last executing test programs:

2.008513823s ago: executing program 2 (id=358):
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

1.888395952s ago: executing program 2 (id=360):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x8)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x6)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x4)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0)
landlock_restrict_self(r3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

1.781651725s ago: executing program 2 (id=362):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

1.600486525s ago: executing program 2 (id=366):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{'sha256\x00'}, '\x00', '\x00', 0x460, 0x2041}}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.599927275s ago: executing program 2 (id=368):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x9, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0xb})

1.221487326s ago: executing program 1 (id=377):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x1cf94b1f273faa1b}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x2400c000)

1.098563417s ago: executing program 1 (id=382):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000380)={0x0, [[0xfffffff9, 0x0, 0x200, 0x3, 0x0, 0x7, 0x6, 0x6], [0x2000004, 0x7f, 0xd94, 0xfffffffe], [0x8014, 0x4, 0x0, 0x0, 0x0, 0xcc6]], '\x00', [{0x101, 0x610cfd08}, {0x3, 0xc}, {0x0, 0x1efb660a}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x3, 0x400}, {0x0, 0xa75b}], '\x00', 0x9})

978.973865ms ago: executing program 1 (id=383):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000140)={[{@nobarrier}, {@bh}, {@norecovery}, {@errors_remount}, {@orlov}]}, 0x8, 0x655, &(0x7f00000008c0)="$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")

901.639691ms ago: executing program 1 (id=384):
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x48, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x25}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xb0c0}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x130, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0xc8, 0x1, [@m_bpf={0xc4, 0x20, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x0, 0x9}, {0x6, 0xae, 0x9, 0x5}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x6, 0x0, 0x785}}]}, {0x5d, 0x6, "a8170aa8efda4435392ca0c7a8ddab5f4bb282260238e86f95383b25e3a5ff42ba2e6fe2a567a11d08cb8219da53d0402f5e6040243ddb3c66a2cfd90935df146cc397f33f9f14b53b633f5b8900"/89}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

839.464363ms ago: executing program 1 (id=385):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0xb69, 0x1, 0x7, 0x154}, 0x10)

780.510795ms ago: executing program 1 (id=386):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x300000000000000)
ioctl$EVIOCGMASK(r1, 0x5b16, 0x0)

210.030604ms ago: executing program 2 (id=387):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x1}}, 0x30)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./nfsd\x00', 0x910)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
pipe2$9p(&(0x7f0000000240), 0x84000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='-', 0x1)
syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), 0x0, &(0x7f0000000240))

209.686776ms ago: executing program 0 (id=388):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)

131.394259ms ago: executing program 0 (id=389):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
r0 = socket(0x15, 0x5, 0x0)
connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e)
getsockname$llc(r0, 0x0, &(0x7f0000000040))

61.979705ms ago: executing program 0 (id=390):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @loopback}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1)

61.77252ms ago: executing program 0 (id=391):
set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf)
r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
fgetxattr(r0, &(0x7f0000000380)=@known='security.apparmor\x00', 0x0, 0xffffffffffffff92)

381.547µs ago: executing program 0 (id=392):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51765' (ED25519) to the list of known hosts.
syzkaller login: [   42.651551][ T5523] cgroup: Unknown subsys name 'net'
[   42.730470][ T5523] cgroup: Unknown subsys name 'cpuset'
[   42.733705][ T5523] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   44.199789][ T5523] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.863386][   T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   48.868602][   T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   48.872064][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   48.875785][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   48.880126][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   48.882780][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   48.885630][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   48.888629][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   48.891573][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   48.894263][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   48.894596][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   48.897364][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   48.898924][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   48.899808][ T4993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   48.900543][ T4993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   49.503427][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.503912][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.504168][ T5592] bridge_slave_0: entered allmulticast mode
[   49.505519][ T5592] bridge_slave_0: entered promiscuous mode
[   49.524016][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.526506][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.526677][ T5597] bridge_slave_0: entered allmulticast mode
[   49.527466][ T5597] bridge_slave_0: entered promiscuous mode
[   49.530863][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.530902][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.530955][ T5592] bridge_slave_1: entered allmulticast mode
[   49.531679][ T5592] bridge_slave_1: entered promiscuous mode
[   49.551740][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.551826][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.551911][ T5596] bridge_slave_0: entered allmulticast mode
[   49.552660][ T5596] bridge_slave_0: entered promiscuous mode
[   49.563037][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.563190][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.563282][ T5597] bridge_slave_1: entered allmulticast mode
[   49.564556][ T5597] bridge_slave_1: entered promiscuous mode
[   49.569436][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.581741][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.590541][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.592990][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.595672][ T5596] bridge_slave_1: entered allmulticast mode
[   49.599105][ T5596] bridge_slave_1: entered promiscuous mode
[   49.617669][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.619688][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.630711][ T5592] team0: Port device team_slave_0 added
[   49.644087][ T5592] team0: Port device team_slave_1 added
[   49.651967][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.663192][ T5597] team0: Port device team_slave_0 added
[   49.664745][ T5597] team0: Port device team_slave_1 added
[   49.672854][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.694914][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.694964][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.695009][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.696303][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.696309][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.696318][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.697139][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.697145][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.697153][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.698464][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.698497][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.698513][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.741985][ T5592] hsr_slave_0: entered promiscuous mode
[   49.743976][ T5592] hsr_slave_1: entered promiscuous mode
[   49.749437][ T5597] hsr_slave_0: entered promiscuous mode
[   49.749857][ T5597] hsr_slave_1: entered promiscuous mode
[   49.750143][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   49.750180][ T5597] Cannot create hsr debugfs directory
[   49.799431][ T5596] team0: Port device team_slave_0 added
[   49.810144][ T5596] team0: Port device team_slave_1 added
[   49.856632][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.859521][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.868197][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.887876][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.891225][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   49.901494][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.977810][ T5596] hsr_slave_0: entered promiscuous mode
[   49.981385][ T5596] hsr_slave_1: entered promiscuous mode
[   49.984901][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[   49.988202][ T5596] Cannot create hsr debugfs directory
[   50.054067][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.065072][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.065787][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.071577][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.073445][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.082002][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.095997][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.101544][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.190905][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.191065][ T5592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.191515][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.191617][ T5592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.215555][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.225906][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.226333][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.237149][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.242411][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.247250][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.248196][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.250282][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.304342][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.308566][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.361378][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.371390][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.375082][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.380551][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.392933][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.398378][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.406787][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.414648][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.476139][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.498298][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.526247][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   50.536648][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   50.545022][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.545556][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.558528][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.558646][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.577046][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.577148][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.590619][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.590718][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.704504][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.730852][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   50.742966][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.743080][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.754813][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.754879][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.943364][   T57] Bluetooth: hci0: command tx timeout
[   50.943375][ T4993] Bluetooth: hci1: command tx timeout
[   50.943675][ T4993] Bluetooth: hci2: command tx timeout
[   50.995136][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.041014][ T5597] veth0_vlan: entered promiscuous mode
[   51.052826][ T5597] veth1_vlan: entered promiscuous mode
[   51.084358][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.091045][ T5597] veth0_macvtap: entered promiscuous mode
[   51.100679][ T5597] veth1_macvtap: entered promiscuous mode
[   51.123886][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.133444][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.143022][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.153386][ T5592] veth0_vlan: entered promiscuous mode
[   51.179631][ T5592] veth1_vlan: entered promiscuous mode
[   51.198792][ T5653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.198849][ T5653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.198897][ T5653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.217560][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.223213][ T5596] veth0_vlan: entered promiscuous mode
[   51.250954][ T5596] veth1_vlan: entered promiscuous mode
[   51.253429][ T5592] veth0_macvtap: entered promiscuous mode
[   51.258195][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.258248][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.284314][ T5592] veth1_macvtap: entered promiscuous mode
[   51.293425][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.293508][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.305284][ T5596] veth0_macvtap: entered promiscuous mode
[   51.310031][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.315355][ T5596] veth1_macvtap: entered promiscuous mode
[   51.320881][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.347967][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.356188][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.358716][ T5597] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.378136][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.448432][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.451555][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.460391][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.464877][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.468056][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.468107][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.496304][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.496339][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.505035][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.505247][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.505747][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.518386][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.518470][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.537491][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.537535][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.636487][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   51.636524][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4'.
[   51.713089][ T5717] ip6erspan0: entered allmulticast mode
[   51.998428][ T5675] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   52.059736][ T5707] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   52.157474][ T5675] usb 3-1: Using ep0 maxpacket: 8
[   52.159695][ T5675] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[   52.166605][ T5675] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   52.166656][ T5675] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   52.166693][ T5675] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   52.180287][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3
[   52.180333][ T5675] usb 3-1: Product: syz
[   52.180362][ T5675] usb 3-1: SerialNumber: syz
[   52.232259][ T5707] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[   52.233810][ T5707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   52.233898][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.285752][ T5707] usb 2-1: selecting invalid altsetting 1
[   52.293111][ T5707] dvb_ttusb_budget: ttusb_init_controller: error
[   52.293192][ T5707] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   52.363426][ T5707] DVB: Unable to find symbol stv0299_attach()
[   52.409372][ T5675] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[   52.412980][ T5675] gspca_main: spca501-2.14.0 probing 0000:0000
[   52.413595][ T5675] gspca_spca501: reg write: error -71
[   52.413603][ T5675] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   52.413633][ T5675] spca501 3-1:1.0: probe with driver spca501 failed with error -22
[   52.420066][ T5675] usb 3-1: USB disconnect, device number 2
[   52.441385][ T5707] DVB: Unable to find symbol tda8083_attach()
[   52.441471][ T5707] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[   52.494213][ T5726] usb 2-1: USB disconnect, device number 2
[   52.766717][ T5744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16'.
[   52.773680][ T5744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16'.
[   52.782290][ T5744] netlink: 'syz.0.16': attribute type 32 has an invalid length.
[   52.782354][ T5744] netlink: 500 bytes leftover after parsing attributes in process `syz.0.16'.
[   52.820571][ T5746] virtio-fs: tag </dev/md0> not found
[   53.027744][ T5594] Bluetooth: hci0: command tx timeout
[   53.028539][ T5594] Bluetooth: hci1: command tx timeout
[   53.062198][ T5758] ieee802154 phy0 wpan0: encryption failed: -22
[   53.109759][ T5760] dummy0: entered promiscuous mode
[   53.114174][ T5760] gretap0: entered promiscuous mode
[   53.120984][ T5760] hsr1: entered allmulticast mode
[   53.123223][ T5760] dummy0: entered allmulticast mode
[   53.126230][ T5760] gretap0: entered allmulticast mode
[   53.128761][ T5760] Zero length message leads to an empty skb
[   53.355038][ T5767] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   53.355104][ T5767] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   53.355147][ T5767] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   53.403151][ T5704] IPVS: starting estimator thread 0...
[   53.500156][ T5771] IPVS: using max 87 ests per chain, 208800 per kthread
[   53.737241][   T57] Bluetooth: hci2: command tx timeout
[   54.088207][ T5780] bond1: option fail_over_mac: invalid value (3)
[   54.264850][ T5780] bond1 (unregistering): Released all slaves
[   54.465621][ T5785] xt_hashlimit: size too large, truncated to 1048576
[   54.465733][ T5785] xt_hashlimit: max too large, truncated to 1048576
[   54.523770][ T5787] netlink: 'syz.2.34': attribute type 10 has an invalid length.
[   54.547869][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   54.560278][ T5787] bond0: (slave team0): Enslaving as an active interface with an up link
[   54.592453][ T5791] jffs2: notice: (5791) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   55.446859][ T5810] loop2: detected capacity change from 0 to 131072
[   55.489167][   T57] Bluetooth: hci1: command tx timeout
[   55.489195][   T57] Bluetooth: hci0: command tx timeout
[   55.509885][ T5810] F2FS-fs (loop2): invalid crc value
[   55.566818][ T5810] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   55.573067][ T5810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   55.826670][ T5594] Bluetooth: hci2: command tx timeout
[   56.196172][ T5065] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   56.356932][ T5065] usb 3-1: New USB device found, idVendor=05da, idProduct=80ac, bcdDevice=d3.ea
[   56.363482][ T5065] usb 3-1: config 253 has an invalid interface number: 62 but max is 1
[   56.363554][ T5065] usb 3-1: config 253 has an invalid interface number: 249 but max is 1
[   56.363590][ T5065] usb 3-1: config 253 has no interface number 0
[   56.363622][ T5065] usb 3-1: config 253 has no interface number 1
[   56.363723][ T5065] usb 3-1: config 253 interface 62 altsetting 13 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   56.364284][ T5065] usb 3-1: config 253 interface 249 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[   56.364344][ T5065] usb 3-1: config 253 interface 249 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64
[   56.364408][ T5065] usb 3-1: config 253 interface 62 has no altsetting 0
[   56.364441][ T5065] usb 3-1: config 253 interface 249 has no altsetting 0
[   56.402062][ T5065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.405977][ T5065] usb 3-1: Product: syz
[   56.409059][ T5065] usb 3-1: Manufacturer: syz
[   56.411135][ T5065] usb 3-1: SerialNumber: syz
[   56.706526][ T5065] usb 3-1: can only deal with bulk endpoints; endpoint 12 is not bulk.
[   56.712707][ T5065] usb 3-1: can only deal with bulk endpoints; endpoint 6 is not bulk.
[   56.719885][ T5065] usb 3-1: can only deal with bulk endpoints; endpoint 8 is not bulk.
[   56.723679][ T5065] usb 3-1: couldn't find two input bulk endpoints. Bailing out.
[   56.733358][ T5065] usb 3-1: can only deal with bulk endpoints; endpoint 3 is not bulk.
[   56.736827][ T5065] usb 3-1: can only deal with bulk endpoints; endpoint 10 is not bulk.
[   56.740415][ T5065] usb 3-1: couldn't find two input bulk endpoints. Bailing out.
[   56.752068][ T5065] usb 3-1: USB disconnect, device number 3
[   56.905033][ T5842] loop1: detected capacity change from 0 to 1764
[   56.924706][ T5842] ISOFS: Unable to identify CD-ROM format.
[   56.990720][ T5846] input: syz1 as /devices/virtual/input/input4
[   57.184830][ T5862] loop1: detected capacity change from 0 to 512
[   57.192249][ T5862] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   57.192810][ T5862] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   57.246188][ T5862] EXT4-fs (loop1): 1 truncate cleaned up
[   57.275959][ T5862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.495636][ T5594] Bluetooth: hci0: command tx timeout
[   57.495706][ T5594] Bluetooth: hci1: command tx timeout
[   57.574816][ T5888] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   57.815188][ T5065] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   57.985649][ T5065] usb 1-1: Using ep0 maxpacket: 16
[   57.989499][ T5065] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   57.997884][ T5065] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   58.001482][ T5065] usb 1-1: config 0 has no interface number 0
[   58.013541][ T5065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.051746][ T5065] usb 1-1: Product: syz
[   58.053496][ T5065] usb 1-1: Manufacturer: syz
[   58.055217][ T5065] usb 1-1: SerialNumber: syz
[   58.114728][ T5065] usb 1-1: config 0 descriptor??
[   58.128704][ T5065] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   58.274426][ T5596] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.033747][   T35] audit: type=1326 audit(1788965066.801:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.041283][   T35] audit: type=1326 audit(1788965066.801:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.048558][   T35] audit: type=1326 audit(1788965066.801:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.056012][   T35] audit: type=1326 audit(1788965066.801:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.063616][   T35] audit: type=1326 audit(1788965066.801:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.070951][   T35] audit: type=1326 audit(1788965066.801:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.071170][   T35] audit: type=1326 audit(1788965066.801:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.078579][   T35] audit: type=1326 audit(1788965066.801:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.086837][   T35] audit: type=1326 audit(1788965066.811:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.160856][   T35] audit: type=1326 audit(1788965066.811:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0379e159 code=0x7ffc0000
[   59.192506][ T5065] gspca_spca1528: reg_w err -71
[   59.195470][ T5065] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[   59.255760][ T5065] usb 1-1: USB disconnect, device number 2
[   59.486523][ T5905] loop2: detected capacity change from 0 to 164
[   59.721373][ T5908] loop1: detected capacity change from 0 to 128
[   59.722237][ T5908] vfat: Bad value for 'nonumtail'
[   59.789757][ T5908] 9pnet: p9_errstr2errno: server reported unknown error 
[   59.789757][ T5908] 'I$۷=
[   59.928017][ T5919] loop1: detected capacity change from 0 to 2048
[   59.929880][ T5921] binder: 5920:5921 ioctl c0306201 200000000500 returned -14
[   59.937082][ T5919] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   59.968289][ T5922] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   60.128526][ T5924] loop0: detected capacity change from 0 to 32768
[   60.151662][ T5924] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   60.173553][ T5924] XFS (loop0): Ending clean mount
[   60.211825][ T5597] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   60.243596][ T5940] FAULT_INJECTION: forcing a failure.
[   60.243596][ T5940] name failslab, interval 1, probability 0, space 0, times 1
[   60.248572][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) 
[   60.248598][ T5940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.248604][ T5940] Call Trace:
[   60.248608][ T5940]  <TASK>
[   60.248612][ T5940]  dump_stack_lvl+0xe8/0x150
[   60.248644][ T5940]  should_fail_ex+0x410/0x560
[   60.248655][ T5940]  should_failslab+0xa8/0x100
[   60.248664][ T5940]  ? security_inode_alloc+0x39/0x310
[   60.248675][ T5940]  kmem_cache_alloc_noprof+0xa1/0x600
[   60.248687][ T5940]  ? __pfx_make_kgid+0x10/0x10
[   60.248697][ T5940]  ? security_inode_alloc+0x39/0x310
[   60.248708][ T5940]  security_inode_alloc+0x39/0x310
[   60.248718][ T5940]  inode_init_always_gfp+0x97e/0xd30
[   60.248730][ T5940]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   60.248740][ T5940]  alloc_inode+0x82/0x1b0
[   60.248750][ T5940]  new_inode+0x1f/0x170
[   60.248759][ T5940]  ? shmem_get_inode+0x29a/0x1030
[   60.248770][ T5940]  shmem_get_inode+0x3a4/0x1030
[   60.248779][ T5940]  ? __lock_acquire+0x6df/0x2e50
[   60.248790][ T5940]  ? __pfx_shmem_get_inode+0x10/0x10
[   60.248803][ T5940]  __shmem_file_setup+0x20b/0x370
[   60.248813][ T5940]  ? __pfx___shmem_file_setup+0x10/0x10
[   60.248820][ T5940]  ? do_raw_spin_lock+0x12b/0x2f0
[   60.248833][ T5940]  memfd_alloc_file+0x99/0x540
[   60.248849][ T5940]  ? __pfx_memfd_alloc_file+0x10/0x10
[   60.248858][ T5940]  ? alloc_fd+0x651/0x6c0
[   60.248871][ T5940]  __se_sys_memfd_create+0x31f/0x410
[   60.248882][ T5940]  do_syscall_64+0x166/0x520
[   60.248890][ T5940]  ? trace_irq_disable+0x3b/0x140
[   60.248898][ T5940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.248907][ T5940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.248914][ T5940] RIP: 0033:0x7f8b0379e159
[   60.248923][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.248929][ T5940] RSP: 002b:00007f8b04640e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   60.248939][ T5940] RAX: ffffffffffffffda RBX: 0000000000009798 RCX: 00007f8b0379e159
[   60.248945][ T5940] RDX: 00007f8b04640ee0 RSI: 0000000000000000 RDI: 00007f8b03835204
[   60.248950][ T5940] RBP: 0000200000016540 R08: 00000000ffffffff R09: 0000000000000000
[   60.248955][ T5940] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000009740
[   60.248960][ T5940] R13: 00007f8b04640ee0 R14: 00007f8b04640ea0 R15: 0000200000009780
[   60.248972][ T5940]  </TASK>
[   60.425039][ T5942] loop0: detected capacity change from 0 to 2048
[   60.454656][ T5942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.485113][ T5949] xt_hashlimit: size too large, truncated to 1048576
[   60.506657][ T1108] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   60.518654][ T1108] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   60.518696][ T1108] EXT4-fs (loop0): This should not happen!! Data will be lost
[   60.518696][ T1108] 
[   60.518740][ T1108] EXT4-fs (loop0): Total free blocks count 0
[   60.518764][ T1108] EXT4-fs (loop0): Free/Dirty block details
[   60.518795][ T1108] EXT4-fs (loop0): free_blocks=2415919504
[   60.518824][ T1108] EXT4-fs (loop0): dirty_blocks=32
[   60.518847][ T1108] EXT4-fs (loop0): Block reservation details
[   60.518869][ T1108] EXT4-fs (loop0): i_reserved_data_blocks=2
[   60.536683][ T1108] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   60.546880][ T5597] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[   60.607256][ T5956] netlink: 'syz.2.101': attribute type 24 has an invalid length.
[   60.607291][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'.
[   60.607357][ T5956] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   60.986143][ T5065] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   61.133805][ T5065] usb 1-1: Using ep0 maxpacket: 32
[   61.137051][ T5065] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   61.141966][ T5065] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   61.142486][ T5065] usb 1-1: config 0 has no interface number 0
[   61.164505][ T5065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.168491][ T5065] usb 1-1: Product: syz
[   61.170345][ T5065] usb 1-1: Manufacturer: syz
[   61.172536][ T5065] usb 1-1: SerialNumber: syz
[   61.192044][ T5065] usb 1-1: config 0 descriptor??
[   61.205742][ T5065] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   61.267190][ T5984] warning: `syz.1.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.420748][ T5065] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   61.438485][ T5065] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   61.462111][ T5992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.608774][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 92
[   61.814823][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   61.817659][ T5065] usb 1-1: USB disconnect, device number 3
[   61.823542][ T5662] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   61.833828][ T5065] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   61.846406][ T5065] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   61.850353][ T5065] quatech2 1-1:0.51: device disconnected
[   61.884772][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.122'.
[   61.973159][ T5662] usb 2-1: Using ep0 maxpacket: 32
[   61.973788][ T5662] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   61.975640][ T5662] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[   61.975652][ T5662] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[   61.975662][ T5662] usb 2-1: config 0 interface 0 has no altsetting 0
[   61.980558][ T5662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.980575][ T5662] usb 2-1: Product: syz
[   61.980583][ T5662] usb 2-1: Manufacturer: syz
[   61.980591][ T5662] usb 2-1: SerialNumber: syz
[   61.985605][ T5662] usb 2-1: config 0 descriptor??
[   62.391170][ T5662] gs_usb 2-1:0.0: Couldn't get device config: (err=-71)
[   62.391246][ T5662] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[   62.401129][ T5662] usb 2-1: USB disconnect, device number 3
[   62.564139][ T6037] loop0: detected capacity change from 0 to 256
[   62.565880][ T6037] =======================================================
[   62.565880][ T6037] WARNING: The mand mount option has been deprecated and
[   62.565880][ T6037]          and is ignored by this kernel. Remove the mand
[   62.565880][ T6037]          option from the mount to silence this warning.
[   62.565880][ T6037] =======================================================
[   62.579919][ T6037] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   62.580333][ T6037] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[   62.806811][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'.
[   62.807619][ T6051] team0: Device vlan2 is already an upper device of the team interface
[   63.200314][ T6082] FAULT_INJECTION: forcing a failure.
[   63.200314][ T6082] name failslab, interval 1, probability 0, space 0, times 0
[   63.200359][ T6082] CPU: 0 UID: 0 PID: 6082 Comm: syz.0.160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   63.200376][ T6082] Tainted: [L]=SOFTLOCKUP
[   63.200380][ T6082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.200388][ T6082] Call Trace:
[   63.200394][ T6082]  <TASK>
[   63.200399][ T6082]  dump_stack_lvl+0xe8/0x150
[   63.200421][ T6082]  should_fail_ex+0x410/0x560
[   63.200439][ T6082]  should_failslab+0xa8/0x100
[   63.200455][ T6082]  ? __send_signal_locked+0x22a/0xeb0
[   63.200468][ T6082]  kmem_cache_alloc_noprof+0xa1/0x600
[   63.200487][ T6082]  ? sig_get_ucounts+0x26/0x450
[   63.200502][ T6082]  ? __send_signal_locked+0x22a/0xeb0
[   63.200513][ T6082]  ? sig_get_ucounts+0x3e4/0x450
[   63.200549][ T6082]  __send_signal_locked+0x22a/0xeb0
[   63.200568][ T6082]  send_signal_locked+0x138/0x9e0
[   63.200585][ T6082]  ? __pfx_send_signal_locked+0x10/0x10
[   63.200600][ T6082]  ? rcu_is_watching+0x16/0xb0
[   63.200620][ T6082]  force_sig_info_to_task+0x316/0x4b0
[   63.200638][ T6082]  force_sig_fault+0xf0/0x150
[   63.200654][ T6082]  ? __pfx_force_sig_fault+0x10/0x10
[   63.200692][ T6082]  ? __bad_area_nosemaphore+0x31e/0x6a0
[   63.200711][ T6082]  exc_page_fault+0x6a/0xc0
[   63.200730][ T6082]  asm_exc_page_fault+0x26/0x30
[   63.200743][ T6082] RIP: 0033:0x7f686c252df8
[   63.200755][ T6082] Code: 40 00 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 4c 89 44 24 d0 48 8b 74 24 e8 4c 8b 44 24 d0 48 8b 4c 24 d8 <81> 4e 08 00 0c 00 00 48 8b 54 24 e0 48 8b 7c 24 f0 e9 c2 fe ff ff
[   63.200765][ T6082] RSP: 002b:00007f686d28c018 EFLAGS: 00010212
[   63.200777][ T6082] RAX: 00007f686c252dd0 RBX: 00007f686c625fa0 RCX: 0000000000000000
[   63.200785][ T6082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001d
[   63.200793][ T6082] RBP: 00007f686c435024 R08: 0000000000000000 R09: 0000000000000000
[   63.200800][ T6082] R10: 000000000000001d R11: 0000000000000000 R12: 0000000000000000
[   63.200807][ T6082] R13: 00007f686c626038 R14: 00007f686c625fa0 R15: 00007ffc1bb5ebe8
[   63.200827][ T6082]  </TASK>
[   63.495518][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'.
[   63.495584][ T6098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.167'.
[   63.569425][ T6102] jffs2: notice: (6102) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   64.577186][ T6124] loop2: detected capacity change from 0 to 4096
[   64.581207][ T6124] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.592413][ T6124] EXT4-fs (loop2): Test dummy encryption mode enabled
[   64.598955][ T6124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.657941][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.739918][ T6133] loop2: detected capacity change from 0 to 4096
[   64.804002][ T6136] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   64.990376][ T6141] netlink: 'syz.1.185': attribute type 1 has an invalid length.
[   65.010043][ T6141] iwpm_parse_nlmsg: Invalid attribute (msg type Register Pid response ret = -22)
[   65.110952][ T6135] loop0: detected capacity change from 0 to 131072
[   65.112921][ T6135] F2FS-fs (loop0): invalid crc value
[   65.118749][ T6145] loop1: detected capacity change from 0 to 256
[   65.123505][ T6145] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   65.126244][ T6145] exFAT-fs (loop1): start_clu is invalid cluster(0x0)
[   65.202804][ T6143] loop2: detected capacity change from 0 to 40427
[   65.204495][ T6143] F2FS-fs (loop2): invalid crc value
[   65.221901][ T6135] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   65.232424][ T6135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   65.235642][ T6143] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   65.237358][ T6143] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[   65.237370][ T6143] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[   65.238117][ T6143] F2FS-fs (loop2): Start checkpoint disabled!
[   65.241457][ T6143] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[   65.243043][ T6143] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   65.259734][ T6143] syz.2.184: attempt to access beyond end of device
[   65.259734][ T6143] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   65.260336][ T6143] syz.2.184: attempt to access beyond end of device
[   65.260336][ T6143] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   65.262039][ T6143] syz.2.184: attempt to access beyond end of device
[   65.262039][ T6143] loop2: rw=2049, sector=45112, nr_sectors = 48 limit=40427
[   65.291533][ T5704] kworker/u10:4: attempt to access beyond end of device
[   65.291533][ T5704] loop2: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[   65.298844][ T5704] CPU: 1 UID: 0 PID: 5704 Comm: kworker/u10:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   65.298884][ T5704] Tainted: [L]=SOFTLOCKUP
[   65.298888][ T5704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.298894][ T5704] Workqueue: writeback wb_workfn (flush-7:2)
[   65.298910][ T5704] Call Trace:
[   65.298913][ T5704]  <TASK>
[   65.298917][ T5704]  dump_stack_lvl+0xe8/0x150
[   65.298930][ T5704]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   65.298959][ T5704]  f2fs_write_end_bio+0x1211/0x16e0
[   65.298970][ T5704]  ? blkg_put+0x22/0x240
[   65.298986][ T5704]  __submit_merged_bio+0x258/0x6a0
[   65.298996][ T5704]  ? rcu_is_watching+0x16/0xb0
[   65.299007][ T5704]  __submit_merged_write_cond+0x3c9/0x4e0
[   65.299020][ T5704]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   65.299039][ T5704]  f2fs_write_data_pages+0x2a27/0x36f0
[   65.299064][ T5704]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   65.299080][ T5704]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   65.299101][ T5704]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   65.299118][ T5704]  ? __lock_acquire+0x6df/0x2e50
[   65.299132][ T5704]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[   65.299141][ T5704]  ? f2fs_update_inode+0x1394/0x25c0
[   65.299149][ T5704]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   65.299160][ T5704]  do_writepages+0x338/0x560
[   65.299175][ T5704]  ? reacquire_held_locks+0x117/0x1a0
[   65.299183][ T5704]  ? writeback_sb_inodes+0x450/0x1b00
[   65.299195][ T5704]  __writeback_single_inode+0x136/0x1220
[   65.299206][ T5704]  ? do_raw_spin_unlock+0x4d/0x200
[   65.299217][ T5704]  writeback_sb_inodes+0x9de/0x1b00
[   65.299226][ T5704]  ? __lock_acquire+0x6df/0x2e50
[   65.299239][ T5704]  ? lock_acquire+0x115/0x350
[   65.299249][ T5704]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   65.299318][ T5704]  ? rcu_is_watching+0x16/0xb0
[   65.299328][ T5704]  ? queue_io+0x2d3/0x470
[   65.299339][ T5704]  wb_writeback+0x41c/0xad0
[   65.299350][ T5704]  ? queue_io+0x1e1/0x470
[   65.299362][ T5704]  ? __pfx_wb_writeback+0x10/0x10
[   65.299370][ T5704]  ? do_raw_spin_lock+0x12b/0x2f0
[   65.299386][ T5704]  wb_workfn+0x431/0x10f0
[   65.299402][ T5704]  ? __pfx_wb_workfn+0x10/0x10
[   65.299415][ T5704]  ? do_raw_spin_lock+0x12b/0x2f0
[   65.299429][ T5704]  ? lock_acquire+0x115/0x350
[   65.299439][ T5704]  ? rcu_is_watching+0x16/0xb0
[   65.299448][ T5704]  ? process_scheduled_works+0x97a/0x1630
[   65.299458][ T5704]  process_scheduled_works+0xc3d/0x1630
[   65.299480][ T5704]  ? __pfx_process_scheduled_works+0x10/0x10
[   65.299492][ T5704]  ? assign_work+0x3cf/0x5d0
[   65.299503][ T5704]  worker_thread+0xa47/0xfb0
[   65.299519][ T5704]  ? __kthread_parkme+0x71/0x1f0
[   65.299533][ T5704]  kthread+0x38b/0x480
[   65.299540][ T5704]  ? __pfx_worker_thread+0x10/0x10
[   65.299549][ T5704]  ? __pfx_kthread+0x10/0x10
[   65.299556][ T5704]  ret_from_fork+0x514/0xb70
[   65.299565][ T5704]  ? __pfx_ret_from_fork+0x10/0x10
[   65.299576][ T5704]  ? __switch_to+0xc89/0x1420
[   65.299587][ T5704]  ? __pfx_kthread+0x10/0x10
[   65.299595][ T5704]  ret_from_fork_asm+0x1a/0x30
[   65.299612][ T5704]  </TASK>
[   65.304143][ T5704] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   65.423660][   T27] loop2: lost filesystem error report for type 5 error -108
[   65.663154][ T6163] netlink: 'syz.1.193': attribute type 10 has an invalid length.
[   65.663201][ T6163] netlink: 55 bytes leftover after parsing attributes in process `syz.1.193'.
[   65.965061][ T6170] loop0: detected capacity change from 0 to 32768
[   66.041487][   T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   66.134025][ T6181] netlink: 'syz.0.198': attribute type 10 has an invalid length.
[   66.149641][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.151386][ T6181] team0: Port device netdevsim1 added
[   66.161168][ T6181] netlink: 'syz.0.198': attribute type 10 has an invalid length.
[   66.188793][ T6183] loop1: detected capacity change from 0 to 2048
[   66.191598][   T27] usb 3-1: Using ep0 maxpacket: 32
[   66.195752][   T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   66.203609][   T27] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 212, changing to 11
[   66.203663][   T27] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17501, setting to 1024
[   66.214604][ T6185] binder_alloc: 6184: binder_alloc_buf size -272 failed, no address space
[   66.214731][ T6185] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[   66.224725][   T27] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   66.224771][   T27] usb 3-1: Product: syz
[   66.224822][   T27] usb 3-1: Manufacturer: syz
[   66.245056][ T6172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   66.250050][   T27] hub 3-1:4.0: USB hub found
[   66.276712][ T6183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.529504][ T6190] loop0: detected capacity change from 0 to 512
[   66.541867][ T6190] ext4: Bad value for 'journal'
[   66.600010][   T27] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[   66.919491][ T5662] usb 3-1: USB disconnect, device number 4
[   67.378360][ T6217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   67.670178][ T5065] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   67.983046][ T5065] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   67.986332][ T5065] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.986552][ T5065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.046307][ T5065] as10x_usb: device has been detected
[   68.048460][ T5065] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   68.063921][ T5065] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   68.080693][ T5065] as10x_usb: error during firmware upload part1
[   68.083160][ T5065] Registered device Abilis Systems DVB-Titan
[   68.211982][ T6229] loop2: detected capacity change from 0 to 8
[   68.242683][ T6229] SQUASHFS error: xz decompression failed, data probably corrupt
[   68.242745][ T6229] SQUASHFS error: Failed to read block 0x108: -5
[   68.245914][ T6229] SQUASHFS error: Unable to read metadata cache entry [106]
[   68.245927][ T6229] SQUASHFS error: Unable to read inode 0x11f
[   68.296367][ T6231] veth1_to_bond: entered allmulticast mode
[   68.298688][ T6230] veth1_to_bond: left allmulticast mode
[   68.344483][ T6235] process 'syz.2.222' launched './file0' with NULL argv: empty string added
[   68.370874][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'.
[   68.766329][ T6256] loop1: detected capacity change from 0 to 1024
[   68.773979][ T6256] ext4: Bad value for 'stripe'
[   68.909358][ T5065] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   68.928461][ T5065] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   69.049482][   T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   69.199753][   T27] usb 2-1: Using ep0 maxpacket: 16
[   69.202660][   T27] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   69.206771][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.210349][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.210360][   T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   69.210380][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.221479][   T27] usb 2-1: config 0 descriptor??
[   69.650486][   T27] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input5
[   69.745607][   T27] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   69.807027][ T6265] loop2: detected capacity change from 0 to 4096
[   69.829953][ T6265] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   69.849861][   T27] usb 2-1: USB disconnect, device number 4
[   69.915583][ T5065] usb 1-1: USB disconnect, device number 4
[   69.944053][ T5065] Unregistered device Abilis Systems DVB-Titan
[   69.947400][ T5065] as10x_usb: device has been disconnected
[   70.041673][ T6271] loop2: detected capacity change from 0 to 32768
[   70.064345][ T6271] JBD2: Ignoring recovery information on journal
[   70.084741][ T6271] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   70.108447][ T6271] (syz.2.233,6271,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[   70.140948][ T5592] ocfs2: Unmounting device (7,2) on (node local)
[   70.328525][ T6285] loop2: detected capacity change from 0 to 16
[   70.339385][ T6285] erofs (device loop2): mounted with root inode @ nid 36.
[   70.345135][ T6285] erofs (device loop2): invalid h_shared_count 243 @ nid 89
[   70.347592][ T6285] erofs (device loop2): inconsistent algorithmtype 1 for nid 89
[   70.347604][ T6285] erofs (device loop2): readahead error at folio 1 @ nid 89
[   70.349883][ T6285] erofs (device loop2): inconsistent algorithmtype 1 for nid 89
[   70.349894][ T6285] erofs (device loop2): inconsistent algorithmtype 1 for nid 89
[   70.349901][ T6285] erofs (device loop2): read error -117 @ 1 of nid 89
[   70.350534][   T35] kauditd_printk_skb: 10 callbacks suppressed
[   70.350542][   T35] audit: type=1800 audit(1788965078.147:22): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.239" name="file2" dev="loop2" ino=89 res=0 errno=0
[   70.489373][ T6287] loop1: detected capacity change from 0 to 32768
[   70.490025][ T6287] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[   70.496675][ T6287] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.241 (6287)
[   70.506957][ T6287] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   70.507000][ T6287] BTRFS info (device loop1): using crc32c checksum algorithm
[   70.631324][ T6287] BTRFS info (device loop1): rebuilding free space tree
[   70.642248][ T6314] af_packet: tpacket_rcv: packet too big, clamped from 34 to 4294967286. macoff=82
[   70.652904][ T6287] BTRFS info (device loop1): disabling free space tree
[   70.652975][ T6287] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   70.653022][ T6287] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   70.667284][ T6287] BTRFS info (device loop1): enabling ssd optimizations
[   70.667325][ T6287] BTRFS info (device loop1): turning on async discard
[   70.667369][ T6287] BTRFS info (device loop1): force clearing of disk cache
[   70.667395][ T6287] BTRFS info (device loop1): use zstd compression, level 3
[   70.806916][ T5596] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   70.817067][ T6319] syz.0.248 uses obsolete (PF_INET,SOCK_PACKET)
[   70.961995][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.962895][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.072765][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.078569][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.152195][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'.
[   71.166728][   T35] audit: type=1326 audit(1788965078.967:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.169642][   T35] audit: type=1326 audit(1788965078.967:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.184824][   T35] audit: type=1326 audit(1788965078.987:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.184883][   T35] audit: type=1326 audit(1788965078.987:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.185675][   T35] audit: type=1326 audit(1788965078.987:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.185692][   T35] audit: type=1326 audit(1788965078.987:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.185705][   T35] audit: type=1326 audit(1788965078.987:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.199386][   T35] audit: type=1326 audit(1788965078.997:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.199414][   T35] audit: type=1326 audit(1788965078.997:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.257" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f20a019e159 code=0x7ffc0000
[   71.271421][ T6342] netlink: 'syz.2.259': attribute type 62 has an invalid length.
[   71.358387][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.358435][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.358487][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.358518][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.450244][ T6344] loop1: detected capacity change from 0 to 40427
[   71.453455][ T6344] F2FS-fs: heap/no_heap options were deprecated
[   71.463131][ T6344] F2FS-fs (loop1): Encrypt feature is off
[   71.501704][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   71.504453][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   71.601708][ T6353] capability: warning: `syz.1.264' uses deprecated v2 capabilities in a way that may be insecure
[   71.667860][ T6359] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   71.835740][ T6372] loop2: detected capacity change from 0 to 2048
[   71.838691][ T6372] EXT4-fs: Ignoring removed nomblk_io_submit option
[   71.856867][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.875808][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.025546][ T6385] Bluetooth: MGMT ver 1.23
[   72.069378][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'.
[   72.144122][ T6391] input: syz1 as /devices/virtual/input/input6
[   72.213329][ T6399] support for the xor transformation has been removed.
[   72.249649][ T6403] FAULT_INJECTION: forcing a failure.
[   72.249649][ T6403] name failslab, interval 1, probability 0, space 0, times 0
[   72.249704][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.1.287 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   72.249731][ T6403] Tainted: [L]=SOFTLOCKUP
[   72.249735][ T6403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.249740][ T6403] Call Trace:
[   72.249743][ T6403]  <TASK>
[   72.249747][ T6403]  dump_stack_lvl+0xe8/0x150
[   72.249762][ T6403]  should_fail_ex+0x410/0x560
[   72.249773][ T6403]  should_failslab+0xa8/0x100
[   72.249785][ T6403]  __kmalloc_cache_noprof+0xa3/0x600
[   72.249793][ T6403]  ? __kmalloc_cache_noprof+0x14d/0x600
[   72.249800][ T6403]  ? bfq_cpd_alloc+0x73/0x120
[   72.249810][ T6403]  ? bfq_cpd_alloc+0x73/0x120
[   72.249825][ T6403]  bfq_cpd_alloc+0x73/0x120
[   72.249836][ T6403]  blkcg_css_alloc+0x519/0xa80
[   72.249847][ T6403]  cgroup_apply_control_enable+0x5bb/0xda0
[   72.249864][ T6403]  cgroup_mkdir+0xd2c/0xf90
[   72.249876][ T6403]  ? __pfx_cgroup_mkdir+0x10/0x10
[   72.249884][ T6403]  kernfs_iop_mkdir+0x213/0x360
[   72.249895][ T6403]  vfs_mkdir+0x40c/0x620
[   72.249906][ T6403]  filename_mkdirat+0x285/0x510
[   72.249917][ T6403]  ? __pfx_filename_mkdirat+0x10/0x10
[   72.249926][ T6403]  ? do_getname+0x151/0x250
[   72.249937][ T6403]  __se_sys_mkdirat+0x35/0x150
[   72.249946][ T6403]  do_syscall_64+0x166/0x520
[   72.249953][ T6403]  ? trace_irq_disable+0x3b/0x140
[   72.249960][ T6403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.249970][ T6403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.249994][ T6403] RIP: 0033:0x7f8b0379e159
[   72.250002][ T6403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.250009][ T6403] RSP: 002b:00007f8b04641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   72.250019][ T6403] RAX: ffffffffffffffda RBX: 00007f8b03a25fa0 RCX: 00007f8b0379e159
[   72.250025][ T6403] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   72.250030][ T6403] RBP: 00007f8b03835024 R08: 0000000000000000 R09: 0000000000000000
[   72.250035][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.250039][ T6403] R13: 00007f8b03a26038 R14: 00007f8b03a25fa0 R15: 00007ffcb5b56788
[   72.250051][ T6403]  </TASK>
[   72.380964][ T6413] tmpfs: Too small a size for current use
[   72.502041][ T6423] loop0: detected capacity change from 0 to 512
[   72.509282][ T6423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   72.526203][ T6423] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.297: bg 0: block 393: padding at end of block bitmap is not set
[   72.532995][ T6423] loop0: lost filesystem error report for type 5 error -117
[   72.535702][ T6423] EXT4-fs (loop0): Remounting filesystem read-only
[   72.539004][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   72.539019][    C1] EXT4-fs (loop0): initial error at time 1788965080: ext4_validate_block_bitmap:445
[   72.539034][    C1] EXT4-fs (loop0): last error at time 1788965080: ext4_validate_block_bitmap:445
[   72.555665][ T6423] EXT4-fs (loop0): 2 truncates cleaned up
[   72.562905][ T6423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.572332][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.300'.
[   72.576609][ T6423] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[   72.615746][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.650555][ T6434] usb usb7: check_ctrlrecip: process 6434 (syz.2.302) requesting ep 01 but needs 81
[   72.650605][ T6434] usb usb7: usbfs: process 6434 (syz.2.302) did not claim interface 0 before use
[   72.704447][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'.
[   72.803433][ T6446] capability: warning: `syz.1.308' uses 32-bit capabilities (legacy support in use)
[   72.810106][ T6446] program syz.1.308 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.878477][ T6450] dummy0: entered allmulticast mode
[   72.883455][ T6450] dummy0: left allmulticast mode
[   73.263597][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   73.263656][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   73.657265][ T5065] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   73.809373][ T5065] usb 2-1: unable to get BOS descriptor or descriptor too short
[   73.812779][ T5065] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60
[   73.817959][ T5065] usb 2-1: config 114 has an invalid interface number: 32 but max is 0
[   73.821608][ T5065] usb 2-1: config 114 has no interface number 0
[   73.824445][ T5065] usb 2-1: config 114 interface 32 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[   73.829503][ T5065] usb 2-1: config 114 interface 32 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[   73.833891][ T5065] usb 2-1: config 114 interface 32 has no altsetting 0
[   73.839962][ T5065] usb 2-1: string descriptor 0 read error: -22
[   73.842780][ T5065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.852036][ T6500] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   74.059105][ T5662] usb 2-1: USB disconnect, device number 5
[   74.333600][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'.
[   74.551586][ T6518] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[   74.924052][ T6534] loop0: detected capacity change from 0 to 512
[   74.924682][ T6534] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.924713][ T6534] EXT4-fs: Ignoring removed oldalloc option
[   74.928646][ T6534] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   74.931418][ T6534] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   74.931615][ T6534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2846c01c, mo2=0002]
[   74.931654][ T6534] System zones: 0-2, 18-18, 34-34
[   74.934025][ T6534] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   74.934041][ T6534] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   74.934048][ T6534] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.348: bad orphan inode 20829
[   74.934056][ T6534] loop0: lost filesystem error report for type 5 error -117
[   74.935397][ T6534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.971435][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.587256][ T6563] ieee802154 phy0 wpan0: encryption failed: -22
[   75.796850][ T6581] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   75.855507][ T6585] netlink: 'syz.0.371': attribute type 2 has an invalid length.
[   76.006140][   T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   76.017683][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   76.082258][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'.
[   76.158018][   T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   76.164654][   T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   76.169246][   T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   76.173340][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.186637][ T6578] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   76.203275][   T27] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   76.307400][ T6613] loop1: detected capacity change from 0 to 1024
[   76.310413][ T6613] EXT4-fs: Ignoring removed bh option
[   76.312384][ T6613] EXT4-fs: Ignoring removed orlov option
[   76.323473][ T6613] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   76.323553][ T6613] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   76.323729][ T6613] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.383: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   76.323863][ T6613] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   76.324614][ T6613] EXT4-fs (loop1): Remounting filesystem read-only
[   76.324657][ T6613] EXT4-fs (loop1): no journal found
[   76.324662][ T6613] EXT4-fs (loop1): can't get journal size
[   76.327165][ T6613] EXT4-fs (loop1): failed to initialize system zone (-117)
[   76.327212][ T6613] EXT4-fs (loop1): mount failed
[   76.335796][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   76.335808][    C0] EXT4-fs (loop1): initial error at time 1788965084: ext4_ext_check_inode:521: inode 3
[   76.335826][    C0] EXT4-fs (loop1): last error at time 1788965084: ext4_ext_check_inode:521: inode 3
[   76.549231][ T5662] usb 3-1: USB disconnect, device number 5
[   76.615369][   T10] cfg80211: failed to load regulatory.db
[   76.775607][  T807] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   76.935695][  T807] usb 2-1: Using ep0 maxpacket: 8
[   76.938481][  T807] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   76.944081][  T807] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   76.947661][  T807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   76.951828][  T807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   76.955987][  T807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   76.956000][  T807] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   76.956022][  T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.185548][  T807] usb 2-1: usb_control_msg returned -32
[   77.188173][  T807] usbtmc 2-1:16.0: can't read capabilities
[   77.294423][ T6633] jffs2: notice: (6633) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   77.336439][ T5597] ------------[ cut here ]------------
[   77.336473][ T5597] kernel BUG at fs/jffs2/nodelist.c:462!
[   77.356147][ T5597] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   77.358236][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   77.361735][ T5597] Tainted: [L]=SOFTLOCKUP
[   77.363100][ T5597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.366242][ T5597] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0
[   77.368129][ T5597] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 1e f8 fe e9 42 fe ff ff e8 68 00 88 fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   77.374112][ T5597] RSP: 0018:ffffc90004967a38 EFLAGS: 00010293
[   77.376022][ T5597] RAX: ffffffff833fb838 RBX: ffff8881175dae80 RCX: ffff88810f8cda00
[   77.378668][ T5597] RDX: 0000000000000000 RSI: ffff8881175dae80 RDI: ffff88810c3e8000
[   77.381151][ T5597] RBP: 0000000000000006 R08: ffff88810c3e8363 R09: 1ffff1102187d06c
[   77.383681][ T5597] R10: dffffc0000000000 R11: ffffed102187d06d R12: ffff8881175dae80
[   77.386229][ T5597] R13: dffffc0000000000 R14: ffff8881175daea0 R15: ffff88810c3e8000
[   77.388772][ T5597] FS:  00005555615e3500(0000) GS:ffff88818d6d6000(0000) knlGS:0000000000000000
[   77.391636][ T5597] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.394255][ T5597] CR2: 0000564b9d446000 CR3: 000000011949c000 CR4: 00000000000006f0
[   77.397453][ T5597] Call Trace:
[   77.398882][ T5597]  <TASK>
[   77.400110][ T5597]  ? jffs2_do_clear_inode+0x314/0x390
[   77.402259][ T5597]  jffs2_do_clear_inode+0x31f/0x390
[   77.404357][ T5597]  ? __pfx_jffs2_evict_inode+0x10/0x10
[   77.406552][ T5597]  evict+0x624/0xb50
[   77.408192][ T5597]  ? __pfx_evict+0x10/0x10
[   77.410027][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[   77.412163][ T5597]  evict_inodes+0x7e3/0x870
[   77.414055][ T5597]  ? __pfx_cgroup_writeback_umount+0x10/0x10
[   77.416546][ T5597]  ? __pfx_evict_inodes+0x10/0x10
[   77.418631][ T5597]  ? jffs2_sync_fs+0x97/0xb0
[   77.420544][ T5597]  ? sync_filesystem+0x1f9/0x240
[   77.422583][ T5597]  generic_shutdown_super+0xaa/0x2d0
[   77.424761][ T5597]  kill_mtd_super+0x23/0x70
[   77.426632][ T5597]  jffs2_kill_sb+0x96/0xb0
[   77.428464][ T5597]  deactivate_locked_super+0xbc/0x110
[   77.430714][ T5597]  cleanup_mnt+0x3d3/0x460
[   77.432589][ T5597]  task_work_run+0x1d9/0x270
[   77.434483][ T5597]  ? __pfx_task_work_run+0x10/0x10
[   77.436596][ T5597]  exit_to_user_mode_loop+0x204/0x770
[   77.438802][ T5597]  ? rcu_is_watching+0x16/0xb0
[   77.440767][ T5597]  do_syscall_64+0x328/0x520
[   77.442651][ T5597]  ? trace_irq_disable+0x3b/0x140
[   77.444700][ T5597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.447113][ T5597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.449529][ T5597] RIP: 0033:0x7f686c39f397
[   77.451374][ T5597] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   77.459169][ T5597] RSP: 002b:00007ffc1bb5de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   77.462451][ T5597] RAX: 0000000000000000 RBX: 00007f686c434474 RCX: 00007f686c39f397
[   77.465648][ T5597] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1bb5df10
[   77.468889][ T5597] RBP: 00007ffc1bb5df10 R08: 00007ffc1bb5ef10 R09: 00000000ffffffff
[   77.472066][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1bb5efa0
[   77.475294][ T5597] R13: 00007f686c434474 R14: 0000000000012d97 R15: 00007ffc1bb5efe0
[   77.478547][ T5597]  </TASK>
[   77.479844][ T5597] Modules linked in:
[   77.482015][ T5597] ---[ end trace 0000000000000000 ]---
[   77.498392][ T5597] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0
[   77.501395][ T5597] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 1e f8 fe e9 42 fe ff ff e8 68 00 88 fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   77.510218][ T5597] RSP: 0018:ffffc90004967a38 EFLAGS: 00010293
[   77.513263][ T5597] RAX: ffffffff833fb838 RBX: ffff8881175dae80 RCX: ffff88810f8cda00
[   77.516893][ T5597] RDX: 0000000000000000 RSI: ffff8881175dae80 RDI: ffff88810c3e8000
[   77.520893][ T5597] RBP: 0000000000000006 R08: ffff88810c3e8363 R09: 1ffff1102187d06c
[   77.524431][ T5597] R10: dffffc0000000000 R11: ffffed102187d06d R12: ffff8881175dae80
[   77.528309][ T5597] R13: dffffc0000000000 R14: ffff8881175daea0 R15: ffff88810c3e8000
[   77.532345][ T5597] FS:  00005555615e3500(0000) GS:ffff88818d6d6000(0000) knlGS:0000000000000000
[   77.537022][ T5597] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.543903][ T5597] CR2: 0000564b9d47c000 CR3: 000000011949c000 CR4: 00000000000006f0
[   77.547639][ T5597] Kernel panic - not syncing: Fatal exception
[   77.550898][ T5597] Kernel Offset: disabled
[   77.552645][ T5597] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:44:45  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff9726b8c8 RBX=00000000000003fd RCX=00000000000004b6 RDX=ffffffff9722a2b8
RSI=ffff88810f8ce650 RDI=ffff88810f8cda00 RBP=d7d3ca1cf6fcc1e1 RSP=ffffc900049672f8
R8 =00000000000003fd R9 =0000000000000020 R10=0000000000000000 R11=ffffffff81a38980
R12=00000000000004b5 R13=ffffffff943dcb78 R14=ffff88810f8ce650 R15=ffffffff9726b938
RIP=ffffffff81a334dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555615e3500 ffffffff 00c00000
GS =0000 ffff88818d6d6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555615fea28 CR3=000000011949c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000ff0000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff110217edc92 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc90003f1f800 RBP=ffffc90003f1f878 RSP=ffffc90003f1f7c0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520007e3f00
R12=1ffff920007e3efc R13=ffff88810bf6e488 R14=dffffc0000000000 R15=1ffff110217edc91
RIP=ffffffff81a3bdd6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8cd6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004000 CR3=0000000102f46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=000000000000ff00 000000ff000000ff
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffff00ffffff ff00000000000000 XMM05=322f326200302e31 2e3a312d3200312d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=00000000ff000000 0000000000ff0000 XMM09=322f326273752f31 2e6463685f796d6d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
