84)
[  211.780645][T11619] xt_IDLETIMER: label is empty or not nul-terminated
[  211.995568][T11631] netlink: 'syz.1.2428': attribute type 11 has an invalid length.
[  211.997865][T11631] netlink: 'syz.1.2428': attribute type 11 has an invalid length.
[  211.997879][T11631] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2428'.
[  212.169013][T11635] loop1: detected capacity change from 0 to 32768
[  212.187204][T11635] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  212.223520][T11635] XFS (loop1): Ending clean mount
[  212.254168][ T5602] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  212.534099][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'.
[  212.965099][   T27] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  212.987948][T11701] netlink: 'syz.0.2458': attribute type 1 has an invalid length.
[  213.102978][ T4996] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  213.112866][   T27] usb 2-1: Using ep0 maxpacket: 8
[  213.124127][   T27] usb 2-1: unable to get BOS descriptor or descriptor too short
[  213.124184][   T27] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=2c.a5
[  213.132629][   T27] usb 2-1: config 7 has an invalid interface number: 150 but max is 0
[  213.135787][   T27] usb 2-1: config 7 has no interface number 0
[  213.140704][   T27] usb 2-1: config 7 interface 150 has no altsetting 0
[  213.149298][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.149333][   T27] usb 2-1: Product: syz
[  213.149373][   T27] usb 2-1: Manufacturer: syz
[  213.149397][   T27] usb 2-1: SerialNumber: syz
[  213.245558][T11717] .: renamed from bond0 (while UP)
[  213.248082][T11717] FAULT_INJECTION: forcing a failure.
[  213.248082][T11717] name failslab, interval 1, probability 0, space 0, times 0
[  213.252080][T11717] CPU: 1 UID: 0 PID: 11717 Comm: syz.4.2466 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.252109][T11717] Tainted: [L]=SOFTLOCKUP
[  213.252113][T11717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.252118][T11717] Call Trace:
[  213.252122][T11717]  <TASK>
[  213.252126][T11717]  dump_stack_lvl+0xe8/0x150
[  213.252158][T11717]  should_fail_ex+0x410/0x560
[  213.252171][T11717]  should_failslab+0xa8/0x100
[  213.252182][T11717]  ? __kernfs_new_node+0xe6/0x980
[  213.252191][T11717]  kmem_cache_alloc_noprof+0xa1/0x600
[  213.252203][T11717]  ? kstrdup+0x81/0x100
[  213.252211][T11717]  ? __kernfs_new_node+0xe6/0x980
[  213.252222][T11717]  __kernfs_new_node+0xe6/0x980
[  213.252231][T11717]  ? string+0x28a/0x2d0
[  213.252242][T11717]  ? __pfx___kernfs_new_node+0x10/0x10
[  213.252250][T11717]  ? kernfs_root+0x1c/0x230
[  213.252259][T11717]  ? kernfs_root+0x1c/0x230
[  213.252266][T11717]  ? kernfs_root+0x1c/0x230
[  213.252272][T11717]  ? kernfs_root+0x1c/0x230
[  213.252281][T11717]  kernfs_new_node+0xea/0x140
[  213.252291][T11717]  kernfs_create_link+0xa7/0x200
[  213.252302][T11717]  sysfs_do_create_link_sd+0x83/0x110
[  213.252311][T11717]  netdev_adjacent_rename_links+0x46a/0x520
[  213.252326][T11717]  ? __pfx_netdev_adjacent_rename_links+0x10/0x10
[  213.252340][T11717]  ? kasan_quarantine_put+0xbb/0x1f0
[  213.252348][T11717]  ? lockdep_hardirqs_on+0x7b/0x110
[  213.252360][T11717]  ? kfree+0x1c5/0x650
[  213.252369][T11717]  ? device_rename+0x1ac/0x210
[  213.252377][T11717]  ? sysfs_rename_link_ns+0x178/0x1b0
[  213.252385][T11717]  ? device_rename+0x1ac/0x210
[  213.252393][T11717]  netif_change_name+0x2fc/0x970
[  213.252405][T11717]  ? dev_change_name+0x101/0x220
[  213.252415][T11717]  ? __pfx_netif_change_name+0x10/0x10
[  213.252424][T11717]  ? full_name_hash+0x92/0xe0
[  213.252437][T11717]  ? __dev_get_by_name+0xe5/0x130
[  213.252448][T11717]  dev_change_name+0x101/0x220
[  213.252457][T11717]  dev_ioctl+0x5ec/0x1150
[  213.252466][T11717]  sock_do_ioctl+0x23e/0x320
[  213.252477][T11717]  ? __pfx_sock_do_ioctl+0x10/0x10
[  213.252486][T11717]  ? hook_file_ioctl+0x1f2/0x600
[  213.252500][T11717]  sock_ioctl+0x57a/0x7e0
[  213.252511][T11717]  ? __pfx_sock_ioctl+0x10/0x10
[  213.252520][T11717]  ? __fget_files+0x2a/0x420
[  213.252530][T11717]  ? __fget_files+0x3a2/0x420
[  213.252539][T11717]  ? __fget_files+0x2a/0x420
[  213.252550][T11717]  ? bpf_lsm_file_ioctl+0x9/0x20
[  213.252560][T11717]  ? __pfx_sock_ioctl+0x10/0x10
[  213.252569][T11717]  __se_sys_ioctl+0xfc/0x170
[  213.252578][T11717]  do_syscall_64+0x166/0x520
[  213.252585][T11717]  ? trace_irq_disable+0x3b/0x140
[  213.252592][T11717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.252601][T11717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.252608][T11717] RIP: 0033:0x7feb9c99e159
[  213.252617][T11717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.252624][T11717] RSP: 002b:00007feb9d798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  213.252633][T11717] RAX: ffffffffffffffda RBX: 00007feb9cc25fa0 RCX: 00007feb9c99e159
[  213.252639][T11717] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000004
[  213.252643][T11717] RBP: 00007feb9ca35024 R08: 0000000000000000 R09: 0000000000000000
[  213.252648][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.252653][T11717] R13: 00007feb9cc26038 R14: 00007feb9cc25fa0 R15: 00007fff09d19158
[  213.252693][T11717]  </TASK>
[  213.424097][   T27] usb 2-1: USB disconnect, device number 39
[  213.502077][T11720] Unknown status report in ack skb
[  213.681430][T11728] ip6gretap1: entered allmulticast mode
[  213.686320][T11728] batman_adv: batadv0: Adding interface: ip6gretap1
[  213.688997][T11728] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.700142][T11728] batman_adv: batadv0: Interface activated: ip6gretap1
[  213.912368][T11736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2475'.
[  213.963747][T11736] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.964745][T11736] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.991097][T11741] loop1: detected capacity change from 0 to 1024
[  213.996755][T11741] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  214.001125][T11741] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  214.009995][T11741] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.2477: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 6656(6656)
[  214.032877][T11741] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  214.033838][T11741] EXT4-fs (loop1): no journal found
[  214.033960][T11741] EXT4-fs (loop1): can't get journal size
[  214.042757][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  214.042815][    C0] EXT4-fs (loop1): initial error at time 1788965631: ext4_ext_check_inode:521: inode 2
[  214.045111][    C0] EXT4-fs (loop1): last error at time 1788965631: ext4_ext_check_inode:521: inode 2
[  214.051024][T11741] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.2477: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 6656(6656)
[  214.051054][T11741] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  214.051399][T11741] EXT4-fs (loop1): get root inode failed
[  214.051411][T11741] EXT4-fs (loop1): mount failed
[  214.129460][T11746] loop4: detected capacity change from 0 to 1024
[  214.139432][T11746] EXT4-fs: Ignoring removed bh option
[  214.208016][T11746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  214.208143][T11746] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.240572][T11746] EXT4-fs (loop4): shut down requested (0)
[  214.305042][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  214.473392][T11759] FAULT_INJECTION: forcing a failure.
[  214.473392][T11759] name failslab, interval 1, probability 0, space 0, times 0
[  214.473546][T11759] CPU: 0 UID: 0 PID: 11759 Comm: syz.4.2483 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  214.473558][T11759] Tainted: [L]=SOFTLOCKUP
[  214.473561][T11759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.473566][T11759] Call Trace:
[  214.473569][T11759]  <TASK>
[  214.473573][T11759]  dump_stack_lvl+0xe8/0x150
[  214.473588][T11759]  should_fail_ex+0x410/0x560
[  214.473599][T11759]  should_failslab+0xa8/0x100
[  214.473610][T11759]  __kmalloc_noprof+0xfe/0x720
[  214.473624][T11759]  ? security_sk_alloc+0x52/0x360
[  214.473636][T11759]  ? security_sk_alloc+0x52/0x360
[  214.473679][T11759]  security_sk_alloc+0x52/0x360
[  214.473697][T11759]  sk_prot_alloc+0x101/0x210
[  214.473710][T11759]  ? sk_alloc+0x27/0x390
[  214.473724][T11759]  sk_alloc+0x3a/0x390
[  214.473740][T11759]  bpf_prog_test_run_skb+0x3a6/0x2230
[  214.473757][T11759]  ? lock_acquire+0x115/0x350
[  214.473779][T11759]  ? __fget_files+0x3a2/0x420
[  214.473796][T11759]  ? __fget_files+0x2a/0x420
[  214.473815][T11759]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  214.473832][T11759]  bpf_prog_test_run+0x2c5/0x340
[  214.473848][T11759]  __sys_bpf+0xa22/0xd90
[  214.473867][T11759]  ? __pfx___sys_bpf+0x10/0x10
[  214.473882][T11759]  ? do_futex+0x3e7/0x4e0
[  214.473911][T11759]  ? ksys_write+0x242/0x270
[  214.473923][T11759]  ? __pfx___se_sys_futex+0x10/0x10
[  214.473938][T11759]  ? __pfx_ksys_write+0x10/0x10
[  214.473953][T11759]  __x64_sys_bpf+0xba/0xd0
[  214.473966][T11759]  do_syscall_64+0x166/0x520
[  214.473977][T11759]  ? trace_irq_disable+0x3b/0x140
[  214.473989][T11759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.474005][T11759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.474017][T11759] RIP: 0033:0x7feb9c99e159
[  214.474030][T11759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.474040][T11759] RSP: 002b:00007feb9d798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  214.474055][T11759] RAX: ffffffffffffffda RBX: 00007feb9cc25fa0 RCX: 00007feb9c99e159
[  214.474064][T11759] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  214.474072][T11759] RBP: 00007feb9ca35024 R08: 0000000000000000 R09: 0000000000000000
[  214.474079][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.474087][T11759] R13: 00007feb9cc26038 R14: 00007feb9cc25fa0 R15: 00007fff09d19158
[  214.474106][T11759]  </TASK>
[  214.815837][T11769] loop1: detected capacity change from 0 to 4096
[  214.844943][T11769] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  214.853616][ T4996] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  214.853681][ T4996] CPU: 1 UID: 0 PID: 4996 Comm: kworker/u11:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  214.853721][ T4996] Tainted: [L]=SOFTLOCKUP
[  214.853727][ T4996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.853737][ T4996] Workqueue: hci2 hci_rx_work
[  214.853763][ T4996] Call Trace:
[  214.853769][ T4996]  <TASK>
[  214.853775][ T4996]  dump_stack_lvl+0xe8/0x150
[  214.853798][ T4996]  sysfs_create_dir_ns+0x271/0x2a0
[  214.853819][ T4996]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  214.853842][ T4996]  ? do_raw_spin_unlock+0x4d/0x200
[  214.853862][ T4996]  kobject_add_internal+0x622/0xcd0
[  214.853882][ T4996]  kobject_add+0x163/0x240
[  214.853900][ T4996]  ? __pfx_kobject_add+0x10/0x10
[  214.853918][ T4996]  ? get_device_parent+0x366/0x3a0
[  214.853939][ T4996]  device_add+0x3fa/0xb80
[  214.853957][ T4996]  hci_conn_add_sysfs+0xd5/0x210
[  214.853974][ T4996]  le_conn_complete_evt+0xfe3/0x16d0
[  214.853992][ T4996]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  214.854005][ T4996]  ? __mutex_unlock_slowpath+0x731/0x900
[  214.854019][ T4996]  ? skb_pull_data+0xf0/0x200
[  214.854039][ T4996]  hci_le_conn_complete_evt+0x187/0x470
[  214.854056][ T4996]  hci_event_packet+0x67a/0xf10
[  214.854085][ T4996]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  214.854097][ T4996]  ? __pfx_hci_event_packet+0x10/0x10
[  214.854116][ T4996]  ? audit_put_watch+0x60/0x120
[  214.854134][ T4996]  ? hci_send_to_monitor+0xe2/0x590
[  214.854175][ T4996]  hci_rx_work+0x3ee/0x1020
[  214.854200][ T4996]  ? process_scheduled_works+0x97a/0x1630
[  214.854216][ T4996]  process_scheduled_works+0xc3d/0x1630
[  214.854254][ T4996]  ? __pfx_process_scheduled_works+0x10/0x10
[  214.854273][ T4996]  ? assign_work+0x3cf/0x5d0
[  214.854291][ T4996]  worker_thread+0xa47/0xfb0
[  214.854314][ T4996]  ? __kthread_parkme+0x71/0x1f0
[  214.854338][ T4996]  kthread+0x38b/0x480
[  214.854351][ T4996]  ? __pfx_worker_thread+0x10/0x10
[  214.854365][ T4996]  ? __pfx_kthread+0x10/0x10
[  214.854379][ T4996]  ret_from_fork+0x514/0xb70
[  214.854392][ T4996]  ? __pfx_ret_from_fork+0x10/0x10
[  214.854411][ T4996]  ? __switch_to+0xc89/0x1420
[  214.854430][ T4996]  ? __pfx_kthread+0x10/0x10
[  214.854443][ T4996]  ret_from_fork_asm+0x1a/0x30
[  214.854472][ T4996]  </TASK>
[  214.854593][ T4996] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  214.854669][ T4996] Bluetooth: hci2: failed to register connection device
[  214.882582][T11769] ntfs3(loop1): Failed to load $Extend (-22).
[  214.882603][T11769] ntfs3(loop1): Failed to initialize $Extend.
[  215.064585][T11780] GUP no longer grows the stack in syz.1.2490 (11780): 200000007000-200000008000 (200000004000)
[  215.064682][T11780] CPU: 1 UID: 0 PID: 11780 Comm: syz.1.2490 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  215.064721][T11780] Tainted: [L]=SOFTLOCKUP
[  215.064727][T11780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.064736][T11780] Call Trace:
[  215.064742][T11780]  <TASK>
[  215.064748][T11780]  dump_stack_lvl+0xe8/0x150
[  215.064771][T11780]  fixup_user_fault+0x637/0x6f0
[  215.064793][T11780]  fault_in_user_writeable+0x71/0xd0
[  215.064810][T11780]  futex_lock_pi+0x7bd/0xac0
[  215.064837][T11780]  ? __pfx_futex_lock_pi+0x10/0x10
[  215.064877][T11780]  ? __pfx_futex_wake_mark+0x10/0x10
[  215.064902][T11780]  ? __lock_acquire+0x6df/0x2e50
[  215.064918][T11780]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.064940][T11780]  do_futex+0x330/0x4e0
[  215.064960][T11780]  ? __pfx_do_futex+0x10/0x10
[  215.064976][T11780]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.064996][T11780]  __se_sys_futex+0x3a8/0x450
[  215.065015][T11780]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  215.065033][T11780]  ? __pfx___se_sys_futex+0x10/0x10
[  215.065055][T11780]  ? __x64_sys_futex+0x21/0xf0
[  215.065074][T11780]  do_syscall_64+0x166/0x520
[  215.065094][T11780]  ? trace_irq_disable+0x3b/0x140
[  215.065106][T11780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.065123][T11780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.065136][T11780] RIP: 0033:0x7faa8319e159
[  215.065149][T11780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.065160][T11780] RSP: 002b:00007faa8404d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  215.065195][T11780] RAX: ffffffffffffffda RBX: 00007faa83426090 RCX: 00007faa8319e159
[  215.065226][T11780] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000
[  215.065235][T11780] RBP: 00007faa83235024 R08: 0000000000000000 R09: 0000000000000082
[  215.065243][T11780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.065251][T11780] R13: 00007faa83426128 R14: 00007faa83426090 R15: 00007ffd7df88b08
[  215.065271][T11780]  </TASK>
[  215.268962][ T4996] Bluetooth: hci1: unexpected event for opcode 0x6b2f
[  215.761473][T11810] netlink: 'syz.4.2504': attribute type 4 has an invalid length.
[  215.790096][T11810] netlink: 'syz.4.2504': attribute type 4 has an invalid length.
[  216.005788][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'.
[  216.034330][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'.
[  216.365975][T11846] loop4: detected capacity change from 0 to 4096
[  216.367374][T11846] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  216.387320][T11846] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  216.396515][T11846] ntfs3(loop4): new label is too long
[  216.544690][T11856] netlink: 'syz.4.2524': attribute type 4 has an invalid length.
[  216.767856][T11866] loop4: detected capacity change from 0 to 512
[  216.768832][T11866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  216.784050][T11866] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2528: invalid indirect mapped block 9 (level 0)
[  216.784094][T11866] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.790875][T11866] EXT4-fs (loop4): 1 truncate cleaned up
[  216.802459][T11866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.848349][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.705791][T11881] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2535'.
[  218.174075][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2541'.
[  218.174245][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2541'.
[  218.327159][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'.
[  218.711375][T11929] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2556'.
[  218.731713][T11931] overlayfs: failed to clone upperpath
[  219.140661][T11961] netlink: 'syz.0.2570': attribute type 3 has an invalid length.
[  219.164633][   T35] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  219.312824][   T35] usb 2-1: Using ep0 maxpacket: 32
[  219.316033][   T35] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  219.321483][   T35] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.325831][   T35] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  219.332936][   T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.332981][   T35] usb 2-1: Product: syz
[  219.333009][   T35] usb 2-1: Manufacturer: syz
[  219.333037][   T35] usb 2-1: SerialNumber: syz
[  219.350831][   T35] snd-ua101 2-1:1.1: invalid format type
[  219.350903][   T35] snd-ua101 2-1:1.0: invalid num_altsetting
[  219.512835][  T810] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  219.544251][    T9] usb 2-1: USB disconnect, device number 40
[  219.662976][  T810] usb 5-1: Using ep0 maxpacket: 8
[  219.665127][  T810] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[  219.673785][  T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.673844][  T810] usb 5-1: Product: syz
[  219.673895][  T810] usb 5-1: Manufacturer: syz
[  219.673906][  T810] usb 5-1: SerialNumber: syz
[  219.683423][  T810] usb 5-1: config 0 descriptor??
[  219.693718][  T810] upd78f0730 5-1:0.0: upd78f0730 converter detected
[  219.700451][  T810] usb 5-1: upd78f0730 converter now attached to ttyUSB0
[  219.889282][ T5666] usb 5-1: USB disconnect, device number 21
[  219.900645][ T5666] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  219.905306][ T5666] upd78f0730 5-1:0.0: device disconnected
[  220.185041][T11986] fuse: fd is not a fuse device
[  220.217028][ T4996] Bluetooth: hci1: unexpected event for opcode 0x0060
[  220.424538][ T5666] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  220.572997][ T5666] usb 2-1: Using ep0 maxpacket: 8
[  220.575332][ T5666] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[  220.579314][ T5666] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  220.584012][ T5666] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  220.588736][ T5666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.762876][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  220.797660][ T5666] usb 2-1: string descriptor 0 read error: -71
[  220.804822][ T5666] mdc800 2-1:1.0: probe fails -> wrong Interface
[  220.808637][ T5666] usb 2-1: USB disconnect, device number 41
[  220.914678][    T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  220.919216][    T9] usb 5-1: config 0 has no interfaces?
[  220.924417][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.927862][    T9] usb 5-1: Product: syz
[  220.929791][    T9] usb 5-1: Manufacturer: syz
[  220.929802][    T9] usb 5-1: SerialNumber: syz
[  220.936632][    T9] usb 5-1: config 0 descriptor??
[  220.970974][T12003] openvswitch: netlink: IP tunnel dst address not specified
[  221.166578][  T810] usb 5-1: USB disconnect, device number 22
[  221.662879][  T810] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  221.813096][  T810] usb 2-1: Using ep0 maxpacket: 16
[  221.815060][  T810] usb 2-1: unable to get BOS descriptor or descriptor too short
[  221.815085][  T810] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  221.816047][  T810] usb 2-1: config 1 has an invalid interface number: 151 but max is 0
[  221.816058][  T810] usb 2-1: config 1 has no interface number 0
[  221.816075][  T810] usb 2-1: config 1 interface 151 has no altsetting 0
[  221.817899][  T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.817910][  T810] usb 2-1: Product: syz
[  221.817916][  T810] usb 2-1: Manufacturer: syz
[  221.817922][  T810] usb 2-1: SerialNumber: syz
[  222.048618][  T810] gspca_main: pac7311-2.14.0 probing 093a:260e
[  222.051491][  T810] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71
[  222.051583][  T810] pac7311 2-1:1.151: probe with driver pac7311 failed with error -71
[  222.054778][  T810] usb 2-1: USB disconnect, device number 42
[  222.735769][T12091] ipvlan2: entered allmulticast mode
[  222.737598][T12091] ip6gretap0: entered allmulticast mode
[  222.742638][T12091] batman_adv: batadv0: Adding interface: ipvlan2
[  222.745282][T12091] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.754096][T12091] batman_adv: batadv0: Interface activated: ipvlan2
[  223.086639][T12100] loop4: detected capacity change from 0 to 1024
[  223.100897][T12100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  223.105475][T12100] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.121693][T12100] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.2634: bg 0: block 112: padding at end of block bitmap is not set
[  223.141361][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  223.158860][T12109] 9p: Bad value for 'rfdno'
[  223.183114][   T58] Bluetooth: hci0: command 0x0406 tx timeout
[  223.294051][  T810] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  223.369274][T12128] loop4: detected capacity change from 0 to 2048
[  223.382229][T12128]  loop4: p1 p4
[  223.382229][T12128]  p1: <minix: p5 >
[  223.385299][T12128] loop4: partition table partially beyond EOD, truncated
[  223.389407][T12128] loop4: p4 start 184549376 is beyond EOD, truncated
[  223.443783][  T810] usb 2-1: Using ep0 maxpacket: 16
[  223.449322][  T810] usb 2-1: unable to get BOS descriptor or descriptor too short
[  223.449395][  T810] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  223.454228][  T810] usb 2-1: config 9 has an invalid interface number: 57 but max is 0
[  223.454247][  T810] usb 2-1: config 9 has no interface number 0
[  223.454266][  T810] usb 2-1: config 9 interface 57 has no altsetting 0
[  223.459221][  T810] usb 2-1: string descriptor 0 read error: -22
[  223.459316][  T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.637234][   T58] Bluetooth: hci1: unexpected event for opcode 0x2011
[  223.679250][  T810]  (null): keene_cmd_main failed (-71)
[  223.724881][  T810] video4linux radio48: keene_cmd_main failed (-71)
[  223.724932][  T810] radio-keene 2-1:9.57: V4L2 device registered as radio48
[  223.727588][  T810] usb 2-1: USB disconnect, device number 43
[  225.731390][T12233] FAULT_INJECTION: forcing a failure.
[  225.731390][T12233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.731463][T12233] CPU: 1 UID: 0 PID: 12233 Comm: syz.4.2693 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  225.731482][T12233] Tainted: [L]=SOFTLOCKUP
[  225.731515][T12233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.731531][T12233] Call Trace:
[  225.731536][T12233]  <TASK>
[  225.731542][T12233]  dump_stack_lvl+0xe8/0x150
[  225.731567][T12233]  should_fail_ex+0x410/0x560
[  225.731587][T12233]  _copy_from_user+0x2d/0xb0
[  225.731604][T12233]  bpf_vlog_reverse_ubuf+0xb1/0x3e0
[  225.731630][T12233]  bpf_vlog_finalize+0x189/0x3f0
[  225.731652][T12233]  bpf_log_attr_finalize+0x80/0x1e0
[  225.731665][T12233]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[  225.731680][T12233]  ? btf_parse_hdr+0x5f2/0x810
[  225.731696][T12233]  btf_new_fd+0x35e/0xbb0
[  225.731714][T12233]  __sys_bpf+0xd2e/0xd90
[  225.731735][T12233]  ? __pfx___sys_bpf+0x10/0x10
[  225.731752][T12233]  ? do_futex+0x3e7/0x4e0
[  225.731784][T12233]  ? ksys_write+0x242/0x270
[  225.731796][T12233]  ? __pfx___se_sys_futex+0x10/0x10
[  225.731813][T12233]  ? rcu_is_watching+0x16/0xb0
[  225.731832][T12233]  __x64_sys_bpf+0xba/0xd0
[  225.731847][T12233]  do_syscall_64+0x166/0x520
[  225.731859][T12233]  ? trace_irq_disable+0x3b/0x140
[  225.731871][T12233]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.731898][T12233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.731911][T12233] RIP: 0033:0x7feb9c99e159
[  225.731924][T12233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.731936][T12233] RSP: 002b:00007feb9d798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  225.731952][T12233] RAX: ffffffffffffffda RBX: 00007feb9cc25fa0 RCX: 00007feb9c99e159
[  225.731961][T12233] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  225.731969][T12233] RBP: 00007feb9ca35024 R08: 0000000000000000 R09: 0000000000000000
[  225.731978][T12233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.731986][T12233] R13: 00007feb9cc26038 R14: 00007feb9cc25fa0 R15: 00007fff09d19158
[  225.732006][T12233]  </TASK>
[  225.954539][   T35] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  225.995580][T12243] loop4: detected capacity change from 0 to 128
[  226.107124][   T35] usb 2-1: Using ep0 maxpacket: 32
[  226.108018][   T35] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  226.109098][   T35] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.109114][   T35] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.109128][   T35] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.109146][   T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.133613][   T35] usb 2-1: config 0 descriptor??
[  226.166222][T12250] loop4: detected capacity change from 0 to 256
[  226.176902][T12250] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  226.349507][T12256] program syz.4.2704 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  226.564655][   T35] input: HID 17ef:6009 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:17EF:6009.000D/input/input15
[  226.690125][   T35] lenovo 0003:17EF:6009.000D: input,hidraw0: USB HID v80.00 Joystick [HID 17ef:6009] on usb-dummy_hcd.1-1/input0
[  226.770981][    T9] usb 2-1: USB disconnect, device number 44
[  226.786289][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90010, key code 190): Invalid argument
[  226.786501][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90011, key code 148): Invalid argument
[  226.786577][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90012, key code 152): Invalid argument
[  226.786650][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90013, key code 236): Invalid argument
[  226.786740][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90014, key code 238): Invalid argument
[  226.786812][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90015, key code 212): Invalid argument
[  226.786884][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90016, key code 227): Invalid argument
[  226.786962][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90017, key code 191): Invalid argument
[  226.787056][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x90019, key code 205): Invalid argument
[  226.787368][ T7471] udevd[7471]: Error calling EVIOCSKEYCODE on device node '/dev/input/event3' (scan code 0x9001a, key code 225): Invalid argument
[  226.807382][T12284] netlink: 'syz.4.2717': attribute type 1 has an invalid length.
[  227.274098][   T35] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  227.423437][   T35] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  227.424448][   T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.424462][   T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.424501][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.572933][ T6152] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  227.722823][ T6152] usb 2-1: Using ep0 maxpacket: 32
[  227.726916][ T6152] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  227.731229][ T6152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.734892][ T6152] usb 2-1: config 0 descriptor??
[  227.745726][ T6152] gspca_main: nw80x-2.14.0 probing 055f:d001
[  227.836695][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836822][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836835][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836845][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836854][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836863][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836874][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836883][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836892][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.836901][   T35] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0
[  227.837222][   T35] hid-picolcd 0003:04D8:C002.000E: unbalanced collection at end of report description
[  227.838012][   T35] hid-picolcd 0003:04D8:C002.000E: device report parse failed
[  227.838146][   T35] hid-picolcd 0003:04D8:C002.000E: probe with driver hid-picolcd failed with error -22
[  228.042357][   T35] usb 5-1: USB disconnect, device number 23
[  228.145992][ T6152] gspca_nw80x: reg_r err -71
[  228.146094][ T6152] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[  228.147755][ T6152] usb 2-1: USB disconnect, device number 45
[  228.627422][T12356] syz_tun: entered allmulticast mode
[  228.657250][T12355] syz_tun: left allmulticast mode
[  228.920368][T12378] loop1: detected capacity change from 0 to 512
[  228.928512][T12378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  228.932232][T12378] System zones: 1-12
[  228.940498][T12378] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2764: Directory hole found for htree index block 0
[  228.954126][T12378] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  228.962775][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  228.962838][    C1] EXT4-fs (loop1): initial error at time 1788965646: dx_probe:791: inode 2
[  228.962931][    C1] EXT4-fs (loop1): last error at time 1788965646: dx_probe:791: inode 2
[  228.964558][T12378] EXT4-fs (loop1): Remounting filesystem read-only
[  228.964592][T12378] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  228.964658][T12378] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  228.965884][T12378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.015574][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.283851][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'.
[  229.283959][T12404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.295121][T12404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.438511][T12418] loop4: detected capacity change from 0 to 1024
[  229.477465][T12418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.524749][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.888678][   T58] Bluetooth: hci1: unexpected event for opcode 0x2003
[  230.015614][T12454] netlink: 'syz.4.2797': attribute type 3 has an invalid length.
[  230.015681][T12454] netlink: 'syz.4.2797': attribute type 3 has an invalid length.
[  230.028797][T12454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2797'.
[  230.174876][T12466] loop1: detected capacity change from 0 to 256
[  230.220984][T12468] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2804'.
[  230.509783][T12478] loop1: detected capacity change from 0 to 32768
[  230.526787][T12478] JBD2: Ignoring recovery information on journal
[  230.554499][T12478] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  230.743943][   T27] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  230.819626][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[  230.922786][   T27] usb 5-1: Using ep0 maxpacket: 8
[  230.923458][   T27] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  230.925963][   T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.925994][   T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  230.926009][   T27] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  230.927855][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.927865][   T27] usb 5-1: Product: syz
[  230.927871][   T27] usb 5-1: Manufacturer: syz
[  230.927876][   T27] usb 5-1: SerialNumber: syz
[  230.955298][T12474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  231.108165][T12500] loop1: detected capacity change from 0 to 256
[  231.163373][   T27] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  231.163462][   T27] usb 5-1: MIDIStreaming interface descriptor not found
[  231.213043][   T27] usb 5-1: USB disconnect, device number 24
[  231.246638][T12507] loop1: detected capacity change from 0 to 1024
[  231.250301][T12507] hfsplus: failed to load attributes file
[  232.298076][ T6152] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  232.442852][ T6152] usb 5-1: Using ep0 maxpacket: 8
[  232.445234][ T5023] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  232.449224][ T6152] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24
[  232.454223][ T6152] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  232.454268][ T6152] usb 5-1: config 0 has no interface number 0
[  232.454319][ T6152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.455668][ T6152] usb 5-1: config 0 descriptor??
[  232.473294][ T6152] gspca_main: spca501-2.14.0 probing 0497:c001
[  232.603597][ T5023] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  232.608704][ T5023] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF
[  232.614498][ T5023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  232.621198][ T5023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.624790][ T5023] usb 2-1: Product: syz
[  232.624805][ T5023] usb 2-1: Manufacturer: syz
[  232.624815][ T5023] usb 2-1: SerialNumber: syz
[  232.636359][ T5023] usb 2-1: config 0 descriptor??
[  232.882589][ T6152] gspca_spca501: reg write: error -71
[  232.882635][ T6152] spca501 5-1:0.125: Reg write failed for 0x02,0xa048,0x00
[  232.882745][ T6152] spca501 5-1:0.125: probe with driver spca501 failed with error -22
[  232.905129][ T6152] usb 5-1: USB disconnect, device number 25
[  233.001193][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'.
[  233.084553][ T5666] usb 2-1: USB disconnect, device number 46
[  233.467287][T12563] FAULT_INJECTION: forcing a failure.
[  233.467287][T12563] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.467339][T12563] CPU: 1 UID: 0 PID: 12563 Comm: syz.4.2847 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  233.467366][T12563] Tainted: [L]=SOFTLOCKUP
[  233.467370][T12563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.467375][T12563] Call Trace:
[  233.467401][T12563]  <TASK>
[  233.467408][T12563]  dump_stack_lvl+0xe8/0x150
[  233.467429][T12563]  should_fail_ex+0x410/0x560
[  233.467443][T12563]  _copy_from_user+0x2d/0xb0
[  233.467455][T12563]  iommufd_fops_ioctl+0x416/0x600
[  233.467470][T12563]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  233.467484][T12563]  ? __fget_files+0x2a/0x420
[  233.467497][T12563]  ? __fget_files+0x2a/0x420
[  233.467509][T12563]  ? bpf_lsm_file_ioctl+0x9/0x20
[  233.467519][T12563]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  233.467530][T12563]  __se_sys_ioctl+0xfc/0x170
[  233.467539][T12563]  do_syscall_64+0x166/0x520
[  233.467546][T12563]  ? trace_irq_disable+0x3b/0x140
[  233.467553][T12563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.467562][T12563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.467570][T12563] RIP: 0033:0x7feb9c99e159
[  233.467578][T12563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.467585][T12563] RSP: 002b:00007feb9d798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  233.467594][T12563] RAX: ffffffffffffffda RBX: 00007feb9cc25fa0 RCX: 00007feb9c99e159
[  233.467600][T12563] RDX: 0000200000000400 RSI: 0000000000003b81 RDI: 0000000000000005
[  233.467605][T12563] RBP: 00007feb9ca35024 R08: 0000000000000000 R09: 0000000000000000
[  233.467611][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.467615][T12563] R13: 00007feb9cc26038 R14: 00007feb9cc25fa0 R15: 00007fff09d19158
[  233.467628][T12563]  </TASK>
[  234.171180][T12591] fuse: fd is not a fuse device
[  234.288850][T12594] loop1: detected capacity change from 0 to 4096
[  234.343263][T12599] xt_hashlimit: size too large, truncated to 1048576
[  234.471425][T12603] gretap0: entered promiscuous mode
[  234.476870][T12594] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  234.480432][T12594] ntfs3(loop1): Failed to load root (-22).
[  234.597750][T12607] loop4: detected capacity change from 0 to 4096
[  234.606622][T12607] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  234.615691][T12607] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  234.631716][   T36] audit: type=1800 audit(1788965652.318:354): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2867" name="file1" dev="loop4" ino=30 res=0 errno=0
[  234.731727][T12594] loop1: detected capacity change from 0 to 32768
[  234.734023][T12594] (syz.1.2862,12594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  234.738616][T12594] (syz.1.2862,12594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  234.753833][T12594] JBD2: Ignoring recovery information on journal
[  234.801335][T12594] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  234.943906][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[  235.197921][T12626] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2876'.
[  235.264237][T12630] bond0: entered promiscuous mode
[  235.269131][T12630] bond_slave_1: entered promiscuous mode
[  235.284147][T12630] batadv0: entered promiscuous mode
[  235.304457][T12630] 8021q: adding VLAN 0 to HW filter on device hsr1
[  235.306669][T12630] bond0: left promiscuous mode
[  235.306811][T12630] bond_slave_1: left promiscuous mode
[  235.308419][T12630] batadv0: left promiscuous mode
[  235.786285][T12661] loop4: detected capacity change from 0 to 16
[  235.789684][T12661] erofs (device loop4): mounted with root inode @ nid 36.
[  235.814389][   T60] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  235.838777][T12661] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  235.853498][T12661] erofs (device loop4): read error -117 @ 2 of nid 89
[  235.883482][   T36] audit: type=1800 audit(1788965653.558:355): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2891" name="file2" dev="loop4" ino=89 res=0 errno=0
[  236.282919][ T5666] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  236.443789][ T5666] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  236.444867][ T5666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.444887][ T5666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.447194][ T5666] usb 5-1: config 0 descriptor??
[  236.530136][   T36] audit: type=1326 audit(1788965654.218:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.537510][   T36] audit: type=1326 audit(1788965654.218:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.537533][   T36] audit: type=1326 audit(1788965654.218:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.537547][   T36] audit: type=1326 audit(1788965654.218:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.537562][   T36] audit: type=1326 audit(1788965654.218:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.537576][   T36] audit: type=1326 audit(1788965654.218:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.537591][   T36] audit: type=1326 audit(1788965654.218:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.537607][   T36] audit: type=1326 audit(1788965654.218:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.0.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d3d9e159 code=0x7ffc0000
[  236.864638][ T5666] hid_parser_main: 36 callbacks suppressed
[  236.864708][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864740][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864751][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864760][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864770][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864778][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864788][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864797][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864807][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.864816][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: unknown main item tag 0x0
[  236.870049][ T5666] aquacomputer_d5next 0003:0C70:F003.000F: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0
[  237.068262][ T6152] usb 5-1: USB disconnect, device number 26
[  237.628614][T12697] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  238.001654][T12705] bond0: (slave wlan0): Error: Device can not be enslaved while up
[  238.201714][T12711] loop4: detected capacity change from 0 to 2048
[  238.234515][T12712] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.263642][ T5666] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  238.433015][ T5666] usb 2-1: Using ep0 maxpacket: 16
[  238.433734][ T5666] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  238.435045][ T5666] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  238.435067][ T5666] usb 2-1: config 0 interface 0 has no altsetting 0
[  238.435089][ T5666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.440281][ T5666] usb 2-1: config 0 descriptor??
[  238.767280][T12720] loop4: detected capacity change from 0 to 32768
[  238.773562][T12720] (syz.4.2917,12720,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  238.773826][T12720] (syz.4.2917,12720,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  238.782534][T12720] JBD2: Ignoring recovery information on journal
[  238.808484][T12720] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  238.872877][ T5666] uclogic 0003:5543:0522.0010: item fetching failed at offset 10/40
[  238.873407][ T5666] uclogic 0003:5543:0522.0010: parse failed
[  238.874327][ T5666] uclogic 0003:5543:0522.0010: probe with driver uclogic failed with error -22
[  238.889050][ T7839] ocfs2: Unmounting device (7,4) on (node local)
[  239.056430][ T6152] usb 2-1: USB disconnect, device number 47
[  239.198694][T12734] loop4: detected capacity change from 0 to 32768
[  239.218130][T12734] JBD2: Ignoring recovery information on journal
[  239.257190][T12734] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  239.377626][ T7839] ocfs2: Unmounting device (7,4) on (node local)
[  239.574961][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.634021][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.792271][T12738] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  239.862876][ T5658] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.862934][ T5658] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.862974][ T5658] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.862987][ T5658] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.933827][T12757] loop1: detected capacity change from 0 to 164
[  240.031170][T12762] loop1: detected capacity change from 0 to 512
[  240.037045][T12762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  240.037128][T12762] System zones: 1-12
[  240.044140][T12762] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.2930: missing EA_INODE flag
[  240.044200][T12762] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  240.044538][T12762] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2930: error while reading EA inode 12 err=-117
[  240.044601][T12762] loop1: lost filesystem error report for type 5 error -117
[  240.044717][T12762] EXT4-fs (loop1): 1 orphan inode deleted
[  240.045508][T12762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.052834][T12762] fscrypt (loop1, inode 15): Unsupported log2_data_unit_size in encryption policy: 133
[  240.089754][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.436814][T12788] loop4: detected capacity change from 0 to 1024
[  240.477757][T12788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.503095][ T5023] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  240.519335][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.611450][T12794] loop4: detected capacity change from 0 to 512
[  240.619193][T12794] EXT4-fs (loop4): Test dummy encryption mode enabled
[  240.619256][T12794] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  240.650889][T12794] EXT4-fs (loop4): 1 truncate cleaned up
[  240.655846][T12794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.673409][ T5023] usb 2-1: Using ep0 maxpacket: 16
[  240.674040][ T5023] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  240.675177][ T5023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.675196][ T5023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.675210][ T5023] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  240.675236][ T5023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.680249][ T5023] usb 2-1: config 0 descriptor??
[  240.717993][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.990981][T12807] Device name not specified.
[  240.990981][T12807] 
[  241.015947][T12809] netlink: 'syz.4.2945': attribute type 14 has an invalid length.
[  241.018642][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'.
[  241.022272][T12809] bond0: option xmit_hash_policy: invalid value (48)
[  241.120724][ T5023] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input16
[  241.191583][ T5023] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  241.291054][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'.
[  241.307550][   T27] usb 2-1: USB disconnect, device number 48
[  241.344093][   T35] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  241.492864][   T35] usb 5-1: Using ep0 maxpacket: 32
[  241.495196][   T35] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  241.499863][   T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.505017][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.507702][   T35] usb 5-1: Product: syz
[  241.509173][   T35] usb 5-1: Manufacturer: syz
[  241.510835][   T35] usb 5-1: SerialNumber: syz
[  241.722085][   T35] usb 5-1: found format II with max.bitrate = 276, frame size=64
[  241.725058][   T35] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  241.744231][   T35] usb 5-1: USB disconnect, device number 27
[  241.774390][ T7471] udevd[7471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.227835][T12859] loop1: detected capacity change from 0 to 64
[  242.235418][T12859] minix_free_block (loop1:21): bit already cleared
[  242.288823][T12849] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.291999][T12849] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.521359][T12849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.657633][ T5658] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  242.657699][ T5658] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.657756][ T5658] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  242.657771][ T5658] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.657790][ T5658] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  242.657803][ T5658] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.657822][ T5658] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  242.657835][ T5658] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.676135][ T5666] lo speed is unknown, defaulting to 1000
[  242.676187][ T5666] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  242.774547][T12877] loop1: detected capacity change from 0 to 32768
[  242.902526][T12887] loop1: detected capacity change from 0 to 512
[  242.905030][T12887] EXT4-fs (loop1): Test dummy encryption mode enabled
[  242.905044][T12887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  242.905288][T12887] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 1029)!
[  242.905303][T12887] EXT4-fs (loop1): group descriptors corrupted!
[  243.048794][T12895] loop4: detected capacity change from 0 to 256
[  243.319481][T12917] loop4: detected capacity change from 0 to 4096
[  243.322491][T12917] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  243.325878][T12917] ntfs3(loop4): It is recommended to use chkdsk.
[  243.787647][T12942] loop1: detected capacity change from 0 to 4096
[  243.790617][T12942] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  243.802636][T12942] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  244.024529][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3011'.
[  244.028340][T12955] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  244.433476][   T49] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  244.582801][   T49] usb 5-1: Using ep0 maxpacket: 16
[  244.583857][   T49] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  244.584901][   T49] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  244.584911][   T49] usb 5-1: config 0 has no interface number 0
[  244.584927][   T49] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  244.584937][   T49] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  244.587311][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.587327][   T49] usb 5-1: Product: syz
[  244.587337][   T49] usb 5-1: Manufacturer: syz
[  244.587346][   T49] usb 5-1: SerialNumber: syz
[  244.594279][   T49] usb 5-1: config 0 descriptor??
[  244.596475][T12963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  244.596617][T12963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  244.800840][T12963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  244.801254][T12963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  245.003404][   T49] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  245.315022][T12986] loop1: detected capacity change from 0 to 512
[  245.338557][T12986] syz.1.3025: attempt to access beyond end of device
[  245.338557][T12986] loop1: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512
[  245.338709][T12986] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[  245.338717][T12986] FAT-fs (loop1): Filesystem has been set read-only
[  245.338755][T12986] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[  245.438119][T12997] ip6gre1: entered allmulticast mode
[  245.473131][ T5658] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  245.942162][T13014] loop1: detected capacity change from 0 to 1024
[  246.232508][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'.
[  246.232841][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'.
[  246.842100][   T49] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  246.842338][   T49] asix 5-1:0.34: probe with driver asix failed with error -71
[  246.847998][   T49] usb 5-1: USB disconnect, device number 28
[  247.513077][   T49] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  247.708849][T13080] loop4: detected capacity change from 0 to 32768
[  247.712562][T13080] (syz.4.3067,13080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  247.718178][T13080] (syz.4.3067,13080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  247.736095][T13080] JBD2: Ignoring recovery information on journal
[  247.767642][   T49] usb 2-1: not running at top speed; connect to a high speed hub
[  247.767719][   T49] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  247.768799][   T49] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  247.768836][   T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.768869][   T49] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  247.768927][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.774050][   T49] usb 2-1: config 0 descriptor??
[  247.792293][   T49] uvcvideo 2-1:0.0: Found UVC 9.00 device <unnamed> (046d:0825)
[  247.812026][T13080] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  247.905795][T13088] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  248.058733][ T7839] ocfs2: Unmounting device (7,4) on (node local)
[  248.352907][   T27] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  248.502835][   T27] usb 5-1: Using ep0 maxpacket: 8
[  248.505807][   T27] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  248.511260][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.518913][   T27] usb 5-1: config 0 descriptor??
[  248.525797][   T27] usb 5-1: probing VID:PID(0424:012C)   
[  248.530704][   T27] usb 5-1: vub300 testing BULK IN EndPoint(0) 81
[  248.533875][   T27] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02
[  248.536847][   T27] usb 5-1: vub300 testing BULK IN EndPoint(2) 83
[  248.541234][   T27] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04
[  248.544125][   T27] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  248.605765][   T49] uvcvideo 2-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48).
[  248.605827][   T49] uvcvideo 2-1:0.1: Failed to initialize the device (-71).
[  248.618368][   T49] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -71
[  248.623295][   T49] usb 2-1: USB disconnect, device number 49
[  248.727885][T13098] netlink: 'syz.0.3074': attribute type 5 has an invalid length.
[  248.744512][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.744560][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.744675][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.744706][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.900756][T13106] overlayfs: failed to clone upperpath
[  248.931513][   T27] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  249.060667][T13116] veth1_to_bond: entered allmulticast mode
[  249.064341][T13116] veth1_to_bond: entered promiscuous mode
[  249.066795][T13116] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3083'.
[  249.082266][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.128244][T13115] veth1_to_bond: left promiscuous mode
[  249.128435][T13115] veth1_to_bond: left allmulticast mode
[  249.133020][   T27] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  249.272950][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  249.403579][T13136] netlink: 'syz.1.3092': attribute type 61 has an invalid length.
[  249.403626][T13136] netlink: 'syz.1.3092': attribute type 62 has an invalid length.
[  249.529230][T13142] loop1: detected capacity change from 0 to 256
[  249.536060][T13142] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x084dab62, utbl_chksum : 0xe619d30d)
[  249.945336][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'.
[  251.042990][   T27] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  251.192826][   T27] usb 2-1: Using ep0 maxpacket: 8
[  251.195074][   T27] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  251.201313][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  251.204024][   T27] usb 2-1: Product: syz
[  251.204032][   T27] usb 2-1: Manufacturer: syz
[  251.204038][   T27] usb 2-1: SerialNumber: syz
[  251.210037][   T27] usb 2-1: config 0 descriptor??
[  251.216665][   T27] gspca_main: sq905-2.14.0 probing 2770:9120
[  251.819849][   T27] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  251.824430][   T27] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[  251.830121][   T27] usb 2-1: USB disconnect, device number 50
[  252.059083][T13203] loop4: detected capacity change from 0 to 512
[  252.066258][T13203] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  252.071768][T13203] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  252.072227][T13203] System zones: 1-12
[  252.075973][T13203] EXT4-fs (loop4): 1 truncate cleaned up
[  252.080763][T13203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.135942][ T7839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.232214][ T5666] usb 5-1: USB disconnect, device number 29
[  252.322233][ T5666] USB vub300 remote SDIO host controller[0] now disconnected
[  252.327153][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3126'.
[  252.338380][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3126'.
[  252.463491][    C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561
[  252.463562][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1115, name: kworker/u10:7
[  252.463642][    C1] preempt_count: 101, expected: 0
[  252.463672][    C1] RCU nest depth: 0, expected: 0
[  252.463702][    C1] locks held by kworker/u10:7/1115: 3, last CPU#1:
[  252.463734][    C1]  #0: ffff88810dbe3140 ((wq_completion)l2tp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  252.463912][    C1]  #1: ffffc90006d67c40 ((work_completion)(&tunnel->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  252.464091][    C1]  #2: ffffc90000a38cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0
[  252.464307][    C1] Preemption disabled at:
[  252.464334][    C1] [<ffffffff81336576>] preempt_schedule_thunk+0x16/0x40
[  252.464382][    C1] CPU: 1 UID: 0 PID: 1115 Comm: kworker/u10:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  252.464421][    C1] Tainted: [L]=SOFTLOCKUP
[  252.464428][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.464437][    C1] Workqueue: l2tp l2tp_tunnel_del_work
[  252.464458][    C1] Call Trace:
[  252.464465][    C1]  <IRQ>
[  252.464471][    C1]  dump_stack_lvl+0xe8/0x150
[  252.464492][    C1]  __might_resched+0x36a/0x4c0
[  252.464513][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  252.464531][    C1]  __cancel_work_sync+0x6d/0x110
[  252.464550][    C1]  mmc_free_host+0x19/0x30
[  252.464564][    C1]  call_timer_fn+0x18d/0x5f0
[  252.464580][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  252.464599][    C1]  ? call_timer_fn+0xd5/0x5f0
[  252.464614][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  252.464638][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.464657][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  252.464678][    C1]  __run_timer_base+0x652/0x8b0
[  252.464703][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  252.464721][    C1]  ? ktime_get+0x1f5/0x220
[  252.464736][    C1]  ? lapic_next_event+0x11/0x20
[  252.464756][    C1]  run_timer_softirq+0xb7/0x170
[  252.464772][    C1]  handle_softirqs+0x226/0x860
[  252.464792][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  252.464815][    C1]  __irq_exit_rcu+0xcb/0x220
[  252.464833][    C1]  irq_exit_rcu+0x9/0x30
[  252.464850][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  252.464870][    C1]  </IRQ>
[  252.464875][    C1]  <TASK>
[  252.464880][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  252.464895][    C1] RIP: 0010:finish_task_switch+0x413/0xc60
[  252.464913][    C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 67 36 51 0a e8 e2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  252.464925][    C1] RSP: 0018:ffffc90006d677c0 EFLAGS: 00000206
[  252.464937][    C1] RAX: 00000000000c5ddd RBX: ffff88823c63cb20 RCX: 8000000000000001
[  252.464947][    C1] RDX: 0000000000000006 RSI: ffffffff8e474924 RDI: ffffffff8c6d9c80
[  252.464956][    C1] RBP: ffffc90006d67810 R08: ffffffff907a197f R09: 1ffffffff20f432f
[  252.464966][    C1] R10: dffffc0000000000 R11: fffffbfff20f4330 R12: ffff88816ba70000
[  252.464976][    C1] R13: ffff88823c63cae8 R14: dffffc0000000000 R15: 1ffff110478c7964
[  252.465023][    C1]  __schedule+0x17e3/0x58f0
[  252.465059][    C1]  ? do_raw_spin_unlock+0x4d/0x200
[  252.465087][    C1]  ? __pfx___schedule+0x10/0x10
[  252.465108][    C1]  ? __queue_work+0xc73/0x10d0
[  252.465156][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  252.465173][    C1]  preempt_schedule_common+0x7f/0xd0
[  252.465193][    C1]  ? l2tp_tunnel_del_work+0xbd/0x220
[  252.465212][    C1]  preempt_schedule_thunk+0x16/0x40
[  252.465231][    C1]  __local_bh_enable_ip+0xe9/0x140
[  252.465249][    C1]  l2tp_tunnel_del_work+0xbd/0x220
[  252.465268][    C1]  ? process_scheduled_works+0x97a/0x1630
[  252.465286][    C1]  process_scheduled_works+0xc3d/0x1630
[  252.465324][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.465346][    C1]  ? assign_work+0x3cf/0x5d0
[  252.465367][    C1]  worker_thread+0xa47/0xfb0
[  252.465403][    C1]  kthread+0x38b/0x480
[  252.465417][    C1]  ? __pfx_worker_thread+0x10/0x10
[  252.465433][    C1]  ? __pfx_kthread+0x10/0x10
[  252.465448][    C1]  ret_from_fork+0x514/0xb70
[  252.465463][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  252.465484][    C1]  ? __switch_to+0xc89/0x1420
[  252.465505][    C1]  ? __pfx_kthread+0x10/0x10
[  252.465519][    C1]  ret_from_fork_asm+0x1a/0x30
[  252.465548][    C1]  </TASK>
[  252.465767][    C1] ODEBUG: object ffffc90000a38a80 is NOT on stack ffffc90006d60000, but annotated.
[  252.466258][    C1] ------------[ cut here ]------------
[  252.466265][    C1] 1
[  252.466270][    C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: kworker/u10:7/1115
[  252.641368][    C1] Modules linked in:
[  252.642925][    C1] CPU: 1 UID: 0 PID: 1115 Comm: kworker/u10:7 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  252.647256][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  252.649275][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.653247][    C1] Workqueue: l2tp l2tp_tunnel_del_work
[  252.655427][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  252.657756][    C1] Code: fd 06 cc 41 ff c7 44 89 3d 69 51 e8 15 48 c7 c1 80 a5 6d 8c 48 c7 c7 e0 a5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d a6 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 41 82 6e 0a 3b 05 3f
[  252.665171][    C1] RSP: 0018:ffffc90000a389b8 EFLAGS: 00010046
[  252.667478][    C1] RAX: 0000000000000050 RBX: ffffc90000a38a80 RCX: a1cb5b967f65ab00
[  252.670410][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  252.673458][    C1] RBP: ffff88816ba70020 R08: 0000000000000100 R09: 1ffff920001470e4
[  252.676457][    C1] R10: dffffc0000000000 R11: fffff520001470e5 R12: ffff88816ef15ad0
[  252.679490][    C1] R13: ffff8881b1567428 R14: dffffc0000000000 R15: 0000000000000001
[  252.682546][    C1] FS:  0000000000000000(0000) GS:ffff8882a8cd6000(0000) knlGS:0000000000000000
[  252.686012][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  252.688544][    C1] CR2: 0000001b2f020ff8 CR3: 0000000169166000 CR4: 00000000000006f0
[  252.691674][    C1] Call Trace:
[  252.693024][    C1]  <IRQ>
[  252.694214][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  252.696404][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  252.698404][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  252.700382][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  252.702413][    C1]  ? kvm_clock_get_cycles+0x49/0x60
[  252.704496][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  252.706716][    C1]  ? synchronize_srcu+0x20a/0x260
[  252.708656][    C1]  wakeup_source_unregister+0x129/0x3f0
[  252.710681][    C1]  mmc_host_classdev_release+0x47/0x100
[  252.712887][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  252.715303][    C1]  device_release+0xc4/0x1f0
[  252.717025][    C1]  kobject_put+0x222/0x550
[  252.718603][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  252.720167][    C1]  call_timer_fn+0x18d/0x5f0
[  252.721639][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  252.723979][    C1]  ? call_timer_fn+0xd5/0x5f0
[  252.725503][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  252.727146][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.728782][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  252.730910][    C1]  __run_timer_base+0x652/0x8b0
[  252.732611][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  252.734627][    C1]  ? ktime_get+0x1f5/0x220
[  252.736135][    C1]  ? lapic_next_event+0x11/0x20
[  252.737694][    C1]  run_timer_softirq+0xb7/0x170
[  252.739276][    C1]  handle_softirqs+0x226/0x860
[  252.740956][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  252.742645][    C1]  __irq_exit_rcu+0xcb/0x220
[  252.744237][    C1]  irq_exit_rcu+0x9/0x30
[  252.745603][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  252.747378][    C1]  </IRQ>
[  252.748324][    C1]  <TASK>
[  252.749352][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  252.751442][    C1] RIP: 0010:finish_task_switch+0x413/0xc60
[  252.753364][    C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 67 36 51 0a e8 e2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  252.759336][    C1] RSP: 0018:ffffc90006d677c0 EFLAGS: 00000206
[  252.761132][    C1] RAX: 00000000000c5ddd RBX: ffff88823c63cb20 RCX: 8000000000000001
[  252.763597][    C1] RDX: 0000000000000006 RSI: ffffffff8e474924 RDI: ffffffff8c6d9c80
[  252.766068][    C1] RBP: ffffc90006d67810 R08: ffffffff907a197f R09: 1ffffffff20f432f
[  252.768534][    C1] R10: dffffc0000000000 R11: fffffbfff20f4330 R12: ffff88816ba70000
[  252.770999][    C1] R13: ffff88823c63cae8 R14: dffffc0000000000 R15: 1ffff110478c7964
[  252.773639][    C1]  __schedule+0x17e3/0x58f0
[  252.775180][    C1]  ? do_raw_spin_unlock+0x4d/0x200
[  252.776795][    C1]  ? __pfx___schedule+0x10/0x10
[  252.778365][    C1]  ? __queue_work+0xc73/0x10d0
[  252.779882][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  252.781838][    C1]  preempt_schedule_common+0x7f/0xd0
[  252.783836][    C1]  ? l2tp_tunnel_del_work+0xbd/0x220
[  252.785891][    C1]  preempt_schedule_thunk+0x16/0x40
[  252.787963][    C1]  __local_bh_enable_ip+0xe9/0x140
[  252.789973][    C1]  l2tp_tunnel_del_work+0xbd/0x220
[  252.791954][    C1]  ? process_scheduled_works+0x97a/0x1630
[  252.794106][    C1]  process_scheduled_works+0xc3d/0x1630
[  252.796324][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.798700][    C1]  ? assign_work+0x3cf/0x5d0
[  252.800530][    C1]  worker_thread+0xa47/0xfb0
[  252.802366][    C1]  kthread+0x38b/0x480
[  252.803982][    C1]  ? __pfx_worker_thread+0x10/0x10
[  252.805987][    C1]  ? __pfx_kthread+0x10/0x10
[  252.807800][    C1]  ret_from_fork+0x514/0xb70
[  252.809642][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  252.811687][    C1]  ? __switch_to+0xc89/0x1420
[  252.813559][    C1]  ? __pfx_kthread+0x10/0x10
[  252.815424][    C1]  ret_from_fork_asm+0x1a/0x30
[  252.817338][    C1]  </TASK>
[  252.818573][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  252.821398][    C1] CPU: 1 UID: 0 PID: 1115 Comm: kworker/u10:7 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  252.825385][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  252.827069][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.830685][    C1] Workqueue: l2tp l2tp_tunnel_del_work
[  252.832869][    C1] Call Trace:
[  252.834135][    C1]  <IRQ>
[  252.835102][    C1]  vpanic+0x56d/0xa60
[  252.836449][    C1]  ? __pfx__printk+0x10/0x10
[  252.838139][    C1]  ? __pfx_vpanic+0x10/0x10
[  252.839609][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  252.841677][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  252.843426][    C1]  panic+0xc5/0xd0
[  252.844888][    C1]  ? __pfx_panic+0x10/0x10
[  252.846684][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  252.848308][    C1]  __warn+0x315/0x4c0
[  252.849609][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  252.851388][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  252.853283][    C1]  __report_bug+0x276/0x570
[  252.854901][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  252.856665][    C1]  ? __pfx___report_bug+0x10/0x10
[  252.858322][    C1]  ? __wake_up_klogd+0xf0/0x130
[  252.859882][    C1]  ? vprintk_emit+0x4ee/0x560
[  252.861451][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  252.863099][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  252.864805][    C1]  report_bug+0x16b/0x220
[  252.866497][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  252.868274][    C1]  ? __debug_object_init+0x2c6/0x3c0
[  252.869993][    C1]  handle_bug+0x9c/0x200
[  252.871390][    C1]  exc_invalid_op+0x1a/0x50
[  252.872895][    C1]  asm_exc_invalid_op+0x1a/0x20
[  252.874516][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  252.876653][    C1] Code: fd 06 cc 41 ff c7 44 89 3d 69 51 e8 15 48 c7 c1 80 a5 6d 8c 48 c7 c7 e0 a5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d a6 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 41 82 6e 0a 3b 05 3f
[  252.883020][    C1] RSP: 0018:ffffc90000a389b8 EFLAGS: 00010046
[  252.885014][    C1] RAX: 0000000000000050 RBX: ffffc90000a38a80 RCX: a1cb5b967f65ab00
[  252.887681][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  252.890248][    C1] RBP: ffff88816ba70020 R08: 0000000000000100 R09: 1ffff920001470e4
[  252.892813][    C1] R10: dffffc0000000000 R11: fffff520001470e5 R12: ffff88816ef15ad0
[  252.895452][    C1] R13: ffff8881b1567428 R14: dffffc0000000000 R15: 0000000000000001
[  252.898263][    C1]  ? __debug_object_init+0x2c3/0x3c0
[  252.900135][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  252.901859][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  252.903454][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  252.905192][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  252.906776][    C1]  ? kvm_clock_get_cycles+0x49/0x60
[  252.908506][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  252.910267][    C1]  ? synchronize_srcu+0x20a/0x260
[  252.911874][    C1]  wakeup_source_unregister+0x129/0x3f0
[  252.913700][    C1]  mmc_host_classdev_release+0x47/0x100
[  252.915628][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  252.917782][    C1]  device_release+0xc4/0x1f0
[  252.919309][    C1]  kobject_put+0x222/0x550
[  252.920777][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  252.922259][    C1]  call_timer_fn+0x18d/0x5f0
[  252.923828][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  252.925968][    C1]  ? call_timer_fn+0xd5/0x5f0
[  252.927610][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  252.929316][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.931001][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  252.933353][    C1]  __run_timer_base+0x652/0x8b0
[  252.934939][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  252.936695][    C1]  ? ktime_get+0x1f5/0x220
[  252.938200][    C1]  ? lapic_next_event+0x11/0x20
[  252.939801][    C1]  run_timer_softirq+0xb7/0x170
[  252.941415][    C1]  handle_softirqs+0x226/0x860
[  252.942986][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  252.944563][    C1]  __irq_exit_rcu+0xcb/0x220
[  252.946047][    C1]  irq_exit_rcu+0x9/0x30
[  252.947636][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  252.949473][    C1]  </IRQ>
[  252.950455][    C1]  <TASK>
[  252.951452][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  252.953508][    C1] RIP: 0010:finish_task_switch+0x413/0xc60
[  252.955596][    C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 67 36 51 0a e8 e2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  252.961888][    C1] RSP: 0018:ffffc90006d677c0 EFLAGS: 00000206
[  252.964433][    C1] RAX: 00000000000c5ddd RBX: ffff88823c63cb20 RCX: 8000000000000001
[  252.967722][    C1] RDX: 0000000000000006 RSI: ffffffff8e474924 RDI: ffffffff8c6d9c80
[  252.970498][    C1] RBP: ffffc90006d67810 R08: ffffffff907a197f R09: 1ffffffff20f432f
[  252.973666][    C1] R10: dffffc0000000000 R11: fffffbfff20f4330 R12: ffff88816ba70000
[  252.976897][    C1] R13: ffff88823c63cae8 R14: dffffc0000000000 R15: 1ffff110478c7964
[  252.980182][    C1]  __schedule+0x17e3/0x58f0
[  252.982093][    C1]  ? do_raw_spin_unlock+0x4d/0x200
[  252.984254][    C1]  ? __pfx___schedule+0x10/0x10
[  252.986285][    C1]  ? __queue_work+0xc73/0x10d0
[  252.988282][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  252.990511][    C1]  preempt_schedule_common+0x7f/0xd0
[  252.992704][    C1]  ? l2tp_tunnel_del_work+0xbd/0x220
[  252.994682][    C1]  preempt_schedule_thunk+0x16/0x40
[  252.996734][    C1]  __local_bh_enable_ip+0xe9/0x140
[  252.998754][    C1]  l2tp_tunnel_del_work+0xbd/0x220
[  253.000790][    C1]  ? process_scheduled_works+0x97a/0x1630
[  253.003042][    C1]  process_scheduled_works+0xc3d/0x1630
[  253.005208][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  253.007244][    C1]  ? assign_work+0x3cf/0x5d0
[  253.009105][    C1]  worker_thread+0xa47/0xfb0
[  253.010968][    C1]  kthread+0x38b/0x480
[  253.012614][    C1]  ? __pfx_worker_thread+0x10/0x10
[  253.014633][    C1]  ? __pfx_kthread+0x10/0x10
[  253.016479][    C1]  ret_from_fork+0x514/0xb70
[  253.018307][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  253.020250][    C1]  ? __switch_to+0xc89/0x1420
[  253.021966][    C1]  ? __pfx_kthread+0x10/0x10
[  253.023565][    C1]  ret_from_fork_asm+0x1a/0x30
[  253.025378][    C1]  </TASK>
[  253.027298][    C1] Kernel Offset: disabled
[  253.029034][    C1] Rebooting in 86400 seconds..
