last executing test programs:

5m11.27570788s ago: executing program 2 (id=3217):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001280)="$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")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x4c831, 0xffffffffffffffff, 0x31fd000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4d, 0x215, 0x4, 0x0, 0x7, 0x0, 0x40}, 0xc)

5m11.011656779s ago: executing program 2 (id=3218):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)

5m10.981319638s ago: executing program 2 (id=3219):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0)
bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x5, 0x0, 0x6, "23ba4cb148e27a62778ab6e2ad47e2f096dbae5488d838161da26752700a993a9898b753acbbe03034a8e6487bac34f3e95e88aaaafc3788337701a4cd90bb", 0x21}, 0x60)

5m10.954620923s ago: executing program 2 (id=3220):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1000484, &(0x7f00000008c0)=ANY=[@ANYBLOB='noquota,iocharset=cp1250,iocharset=none,errors=remount-ro,discard,usrquota,iocharset=cp1255,uid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="67d86d285dd1a2110c758d96886200ac8a92089c2a5cf8ad2040553cea72d29d82511459fbd2a9c6977026adf0bc539a7856a4dcce70bbea3b7b8dddf096f98ce605c3cb16c50c0e6fb0b31a5f3ad7311a8310f03eceaf60ea4d946908574f99cc18f8e35e3227991fbe9d03e23f4ec43077598ac1bdf548b9b0c490cf4d682ba6c5e225d685ad16dc8ce3cb7f5a7b4f918e2ba56fb558775dcb3ceb5f35b18cf82608931edd6f68586ef55cdb7c8bad0ca333bdf95d5a594c57", @ANYBLOB=',\x00', @ANYRESOCT], 0x1c, 0x623d, &(0x7f0000006580)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

5m10.615768301s ago: executing program 2 (id=3224):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nomblk_io_submit}, {@errors_remount}, {@nodelalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x1, 0x3d0, &(0x7f00000023c0)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f268c2d285d83ec4018000000000000000002009000007000000200700", [0x8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)

5m9.393876433s ago: executing program 2 (id=3230):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28)

5m9.199476259s ago: executing program 32 (id=3230):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28)

5m1.192603086s ago: executing program 1 (id=3303):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)

5m1.134186303s ago: executing program 1 (id=3304):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1)

5m1.025904403s ago: executing program 1 (id=3305):
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000080), 0x51)

5m0.938244201s ago: executing program 1 (id=3307):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

5m0.657128339s ago: executing program 1 (id=3314):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0)

5m0.39159926s ago: executing program 1 (id=3319):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
r5 = dup(r4)
inotify_rm_watch(r5, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1})
setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000240)={@loopback, @multicast2}, 0x50)
syz_emit_ethernet(0xd6, &(0x7f0000000740)=ANY=[], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

4m45.333938678s ago: executing program 33 (id=3319):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
r5 = dup(r4)
inotify_rm_watch(r5, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1})
setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000240)={@loopback, @multicast2}, 0x50)
syz_emit_ethernet(0xd6, &(0x7f0000000740)=ANY=[], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

40.416522743s ago: executing program 4 (id=6188):
r0 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x2, 0x55}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000780)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

40.345592137s ago: executing program 4 (id=6189):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143040, 0x650ce4b086bd45cb)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000080)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x0, 0x0, 0x0})

40.318357888s ago: executing program 4 (id=6190):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9, 0xfffffffd}, 0x20)

40.271286891s ago: executing program 4 (id=6191):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

40.204871793s ago: executing program 4 (id=6192):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001", @ANYBLOB="e0b4c8590e"], 0x0)

39.594926962s ago: executing program 4 (id=6197):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x101)

39.552344551s ago: executing program 34 (id=6197):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x101)

31.997154469s ago: executing program 5 (id=6203):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000140)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))

31.280043156s ago: executing program 5 (id=6301):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18)
lseek(r0, 0x0, 0x3)

16.209683773s ago: executing program 35 (id=6301):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18)
lseek(r0, 0x0, 0x3)

1.135094459s ago: executing program 6 (id=6604):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xe0000017})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

866.385361ms ago: executing program 6 (id=6611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000760001007723368b020014347d0d7d"], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x60044090)

843.571008ms ago: executing program 6 (id=6613):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018056, &(0x7f000000ae00)={[{@quota}, {@discard_size={'discard', 0x3d, 0x1}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@errors_remount}, {@usrquota}, {@nodiscard}, {@errors_remount}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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")
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

481.400582ms ago: executing program 3 (id=6616):
socket$rds(0x15, 0x5, 0x0)
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x271f, 0x0, &(0x7f00000000c0))

478.283574ms ago: executing program 3 (id=6617):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002000)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000)

447.823298ms ago: executing program 0 (id=6618):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d)

405.08181ms ago: executing program 3 (id=6619):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)="3013", 0x2)

383.112245ms ago: executing program 6 (id=6620):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x41)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r1, 0x402, 0x40000029)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

336.322794ms ago: executing program 0 (id=6621):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x12f20, 0x9000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x4}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2a}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c801}, 0x24008000)

241.72078ms ago: executing program 3 (id=6622):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)

241.31342ms ago: executing program 0 (id=6623):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000001100)={{0x7f, 0x45, 0x4c, 0x46, 0xe1, 0x2, 0x2, 0x8d, 0x4, 0x2, 0x6, 0x4007, 0x1b8, 0x38, 0x25e, 0x3ff, 0x4, 0x20, 0x1, 0x5, 0x401, 0x1fe}, [{0x70000000, 0x7fffffff, 0x7, 0xa124, 0xf08, 0x609e, 0x6d, 0x2}]}, 0x58)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

167.134244ms ago: executing program 6 (id=6624):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = getpgid(r3)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0x308, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r4})
sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015)

141.01746ms ago: executing program 3 (id=6625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000025000900000000000008000003"], 0x14}}, 0x80)

139.772145ms ago: executing program 0 (id=6626):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x8}})

92.068418ms ago: executing program 0 (id=6627):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0xc0384707, 0x0)

57.316548ms ago: executing program 3 (id=6628):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x0, 0xfffffffe}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0)

24.435445ms ago: executing program 6 (id=6629):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
setns(0xc9, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x11208}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

0s ago: executing program 0 (id=6630):
ioperm(0x0, 0x1, 0x1)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
ioperm(0x8d8, 0x4, 0x5)

kernel console output (not intermixed with test programs):

T15133] loop3: detected capacity change from 0 to 2048
[  450.399109][T15133]  loop3: p2 p3 p7
[  450.648923][T15137] dummy0: mtu less than device minimum
[  451.521115][T15159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3812'.
[  451.537636][T15159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3812'.
[  451.543340][T15159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3812'.
[  451.547979][T15159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3812'.
[  451.888309][T15166] overlayfs: failed to clone upperpath
[  452.087331][T14414] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  452.270825][T14414] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  452.279642][T14414] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  452.289618][T14414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12636, setting to 64
[  452.299859][T14414] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  452.313164][T14414] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  452.321461][T14414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.336145][T14414] usb 5-1: Product: syz
[  452.339913][T14414] usb 5-1: Manufacturer: syz
[  452.341577][T14414] usb 5-1: SerialNumber: syz
[  452.375629][T14414] usb 5-1: config 0 descriptor??
[  452.383528][T15164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  452.425888][T14414] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  452.535069][    C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  452.660986][   T33] usb 5-1: USB disconnect, device number 8
[  452.661575][    C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19
[  453.068151][T15183] openvswitch: netlink: Tunnel attr 16 has unexpected len 8 expected 0
[  453.430308][T15196] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  453.482409][T15201] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  453.659050][T15205] loop3: detected capacity change from 0 to 512
[  453.680527][T15205] EXT4-fs (loop3): 1 truncate cleaned up
[  453.683790][T15205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.712574][T15209] input: syz0 as /devices/virtual/input/input9
[  453.984741][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.646002][   T34] audit: type=1326 audit(1787568128.681:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.669965][   T34] audit: type=1326 audit(1787568128.691:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.690891][   T34] audit: type=1326 audit(1787568128.701:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.716657][   T34] audit: type=1326 audit(1787568128.701:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.771692][   T34] audit: type=1326 audit(1787568128.701:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.803689][   T34] audit: type=1326 audit(1787568128.701:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.824156][   T34] audit: type=1326 audit(1787568128.701:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.845956][   T34] audit: type=1326 audit(1787568128.701:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  454.869420][   T34] audit: type=1326 audit(1787568128.701:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.3843" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  455.039680][T15250] loop3: detected capacity change from 0 to 4096
[  455.091009][T15250] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  458.345092][T15286] overlayfs: failed to clone upperpath
[  458.597739][ T5658] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  458.735289][T15300] fuse: fd is not a fuse device
[  458.761586][ T5658] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  458.780381][ T5658] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  458.784364][ T5658] usb 5-1: Product: syz
[  458.792069][ T5658] usb 5-1: config 0 descriptor??
[  458.811124][ T5658] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  458.816372][ T5658] usb 5-1: Detected FT232H
[  458.902277][T15304] xt_hashlimit: size too large, truncated to 1048576
[  458.921119][   T33] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  459.021980][ T5658] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  459.070457][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  459.086086][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  459.101512][   T33] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  459.111225][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.128724][   T33] usb 4-1: config 0 descriptor??
[  459.553714][ T5658] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  459.602234][   T33] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  459.613117][   T33] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  459.625286][   T33] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  459.635832][   T33] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  459.653870][   T33] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  459.661568][   T24] usb 5-1: USB disconnect, device number 9
[  459.675813][   T33] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  459.693675][   T33] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  459.764600][   T33] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  459.965435][T15318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  460.034552][   T33] usb 4-1: USB disconnect, device number 8
[  460.310030][T15324] netlink: get zone limit has 4 unknown bytes
[  460.671073][T15332] loop3: detected capacity change from 0 to 1024
[  460.685319][T15332] hfsplus: failed to load extents file
[  460.725363][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  460.765142][   T24] ftdi_sio 5-1:0.0: device disconnected
[  460.821167][T15334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.996418][T15334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.036763][T15334] bond0 (unregistering): Released all slaves
[  461.069039][    C1] Unknown status report in ack skb
[  462.358833][ T5658] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  462.383056][T15361] loop4: detected capacity change from 0 to 1024
[  462.510098][ T5658] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.527786][ T5658] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  462.540328][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.550697][ T5658] usb 4-1: Product: syz
[  462.561837][ T5658] usb 4-1: Manufacturer: syz
[  462.566358][ T5658] usb 4-1: SerialNumber: syz
[  462.583573][ T5658] usb 4-1: config 0 descriptor??
[  462.622615][ T5658] redrat3 4-1:0.0: Couldn't find all endpoints
[  462.843267][ T5658] usb 4-1: USB disconnect, device number 9
[  463.512550][T15370] netlink: 130 bytes leftover after parsing attributes in process `syz.4.3900'.
[  463.773254][T15374] loop3: detected capacity change from 0 to 1024
[  463.798172][T15374] EXT4-fs: Ignoring removed mblk_io_submit option
[  463.819311][T15374] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  463.865775][T15374] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.3901: lblock 2 mapped to illegal pblock 2 (length 1)
[  463.893749][T15374] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  463.897251][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  463.903628][    C1] EXT4-fs (loop3): initial error at time 1787568137: ext4_map_blocks:791: inode 3: block 2
[  463.907803][    C1] EXT4-fs (loop3): last error at time 1787568137: ext4_map_blocks:791: inode 3: block 2
[  463.934454][T15374] EXT4-fs (loop3): Remounting filesystem read-only
[  463.946645][T15374] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  463.959015][T15374] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  463.979705][T15374] EXT4-fs (loop3): 1 orphan inode deleted
[  463.994103][T15374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.162076][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.299534][T15399] loop4: detected capacity change from 0 to 8192
[  465.314739][T15399] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  465.623863][T15401] loop3: detected capacity change from 0 to 32768
[  465.632934][T15401] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3913 (15401)
[  465.666913][T15401] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  465.675160][T15401] BTRFS info (device loop3): using sha256 checksum algorithm
[  465.832040][T15409] loop4: detected capacity change from 0 to 4096
[  466.010828][T15401] BTRFS info (device loop3): turning off barriers
[  466.013688][T15401] BTRFS info (device loop3): enabling free space tree
[  466.054023][T13677] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  466.306058][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3919'.
[  466.397877][T15427] netlink: 'syz.0.3919': attribute type 10 has an invalid length.
[  466.491018][T15427] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  466.502846][T15427] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  466.645558][T15409] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  466.714988][T15409] ntfs3(loop4): ino=1a, mi_enum_attr
[  466.726859][T15409] ntfs3(loop4): ino=1a, mi_enum_attr
[  466.737386][T15409] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  467.104668][T15431] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size_ex
[  467.123504][   T34] audit: type=1800 audit(1787568141.091:132): pid=15431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3917" name="file1" dev="loop4" ino=30 res=0 errno=0
[  467.143540][   T34] audit: type=1800 audit(1787568141.161:133): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3918" name="nexus" dev="configfs" ino=38611 res=0 errno=0
[  467.156359][T15436] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  467.288532][T15438] ALSA: mixer_oss: invalid OSS volume 'P'
[  468.001554][T15455] netlink: 'syz.0.3930': attribute type 2 has an invalid length.
[  470.146684][T15499] program syz.4.3950 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  471.821354][T15528] loop4: detected capacity change from 0 to 16
[  472.693095][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'.
[  472.932600][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3975'.
[  473.740359][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3988'.
[  474.067525][T15592] Mount JFS Failure: -5
[  474.552632][T15618] loop4: detected capacity change from 0 to 4096
[  474.561748][T15618] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  474.587250][ T5658] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  474.740541][ T5658] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  474.748955][ T5658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.758358][ T5658] usb 4-1: config 0 descriptor??
[  474.798302][ T5658] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  474.979250][T15628] loop4: detected capacity change from 0 to 2048
[  474.982053][ T5658] gp8psk: usb in 128 operation failed.
[  475.007361][T15628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  475.196513][ T5658] gp8psk: usb in 146 operation failed.
[  475.199674][ T5658] gp8psk: failed to get FW version
[  475.219876][ T5658] gp8psk: FPGA Version = 217
[  475.419120][ T5658] gp8psk: usb in 138 operation failed.
[  475.426332][ T5658] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  475.448324][ T5658] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  475.461857][ T5658] usb 4-1: USB disconnect, device number 10
[  475.510784][T15643] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4018'.
[  475.937490][ T5658] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  475.986555][T15655] loop3: detected capacity change from 0 to 512
[  476.001794][T15655] EXT4-fs (loop3): 1 truncate cleaned up
[  476.005376][T15655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.063171][   T34] audit: type=1800 audit(1787568150.101:134): pid=15655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4024" name="file1" dev="loop3" ino=13 res=0 errno=0
[  476.089054][ T5658] usb 5-1: config 0 has an invalid interface number: 205 but max is 0
[  476.091869][ T5658] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  476.102248][ T5658] usb 5-1: config 0 has no interface number 0
[  476.104385][ T5658] usb 5-1: config 0 interface 205 has no altsetting 0
[  476.114928][ T5658] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  476.120829][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.126659][ T5658] usb 5-1: Product: syz
[  476.132406][   T34] audit: type=1800 audit(1787568150.161:135): pid=15658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4024" name="file1" dev="loop3" ino=13 res=0 errno=0
[  476.138541][ T5658] usb 5-1: Manufacturer: syz
[  476.140401][ T5658] usb 5-1: SerialNumber: syz
[  476.152587][ T5658] usb 5-1: config 0 descriptor??
[  476.167486][T15658] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4024: bg 0: block 465: padding at end of block bitmap is not set
[  476.170597][ T5658] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  476.177986][ T5658] dvb-usb: bulk message failed: -22 (3/0)
[  476.193256][T15658] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[  476.199062][T15658] EXT4-fs (loop3): This should not happen!! Data will be lost
[  476.199062][T15658] 
[  476.202796][T15658] EXT4-fs (loop3): Total free blocks count 0
[  476.205115][T15658] EXT4-fs (loop3): Free/Dirty block details
[  476.207501][T15658] EXT4-fs (loop3): free_blocks=0
[  476.209232][ T5658] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  476.209276][T15658] EXT4-fs (loop3): dirty_blocks=2
[  476.213921][T15658] EXT4-fs (loop3): Block reservation details
[  476.216155][T15658] EXT4-fs (loop3): i_reserved_data_blocks=2
[  476.219415][ T5658] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  476.231295][ T5658] usb 5-1: media controller created
[  476.236845][ T5658] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  476.283272][ T5658] dvb-usb: bulk message failed: -22 (6/0)
[  476.296410][ T5658] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  476.311736][ T5658] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  476.336743][ T5658] dvb-usb: schedule remote query interval to 150 msecs.
[  476.340840][ T5658] dvb-usb: bulk message failed: -22 (3/0)
[  476.358096][ T5658] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  476.400062][T14414] usb 5-1: USB disconnect, device number 10
[  476.579433][T14414] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  476.956190][T13677] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost
[  476.978551][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.288864][T15686] loop3: detected capacity change from 0 to 256
[  477.306309][T15686] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  478.443180][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'.
[  478.511750][T15712] loop3: detected capacity change from 0 to 64
[  478.522321][T15712] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  478.673176][T15714] netlink: Unknown NAT attribute (type=42, max=9)
[  478.675478][T15714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.693024][T15710] loop4: detected capacity change from 0 to 32768
[  478.786853][T15710] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  478.822073][T15710] XFS (loop4): Ending clean mount
[  479.093961][T14223] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  479.661087][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'.
[  479.664645][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'.
[  480.041641][T15753] loop3: detected capacity change from 0 to 32768
[  480.077748][T15753] JBD2: Ignoring recovery information on journal
[  480.140256][T15753] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  480.190323][T15765] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4068'.
[  480.211489][   T34] audit: type=1804 audit(1787568154.251:136): pid=15753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4064" name="/newroot/268/file1/file1" dev="loop3" ino=17059 res=1 errno=0
[  480.339460][T13677] ocfs2: Unmounting device (7,3) on (node local)
[  481.241986][T15796] veth5: entered promiscuous mode
[  481.268391][T15796] team0: Port device veth5 added
[  481.326850][T15799] device-mapper: ioctl: Invalid ioctl structure: name , dev 6c65646f63
[  481.989821][T15811] loop3: detected capacity change from 0 to 32768
[  481.989830][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4093'.
[  482.002928][T15811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4089 (15811)
[  482.058624][T15811] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  482.070192][T15811] BTRFS info (device loop3): using crc32c checksum algorithm
[  482.078006][T15811] BTRFS error (device loop3): nologreplay must be used with ro mount option
[  482.086174][T15811] BTRFS error (device loop3): cannot disable free-space-tree
[  482.100311][T15811] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  482.120497][T15811] BTRFS error (device loop3): open_ctree failed: -22
[  482.622235][T15814] loop4: detected capacity change from 0 to 32768
[  483.432225][T15852] netlink: 'syz.0.4109': attribute type 15 has an invalid length.
[  483.457552][T15852] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4109'.
[  483.690823][T15859] comedi comedi0: comedi_config --init_data is deprecated
[  486.143278][T15908] loop4: detected capacity change from 0 to 4096
[  486.168269][T15908] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  486.253785][T15908] ntfs3(loop4): ino=8, mi_enum_attr
[  486.256348][T15908] ntfs3(loop4): Failed to load $BadClus (-22).
[  487.116232][T15939] loop3: detected capacity change from 0 to 1024
[  487.127878][T15939] EXT4-fs: Invalid want_extra_isize 8388736
[  489.058034][T15967] fuse: fd is not a fuse device
[  489.318038][T14225] Bluetooth: hci1: command 0x0406 tx timeout
[  490.059862][T15998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4171'.
[  490.179820][T16004] IPv6: addrconf: prefix option has invalid lifetime
[  490.263157][T16007] loop4: detected capacity change from 0 to 4096
[  490.280851][T16007] ntfs3(loop4): ino=9, mi_enum_attr
[  490.284170][T16007] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  490.372914][T16007] ntfs3(loop4): ino=9, mi_enum_attr
[  490.378455][T16007] ntfs3(loop4): ino=b, mi_enum_attr
[  490.387069][T16007] ntfs3(loop4): Failed to load $Extend (-22).
[  490.388965][T16007] ntfs3(loop4): Failed to initialize $Extend.
[  490.892228][T16017] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12
[  491.028994][T16026] xt_hashlimit: size too large, truncated to 1048576
[  491.237102][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4188'.
[  491.240502][T16039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4188'.
[  491.475334][T16046] loop3: detected capacity change from 0 to 32768
[  491.505582][T16046] read_mapping_page failed!
[  491.507607][T16046] ERROR: (device loop3): txCommit: 
[  491.507607][T16046] 
[  491.567891][T14414] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  491.731311][T14414] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.739730][T14414] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  491.749063][T14414] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  491.752649][T14414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.767646][T14414] opticon 5-1:1.0: opticon converter detected
[  491.789618][T14414] usb 5-1: opticon converter now attached to ttyUSB0
[  492.023893][T16044] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90
[  492.227665][ T5658] usb 5-1: USB disconnect, device number 11
[  492.244870][ T5658] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  492.251853][ T5658] opticon 5-1:1.0: device disconnected
[  492.812098][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'.
[  492.819604][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4207'.
[  492.823846][T16083] netlink: 'syz.4.4207': attribute type 13 has an invalid length.
[  492.973144][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'.
[  492.992108][T16091] ipvlan2: entered allmulticast mode
[  492.994388][T16091] syz_tun: entered allmulticast mode
[  493.231762][T16107] pim6reg: entered allmulticast mode
[  493.239148][T16107] pim6reg: left allmulticast mode
[  493.447544][   T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  493.599079][   T24] usb 5-1: not running at top speed; connect to a high speed hub
[  493.604760][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.618308][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  493.622009][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.641966][   T24] uvcvideo 5-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  494.043751][   T24] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  494.089303][   T24] videodev: could not get a free minor
[  494.091693][   T24] uvcvideo 5-1:1.1: Failed to register meta-cap device (-23).
[  494.257942][ T5658] usb 5-1: USB disconnect, device number 12
[  494.480648][T16138] input: syz0 as /devices/virtual/input/input13
[  494.755692][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'.
[  494.846769][T16161] loop4: detected capacity change from 0 to 2048
[  494.879035][T16161] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  494.889817][T16161] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  494.896056][T16161] UDF-fs: Scanning with blocksize 512 failed
[  494.919491][T16161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.941999][   T34] audit: type=1800 audit(494.312:137): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4239" name="file1" dev="loop4" ino=838 res=0 errno=0
[  495.513683][T16192] xt_hashlimit: size too large, truncated to 1048576
[  495.796245][T16203] bridge0: port 1(veth0) entered blocking state
[  495.803006][T16203] bridge0: port 1(veth0) entered disabled state
[  495.806897][T16203] veth0: entered allmulticast mode
[  495.811409][T16203] veth0: entered promiscuous mode
[  495.813560][T16203] bridge0: port 1(veth0) entered blocking state
[  495.815552][T16203] bridge0: port 1(veth0) entered forwarding state
[  496.104955][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4256'.
[  496.324061][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4261'.
[  496.328869][T16222] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  496.847288][T14414] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  496.918863][   T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  496.939430][T16241] netlink: 'syz.0.4270': attribute type 19 has an invalid length.
[  497.020435][T14414] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  497.026335][T14414] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.031013][T14414] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.034858][T14414] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  497.040178][T14414] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  497.044071][T14414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.077584][   T24] usb 5-1: Using ep0 maxpacket: 16
[  497.084222][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  497.088477][   T24] usb 5-1: unable to read config index 0 descriptor/start: -71
[  497.091598][   T24] usb 5-1: can't read configurations, error -71
[  497.482821][T14414] lg-g15 0003:046D:C222.000D: hiddev0,hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0
[  497.630292][   T34] audit: type=1800 audit(497.002:138): pid=16246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4272" name="addr_trtype" dev="configfs" ino=41138 res=0 errno=0
[  497.659000][ T5658] usb 4-1: USB disconnect, device number 11
[  498.451086][T16265] nvme_fabrics: missing parameter 'transport=%s'
[  498.453309][T16265] nvme_fabrics: missing parameter 'nqn=%s'
[  498.484531][T16265] xt_hashlimit: size too large, truncated to 1048576
[  498.553142][T16270] loop3: detected capacity change from 0 to 1024
[  498.561878][T16270] EXT4-fs: Ignoring removed bh option
[  498.574382][T16270] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  498.627702][T16270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  498.688357][T16277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4283'.
[  498.738943][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.995646][T16289] loop3: detected capacity change from 0 to 4096
[  499.020579][T16289] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  499.042134][T16289] ntfs3(loop3): ino=19, mi_enum_attr
[  499.044837][T16289] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  499.051550][T16289] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  499.234444][T16303] loop4: detected capacity change from 0 to 64
[  499.748123][T16322] i2c i2c-0: new_device: Instantiated device nb7vpq904m at 0x01
[  500.045802][T16336] netlink: 6208 bytes leftover after parsing attributes in process `syz.0.4311'.
[  500.131163][T16332] loop3: detected capacity change from 0 to 32768
[  500.147548][   T34] audit: type=1800 audit(499.512:139): pid=16332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4309" name="file1" dev="loop3" ino=7 res=0 errno=0
[  500.394727][T16344] loop3: detected capacity change from 0 to 65
[  500.403738][T16344] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  500.644928][T16352] loop3: detected capacity change from 0 to 128
[  501.187390][ T5605] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  501.348677][ T5605] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  501.357020][ T5605] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  501.359800][ T5605] usb 4-1: config 0 has no interface number 0
[  501.362308][ T5605] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.374196][ T5605] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  501.381678][ T5605] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  501.396070][ T5605] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  501.402370][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.408540][ T5605] usb 4-1: config 0 descriptor??
[  501.411472][T16362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  501.978881][T16373] netlink: 'syz.0.4328': attribute type 23 has an invalid length.
[  501.982295][T16373] netlink: 'syz.0.4328': attribute type 21 has an invalid length.
[  501.985471][T16373] IPv6: NLM_F_CREATE should be specified when creating new route
[  502.034346][ T5605] usb 4-1: USB disconnect, device number 12
[  502.616208][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  502.621082][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  502.626103][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  502.742734][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.754182][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 1038 - 0
[  503.002474][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4335'.
[  503.014140][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4335'.
[  503.040940][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.050626][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 1038 - 0
[  503.201672][T16395] GUP no longer grows the stack in syz.4.4339 (16395): 200000005000-200000008000 (200000004000)
[  503.215655][T16395] CPU: 1 UID: 0 PID: 16395 Comm: syz.4.4339 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  503.215684][T16395] Tainted: [L]=SOFTLOCKUP
[  503.215690][T16395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  503.215701][T16395] Call Trace:
[  503.215707][T16395]  <TASK>
[  503.215714][T16395]  dump_stack_lvl+0xe8/0x150
[  503.215743][T16395]  fixup_user_fault+0x637/0x6f0
[  503.215773][T16395]  fault_in_user_writeable+0x71/0xd0
[  503.215797][T16395]  futex_lock_pi+0x7ba/0xab0
[  503.215812][T16395]  ? futex_unqueue+0x211/0x240
[  503.215839][T16395]  ? __pfx_futex_lock_pi+0x10/0x10
[  503.215875][T16395]  ? __pfx_futex_wake_mark+0x10/0x10
[  503.215901][T16395]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  503.215922][T16395]  do_futex+0x330/0x4e0
[  503.215979][T16395]  ? __pfx_do_futex+0x10/0x10
[  503.215999][T16395]  ? __vm_munmap+0x2fe/0x3e0
[  503.216016][T16395]  __se_sys_futex+0x3a8/0x450
[  503.216041][T16395]  ? __pfx___se_sys_futex+0x10/0x10
[  503.216060][T16395]  ? rcu_is_watching+0x15/0xb0
[  503.216097][T16395]  ? __x64_sys_futex+0x21/0xf0
[  503.216117][T16395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.216135][T16395]  do_syscall_64+0x174/0x580
[  503.216152][T16395]  ? trace_irq_disable+0x3b/0x140
[  503.216175][T16395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.216193][T16395] RIP: 0033:0x7ffaef39e0d9
[  503.216208][T16395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.216221][T16395] RSP: 002b:00007ffaf01a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  503.216239][T16395] RAX: ffffffffffffffda RBX: 00007ffaef625fa0 RCX: 00007ffaef39e0d9
[  503.216250][T16395] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000
[  503.216260][T16395] RBP: 00007ffaef435024 R08: 0000000000000000 R09: 0000000000000000
[  503.216269][T16395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  503.216278][T16395] R13: 00007ffaef626038 R14: 00007ffaef625fa0 R15: 00007ffd39600298
[  503.216302][T16395]  </TASK>
[  503.390724][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.426861][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 1038 - 0
[  503.728997][T16397] loop3: detected capacity change from 0 to 32768
[  503.871377][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.875698][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 1038 - 0
[  503.922986][T16397] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  503.996475][T16397] XFS (loop3): Ending clean mount
[  504.153745][T13677] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  504.628669][T16422] netlink: Conntrack attr has 4 unknown bytes
[  504.631768][T16422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.675199][   T12] bridge_slave_1: left allmulticast mode
[  504.706207][   T12] bridge_slave_1: left promiscuous mode
[  504.714296][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.743324][   T12] x9: left allmulticast mode
[  504.745325][   T12] x9: left promiscuous mode
[  504.750612][   T12] bridge0: port 1(1x9) entered disabled state
[  504.904260][   T12] pim6reg9: left allmulticast mode
[  505.489097][T16441] loop4: detected capacity change from 0 to 32768
[  505.493246][T16441] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4353 (16441)
[  505.503197][T16441] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  505.507615][T16441] BTRFS info (device loop4): using crc32c checksum algorithm
[  505.510594][T16441] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  505.749814][T16441] BTRFS info (device loop4): rebuilding free space tree
[  505.810723][T16441] BTRFS info (device loop4): disabling free space tree
[  505.812943][T16441] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  505.815836][T16441] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  505.822446][T16441] BTRFS info (device loop4): enabling ssd optimizations
[  505.825056][T16441] BTRFS info (device loop4): turning on async discard
[  505.828381][T16441] BTRFS info (device loop4): enabling disk space caching
[  505.831133][T16441] BTRFS info (device loop4): force clearing of disk cache
[  505.834050][T16441] BTRFS info (device loop4): use zstd compression, level 3
[  505.877784][T16465] input: syz0 as /devices/virtual/input/input15
[  506.177453][T16470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4359'.
[  506.381444][T14223] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  506.511406][   T12] bond0 (unregistering): Released all slaves
[  506.634175][   T12] bond1 (unregistering): Released all slaves
[  506.717982][T16470] bond0: entered promiscuous mode
[  506.721864][T16470] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  506.804251][T16470] bond0: left promiscuous mode
[  506.805867][T16470] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  506.853977][   T12] tipc: Left network mode
[  507.083931][ T5658] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  507.112397][ T5658] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  507.342363][ T5343] 8021q: adding VLAN 0 to HW filter on device eth1
[  507.781176][T16520] loop4: detected capacity change from 0 to 256
[  507.862894][ T5343] 8021q: adding VLAN 0 to HW filter on device eth2
[  508.319478][ T5343] 8021q: adding VLAN 0 to HW filter on device eth3
[  508.463716][T14414] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  508.469651][   T12] hsr_slave_0: left promiscuous mode
[  508.500095][   T12] hsr_slave_1: left promiscuous mode
[  508.506481][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.520914][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.670158][T14414] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.674227][T14414] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  508.690841][T14414] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  508.697670][T14414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.705427][T14414] usb 4-1: Product: syz
[  508.708960][T14414] usb 4-1: Manufacturer: syz
[  508.712950][T14414] usb 4-1: SerialNumber: syz
[  508.756046][T14414] usb 4-1: config 0 descriptor??
[  508.819845][T16539] loop4: detected capacity change from 0 to 32768
[  508.828021][T16539] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4380 (16539)
[  508.860333][T16539] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  508.867962][T16539] BTRFS info (device loop4): using blake2b checksum algorithm
[  508.909004][T16539] BTRFS info (device loop4): enabling ssd optimizations
[  508.912015][T16539] BTRFS info (device loop4): turning on async discard
[  508.914767][T16539] BTRFS info (device loop4): enabling free space tree
[  509.374133][T14223] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  509.470850][ T5343] 8021q: adding VLAN 0 to HW filter on device eth4
[  509.998434][   T12] IPVS: stop unused estimator thread 0...
[  510.064542][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4389'.
[  510.102648][T16589] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4389'.
[  510.321917][T16593] loop4: detected capacity change from 0 to 4096
[  510.416140][T16593] Cannot load nls macromanian˃O0x0000000000000000
[  510.782878][T16609] syz_tun: entered allmulticast mode
[  510.851720][T16608] syz_tun: left allmulticast mode
[  511.167217][ T5658] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  511.233604][   T24] usb 4-1: USB disconnect, device number 13
[  511.331691][ T5658] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  511.349559][ T5658] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  511.371660][ T5658] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  511.395985][ T5658] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  511.414541][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.440352][ T5658] usb 5-1: Product: syz
[  511.453657][ T5658] usb 5-1: Manufacturer: syz
[  511.461211][ T5658] usb 5-1: SerialNumber: syz
[  511.706524][ T5658] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -90
[  511.729233][ T5658] usb 5-1: USB disconnect, device number 15
[  511.864179][T16623] bond1: option arp_all_targets: invalid value (2097152)
[  511.869277][T16623] bond1 (unregistering): Released all slaves
[  512.204629][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4408'.
[  512.210373][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4408'.
[  512.450795][T16648] loop3: detected capacity change from 0 to 256
[  512.657602][T14414] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  512.784695][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4418'.
[  512.812038][T14414] usb 5-1: Using ep0 maxpacket: 32
[  512.820619][T14414] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  512.824779][T14414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.847858][T14414] usb 5-1: config 0 descriptor??
[  513.090442][T14414] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  513.134945][T14414] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  513.143570][T14414] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  513.146299][T14414] usb 5-1: media controller created
[  513.155337][T14414] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  513.315486][T16663] netlink: 'syz.3.4420': attribute type 10 has an invalid length.
[  513.394636][T16663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.401412][T16663] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  513.927678][T16683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4429'.
[  514.033637][T16687] openvswitch: netlink: Flow key attribute not present in set flow.
[  514.089240][T16689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4432'.
[  514.277305][T14414] stb0899_attach: Driver disabled by Kconfig
[  514.279713][T14414] az6027: no front-end attached
[  514.279713][T14414] 
[  514.348210][T14414] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  514.353224][T14414] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16
[  514.358269][T14414] dvb-usb: schedule remote query interval to 400 msecs.
[  514.361089][T14414] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  514.436746][T16699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4437'.
[  514.440968][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  514.562060][ T5658] usb 5-1: USB disconnect, device number 16
[  514.602353][   T24] usb 4-1: Using ep0 maxpacket: 32
[  514.606170][   T24] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  514.611992][   T24] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  514.618334][   T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  514.630583][   T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  514.640107][   T24] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  514.670092][   T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  514.673152][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.682004][   T24] usb 4-1: Product: syz
[  514.687658][   T24] usb 4-1: Manufacturer: syz
[  514.699906][   T24] usb 4-1: SerialNumber: syz
[  514.729080][   T24] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  514.736208][ T5658] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  514.739158][   T24] imon 4-1:155.0: unable to initialize intf0, err -90
[  514.741793][   T24] imon:imon_probe: failed to initialize context!
[  514.746415][   T24] imon 4-1:155.0: unable to register, err -19
[  514.918192][ T5599] Bluetooth: hci3: command 0x0406 tx timeout
[  514.928784][T14414] usb 4-1: USB disconnect, device number 14
[  515.424443][T16752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4463'.
[  515.519151][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4465'.
[  515.529791][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4465'.
[  515.541239][T16760] loop4: detected capacity change from 0 to 1024
[  515.579857][T16760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.616171][ T6933] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  515.642403][ T6933] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  515.646336][ T6933] EXT4-fs (loop4): This should not happen!! Data will be lost
[  515.646336][ T6933] 
[  515.649327][ T6933] EXT4-fs (loop4): Total free blocks count 0
[  515.651365][ T6933] EXT4-fs (loop4): Free/Dirty block details
[  515.656448][ T6933] EXT4-fs (loop4): free_blocks=68451041280
[  515.660579][ T6933] EXT4-fs (loop4): dirty_blocks=16
[  515.662368][ T6933] EXT4-fs (loop4): Block reservation details
[  515.664644][ T6933] EXT4-fs (loop4): i_reserved_data_blocks=1
[  515.668652][T14223] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  515.673395][T14223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.074695][T16779] loop4: detected capacity change from 0 to 32768
[  516.102111][T16779] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  516.274693][T14223] ocfs2: Unmounting device (7,4) on (node local)
[  516.740048][T16802] loop4: detected capacity change from 0 to 256
[  516.762636][T16802] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  516.822479][T16802] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  516.999465][T16800] loop3: detected capacity change from 0 to 32768
[  517.066795][T16800] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  517.103859][T16800] XFS (loop3): Ending clean mount
[  517.150058][T13677] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  517.327089][T16819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.396260][T16819] wlan1: AP is in CSA process, reject assoc
[  517.760268][T16835] loop3: detected capacity change from 0 to 2048
[  517.844699][T16835] loop3: detected capacity change from 0 to 4096
[  517.860213][T16835] ntfs3(loop3): Failed to load $Extend (-22).
[  517.862811][T16835] ntfs3(loop3): Failed to initialize $Extend.
[  517.924401][   T34] audit: type=1804 audit(517.292:140): pid=16835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4493" name="/newroot/415/file1/bus/file1" dev="loop3" ino=34 res=1 errno=0
[  518.020938][T16839] loop3: detected capacity change from 0 to 256
[  518.023708][T16839] exfat: Deprecated parameter 'namecase'
[  518.026175][T16839] exfat: Deprecated parameter 'namecase'
[  518.033814][T16839] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d)
[  518.145040][T16844] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  518.163308][T16845] loop4: detected capacity change from 0 to 2048
[  518.166273][T16845] EXT4-fs: Ignoring removed mblk_io_submit option
[  518.184944][T16845] EXT4-fs: Ignoring removed i_version option
[  518.223943][T16845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.258802][T14223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.441119][T16856] loop4: detected capacity change from 0 to 2048
[  518.457278][   T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  518.553207][T16856] loop4: detected capacity change from 0 to 4096
[  518.574114][T16856] ntfs3(loop4): Failed to load $Extend (-22).
[  518.576553][T16856] ntfs3(loop4): Failed to initialize $Extend.
[  518.613330][   T24] usb 4-1: config 0 has an invalid interface number: 229 but max is 0
[  518.616716][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  518.621533][   T34] audit: type=1804 audit(517.982:141): pid=16856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4502" name="/newroot/288/file1/bus/file1" dev="loop4" ino=34 res=1 errno=0
[  518.630997][   T24] usb 4-1: config 0 has no interface number 0
[  518.633699][   T24] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  518.638638][   T24] usb 4-1: config 0 interface 229 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  518.644600][   T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49
[  518.649723][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.662021][   T24] usb 4-1: config 0 descriptor??
[  518.873991][   T24] peak_usb 4-1:0.229 can0: unable to request usb[type=0 value=1] err=-71
[  518.881494][   T24] peak_usb 4-1:0.229: unable to read PCAN-Chip USB firmware info (err -71)
[  519.001767][   T24] peak_usb 4-1:0.229: probe with driver peak_usb failed with error -71
[  519.016779][   T24] usb 4-1: USB disconnect, device number 15
[  519.444666][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4505'.
[  521.856549][T16935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4527'.
[  522.011407][T16910] loop4: detected capacity change from 0 to 32768
[  522.037288][T16910] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  522.099706][T16910] XFS (loop4): Ending clean mount
[  522.365289][T14223] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  522.894734][T16996] loop3: detected capacity change from 0 to 128
[  522.908340][T16996] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  522.915630][T16996] hpfs: filesystem error: improperly stopped
[  522.919781][T16996] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  522.922492][T16996] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  522.925706][T16996] hpfs: filesystem error: dir band size mismatch: dir_band_start==00000012, dir_band_end==7b318cc3, n_dir_band==00000002
[  523.438564][T16995] loop4: detected capacity change from 0 to 131072
[  523.445729][T16995] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24)
[  523.448589][T16995] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  523.451401][T16995] F2FS-fs (loop4): Test dummy encryption mode enabled
[  523.455103][T16995] F2FS-fs (loop4): invalid crc value
[  523.510226][T16995] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  523.520160][T16995] loop4: lost filesystem error report for type 5 error -117
[  523.525648][T16995] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  523.539677][T16995] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  523.542673][T16995] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  523.546822][T16995] F2FS-fs (loop4): Start checkpoint disabled!
[  523.562257][T16995] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  523.568938][T16995] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  523.571668][T16995] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  523.603470][T16995] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  524.052358][T17012] netlink: 'syz.3.4555': attribute type 1 has an invalid length.
[  524.060789][T17012] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4555'.
[  524.161153][T17016] netlink: 'syz.3.4557': attribute type 11 has an invalid length.
[  524.634501][T17033] loop3: detected capacity change from 0 to 256
[  525.234899][T17058] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  525.492543][T17071] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4582'.
[  525.571302][T17071] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  525.585459][T17071] bond0 (unregistering): Released all slaves
[  526.675898][T17117] loop3: detected capacity change from 0 to 32768
[  526.681949][T17117] jfs: Unexpected value for 'integrity'
[  526.851474][T17131] kAFS: Can only specify source 'none' with -o dyn
[  527.451553][ T5658] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  527.603769][ T5658] usb 5-1: Using ep0 maxpacket: 8
[  527.615815][ T5658] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  527.622279][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.626865][ T5658] usb 5-1: Product: syz
[  527.628622][ T5658] usb 5-1: Manufacturer: syz
[  527.630494][ T5658] usb 5-1: SerialNumber: syz
[  527.641477][ T5658] usb 5-1: config 0 descriptor??
[  527.832109][T17169] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  527.864238][ T5658] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  528.168335][T17188] loop3: detected capacity change from 0 to 2048
[  528.197427][T17188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.223561][T17188] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #2: comm syz.3.4637: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  528.252079][T17188] EXT4-fs (loop3): Remounting filesystem read-only
[  528.293223][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.483577][ T5658] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  528.492750][ T5658] usb 5-1: USB disconnect, device number 17
[  529.033885][T17215] loop4: detected capacity change from 0 to 512
[  529.040470][T17215] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  529.316024][   T34] audit: type=1326 audit(1296.669:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17205 comm="syz.0.4645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7fc00000
[  529.420393][T17227] loop3: detected capacity change from 0 to 512
[  529.424403][T17227] EXT4-fs: Ignoring removed oldalloc option
[  529.441641][T17227] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.4652: Parent and EA inode have the same ino 15
[  529.446738][T17227] loop3: lost filesystem error report for type 5 error -117
[  529.452841][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  529.458700][    C1] EXT4-fs (loop3): initial error at time 1296: ext4_xattr_inode_iget:437
[  529.462496][    C1] EXT4-fs (loop3): last error at time 1296: ext4_xattr_inode_iget:437
[  529.466706][T17227] EXT4-fs (loop3): Remounting filesystem read-only
[  529.469532][T17227] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30)
[  529.473220][T17227] EXT4-fs (loop3): 1 orphan inode deleted
[  529.476890][T17227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.518056][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.841700][ T5658] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  529.992384][ T5658] usb 4-1: Using ep0 maxpacket: 16
[  529.997112][ T5658] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  530.001158][ T5658] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  530.006466][ T5658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  530.010950][ T5658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  530.018721][ T5658] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  530.023406][ T5658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.026781][ T5658] usb 4-1: Product: syz
[  530.028594][ T5658] usb 4-1: Manufacturer: syz
[  530.030556][ T5658] usb 4-1: SerialNumber: syz
[  530.035447][ T5658] usb 4-1: config 0 descriptor??
[  530.119985][T17248] loop4: detected capacity change from 0 to 512
[  530.130401][T17248] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.4661: iget: bad i_size value: 38620345925642
[  530.141364][T17248] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  530.142353][T17248] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4661: couldn't read orphan inode 15 (err -117)
[  530.146148][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  530.146165][    C1] EXT4-fs (loop4): initial error at time 1297: ext4_orphan_get:1399: inode 15
[  530.146184][    C1] EXT4-fs (loop4): last error at time 1297: ext4_orphan_get:1399: inode 15
[  530.161728][T17248] loop4: lost filesystem error report for type 5 error -117
[  530.164872][T17248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  530.181913][   T34] audit: type=1800 audit(1297.535:143): pid=17248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4661" name="file1" dev="loop4" ino=18 res=0 errno=0
[  530.222002][T14223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.292596][ T5658] appledisplay 4-1:0.0: Error while getting initial brightness: -71
[  530.315058][ T5658] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71
[  530.325878][ T5658] usb 4-1: USB disconnect, device number 16
[  530.348390][T17251] loop4: detected capacity change from 0 to 512
[  530.354625][T17251] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  530.604833][   T33] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  530.768829][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.781851][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.786770][   T33] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  530.798485][   T33] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  530.807770][   T33] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  530.817281][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.824036][   T33] usb 5-1: Product: syz
[  530.826248][   T33] usb 5-1: Manufacturer: syz
[  530.828226][   T33] usb 5-1: SerialNumber: syz
[  531.345769][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4666'.
[  531.351414][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4666'.
[  531.950041][   T33] cdc_ncm 5-1:1.0: bind() failure
[  531.957645][   T33] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  531.971573][   T33] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  531.982523][   T33] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  531.993404][   T33] usb 5-1: USB disconnect, device number 18
[  532.130554][T17271] loop3: detected capacity change from 0 to 32768
[  532.147485][T17271] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4670 (17271)
[  532.158664][T17271] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  532.164685][T17271] BTRFS info (device loop3): using blake2b checksum algorithm
[  532.223219][T17271] BTRFS info (device loop3): enabling ssd optimizations
[  532.225505][T17271] BTRFS info (device loop3): turning on async discard
[  532.227693][T17271] BTRFS info (device loop3): enabling free space tree
[  532.229901][T17271] BTRFS info (device loop3): use zstd compression, level 3
[  532.304756][T17287] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  532.697699][T13677] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  532.699546][T17299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.214406][T17322] loop4: detected capacity change from 0 to 1024
[  533.257976][T17322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  533.265967][T17322] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4686'.
[  533.302031][T14223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  533.359023][  T803] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  533.509767][  T803] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  533.512722][  T803] usb 4-1: config 1 has no interface number 0
[  533.514676][  T803] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  533.518624][  T803] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  533.522314][  T803] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7
[  533.529493][  T803] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[  533.532524][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.537362][  T803] usb 4-1: Product: syz
[  533.538701][  T803] usb 4-1: Manufacturer: syz
[  533.542763][  T803] usb 4-1: SerialNumber: syz
[  533.842232][  T803] usb 4-1: USB disconnect, device number 17
[  534.729675][T17375] loop4: detected capacity change from 0 to 16
[  534.746070][T17375] erofs (device loop4): mounted with root inode @ nid 36.
[  535.094778][T17388] loop4: detected capacity change from 0 to 32768
[  535.112609][T17388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4716 (17388)
[  535.129432][T17388] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  535.132851][T17388] BTRFS info (device loop4): using sha256 checksum algorithm
[  535.192037][T13114] BTRFS warning (device loop4): checksum verify failed on logical 5267456 mirror 1 wanted 0x335d39565c71738882e9c778b97d855737807c3b4cc2d9fb107991a100dbef3e found 0x33d1b63988449adf39de86eb185b14ef66d954d48fb91e8b30431bcf6be7e8ff level 0
[  535.229454][T17388] BTRFS error (device loop4): failed to read fs tree: -5
[  535.601858][T17388] BTRFS error (device loop4): open_ctree failed: -5
[  535.717462][  T803] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  535.931457][  T803] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  535.934208][  T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  535.941298][  T803] usb 4-1: config 0 has no interface number 0
[  535.982950][  T803] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  535.985835][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.988928][  T803] usb 4-1: Product: syz
[  535.990653][  T803] usb 4-1: Manufacturer: syz
[  535.992274][  T803] usb 4-1: SerialNumber: syz
[  536.001520][  T803] usb 4-1: config 0 descriptor??
[  536.004784][  T803] hub 4-1:0.31: bad descriptor, ignoring hub
[  536.006989][  T803] hub 4-1:0.31: probe with driver hub failed with error -5
[  536.011576][  T803] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  536.014041][  T803] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized!
[  536.062088][  T803] uvcvideo 4-1:0.31: Failed to create links for entity 32774
[  536.074312][  T803] uvcvideo 4-1:0.31: Failed to register entities (-22).
[  536.435663][T17426] loop4: detected capacity change from 0 to 2048
[  536.482786][T17427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  536.595256][T17427] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  536.600355][T17427] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  536.634114][T17427] Remounting filesystem read-only
[  536.642133][T14223] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  536.756594][T17418] xt_CT: You must specify a L4 protocol and not use inversions on it
[  537.020665][  T803] usb 4-1: USB disconnect, device number 18
[  537.225119][T17441] loop3: detected capacity change from 0 to 4096
[  537.246894][T17441] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  537.284743][T17441] ntfs3(loop3): mft corrupted
[  537.286845][T17441] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  537.291172][T17441] ntfs3(loop3): Failed to load $Bitmap (-22).
[  537.707385][   T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  537.768209][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'.
[  537.857171][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  537.863882][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.870481][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  537.876383][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.887122][   T24] usb 4-1: config 0 descriptor??
[  538.309032][   T24] isku 0003:1E7D:319C.000F: item fetching failed at offset 3/7
[  538.322164][   T24] isku 0003:1E7D:319C.000F: parse failed
[  538.328456][   T24] isku 0003:1E7D:319C.000F: probe with driver isku failed with error -22
[  538.496561][   T34] audit: type=1800 audit(1305.811:144): pid=17514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4765" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  538.509761][T14414] usb 4-1: USB disconnect, device number 19
[  538.715673][T17516] Process accounting resumed
[  539.258878][T17535] CIFS mount error: No usable UNC path provided in device string!
[  539.258878][T17535] 
[  539.265616][T17535] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  539.273331][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'.
[  539.276925][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'.
[  539.421125][T17545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4779'.
[  539.526819][T17553] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  539.610853][T14225] Bluetooth: hci3: unexpected event for opcode 0x204e
[  539.657389][T17561] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4787'.
[  539.663446][T17561] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4787'.
[  539.977646][   T34] audit: type=1326 audit(1307.295:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  539.992555][   T34] audit: type=1326 audit(1307.295:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.017725][   T34] audit: type=1326 audit(1307.295:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.032217][   T34] audit: type=1326 audit(1307.295:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.045242][   T34] audit: type=1326 audit(1307.295:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.052752][   T34] audit: type=1326 audit(1307.295:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.064976][   T34] audit: type=1326 audit(1307.295:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.073083][   T34] audit: type=1326 audit(1307.295:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.081037][   T34] audit: type=1326 audit(1307.295:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17577 comm="syz.3.4795" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3ae199e0d9 code=0x7ffc0000
[  540.109838][T17584] loop3: detected capacity change from 0 to 2048
[  540.141261][T17584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  540.189322][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.529475][T17589] syz.3.4799 (17589): drop_caches: 2
[  540.754217][T17602] IPv6: NLM_F_CREATE should be specified when creating new route
[  540.948007][   T24] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  541.068247][   T33] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  541.100728][   T24] usb 5-1: config 0 has no interfaces?
[  541.105563][   T24] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  541.110062][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.113466][   T24] usb 5-1: Product: syz
[  541.115223][   T24] usb 5-1: Manufacturer: syz
[  541.117153][   T24] usb 5-1: SerialNumber: syz
[  541.123436][   T24] usb 5-1: config 0 descriptor??
[  541.218814][   T33] usb 4-1: Using ep0 maxpacket: 16
[  541.223109][   T33] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  541.229481][   T33] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  541.233418][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.236709][   T33] usb 4-1: Product: syz
[  541.238525][   T33] usb 4-1: Manufacturer: syz
[  541.240509][   T33] usb 4-1: SerialNumber: syz
[  541.256801][   T33] r8152-cfgselector 4-1: Unknown version 0x0000
[  541.268009][   T33] r8152-cfgselector 4-1: config 0 descriptor??
[  541.340858][T14414] usb 5-1: USB disconnect, device number 19
[  541.635467][T17614] bridge0: port 1(syz_tun) entered disabled state
[  541.667334][T17614] syz_tun (unregistering): left allmulticast mode
[  541.669892][T17614] syz_tun (unregistering): left promiscuous mode
[  541.672690][T17614] bridge0: port 1(syz_tun) entered disabled state
[  541.697867][ T5658] r8152-cfgselector 4-1: USB disconnect, device number 20
[  542.135087][T17635] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  542.419789][T17651] loop4: detected capacity change from 0 to 8
[  542.431845][T17650] loop3: detected capacity change from 0 to 128
[  542.442385][T17651] SQUASHFS error: Failed to read block 0x260685: -5
[  542.457488][T17651] SQUASHFS error: Unable to read metadata cache entry [260685]
[  542.465164][T17651] SQUASHFS error: Unable to read directory block [260685:0]
[  542.797140][T17659] fuse: fd is not a fuse device
[  542.817489][T17655] loop4: detected capacity change from 0 to 32768
[  542.820546][T17655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4829 (17655)
[  542.835717][T17655] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  542.839093][T17655] BTRFS info (device loop4): using sha256 checksum algorithm
[  542.891292][T17654] loop3: detected capacity change from 0 to 40427
[  542.901572][T17654] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  542.910174][T17654] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  542.928659][T17655] BTRFS info (device loop4): enabling ssd optimizations
[  542.936152][T17655] BTRFS info (device loop4): turning on async discard
[  542.950061][T17655] BTRFS info (device loop4): enabling free space tree
[  543.041366][T14223] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  543.042615][T17654] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  543.077564][T17654] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  543.080090][T17654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  543.998742][T17694] bond0: Removing last arp target with arp_interval on
[  544.011924][T17694] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.226133][T17709] loop3: detected capacity change from 0 to 24
[  544.238953][T17709] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  544.308021][T17709] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  544.719159][T17730] 9p: Unknown uid 00000000004294967295
[  545.039826][T17748] loop4: detected capacity change from 0 to 4096
[  545.059842][T17748] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  545.085960][T17748] ntfs3(loop4): ino=19, mi_enum_attr
[  545.090734][T17748] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  545.101780][T17748] ntfs3(loop4): ino=18, mi_enum_attr
[  545.106882][T17748] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  545.249000][T17765] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4868'.
[  545.293112][T17767] loop4: detected capacity change from 0 to 128
[  545.306277][T17767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  545.310790][T17767] System zones: 1-3, 19-19, 35-36
[  545.316148][T17767] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  545.344025][T14223] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  545.419785][T17772] loop4: detected capacity change from 0 to 1764
[  545.490238][T17772] iso9660: Corrupted directory entry in block 2 of inode 1920
[  545.876509][T17788] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4879'.
[  545.879267][T17786] netlink: 'syz.4.4877': attribute type 11 has an invalid length.
[  546.229125][   T33] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  546.379300][   T33] usb 5-1: Using ep0 maxpacket: 16
[  546.383395][   T33] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  546.388070][   T33] usb 5-1: config 0 has no interface number 0
[  546.397754][   T33] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  546.402467][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.405844][   T33] usb 5-1: Product: syz
[  546.407608][   T33] usb 5-1: Manufacturer: syz
[  546.412009][   T33] usb 5-1: SerialNumber: syz
[  546.423956][   T33] usb 5-1: config 0 descriptor??
[  546.433589][   T33] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  546.939685][T17828] tipc: Failed to remove unknown binding: 66,0,0/0:3290767163/3290767165
[  546.948683][T17828] tipc: Failed to remove unknown binding: 66,0,0/0:3290767163/3290767164
[  546.953698][T17828] tipc: Failed to remove unknown binding: 66,0,0/0:3290767163/3290767165
[  546.963247][T17828] tipc: Failed to remove unknown binding: 66,0,0/0:3290767163/3290767164
[  547.026232][T17830] qrtr: Invalid version 0
[  547.239793][   T33] gspca_spca1528: reg_w err -71
[  547.263871][   T33] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  547.274869][   T33] usb 5-1: USB disconnect, device number 20
[  547.656387][T17851] ip_tables: iptables: counters copy to user failed while replacing table
[  548.250539][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4921'.
[  548.255871][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4921'.
[  548.264161][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4921'.
[  548.889226][T17901] loop3: detected capacity change from 0 to 4096
[  548.919698][T17902] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  549.283941][T17926] loop3: detected capacity change from 0 to 1024
[  549.350473][ T5658] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  549.485209][T17932] loop3: detected capacity change from 0 to 4096
[  549.494749][T17932] EXT4-fs: Ignoring removed mblk_io_submit option
[  549.502311][ T5658] usb 5-1: Using ep0 maxpacket: 32
[  549.508781][ T5658] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  549.509604][T17932] EXT4-fs (loop3): Invalid log block size: 458754
[  549.513359][ T5658] usb 5-1: config 0 has no interface number 0
[  549.519788][ T5658] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  549.524883][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.528456][ T5658] usb 5-1: Product: syz
[  549.530353][ T5658] usb 5-1: Manufacturer: syz
[  549.533942][ T5658] usb 5-1: SerialNumber: syz
[  549.543802][ T5658] usb 5-1: config 0 descriptor??
[  549.556349][ T5658] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  549.566054][ T5658] usb 5-1: selecting invalid altsetting 1
[  549.569000][ T5658] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  549.603641][ T5658] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  549.611921][ T5658] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  549.618987][ T5658] usb 5-1: media controller created
[  549.640599][ T5658] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  549.771451][ T5658] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  549.778095][ T5658] zl10353_read_register: readreg error (reg=127, ret==-71)
[  549.786593][ T5658] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  549.848319][ T5658] usb 5-1: USB disconnect, device number 21
[  550.037426][T17938] loop3: detected capacity change from 0 to 32768
[  550.048104][T17938] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4949 (17938)
[  550.077017][T17938] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  550.084844][T17938] BTRFS info (device loop3): using sha256 checksum algorithm
[  550.205293][T17938] BTRFS info (device loop3): enabling ssd optimizations
[  550.209283][T17938] BTRFS info (device loop3): turning on async discard
[  550.214730][T17938] BTRFS info (device loop3): enabling free space tree
[  550.307634][T13677] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  550.787956][T17969] bond4: entered promiscuous mode
[  550.789930][T17969] bond4: entered allmulticast mode
[  550.792170][T17969] 8021q: adding VLAN 0 to HW filter on device bond4
[  551.061198][T14225] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  551.677047][   T34] audit: type=1326 audit(1318.949:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17991 comm="syz.4.4965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  551.695148][   T34] audit: type=1326 audit(1318.959:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17991 comm="syz.4.4965" exe="/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  551.709398][   T34] audit: type=1326 audit(1318.959:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17991 comm="syz.4.4965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  551.725081][   T34] audit: type=1326 audit(1318.959:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17991 comm="syz.4.4965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  551.732524][T17987] loop3: detected capacity change from 0 to 32768
[  551.737477][T17987] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4962 (17987)
[  551.774106][T17987] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  551.777323][T17987] BTRFS info (device loop3): using sha256 checksum algorithm
[  551.851857][T17987] BTRFS info (device loop3): enabling ssd optimizations
[  551.854606][T17987] BTRFS info (device loop3): turning on async discard
[  551.861843][T17987] BTRFS info (device loop3): enabling free space tree
[  551.920593][T13677] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  552.046704][T18017] loop4: detected capacity change from 0 to 256
[  552.104660][T18017] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  552.121154][T18017] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  552.679099][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4978'.
[  553.241046][T18048] loop3: detected capacity change from 0 to 40427
[  553.250414][T18048] F2FS-fs: heap/no_heap options were deprecated
[  553.283522][T18048] F2FS-fs (loop3): build fault injection rate: 19
[  553.289575][T18048] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  553.296378][T18048] F2FS-fs (loop3): invalid crc value
[  553.305608][T18074] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  553.313792][T18048] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  553.365274][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4997'.
[  553.377677][T18079] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4997'.
[  553.380877][T18048] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  553.409104][T18048] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  553.434312][T18048] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  553.460656][T18048] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  553.475201][T18048] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  553.481255][T18048] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xdc0
[  553.496331][T18085] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  553.502290][T18048] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  553.516774][T18048] F2FS-fs (loop3): inject truncate fail in f2fs_truncate of f2fs_evict_inode+0xaa3/0x1b80
[  553.542092][T18048] F2FS-fs (loop3): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0
[  553.546235][T18048] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  553.579217][T18087] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5000'.
[  553.636042][    C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_bio of blk_update_request+0x57b/0xe50
[  553.640665][    C1] CPU: 1 UID: 0 PID: 13124 Comm: kworker/u10:42 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.640694][    C1] Tainted: [L]=SOFTLOCKUP
[  553.640699][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.640710][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  553.640738][    C1] Call Trace:
[  553.640744][    C1]  <IRQ>
[  553.640752][    C1]  dump_stack_lvl+0xe8/0x150
[  553.640775][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.640796][    C1]  f2fs_write_end_io+0x124b/0x1710
[  553.640862][    C1]  blk_update_request+0x57b/0xe50
[  553.640890][    C1]  blk_mq_end_request+0x3e/0x70
[  553.640906][    C1]  blk_done_softirq+0x10a/0x160
[  553.640943][    C1]  handle_softirqs+0x225/0x840
[  553.640964][    C1]  ? do_softirq+0x76/0xd0
[  553.640982][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.640995][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.641008][    C1]  do_softirq+0x76/0xd0
[  553.641022][    C1]  </IRQ>
[  553.641027][    C1]  <TASK>
[  553.641032][    C1]  __local_bh_enable_ip+0xf8/0x130
[  553.641048][    C1]  __alloc_skb+0x1ad/0x7a0
[  553.641065][    C1]  nsim_dev_trap_report_work+0x25f/0xb40
[  553.641094][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  553.641109][    C1]  process_scheduled_works+0xa8e/0x14e0
[  553.641146][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  553.641166][    C1]  ? assign_work+0x3cf/0x5d0
[  553.641185][    C1]  worker_thread+0xa47/0xfb0
[  553.641209][    C1]  ? __kthread_parkme+0x71/0x1f0
[  553.641234][    C1]  kthread+0x388/0x470
[  553.641252][    C1]  ? __pfx_worker_thread+0x10/0x10
[  553.641266][    C1]  ? __pfx_kthread+0x10/0x10
[  553.641284][    C1]  ret_from_fork+0x514/0xb70
[  553.641313][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  553.641331][    C1]  ? __switch_to+0xc89/0x1420
[  553.641350][    C1]  ? __pfx_kthread+0x10/0x10
[  553.641369][    C1]  ret_from_fork_asm+0x1a/0x30
[  553.641401][    C1]  </TASK>
[  553.641469][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  553.685981][T13677] syz-executor: attempt to access beyond end of device
[  553.685981][T13677] loop3: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  553.686289][    C1] CPU: 1 UID: 0 PID: 13124 Comm: kworker/u10:42 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.686311][    C1] Tainted: [L]=SOFTLOCKUP
[  553.686316][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.686327][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  553.686348][    C1] Call Trace:
[  553.686354][    C1]  <IRQ>
[  553.686359][    C1]  dump_stack_lvl+0xe8/0x150
[  553.686377][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.686397][    C1]  f2fs_write_end_io+0x124b/0x1710
[  553.686425][    C1]  blk_update_request+0x57b/0xe50
[  553.686447][    C1]  blk_mq_end_request+0x3e/0x70
[  553.686484][    C1]  blk_done_softirq+0x10a/0x160
[  553.686500][    C1]  handle_softirqs+0x225/0x840
[  553.686519][    C1]  ? do_softirq+0x76/0xd0
[  553.686542][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.686556][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.686568][    C1]  do_softirq+0x76/0xd0
[  553.686582][    C1]  </IRQ>
[  553.686588][    C1]  <TASK>
[  553.686593][    C1]  __local_bh_enable_ip+0xf8/0x130
[  553.686606][    C1]  __alloc_skb+0x1ad/0x7a0
[  553.686622][    C1]  nsim_dev_trap_report_work+0x25f/0xb40
[  553.686650][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  553.686666][    C1]  process_scheduled_works+0xa8e/0x14e0
[  553.686701][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  553.686720][    C1]  ? assign_work+0x3cf/0x5d0
[  553.686740][    C1]  worker_thread+0xa47/0xfb0
[  553.686764][    C1]  ? __kthread_parkme+0x71/0x1f0
[  553.686787][    C1]  kthread+0x388/0x470
[  553.686833][    C1]  ? __pfx_worker_thread+0x10/0x10
[  553.686847][    C1]  ? __pfx_kthread+0x10/0x10
[  553.686865][    C1]  ret_from_fork+0x514/0xb70
[  553.686887][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  553.686904][    C1]  ? __switch_to+0xc89/0x1420
[  553.686924][    C1]  ? __pfx_kthread+0x10/0x10
[  553.686942][    C1]  ret_from_fork_asm+0x1a/0x30
[  553.686973][    C1]  </TASK>
[  553.687054][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  553.690383][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.690406][T13677] Tainted: [L]=SOFTLOCKUP
[  553.690411][T13677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.690420][T13677] Call Trace:
[  553.690427][T13677]  <TASK>
[  553.690433][T13677]  dump_stack_lvl+0xe8/0x150
[  553.690459][T13677]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.690482][T13677]  f2fs_write_end_io+0x124b/0x1710
[  553.690517][T13677]  __submit_merged_bio+0x258/0x6a0
[  553.690534][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.690559][T13677]  f2fs_submit_merged_write+0x27d/0x380
[  553.690581][T13677]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  553.690610][T13677]  f2fs_sync_node_pages+0x1055/0x1210
[  553.690641][T13677]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  553.690690][T13677]  f2fs_write_checkpoint+0xf91/0x2710
[  553.690711][T13677]  ? __lock_acquire+0x683/0x2cf0
[  553.690752][T13677]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  553.690842][T13677]  kill_f2fs_super+0x2f6/0x700
[  553.690869][T13677]  ? __pfx_kill_f2fs_super+0x10/0x10
[  553.690896][T13677]  ? call_rcu+0x64b/0x8b0
[  553.690915][T13677]  ? lockdep_hardirqs_on+0x7a/0x110
[  553.690941][T13677]  deactivate_locked_super+0xbc/0x130
[  553.690959][T13677]  cleanup_mnt+0x3d3/0x460
[  553.690977][T13677]  task_work_run+0x1d9/0x270
[  553.690999][T13677]  ? __pfx_task_work_run+0x10/0x10
[  553.691033][T13677]  exit_to_user_mode_loop+0x1fa/0x730
[  553.691051][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.691070][T13677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.691087][T13677]  do_syscall_64+0x353/0x580
[  553.691103][T13677]  ? trace_irq_disable+0x3b/0x140
[  553.691126][T13677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.691139][T13677] RIP: 0033:0x7f3ae199f317
[  553.691156][T13677] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  553.691168][T13677] RSP: 002b:00007ffd55ae4a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  553.691185][T13677] RAX: 0000000000000000 RBX: 00007f3ae1a34474 RCX: 00007f3ae199f317
[  553.691193][T13677] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd55ae4b20
[  553.691200][T13677] RBP: 00007ffd55ae4b20 R08: 00007ffd55ae5b20 R09: 00000000ffffffff
[  553.691210][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd55ae5bb0
[  553.691219][T13677] R13: 00007f3ae1a34474 R14: 0000000000086f89 R15: 00007ffd55ae5bf0
[  553.691261][T13677]  </TASK>
[  553.691418][T13677] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  553.692656][    C1] CPU: 1 UID: 0 PID: 13124 Comm: kworker/u10:42 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.692677][    C1] Tainted: [L]=SOFTLOCKUP
[  553.692682][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.692693][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  553.692712][    C1] Call Trace:
[  553.692718][    C1]  <IRQ>
[  553.692724][    C1]  dump_stack_lvl+0xe8/0x150
[  553.692745][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.692768][    C1]  f2fs_write_end_io+0x124b/0x1710
[  553.692826][    C1]  blk_update_request+0x57b/0xe50
[  553.692856][    C1]  blk_mq_end_request+0x3e/0x70
[  553.692872][    C1]  blk_done_softirq+0x10a/0x160
[  553.692893][    C1]  handle_softirqs+0x225/0x840
[  553.692911][    C1]  ? do_softirq+0x76/0xd0
[  553.692927][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.692939][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.692952][    C1]  do_softirq+0x76/0xd0
[  553.692966][    C1]  </IRQ>
[  553.692971][    C1]  <TASK>
[  553.692976][    C1]  __local_bh_enable_ip+0xf8/0x130
[  553.692991][    C1]  __alloc_skb+0x1ad/0x7a0
[  553.693008][    C1]  nsim_dev_trap_report_work+0x25f/0xb40
[  553.693034][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  553.693049][    C1]  process_scheduled_works+0xa8e/0x14e0
[  553.693082][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  553.693102][    C1]  ? assign_work+0x3cf/0x5d0
[  553.693121][    C1]  worker_thread+0xa47/0xfb0
[  553.693146][    C1]  ? __kthread_parkme+0x71/0x1f0
[  553.693170][    C1]  kthread+0x388/0x470
[  553.693188][    C1]  ? __pfx_worker_thread+0x10/0x10
[  553.693201][    C1]  ? __pfx_kthread+0x10/0x10
[  553.693219][    C1]  ret_from_fork+0x514/0xb70
[  553.693241][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  553.693258][    C1]  ? __switch_to+0xc89/0x1420
[  553.693276][    C1]  ? __pfx_kthread+0x10/0x10
[  553.693294][    C1]  ret_from_fork_asm+0x1a/0x30
[  553.693323][    C1]  </TASK>
[  553.693330][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  553.695179][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.695198][T13677] Tainted: [L]=SOFTLOCKUP
[  553.695204][T13677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.695212][T13677] Call Trace:
[  553.695219][T13677]  <TASK>
[  553.695224][T13677]  dump_stack_lvl+0xe8/0x150
[  553.695246][T13677]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.695267][T13677]  f2fs_write_end_io+0x124b/0x1710
[  553.695302][T13677]  __submit_merged_bio+0x258/0x6a0
[  553.695316][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.695342][T13677]  f2fs_submit_merged_write+0x27d/0x380
[  553.695363][T13677]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  553.695392][T13677]  f2fs_sync_node_pages+0x1055/0x1210
[  553.695423][T13677]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  553.695473][T13677]  f2fs_write_checkpoint+0xf91/0x2710
[  553.695492][T13677]  ? __lock_acquire+0x683/0x2cf0
[  553.695532][T13677]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  553.695592][T13677]  kill_f2fs_super+0x2f6/0x700
[  553.695616][T13677]  ? __pfx_kill_f2fs_super+0x10/0x10
[  553.695644][T13677]  ? call_rcu+0x64b/0x8b0
[  553.695662][T13677]  ? lockdep_hardirqs_on+0x7a/0x110
[  553.695688][T13677]  deactivate_locked_super+0xbc/0x130
[  553.695706][T13677]  cleanup_mnt+0x3d3/0x460
[  553.695725][T13677]  task_work_run+0x1d9/0x270
[  553.695747][T13677]  ? __pfx_task_work_run+0x10/0x10
[  553.695774][T13677]  exit_to_user_mode_loop+0x1fa/0x730
[  553.695791][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.695840][T13677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.695854][T13677]  do_syscall_64+0x353/0x580
[  553.695868][T13677]  ? trace_irq_disable+0x3b/0x140
[  553.695891][T13677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.695906][T13677] RIP: 0033:0x7f3ae199f317
[  553.695921][T13677] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  553.695933][T13677] RSP: 002b:00007ffd55ae4a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  553.695947][T13677] RAX: 0000000000000000 RBX: 00007f3ae1a34474 RCX: 00007f3ae199f317
[  553.695956][T13677] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd55ae4b20
[  553.695964][T13677] RBP: 00007ffd55ae4b20 R08: 00007ffd55ae5b20 R09: 00000000ffffffff
[  553.695973][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd55ae5bb0
[  553.695981][T13677] R13: 00007f3ae1a34474 R14: 0000000000086f89 R15: 00007ffd55ae5bf0
[  553.696032][T13677]  </TASK>
[  553.696168][T13677] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  553.696636][    C1] CPU: 1 UID: 0 PID: 13124 Comm: kworker/u10:42 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.696655][    C1] Tainted: [L]=SOFTLOCKUP
[  553.696660][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.696669][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  553.696688][    C1] Call Trace:
[  553.696694][    C1]  <IRQ>
[  553.696700][    C1]  dump_stack_lvl+0xe8/0x150
[  553.696719][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.696740][    C1]  f2fs_write_end_io+0x124b/0x1710
[  553.696773][    C1]  blk_update_request+0x57b/0xe50
[  553.696825][    C1]  blk_mq_end_request+0x3e/0x70
[  553.696839][    C1]  blk_done_softirq+0x10a/0x160
[  553.696856][    C1]  handle_softirqs+0x225/0x840
[  553.696872][    C1]  ? do_softirq+0x76/0xd0
[  553.696888][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.696900][    C1]  ? __alloc_skb+0x189/0x7a0
[  553.696912][    C1]  do_softirq+0x76/0xd0
[  553.696926][    C1]  </IRQ>
[  553.696931][    C1]  <TASK>
[  553.696937][    C1]  __local_bh_enable_ip+0xf8/0x130
[  553.696951][    C1]  __alloc_skb+0x1ad/0x7a0
[  553.696965][    C1]  nsim_dev_trap_report_work+0x25f/0xb40
[  553.696991][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  553.697006][    C1]  process_scheduled_works+0xa8e/0x14e0
[  553.697038][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  553.697058][    C1]  ? assign_work+0x3cf/0x5d0
[  553.697075][    C1]  worker_thread+0xa47/0xfb0
[  553.697100][    C1]  ? __kthread_parkme+0x71/0x1f0
[  553.697124][    C1]  kthread+0x388/0x470
[  553.697142][    C1]  ? __pfx_worker_thread+0x10/0x10
[  553.697155][    C1]  ? __pfx_kthread+0x10/0x10
[  553.697173][    C1]  ret_from_fork+0x514/0xb70
[  553.697196][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  553.697211][    C1]  ? __switch_to+0xc89/0x1420
[  553.697230][    C1]  ? __pfx_kthread+0x10/0x10
[  553.697249][    C1]  ret_from_fork_asm+0x1a/0x30
[  553.697280][    C1]  </TASK>
[  553.697286][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  553.698726][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.698746][T13677] Tainted: [L]=SOFTLOCKUP
[  553.698751][T13677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.698759][T13677] Call Trace:
[  553.698765][T13677]  <TASK>
[  553.698770][T13677]  dump_stack_lvl+0xe8/0x150
[  553.698818][T13677]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.698840][T13677]  f2fs_write_end_io+0x124b/0x1710
[  553.698876][T13677]  __submit_merged_bio+0x258/0x6a0
[  553.698893][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.698917][T13677]  f2fs_submit_merged_write+0x27d/0x380
[  553.698939][T13677]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  553.698965][T13677]  f2fs_sync_node_pages+0x1055/0x1210
[  553.698998][T13677]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  553.699057][T13677]  f2fs_write_checkpoint+0xf91/0x2710
[  553.699077][T13677]  ? __lock_acquire+0x683/0x2cf0
[  553.699120][T13677]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  553.699180][T13677]  kill_f2fs_super+0x2f6/0x700
[  553.699207][T13677]  ? __pfx_kill_f2fs_super+0x10/0x10
[  553.699235][T13677]  ? call_rcu+0x64b/0x8b0
[  553.699254][T13677]  ? lockdep_hardirqs_on+0x7a/0x110
[  553.699281][T13677]  deactivate_locked_super+0xbc/0x130
[  553.699300][T13677]  cleanup_mnt+0x3d3/0x460
[  553.699320][T13677]  task_work_run+0x1d9/0x270
[  553.699343][T13677]  ? __pfx_task_work_run+0x10/0x10
[  553.699370][T13677]  exit_to_user_mode_loop+0x1fa/0x730
[  553.699388][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.699408][T13677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.699424][T13677]  do_syscall_64+0x353/0x580
[  553.699439][T13677]  ? trace_irq_disable+0x3b/0x140
[  553.699459][T13677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.699475][T13677] RIP: 0033:0x7f3ae199f317
[  553.699490][T13677] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  553.699502][T13677] RSP: 002b:00007ffd55ae4a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  553.699516][T13677] RAX: 0000000000000000 RBX: 00007f3ae1a34474 RCX: 00007f3ae199f317
[  553.699525][T13677] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd55ae4b20
[  553.699533][T13677] RBP: 00007ffd55ae4b20 R08: 00007ffd55ae5b20 R09: 00000000ffffffff
[  553.699542][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd55ae5bb0
[  553.699551][T13677] R13: 00007f3ae1a34474 R14: 0000000000086f89 R15: 00007ffd55ae5bf0
[  553.699575][T13677]  </TASK>
[  553.699582][T13677] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  553.715325][T18087] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5000'.
[  553.781462][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.781490][T13677] Tainted: [L]=SOFTLOCKUP
[  553.781495][T13677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.781505][T13677] Call Trace:
[  553.781512][T13677]  <TASK>
[  553.781518][T13677]  dump_stack_lvl+0xe8/0x150
[  553.781546][T13677]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  553.781572][T13677]  f2fs_write_end_io+0x124b/0x1710
[  553.781610][T13677]  __submit_merged_bio+0x258/0x6a0
[  553.781627][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.781650][T13677]  f2fs_submit_merged_write+0x27d/0x380
[  553.781673][T13677]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  553.781702][T13677]  f2fs_sync_node_pages+0x1055/0x1210
[  553.781735][T13677]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  553.781816][T13677]  f2fs_write_checkpoint+0xf91/0x2710
[  553.781835][T13677]  ? __lock_acquire+0x683/0x2cf0
[  553.781872][T13677]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  553.781932][T13677]  kill_f2fs_super+0x2f6/0x700
[  553.781957][T13677]  ? __pfx_kill_f2fs_super+0x10/0x10
[  553.781986][T13677]  ? call_rcu+0x64b/0x8b0
[  553.782005][T13677]  ? lockdep_hardirqs_on+0x7a/0x110
[  553.782040][T13677]  deactivate_locked_super+0xbc/0x130
[  553.782058][T13677]  cleanup_mnt+0x3d3/0x460
[  553.782079][T13677]  task_work_run+0x1d9/0x270
[  553.782098][T13677]  ? __pfx_task_work_run+0x10/0x10
[  553.782126][T13677]  exit_to_user_mode_loop+0x1fa/0x730
[  553.782144][T13677]  ? rcu_is_watching+0x15/0xb0
[  553.782162][T13677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.782178][T13677]  do_syscall_64+0x353/0x580
[  553.782195][T13677]  ? trace_irq_disable+0x3b/0x140
[  553.782217][T13677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.782232][T13677] RIP: 0033:0x7f3ae199f317
[  553.782248][T13677] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  553.782260][T13677] RSP: 002b:00007ffd55ae4a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  553.782277][T13677] RAX: 0000000000000000 RBX: 00007f3ae1a34474 RCX: 00007f3ae199f317
[  553.782287][T13677] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd55ae4b20
[  553.782295][T13677] RBP: 00007ffd55ae4b20 R08: 00007ffd55ae5b20 R09: 00000000ffffffff
[  553.782304][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd55ae5bb0
[  553.782312][T13677] R13: 00007f3ae1a34474 R14: 0000000000086f89 R15: 00007ffd55ae5bf0
[  553.782336][T13677]  </TASK>
[  553.782342][T13677] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  554.294652][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.294682][T13677] Tainted: [L]=SOFTLOCKUP
[  554.294686][T13677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  554.294695][T13677] Call Trace:
[  554.294701][T13677]  <TASK>
[  554.294710][T13677]  dump_stack_lvl+0xe8/0x150
[  554.294774][T13677]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  554.294800][T13677]  f2fs_write_end_io+0x124b/0x1710
[  554.294838][T13677]  __submit_merged_bio+0x258/0x6a0
[  554.294854][T13677]  ? rcu_is_watching+0x15/0xb0
[  554.294879][T13677]  f2fs_submit_merged_write+0x27d/0x380
[  554.294901][T13677]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  554.294930][T13677]  f2fs_sync_node_pages+0x1055/0x1210
[  554.294969][T13677]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  554.295020][T13677]  f2fs_write_checkpoint+0xf91/0x2710
[  554.295040][T13677]  ? __lock_acquire+0x683/0x2cf0
[  554.295083][T13677]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  554.295144][T13677]  kill_f2fs_super+0x2f6/0x700
[  554.295189][T13677]  ? __pfx_kill_f2fs_super+0x10/0x10
[  554.295217][T13677]  ? call_rcu+0x64b/0x8b0
[  554.295235][T13677]  ? lockdep_hardirqs_on+0x7a/0x110
[  554.295278][T13677]  deactivate_locked_super+0xbc/0x130
[  554.295296][T13677]  cleanup_mnt+0x3d3/0x460
[  554.295317][T13677]  task_work_run+0x1d9/0x270
[  554.295340][T13677]  ? __pfx_task_work_run+0x10/0x10
[  554.295368][T13677]  exit_to_user_mode_loop+0x1fa/0x730
[  554.295385][T13677]  ? rcu_is_watching+0x15/0xb0
[  554.295404][T13677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.295420][T13677]  do_syscall_64+0x353/0x580
[  554.295435][T13677]  ? trace_irq_disable+0x3b/0x140
[  554.295457][T13677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.295470][T13677] RIP: 0033:0x7f3ae199f317
[  554.295485][T13677] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  554.295497][T13677] RSP: 002b:00007ffd55ae4a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  554.295513][T13677] RAX: 0000000000000000 RBX: 00007f3ae1a34474 RCX: 00007f3ae199f317
[  554.295522][T13677] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd55ae4b20
[  554.295531][T13677] RBP: 00007ffd55ae4b20 R08: 00007ffd55ae5b20 R09: 00000000ffffffff
[  554.295540][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd55ae5bb0
[  554.295548][T13677] R13: 00007f3ae1a34474 R14: 0000000000086f89 R15: 00007ffd55ae5bf0
[  554.295573][T13677]  </TASK>
[  554.295627][T13677] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  554.435509][T18098] loop4: detected capacity change from 0 to 256
[  554.659144][T18106] program syz.4.5009 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  556.496403][T18143] loop3: detected capacity change from 0 to 8192
[  557.103214][T18151] vlan0: entered promiscuous mode
[  557.159494][T18151] vlan0: left promiscuous mode
[  557.743247][T18175] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5041'.
[  557.914273][   T33] libceph: connect (1)[c::]:6789 error -101
[  557.916713][   T33] libceph: mon0 (1)[c::]:6789 connect error
[  557.932926][T18183] ceph: No mds server is up or the cluster is laggy
[  558.210090][T18186] loop4: detected capacity change from 0 to 128
[  558.744986][T14414] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  558.905240][T14414] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  558.910847][T14414] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  558.916391][T14414] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  558.930644][T14414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.961318][T14414] usb 4-1: probing VID:PID(0424:012C)   
[  558.970567][T14414] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[  558.972699][T14414] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[  558.975187][T14414] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[  558.978162][T14414] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04
[  558.980648][T14414] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  559.220151][T14414] vub300 4-1:1.0: probe with driver vub300 failed with error -32
[  559.246503][T14414] usb 4-1: USB disconnect, device number 21
[  559.864278][T18223] bond1: option arp_interval: invalid value (18446744073709551614)
[  559.867542][T18223] bond1: option arp_interval: allowed values 0 - 2147483647
[  559.876883][T18223] bond1 (unregistering): Released all slaves
[  559.894922][   T33] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  560.062133][   T33] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  560.071326][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.363281][T18243] input: syz0 as /devices/virtual/input/input17
[  560.701867][   T33] cxacru 5-1:1.0: wrong cm 0xa0 in response to cm 0x91
[  560.709750][   T33] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5
[  560.712894][   T33] ATM dev 0: usbatm_atm_init: atm_start failed: -5!
[  560.730229][   T33] cxacru 5-1:1.0: probe with driver cxacru failed with error -5
[  560.741607][   T33] usb 5-1: USB disconnect, device number 22
[  561.025113][T18259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  561.831799][T18272] loop4: detected capacity change from 0 to 256
[  561.850639][T18272] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  561.857490][T18272] FAT-fs (loop4): Filesystem has been set read-only
[  561.884493][T18282] binder: 18280:18282 ioctl c0306201 200000000480 returned -14
[  562.008614][T18289] loop3: detected capacity change from 0 to 1024
[  562.059238][T18289] hfsplus: invalid btree extent records (0 size)
[  562.062085][T18289] hfsplus: failed to load extents file
[  562.292332][T18296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5094'.
[  562.600693][T14414] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  562.692122][T18313] CIFS mount error: No usable UNC path provided in device string!
[  562.692122][T18313] 
[  562.696165][T18313] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  562.768207][T18315] netlink: 'syz.4.5103': attribute type 5 has an invalid length.
[  562.771780][T18315] netlink: 'syz.4.5103': attribute type 2 has an invalid length.
[  562.824165][T18316] 9pnet_fd: Insufficient options for proto=fd
[  562.956178][T14414] usb 4-1: unable to get BOS descriptor or descriptor too short
[  562.964228][T14414] usb 4-1: config 2 has an invalid interface number: 8 but max is 0
[  562.967565][T14414] usb 4-1: config 2 has no interface number 0
[  562.970157][T14414] usb 4-1: config 2 interface 8 has no altsetting 0
[  562.975658][T14414] usb 4-1: string descriptor 0 read error: -22
[  562.978086][T14414] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97
[  562.981359][T14414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.995054][T14414] usbtest 4-1:2.8: Linux user mode ISO test driver
[  562.999502][T14414] usbtest 4-1:2.8: low-speed {control} tests
[  563.196996][T14414] usb 4-1: USB disconnect, device number 22
[  563.716409][T18328] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.5108:18328
[  563.782063][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5109'.
[  564.185961][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  564.188518][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  564.192498][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  564.429927][T18372] loop3: detected capacity change from 0 to 32768
[  564.460464][T18372] JBD2: Ignoring recovery information on journal
[  564.504603][T18372] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  565.370687][T13677] ocfs2: Unmounting device (7,3) on (node local)
[  565.589697][   T34] audit: type=1326 audit(1332.810:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.4.5140" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaef39e0d9 code=0x0
[  565.651399][T18410] loop3: detected capacity change from 0 to 2048
[  565.671497][T18410] EXT4-fs (loop3): filesystem too large to mount safely on this system
[  566.040875][   T24] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  566.202618][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  566.207371][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  566.211951][   T24] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  566.215641][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.232724][   T24] gspca_main: spca501-2.14.0 probing 0000:0000
[  566.441685][   T24] gspca_spca501: reg write: error -71
[  566.449330][   T24] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  566.456019][   T24] spca501 4-1:1.0: probe with driver spca501 failed with error -22
[  566.462357][   T24] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[  566.470544][   T24] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  566.481161][   T24] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  566.489764][   T24] uvcvideo 4-1:1.1: Failed to initialize the device (-71).
[  566.504137][   T24] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71
[  566.512140][   T24] usb 4-1: USB disconnect, device number 23
[  566.649156][T18425] fuse: fd is not a fuse device
[  566.869288][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5150'.
[  567.306291][T18448] loop3: detected capacity change from 0 to 1024
[  567.339017][T18448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  567.388028][T18448] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.5158: lblock 0 mapped to illegal pblock 0 (length 1)
[  567.399439][T18448] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  567.404593][T18448] EXT4-fs (loop3): This should not happen!! Data will be lost
[  567.404593][T18448] 
[  567.431771][   T28] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u9:1: lblock 0 mapped to illegal pblock 0 (length 1)
[  567.466822][   T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  567.470769][   T28] EXT4-fs (loop3): This should not happen!! Data will be lost
[  567.470769][   T28] 
[  567.483026][   T34] audit: type=1400 audit(1334.693:159): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=18454 comm="syz.4.5160"
[  567.488677][   T28] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 4: comm kworker/u9:1: lblock 4 mapped to illegal pblock 4 (length 2)
[  567.493815][   T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  567.498191][   T28] EXT4-fs (loop3): This should not happen!! Data will be lost
[  567.498191][   T28] 
[  567.509868][T13677] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  567.517862][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  567.764966][T18467] fuse: fd is not a fuse device
[  568.416261][T18486] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl812)
[  568.818115][T18468] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  569.852247][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5181'.
[  570.352995][T18530] netlink: 'syz.4.5193': attribute type 13 has an invalid length.
[  570.436559][T18529] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  571.001008][T18565] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5206'.
[  571.724814][T18599] xt_hashlimit: size too large, truncated to 1048576
[  572.046388][T18609] fuse: Bad value for 'fd'
[  573.860430][T18655] 9p: Bad value for 'rfdno'
[  574.159482][T18659] overlayfs: failed to clone upperpath
[  574.725678][T18674] key id 00000001 not found
[  575.088409][T18700] xt_CT: You must specify a L4 protocol and not use inversions on it
[  575.544019][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5278'.
[  575.693958][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5281'.
[  575.755860][   T34] audit: type=1400 audit(1342.946:160): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18724 comm="syz.0.5284"
[  576.157668][   T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  576.180133][T18741] xt_hashlimit: size too large, truncated to 1048576
[  576.564804][   T24] usb 4-1: Using ep0 maxpacket: 16
[  576.572716][   T24] usb 4-1: config 3 has an invalid interface number: 7 but max is 0
[  576.581440][   T24] usb 4-1: config 3 has no interface number 0
[  576.590683][   T24] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=35.e6
[  576.604760][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.608500][   T24] usb 4-1: Product: syz
[  576.611451][   T24] usb 4-1: Manufacturer: syz
[  576.615658][   T24] usb 4-1: SerialNumber: syz
[  576.891358][   T24] usb 4-1: USB disconnect, device number 24
[  576.936797][T13689] udevd[13689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.7/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  577.526538][T18768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5301'.
[  577.918969][   T24] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  578.077610][   T24] usb 4-1: config index 0 descriptor too short (expected 63186, got 210)
[  578.081109][   T24] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  578.086113][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.091305][   T24] usb 4-1: config 0 has no interface number 0
[  578.093956][   T24] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  578.098008][   T24] usb 4-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC
[  578.102963][   T24] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 4
[  578.108093][   T24] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  578.114024][   T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  578.129495][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.135045][   T24] usb 4-1: config 0 descriptor??
[  578.172142][T18781] netlink: 'syz.0.5306': attribute type 3 has an invalid length.
[  578.185341][   T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  578.334418][T18787] netlink: 'syz.0.5309': attribute type 12 has an invalid length.
[  578.347868][   T12] usb 4-1: Failed to submit usb control message: -71
[  578.348175][   T24] usb 4-1: USB disconnect, device number 25
[  578.355419][   T12] usb 4-1: unable to send the bmi data to the device: -71
[  578.371002][   T12] usb 4-1: unable to get target info from device
[  578.374022][   T12] usb 4-1: could not get target info (-71)
[  578.376441][   T12] usb 4-1: could not probe fw (-71)
[  578.927211][T18803] overlayfs: failed to clone upperpath
[  579.853526][T18841] loop3: detected capacity change from 0 to 512
[  579.925634][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.936056][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.939272][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.942630][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.944635][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5336'.
[  579.955934][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.959275][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.962554][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.973005][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  579.985685][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  580.001678][T18841] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  580.010464][   T34] audit: type=1800 audit(1347.183:161): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5334" name="file0" dev="loop3" ino=1048694 res=0 errno=0
[  580.204443][   T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  580.223222][   T24] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  580.297373][T14225] Bluetooth: hci3: unexpected event for opcode 0x040e
[  580.654444][T18873] loop3: detected capacity change from 0 to 16
[  580.662242][T18873] erofs (device loop3): mounted with root inode @ nid 36.
[  580.688723][T18873] erofs (device loop3): not enough plain data on disk @ la 4096 of nid 89
[  580.691713][T18873] erofs (device loop3): readahead error at folio 1 @ nid 89
[  580.731107][T18873] syz.3.5349: attempt to access beyond end of device
[  580.731107][T18873] loop3: rw=524288, sector=128, nr_sectors = 256 limit=16
[  580.759136][T18873] syz.3.5349: attempt to access beyond end of device
[  580.759136][T18873] loop3: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  580.776696][T18873] erofs (device loop3): not enough plain data on disk @ la 20480 of nid 89
[  580.784722][T18873] erofs (device loop3): readahead error at folio 4 @ nid 89
[  580.794414][T18873] erofs (device loop3): not enough plain data on disk @ la 4096 of nid 89
[  580.799983][T18873] erofs (device loop3): not enough plain data on disk @ la 4096 of nid 89
[  580.803417][T18873] erofs (device loop3): read error -117 @ 1 of nid 89
[  580.805788][   T34] audit: type=1800 audit(1347.971:162): pid=18873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5349" name="file2" dev="loop3" ino=89 res=0 errno=0
[  581.052282][T18887] xt_CT: You must specify a L4 protocol and not use inversions on it
[  581.428198][T18902] netlink: 'syz.4.5362': attribute type 1 has an invalid length.
[  581.589830][T18912] loop3: detected capacity change from 0 to 512
[  581.624231][T18912] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  581.857530][T18922] vlan0: entered promiscuous mode
[  582.137695][T18928] loop3: detected capacity change from 0 to 2048
[  582.168006][T18928] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  582.194070][T18928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  582.551217][T18946] overlayfs: failed to verify upper root origin
[  583.111490][T18969] loop3: detected capacity change from 0 to 40427
[  583.126674][T18969] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  583.130551][T18969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  583.141793][T18969] F2FS-fs (loop3): Image doesn't support compression
[  583.147476][T18969] F2FS-fs (loop3): build fault injection rate: 690
[  583.163367][T18969] F2FS-fs (loop3): build fault injection type: 0x35f7
[  583.173634][T18969] F2FS-fs (loop3): invalid crc value
[  583.260569][T18969] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  583.318859][T18969] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  583.321694][T18969] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  583.325735][T18969] F2FS-fs (loop3): Start checkpoint disabled!
[  583.351678][T18969] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  583.356173][T18969] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  583.358564][T18969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  583.522705][T15177] kworker/u9:4: attempt to access beyond end of device
[  583.522705][T15177] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  583.536061][T15177] CPU: 0 UID: 0 PID: 15177 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  583.536078][T15177] Tainted: [L]=SOFTLOCKUP
[  583.536081][T15177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  583.536087][T15177] Workqueue: writeback wb_workfn (flush-7:3)
[  583.536107][T15177] Call Trace:
[  583.536111][T15177]  <TASK>
[  583.536116][T15177]  dump_stack_lvl+0xe8/0x150
[  583.536131][T15177]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  583.536146][T15177]  f2fs_write_end_io+0x124b/0x1710
[  583.536169][T15177]  __submit_merged_bio+0x258/0x6a0
[  583.536178][T15177]  ? rcu_is_watching+0x15/0xb0
[  583.536194][T15177]  __submit_merged_write_cond+0x3c9/0x4e0
[  583.536208][T15177]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  583.536229][T15177]  f2fs_write_data_pages+0x2a27/0x36f0
[  583.536256][T15177]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  583.536273][T15177]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  583.536300][T15177]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  583.536318][T15177]  ? __lock_acquire+0x683/0x2cf0
[  583.536336][T15177]  ? set_shrinker_bit+0x7c/0x350
[  583.536349][T15177]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  583.536360][T15177]  do_writepages+0x338/0x560
[  583.536373][T15177]  ? reacquire_held_locks+0x104/0x190
[  583.536383][T15177]  ? writeback_sb_inodes+0x450/0x1b00
[  583.536397][T15177]  __writeback_single_inode+0x12e/0xf90
[  583.536412][T15177]  writeback_sb_inodes+0x9de/0x1b00
[  583.536421][T15177]  ? __lock_acquire+0x683/0x2cf0
[  583.536442][T15177]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  583.536472][T15177]  ? rcu_is_watching+0x15/0xb0
[  583.536483][T15177]  ? queue_io+0x2d3/0x470
[  583.536495][T15177]  wb_writeback+0x41c/0xad0
[  583.536507][T15177]  ? queue_io+0x251/0x470
[  583.536520][T15177]  ? __pfx_wb_writeback+0x10/0x10
[  583.536529][T15177]  ? do_raw_spin_lock+0x12b/0x2f0
[  583.536545][T15177]  wb_workfn+0x431/0x10f0
[  583.536562][T15177]  ? __pfx_wb_workfn+0x10/0x10
[  583.536571][T15177]  ? rcu_is_watching+0x15/0xb0
[  583.536581][T15177]  ? trace_hrtimer_start+0x82/0x200
[  583.536594][T15177]  ? do_raw_spin_lock+0x12b/0x2f0
[  583.536603][T15177]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  583.536627][T15177]  ? process_scheduled_works+0xa20/0x14e0
[  583.536639][T15177]  ? process_scheduled_works+0xa20/0x14e0
[  583.536650][T15177]  ? rcu_is_watching+0x15/0xb0
[  583.536661][T15177]  ? process_scheduled_works+0xa20/0x14e0
[  583.536669][T15177]  process_scheduled_works+0xa8e/0x14e0
[  583.536690][T15177]  ? __pfx_process_scheduled_works+0x10/0x10
[  583.536702][T15177]  ? assign_work+0x3cf/0x5d0
[  583.536712][T15177]  worker_thread+0xa47/0xfb0
[  583.536728][T15177]  ? __kthread_parkme+0x71/0x1f0
[  583.536744][T15177]  kthread+0x388/0x470
[  583.536754][T15177]  ? __pfx_worker_thread+0x10/0x10
[  583.536784][T15177]  ? __pfx_kthread+0x10/0x10
[  583.536795][T15177]  ret_from_fork+0x514/0xb70
[  583.536808][T15177]  ? __pfx_ret_from_fork+0x10/0x10
[  583.536818][T15177]  ? __switch_to+0xc89/0x1420
[  583.536830][T15177]  ? __pfx_kthread+0x10/0x10
[  583.536840][T15177]  ret_from_fork_asm+0x1a/0x30
[  583.536860][T15177]  </TASK>
[  583.549806][T15177] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  583.750722][T18994] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  584.137487][T19006] loop3: detected capacity change from 0 to 32768
[  584.142922][T19006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5410 (19006)
[  584.166225][T19006] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  584.178624][T19006] BTRFS info (device loop3): using crc32c checksum algorithm
[  584.295535][T19006] BTRFS info (device loop3): enabling ssd optimizations
[  584.298077][T19006] BTRFS info (device loop3): turning on flush-on-commit
[  584.300342][T19006] BTRFS info (device loop3): enabling free space tree
[  584.302484][T19006] BTRFS info (device loop3): enabling auto defrag
[  584.304528][T19006] BTRFS info (device loop3): use lzo compression, level 1
[  584.306972][T19006] BTRFS info (device loop3): max_inline set to 0
[  584.357124][T13677] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  584.672794][T19033] fuse: fd is not a fuse device
[  585.304482][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5431'.
[  585.713886][T19091] 9pnet: p9_errstr2errno: server reported unknown error 
[  585.771691][T19098] netlink: 'syz.3.5447': attribute type 3 has an invalid length.
[  586.053781][   T33] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  586.206011][   T33] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  586.209193][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  586.213568][   T33] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  586.218807][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  586.223143][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  586.231344][   T33] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  586.235186][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  586.239548][   T33] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  586.244755][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  586.249216][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  586.255439][   T33] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  586.258839][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  586.263824][   T33] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  586.269416][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  586.274623][   T33] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  586.282236][   T33] usb 4-1: string descriptor 0 read error: -22
[  586.285042][   T33] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  586.288606][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.315208][   T33] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  586.524501][   T33] usb 4-1: USB disconnect, device number 26
[  587.671616][T19174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  587.889096][T19185] fuse: Bad value for 'fd'
[  589.201854][T19242] loop3: detected capacity change from 0 to 4096
[  589.237073][T19242] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  589.260498][T19242] ntfs3(loop3): Failed to load $Extend (-22).
[  589.262835][T19242] ntfs3(loop3): Failed to initialize $Extend.
[  589.281488][   T34] audit: type=1800 audit(1356.425:163): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5512" name="file1" dev="loop3" ino=30 res=0 errno=0
[  589.464628][  T803] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  589.478147][  T803] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  590.235818][  T803] Process accounting resumed
[  591.427300][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5525'.
[  591.431675][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'.
[  592.487748][T19295] loop3: detected capacity change from 0 to 64
[  592.549217][T19298] dns_resolver: Unsupported content type (231)
[  592.815563][T19311] overlayfs: missing 'lowerdir'
[  593.327121][T19330] netlink: 'syz.4.5549': attribute type 21 has an invalid length.
[  593.705796][T19344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5555'.
[  593.962559][   T34] audit: type=1326 audit(1361.092:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  593.973815][   T34] audit: type=1326 audit(1361.092:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  593.984830][   T34] audit: type=1326 audit(1361.102:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  593.995081][   T34] audit: type=1326 audit(1361.102:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  594.003310][   T34] audit: type=1326 audit(1361.102:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  594.011936][   T34] audit: type=1326 audit(1361.112:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  594.020411][   T34] audit: type=1326 audit(1361.112:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  594.029920][   T34] audit: type=1326 audit(1361.112:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.4.5563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  594.188661][  T803] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  594.340575][  T803] usb 4-1: unable to get BOS descriptor or descriptor too short
[  594.348997][  T803] usb 4-1: config 114 has an invalid interface number: 240 but max is 0
[  594.355812][  T803] usb 4-1: config 114 has no interface number 0
[  594.358759][  T803] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  594.363179][  T803] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  594.376909][  T803] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  594.391103][  T803] usb 4-1: config 114 interface 240 has no altsetting 0
[  594.398473][  T803] usb 4-1: string descriptor 0 read error: -22
[  594.401268][  T803] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[  594.405021][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.411952][T19358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  594.418002][T19358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  594.437078][  T803] ir_usb 4-1:114.240: IR Dongle converter detected
[  594.525616][T19382] bond5: option min_links: invalid value (18446744073709551613)
[  594.529070][T19382] bond5: option min_links: allowed values 0 - 2147483647
[  594.534196][T19382] bond5 (unregistering): Released all slaves
[  594.697074][  T803] usb 4-1: IR Dongle converter now attached to ttyUSB0
[  594.862929][   T33] usb 4-1: USB disconnect, device number 27
[  594.882457][   T33] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  594.886692][   T33] ir_usb 4-1:114.240: device disconnected
[  595.334423][T19399] veth1_to_bond: entered allmulticast mode
[  595.336759][T19398] veth1_to_bond: left allmulticast mode
[  596.040130][T19423] vlan0: entered promiscuous mode
[  596.153052][T19432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5597'.
[  596.759037][T19459] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  596.762245][T19459] overlayfs: missing 'lowerdir'
[  596.805121][  T803] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  596.958202][  T803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  596.962371][  T803] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  596.966892][  T803] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  596.971258][  T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.542428][T19487] fuse: Bad value for 'fd'
[  598.211155][  T803] gud 4-1:1.0: Failed to add properties (error=-5)
[  598.214549][  T803] gud 4-1:1.0: probe with driver gud failed with error -5
[  598.416789][   T33] usb 4-1: USB disconnect, device number 28
[  598.795802][T19536] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  599.677915][T19553] loop3: detected capacity change from 0 to 1024
[  599.721172][T19553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  599.800198][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.110980][T19571] overlayfs: failed to resolve './file0': -2
[  600.661457][   T34] audit: type=1326 audit(1367.773:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.677365][   T34] audit: type=1326 audit(1367.773:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.687108][   T34] audit: type=1326 audit(1367.773:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.703683][   T34] audit: type=1326 audit(1367.773:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.713489][   T34] audit: type=1326 audit(1367.773:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.723126][   T34] audit: type=1326 audit(1367.773:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.740276][   T34] audit: type=1326 audit(1367.773:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.762729][   T34] audit: type=1326 audit(1367.773:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.781381][   T34] audit: type=1326 audit(1367.773:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  600.790876][   T34] audit: type=1326 audit(1367.823:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.4.5681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  601.172943][T19633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5689'.
[  602.361990][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5697'.
[  602.365749][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5697'.
[  602.494288][T19693] --map-set only usable from mangle table
[  602.801009][T14414] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  602.951448][T14414] usb 4-1: Using ep0 maxpacket: 8
[  602.966205][T14414] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  602.981365][T14414] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  602.986068][T14414] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  602.997477][T14414] usb 4-1: config 0 interface 0 has no altsetting 0
[  603.000308][T14414] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  603.005438][T14414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.013308][T14414] usb 4-1: config 0 descriptor??
[  603.016817][T19695] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  603.734111][T14414] input: HID 1b96:000a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B96:000A.0012/input/input18
[  603.895384][T19749] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0
[  603.948864][T14414] ntrig 0003:1B96:000A.0012: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.3-1/input0
[  604.001938][T14414] usb 4-1: USB disconnect, device number 29
[  604.591880][T19769] loop3: detected capacity change from 0 to 256
[  604.613959][T19769] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  605.149725][T19794] input: syz0 as /devices/virtual/input/input19
[  605.540795][T19811] netlink: 'syz.3.5742': attribute type 1 has an invalid length.
[  606.241912][T19861] netlink: 'syz.4.5757': attribute type 27 has an invalid length.
[  606.244547][T19861] netlink: 'syz.4.5757': attribute type 3 has an invalid length.
[  606.247058][T19861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5757'.
[  607.254487][T19918] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  607.849077][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5776'.
[  607.878645][T19936] xt_hashlimit: size too large, truncated to 1048576
[  608.875558][   T34] kauditd_printk_skb: 25 callbacks suppressed
[  608.875570][   T34] audit: type=1326 audit(1375.962:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.4.5789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  608.889626][   T34] audit: type=1326 audit(1375.982:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.4.5789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  608.901089][   T34] audit: type=1326 audit(1375.992:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.4.5789" exe="/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  608.916659][   T34] audit: type=1326 audit(1375.992:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.4.5789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  608.932478][   T34] audit: type=1326 audit(1375.992:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.4.5789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef39e0d9 code=0x7ffc0000
[  609.441025][T20000] loop3: detected capacity change from 0 to 512
[  609.450209][T20000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  609.468625][T20000] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.5805: bad orphan inode 131083
[  609.476457][T20000] loop3: lost filesystem error report for type 5 error -117
[  609.479110][T20000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.553419][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.663394][T20029] loop3: detected capacity change from 0 to 32768
[  610.671724][T20029] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5817 (20029)
[  610.680218][T20029] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  610.686400][T20029] BTRFS info (device loop3): using sha256 checksum algorithm
[  610.758502][T20029] BTRFS info (device loop3): enabling ssd optimizations
[  610.764800][T20029] BTRFS info (device loop3): turning on async discard
[  610.771695][T20029] BTRFS info (device loop3): enabling free space tree
[  610.830234][T13677] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  610.927908][T20049] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5821'.
[  610.933464][T20049] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  611.221790][T20064] vti0: entered promiscuous mode
[  611.232705][T20064] vti0: entered allmulticast mode
[  611.484647][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5832'.
[  612.975374][T20108] netlink: 'syz.4.5847': attribute type 1 has an invalid length.
[  612.979027][T20108] netlink: 'syz.4.5847': attribute type 2 has an invalid length.
[  613.198089][T14414] kernel read not supported for file [fscontext] (pid: 14414 comm: kworker/0:7)
[  613.347905][T14225] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3
[  613.353599][T14225] Bluetooth: hci1: unexpected event for opcode 0x204b
[  614.240236][   T33] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  614.394794][T14225] Bluetooth: hci2: unexpected event for opcode 0x2035
[  614.563440][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5874'.
[  614.574973][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5874'.
[  614.578823][T20169] netlink: 'syz.4.5874': attribute type 7 has an invalid length.
[  614.583974][   T33] usb 4-1: Using ep0 maxpacket: 32
[  614.589264][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  614.593631][   T33] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  614.605714][   T33] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  614.609948][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.618586][   T33] usb 4-1: Product: syz
[  614.623602][   T33] usb 4-1: Manufacturer: syz
[  614.630430][   T33] usb 4-1: SerialNumber: syz
[  614.638952][   T33] usb 4-1: config 0 descriptor??
[  614.703509][T20175] netlink: 'syz.0.5878': attribute type 1 has an invalid length.
[  614.860952][ T5605] usb 4-1: USB disconnect, device number 30
[  615.829148][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5900'.
[  615.834071][ T5605] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  615.882509][T20225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  615.984852][ T5605] usb 4-1: Using ep0 maxpacket: 32
[  615.990902][ T5605] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  615.998053][ T5605] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  616.005394][ T5605] usb 4-1: config 0 interface 0 has no altsetting 0
[  616.013045][ T5605] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  616.017175][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.021012][ T5605] usb 4-1: Product: syz
[  616.023937][ T5605] usb 4-1: Manufacturer: syz
[  616.026707][ T5605] usb 4-1: SerialNumber: syz
[  616.035843][ T5605] usb 4-1: config 0 descriptor??
[  616.116326][T20233] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  616.119335][T20233] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5905'.
[  616.431830][T20241] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.456314][ T5605] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  616.505083][T20247] bond0: (slave geneve2): making interface the new active one
[  616.513989][T20247] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  616.930518][T20267] MTD: Couldn't look up './dev/mtdblock0': -2
[  617.094573][ T5605] usb 4-1: USB disconnect, device number 31
[  617.385955][T14225] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  617.391598][T14225] Bluetooth: hci1: Injecting HCI hardware error event
[  617.403683][T14225] Bluetooth: hci1: hardware error 0x00
[  618.899093][T20359] SET target dimension over the limit!
[  619.174008][T20372] bridge1: the hash_elasticity option has been deprecated and is always 16
[  619.389489][T20385] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  619.402658][T20385] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  619.470286][T14225] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  619.576377][T20395] loop3: detected capacity change from 0 to 4096
[  619.605834][T20395] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  619.647039][T20395] ntfs3(loop3): ino=1a, mi_enum_attr
[  619.649200][T20395] ntfs3(loop3): ino=1a, mi_enum_attr
[  619.651127][T20395] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  619.935813][T20407] loop3: detected capacity change from 0 to 32768
[  619.942044][T20407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5977 (20407)
[  619.957802][T20407] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  619.960976][T20407] BTRFS info (device loop3): using sha256 checksum algorithm
[  620.001467][T20407] BTRFS info (device loop3): enabling ssd optimizations
[  620.003715][T20407] BTRFS info (device loop3): turning on async discard
[  620.006194][T20407] BTRFS info (device loop3): enabling free space tree
[  620.051176][T13677] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  620.350942][T20430] loop3: detected capacity change from 0 to 256
[  620.370623][T20430] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  620.493194][T20430] exFAT-fs (loop3): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  620.506541][T20430] exFAT-fs (loop3): Filesystem has been set read-only
[  620.698213][T20449] loop3: detected capacity change from 0 to 256
[  620.710363][T20449] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0x14e42e2d, utbl_chksum : 0xe619d30d)
[  621.221155][T20469] loop3: detected capacity change from 0 to 32768
[  621.225637][T20469] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6000 (20469)
[  621.244172][T20469] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  621.253646][T20469] BTRFS info (device loop3): using sha256 checksum algorithm
[  621.295060][T20469] BTRFS info (device loop3): enabling ssd optimizations
[  621.297535][T20469] BTRFS info (device loop3): turning on async discard
[  621.300099][T20469] BTRFS info (device loop3): enabling free space tree
[  621.333603][T13677] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  622.475770][T20535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6024'.
[  622.577171][T20539] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  622.580420][ T5605] IPVS: starting estimator thread 0...
[  622.670667][T20541] IPVS: using max 67 ests per chain, 160800 per kthread
[  622.946183][T20558] loop3: detected capacity change from 0 to 256
[  622.953649][T20558] exfat: Deprecated parameter 'utf8'
[  622.958208][T20558] exfat: Deprecated parameter 'namecase'
[  622.960573][T20558] exfat: Deprecated parameter 'namecase'
[  622.968122][T20558] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  623.178618][T20564] lo: Caught tx_queue_len zero misconfig
[  623.209116][T20566] loop3: detected capacity change from 0 to 1756
[  623.257814][T20566] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  623.268040][T20566] UDF-fs: Scanning with blocksize 512 failed
[  623.287225][T20566] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  623.397458][T20566] UDF-fs: Scanning with blocksize 1024 failed
[  623.610171][T20566] UDF-fs: warning (device loop3): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[  623.950507][T20579] loop3: detected capacity change from 0 to 32768
[  624.025343][T20579] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  624.181039][   T34] audit: type=1800 audit(1391.234:212): pid=20579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6043" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  624.282353][T13677] ocfs2: Unmounting device (7,3) on (node local)
[  625.799679][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  625.802142][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  626.138566][   T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  626.310830][   T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  626.316517][   T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  626.324312][   T24] usb 4-1: config 220 has no interface number 2
[  626.330562][   T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  626.339917][   T24] usb 4-1: config 220 interface 0 has no altsetting 0
[  626.348944][   T24] usb 4-1: config 220 interface 76 has no altsetting 0
[  626.351780][   T24] usb 4-1: config 220 interface 1 has no altsetting 0
[  626.357075][   T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  626.362737][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.368931][   T24] usb 4-1: Product: syz
[  626.372152][   T24] usb 4-1: Manufacturer: syz
[  626.375217][   T24] usb 4-1: SerialNumber: syz
[  626.518992][T20665] fuse: Bad value for 'fd'
[  626.619720][   T24] usb 4-1: selecting invalid altsetting 0
[  626.651048][   T24] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  626.659483][   T24] uvcvideo 4-1:220.0: No valid video chain found.
[  626.667213][   T24] usb 4-1: selecting invalid altsetting 0
[  626.669150][   T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  626.675420][   T24] usb 4-1: USB disconnect, device number 32
[  627.203493][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6096'.
[  627.336688][T20703] netlink: 'syz.3.6100': attribute type 1 has an invalid length.
[  627.339734][T20703] netlink: 'syz.3.6100': attribute type 7 has an invalid length.
[  627.343174][T20703] netlink: 'syz.3.6100': attribute type 8 has an invalid length.
[  627.346121][T20703] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6100'.
[  627.349518][T20703] NCSI netlink: No device for ifindex 1073545264
[  627.925832][T20729] tipc: Started in network mode
[  627.931423][T20729] tipc: Node identity ac14142f, cluster identity 4711
[  627.955549][T20729] tipc: New replicast peer: 172.20.20.170
[  627.958813][T20729] tipc: Enabled bearer <udp:syz2>, priority 23
[  627.963534][T20729] tipc: New replicast peer: 0.0.0.0
[  628.107954][T20735] ip6tnl1: entered allmulticast mode
[  628.904795][T20773] openvswitch: netlink: IP tunnel dst address not specified
[  628.908778][T20773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  629.075304][  T803] tipc: Node number set to 2886997039
[  629.429753][T20804] loop3: detected capacity change from 0 to 512
[  629.435664][T20804] EXT4-fs: Ignoring removed nobh option
[  629.445569][T20804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  629.475792][T20804] EXT4-fs (loop3): 1 truncate cleaned up
[  629.480343][T20804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.580772][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.651230][   T34] audit: type=1400 audit(1396.692:213): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=20809 comm="syz.3.6149" name="p" offset=92
[  629.705829][T20812] loop3: detected capacity change from 0 to 256
[  629.715761][T20812] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  629.823249][T20818] netlink: 'syz.3.6153': attribute type 2 has an invalid length.
[  630.310822][T20834] netlink: 'syz.4.6161': attribute type 4 has an invalid length.
[  631.572394][   T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  631.754734][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  631.759260][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6180'.
[  631.766447][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  631.772414][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  631.780703][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  631.785771][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  631.789914][   T24] usb 4-1: Product: syz
[  631.792135][   T24] usb 4-1: Manufacturer: syz
[  631.794257][   T24] usb 4-1: SerialNumber: syz
[  632.009713][   T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  632.189702][T20885] netlink: 'syz.4.6186': attribute type 10 has an invalid length.
[  632.224610][T14414] usb 4-1: USB disconnect, device number 33
[  632.244428][T14414] usblp0: removed
[  632.266260][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6187'.
[  632.300864][T13120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.304486][T13120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.463913][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  633.489006][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  633.495644][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  633.513149][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  633.524654][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  633.837550][ T5638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.851160][ T5638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.224031][ T5638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.227545][ T5638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.396059][ T5638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.399978][ T5638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.437567][T20951] loop3: detected capacity change from 0 to 4096
[  634.511607][T20953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  634.546219][ T5638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.550354][ T5638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.822167][T20963] netlink: 'syz.3.6220': attribute type 1 has an invalid length.
[  635.145703][ T5343] 8021q: adding VLAN 0 to HW filter on device eth5
[  635.215240][ T5638] bridge_slave_1: left allmulticast mode
[  635.217261][ T5638] bridge_slave_1: left promiscuous mode
[  635.220119][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.237250][ T5638] bridge_slave_0: left allmulticast mode
[  635.247960][ T5638] bridge_slave_0: left promiscuous mode
[  635.250862][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.302062][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6227'.
[  635.478580][ T5638] bond0 (unregistering): (slave geneve2): Releasing active interface
[  635.537152][ T5638] bond0 (unregistering): Released all slaves
[  635.582742][ T5599] Bluetooth: hci0: command tx timeout
[  635.700291][T20911] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.709116][T20911] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.727525][T20911] bridge_slave_0: entered allmulticast mode
[  635.736209][T20911] bridge_slave_0: entered promiscuous mode
[  635.748211][T20911] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.753430][T20911] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.761622][T20911] bridge_slave_1: entered allmulticast mode
[  635.767420][T20911] bridge_slave_1: entered promiscuous mode
[  635.785815][ T5638] tipc: Disabling bearer <udp:syz2>
[  635.798967][ T5638] tipc: Left network mode
[  635.905875][T20911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  635.919657][T21006] loop3: detected capacity change from 0 to 164
[  635.922627][T20911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  636.109909][T21006] Unsupported NM flag settings (240)
[  636.198531][T20911] team0: Port device team_slave_0 added
[  636.263785][T20911] team0: Port device team_slave_1 added
[  636.289309][ T5343] 8021q: adding VLAN 0 to HW filter on device eth6
[  636.388418][T20911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.416087][T20911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.428047][T20911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.570755][T20911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.573722][T20911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.582850][T20911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.749066][T21025] loop3: detected capacity change from 0 to 1024
[  636.788486][T21025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.866946][ T5638] hsr_slave_0: left promiscuous mode
[  636.869549][ T5638] hsr_slave_1: left promiscuous mode
[  636.871835][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  636.874698][ T5638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.885268][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.891303][ T5638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.903101][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.988192][ T5638] veth1_macvtap: left promiscuous mode
[  636.990244][ T5638] veth0_macvtap: left promiscuous mode
[  636.992439][ T5638] veth1_vlan: left promiscuous mode
[  637.091486][T21042] loop3: detected capacity change from 0 to 16
[  637.096165][T21042] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  637.108893][T21042] cramfs: wrong endianness
[  637.569844][ T5638] team0 (unregistering): Port device team_slave_1 removed
[  637.585722][ T5638] team0 (unregistering): Port device team_slave_0 removed
[  637.683165][ T5599] Bluetooth: hci0: command tx timeout
[  637.823261][T20911] hsr_slave_0: entered promiscuous mode
[  637.826181][T20911] hsr_slave_1: entered promiscuous mode
[  637.830712][ T5343] 8021q: adding VLAN 0 to HW filter on device eth7
[  637.949418][T21059] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  637.956073][T21059] overlayfs: missing 'lowerdir'
[  638.364018][ T5343] 8021q: adding VLAN 0 to HW filter on device eth8
[  639.125445][T20911] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  639.132367][T20911] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  639.137026][T20911] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  639.149290][T20911] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  639.152702][T20911] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  639.158212][T20911] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  639.167378][T20911] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  639.173555][T20911] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  639.276879][T20911] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.302783][T20911] 8021q: adding VLAN 0 to HW filter on device team0
[  639.317072][T13114] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.328227][T13114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.343495][T13114] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.346852][T13114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.759480][ T5599] Bluetooth: hci0: command tx timeout
[  639.840540][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6276'.
[  639.921119][T20911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  640.160843][T20911] veth0_vlan: entered promiscuous mode
[  640.170825][T20911] veth1_vlan: entered promiscuous mode
[  640.207132][T20911] veth0_macvtap: entered promiscuous mode
[  640.214892][T20911] veth1_macvtap: entered promiscuous mode
[  640.239206][T20911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.304510][T20911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.324377][ T5638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.332287][ T5638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.338258][ T5638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.339932][   T34] audit: type=1400 audit(1407.359:214): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=21159 comm="syz.3.6284" name="p" offset=79
[  640.347298][ T5638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.561157][T13094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.579844][T13094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.668407][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.671803][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.869915][T21171] overlayfs: missing 'workdir'
[  640.922210][T21171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  641.103751][T21169] loop5: detected capacity change from 0 to 32768
[  641.200616][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.200616][T21169] 
[  641.204607][T21169] ERROR: (device loop5): remounting filesystem as read-only
[  641.207056][T21169] xtLookup: xtSearch returned -5
[  641.215753][T21169] free_index: error reading directory table
[  641.219791][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.219791][T21169] 
[  641.236276][T21169] xtLookup: xtSearch returned -5
[  641.238734][T21169] free_index: error reading directory table
[  641.240602][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.240602][T21169] 
[  641.243808][T21169] xtLookup: xtSearch returned -5
[  641.245374][T21169] free_index: error reading directory table
[  641.247936][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.247936][T21169] 
[  641.250871][T21169] xtLookup: xtSearch returned -5
[  641.256043][T21169] free_index: error reading directory table
[  641.259326][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.259326][T21169] 
[  641.265319][T21169] xtLookup: xtSearch returned -5
[  641.267182][T21169] free_index: error reading directory table
[  641.269449][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.269449][T21169] 
[  641.277230][T21169] xtLookup: xtSearch returned -5
[  641.297922][T21169] add_index: get/read_metapage failed!
[  641.303990][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.303990][T21169] 
[  641.312607][T21169] xtLookup: xtSearch returned -5
[  641.314784][T21169] free_index: error reading directory table
[  641.318754][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.318754][T21169] 
[  641.335366][T21169] xtLookup: xtSearch returned -5
[  641.350546][T21169] free_index: error reading directory table
[  641.354496][T21169] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  641.354496][T21169] 
[  641.356621][T21189] overlayfs: failed to clone upperpath
[  641.364775][T21169] xtLookup: xtSearch returned -5
[  641.367262][T21169] free_index: error reading directory table
[  641.382287][T21169] Bad maxslot:0 in dtpage (expected 128)
[  641.382287][T21169] 
[  641.387690][T21169] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt
[  641.387690][T21169] 
[  641.404333][T21169] ERROR: (device loop5): remounting filesystem as read-only
[  641.418118][T21169] jfs_lookup: dtSearch returned -5
[  641.432711][T21191] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6298'.
[  641.667787][T21202] team0: entered promiscuous mode
[  641.682245][T21202] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  641.835707][ T5599] Bluetooth: hci0: command tx timeout
[  642.486703][T21233] loop3: detected capacity change from 0 to 1024
[  642.498155][T21233] EXT4-fs: Ignoring removed bh option
[  642.552010][T21233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  642.756199][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.914305][T21244] syzkaller0: entered promiscuous mode
[  642.920514][T21244] syzkaller0: entered allmulticast mode
[  642.934852][T21244] tipc: Started in network mode
[  642.937153][T21244] tipc: Node identity 6a4456d69a8, cluster identity 4711
[  642.949835][T21244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  642.956459][T21243] tipc: Resetting bearer <eth:syzkaller0>
[  642.996679][T21243] tipc: Disabling bearer <eth:syzkaller0>
[  643.395756][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6332'.
[  643.783918][T21275] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.930087][T21278] loop3: detected capacity change from 0 to 8
[  643.942460][T21278] SQUASHFS error: Unable to read inode 0x11f
[  644.233170][ T5343] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  644.642667][T21289] loop3: detected capacity change from 0 to 131072
[  644.646200][T21289] F2FS-fs (loop3): invalid crc value
[  644.698095][T21289] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  644.706496][T21289] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  644.726965][   T34] audit: type=1800 audit(1411.729:215): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6340" name="file1" dev="loop3" ino=7 res=0 errno=0
[  645.631054][   T34] audit: type=1326 audit(1412.638:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.6355" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x0
[  646.112865][   T33] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  646.282260][   T33] usb 4-1: Using ep0 maxpacket: 32
[  646.291438][   T33] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  646.299315][   T33] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  646.303164][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.306591][   T33] usb 4-1: Product: syz
[  646.308329][   T33] usb 4-1: Manufacturer: syz
[  646.310250][   T33] usb 4-1: SerialNumber: syz
[  646.318479][   T33] usb 4-1: config 0 descriptor??
[  646.325561][   T33] usb 4-1: No union descriptors
[  646.336803][   T33] usb 4-1: unsupported MDLM descriptors
[  646.529998][ T5679] usb 4-1: USB disconnect, device number 34
[  647.091123][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6358'.
[  647.099987][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6358'.
[  648.799565][T21354] fuse: fd is not a fuse device
[  649.321705][T21377] loop3: detected capacity change from 0 to 512
[  649.324869][T21377] EXT4-fs: Ignoring removed oldalloc option
[  649.327684][T21377] EXT4-fs (loop3): Test dummy encryption mode enabled
[  649.347205][T21377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.411098][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.759272][  T803] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  649.909398][  T803] usb 4-1: Using ep0 maxpacket: 8
[  649.913481][  T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  649.917716][  T803] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  649.929789][  T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.935663][  T803] usb 4-1: config 0 descriptor??
[  649.954941][  T803] gspca_main: vc032x-2.14.0 probing 046d:0892
[  651.155295][  T803] gspca_vc032x: reg_w err -71
[  651.159791][  T803] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[  651.170299][  T803] usb 4-1: USB disconnect, device number 35
[  651.429316][T21423] netlink: 'syz.0.6389': attribute type 20 has an invalid length.
[  651.506481][T21427] netlink: 'syz.0.6391': attribute type 15 has an invalid length.
[  651.964050][T21445] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6397'.
[  652.055832][T21449] gfs2: not a GFS2 filesystem
[  652.134417][   T34] audit: type=1800 audit(1419.105:217): pid=21451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6399" name="file2" dev="tmpfs" ino=5265 res=0 errno=0
[  652.894365][T21431] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6393'.
[  653.213478][T21456] bond0: (slave gtp0): refused to change device type
[  653.566835][ T5710] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  653.717870][ T5710] usb 4-1: Using ep0 maxpacket: 16
[  653.723549][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  653.729723][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  653.735004][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  653.741939][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  653.750960][ T5710] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  653.756093][ T5710] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  653.761305][ T5710] usb 4-1: Manufacturer: syz
[  653.767724][ T5710] usb 4-1: config 0 descriptor??
[  653.998825][ T5710] usb 4-1: USB disconnect, device number 36
[  655.034188][T21488] netlink: 540 bytes leftover after parsing attributes in process `syz.0.6415'.
[  655.088304][T21490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6416'.
[  656.730632][T14225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  656.751098][T14225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  656.758855][T14225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  656.761863][T14225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  656.764998][T14225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  657.206202][T21513] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.209245][T21513] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.212411][T21513] bridge_slave_0: entered allmulticast mode
[  657.217661][T21513] bridge_slave_0: entered promiscuous mode
[  657.222861][T21513] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.228076][T21513] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.231050][T21513] bridge_slave_1: entered allmulticast mode
[  657.235358][T21513] bridge_slave_1: entered promiscuous mode
[  657.271181][T21513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.278417][T21513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.308541][T21513] team0: Port device team_slave_0 added
[  657.312425][T21513] team0: Port device team_slave_1 added
[  657.329829][T21513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  657.334114][T21513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.345768][T21513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  657.352665][T21513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  657.357115][T21513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.369115][T21513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  657.422854][T21513] hsr_slave_0: entered promiscuous mode
[  657.426460][T21513] hsr_slave_1: entered promiscuous mode
[  657.430104][T21513] debugfs: 'hsr0' already exists in 'hsr'
[  657.432893][T21513] Cannot create hsr debugfs directory
[  657.509123][T21541] tipc: Started in network mode
[  657.511516][T21541] tipc: Node identity 080211, cluster identity 4711
[  657.514672][T21541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  657.931095][T21513] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  657.958258][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  657.968466][T21513] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  657.981218][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  658.004827][T21555] Non-string source
[  658.009971][T21513] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  658.022045][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  658.041053][T21513] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  658.051878][T21513] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  658.110721][T21513] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.113396][T21513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  658.116041][T21513] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.118941][T21513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.156747][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.172617][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.380027][T21513] 8021q: adding VLAN 0 to HW filter on device bond0
[  658.403123][T21513] 8021q: adding VLAN 0 to HW filter on device team0
[  658.410701][T13094] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.413609][T13094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.422790][T13094] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.425113][T13094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  658.537513][ T5679] tipc: Node number set to 134353152
[  658.646953][  T803] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  658.745141][T21513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  658.827086][T14225] Bluetooth: hci3: command tx timeout
[  658.827227][  T803] usb 4-1: Using ep0 maxpacket: 16
[  658.840558][  T803] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  658.843499][  T803] usb 4-1: config 0 has no interface number 0
[  658.845664][  T803] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  658.849239][  T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.855266][  T803] usb 4-1: config 0 descriptor??
[  658.947150][T21513] veth0_vlan: entered promiscuous mode
[  658.979567][T21513] veth1_vlan: entered promiscuous mode
[  659.012493][T21513] veth0_macvtap: entered promiscuous mode
[  659.021862][T21513] veth1_macvtap: entered promiscuous mode
[  659.038912][T21513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  659.054493][T21513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  659.079910][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  659.083839][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  659.091373][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  659.095539][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  659.361978][T13120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.366853][T13120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.481140][T21598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6448'.
[  659.509712][  T803] uclogic 0003:28BD:0071.0013: pen parameters not found
[  659.510797][T13133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.524207][T13133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.524539][  T803] uclogic 0003:28BD:0071.0013: interface is invalid, ignoring
[  659.659528][T21603] xt_CONNSECMARK: invalid mode: 0
[  659.725097][ T5710] usb 4-1: USB disconnect, device number 37
[  660.355457][T21607] loop6: detected capacity change from 0 to 131072
[  660.379042][T21607] F2FS-fs (loop6): invalid crc value
[  660.447340][T21607] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  660.461057][T21607] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  660.911455][T14225] Bluetooth: hci3: command tx timeout
[  661.066351][T21648] netlink: 'syz.0.6470': attribute type 6 has an invalid length.
[  661.243674][T21659] loop3: detected capacity change from 0 to 512
[  661.299953][T21659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  661.372289][T13677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  661.976113][T21684] loop3: detected capacity change from 0 to 32768
[  662.006591][T21684] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  662.091327][T21684] XFS (loop3): Ending clean mount
[  662.108867][T21684] XFS (loop3): Quotacheck needed: Please wait.
[  662.280366][T21684] XFS (loop3): Quotacheck: Done.
[  662.637539][T13677] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  662.994632][T14225] Bluetooth: hci3: command tx timeout
[  663.179709][T21734] 8021q: adding VLAN 0 to HW filter on device team0
[  663.268034][T21734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  663.322144][T21739] input: syz0 as /devices/virtual/input/input20
[  663.388097][T21734] 8021q: adding VLAN 0 to HW filter on device bond2
[  663.421137][T21734] 8021q: adding VLAN 0 to HW filter on device batadv1
[  663.447999][T21734] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  663.529479][ T5638] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  663.604301][   T34] audit: type=1400 audit(1430.573:218): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=21740 comm="syz.3.6506" name="foo" offset=81
[  663.755699][T21747] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6509'.
[  663.768064][T21747] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6509'.
[  663.874186][T21749] loop6: detected capacity change from 0 to 2048
[  663.966637][    T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  663.981456][T21749] hpfs: filesystem error: improperly stopped; already mounted read-only
[  663.984624][T21749] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  663.987810][T21749] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000
[  664.126869][    T9] usb 4-1: Using ep0 maxpacket: 16
[  664.130285][    T9] usb 4-1: config 0 has an invalid interface number: 66 but max is 0
[  664.133064][    T9] usb 4-1: config 0 has no interface number 0
[  664.150175][    T9] usb 4-1: config 0 interface 66 has no altsetting 0
[  664.155286][    T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa
[  664.158634][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.161246][    T9] usb 4-1: Product: syz
[  664.162533][    T9] usb 4-1: Manufacturer: syz
[  664.165077][    T9] usb 4-1: SerialNumber: syz
[  664.171502][    T9] usb 4-1: config 0 descriptor??
[  664.435267][T21767] loop6: detected capacity change from 0 to 8192
[  664.628622][    T9] usb 4-1: selecting invalid altsetting 3
[  664.630548][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  664.632967][    T9] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device.
[  664.638854][    T9] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22
[  664.643111][    T9] usb 4-1: USB disconnect, device number 38
[  664.719781][T21767] Bluetooth: MGMT ver 1.23
[  664.899257][T21774] ima: policy update failed
[  664.901258][   T34] audit: type=1802 audit(1431.870:219): pid=21774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.6521" res=0 errno=0
[  665.078826][T14225] Bluetooth: hci3: command tx timeout
[  665.165128][T21783] loop3: detected capacity change from 0 to 1764
[  665.299240][    T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  665.419196][ T5710] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  665.456166][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  665.470579][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  665.475010][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  665.485945][    T9] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  665.493987][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.499378][    T9] usb 7-1: Product: syz
[  665.500835][    T9] usb 7-1: Manufacturer: syz
[  665.503868][    T9] usb 7-1: SerialNumber: syz
[  665.512875][    T9] oti6858 7-1:1.0: oti6858 converter detected
[  665.544094][    T9] usb 7-1: oti6858 converter now attached to ttyUSB0
[  665.584761][ T5710] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  665.592638][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.599468][ T5710] usb 4-1: Product: syz
[  665.601931][ T5710] usb 4-1: Manufacturer: syz
[  665.603578][ T5710] usb 4-1: SerialNumber: syz
[  665.610646][ T5710] usb 4-1: config 0 descriptor??
[  665.617397][ T5710] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  665.622499][T21796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  665.830570][T21781] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90
[  665.836479][    T9] usb 7-1: USB disconnect, device number 2
[  665.846433][    T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  665.850135][    T9] oti6858 7-1:1.0: device disconnected
[  666.028436][    T9] usb 4-1: USB disconnect, device number 39
[  666.654201][T21815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6541'.
[  667.883632][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  668.104401][T21856] loop3: detected capacity change from 0 to 32768
[  668.108111][T21856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6559 (21856)
[  668.133394][T21856] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  668.140626][T21856] BTRFS info (device loop3): using sha256 checksum algorithm
[  668.143070][T21863] vhci_hcd vhci_hcd.0: failed to lookup sock
[  668.259815][T21856] BTRFS info (device loop3): enabling ssd optimizations
[  668.263943][T21856] BTRFS info (device loop3): turning on async discard
[  668.285582][T21856] BTRFS info (device loop3): enabling free space tree
[  668.323456][T21856] BTRFS info (device loop3): device stats zeroed by syz.3.6559 (21856)
[  668.380942][T13677] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  669.024096][T21906] loop3: detected capacity change from 0 to 128
[  669.069026][T21906] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  669.114454][T13677] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  669.151887][T21913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6580'.
[  669.717248][   T33] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  669.867077][   T33] usb 7-1: Using ep0 maxpacket: 32
[  669.871567][   T33] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.876174][   T33] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.880797][   T33] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  669.884441][   T33] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.895195][   T33] usb 7-1: config 0 descriptor??
[  669.960301][ T5710] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  670.122726][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  670.127153][ T5710] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  670.131923][ T5710] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  670.140011][ T5710] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  670.145214][ T5710] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  670.149595][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.318764][   T33] koneplus 0003:1E7D:2D51.0014: unknown main item tag 0x0
[  670.329008][   T33] koneplus 0003:1E7D:2D51.0014: unknown main item tag 0x0
[  670.332114][   T33] koneplus 0003:1E7D:2D51.0014: unknown main item tag 0x0
[  670.335038][   T33] koneplus 0003:1E7D:2D51.0014: unknown main item tag 0x0
[  670.338873][   T33] koneplus 0003:1E7D:2D51.0014: unknown main item tag 0x0
[  670.355985][   T33] koneplus 0003:1E7D:2D51.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0
[  670.376448][ T5710] gud 4-1:1.0: probe with driver gud failed with error -22
[  670.514697][   T33] koneplus 0003:1E7D:2D51.0014: couldn't init struct koneplus_device
[  670.521447][   T33] koneplus 0003:1E7D:2D51.0014: couldn't install mouse
[  670.540649][   T33] koneplus 0003:1E7D:2D51.0014: probe with driver koneplus failed with error -71
[  670.554233][   T33] usb 7-1: USB disconnect, device number 3
[  670.585451][ T5710] usb 4-1: USB disconnect, device number 40
[  671.358188][T21944] ip_tables: iptables: counters copy to user failed while replacing table
[  671.375797][T21947] xt_hashlimit: size too large, truncated to 1048576
[  671.389020][T21949] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  671.474423][T21954] netlink: 'syz.3.6598': attribute type 1 has an invalid length.
[  671.492280][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6598'.
[  672.305183][T21987] loop6: detected capacity change from 0 to 32768
[  672.420609][   T34] audit: type=1326 audit(1439.377:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.451550][   T34] audit: type=1326 audit(1439.387:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.473586][   T34] audit: type=1326 audit(1439.387:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.501091][   T34] audit: type=1326 audit(1439.387:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.525508][   T34] audit: type=1326 audit(1439.397:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.542339][   T34] audit: type=1326 audit(1439.397:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.564160][   T34] audit: type=1326 audit(1439.397:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.575374][   T34] audit: type=1326 audit(1439.397:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.591865][   T34] audit: type=1326 audit(1439.397:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.608936][   T34] audit: type=1326 audit(1439.397:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22001 comm="syz.0.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d639e0d9 code=0x7ffc0000
[  672.651028][T22009] process '/newroot/2472/file0' started with executable stack
[  673.885307][T22038] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  676.469206][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  687.370502][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  687.373757][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  693.767689][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  694.137591][T20911] jfs_flush_journal: synclist not empty
[  694.143960][T20911] metapage: ffff888171d167c0: 00001000 00000000 00003b90 00000000
[  694.146945][T20911] metapage: ffff888171d167d0: bb8f37d0 ffff8881 bb010a20 ffff8881
[  694.152298][T20911] metapage: ffff888171d167e0: 00000004 00000000 00000000 00000000
[  694.157686][T20911] metapage: ffff888171d167f0: c0d8f000 ffff8881 00000030 00000000
[  694.161892][T20911] metapage: ffff888171d16800: 00000000 dead4ead ffffffff 00000000
[  694.165023][T20911] metapage: ffff888171d16810: ffffffff ffffffff 9a8e8bc0 ffffffff
[  694.168139][T20911] metapage: ffff888171d16820: 941e3b48 ffffffff 00000000 00000000
[  694.171442][T20911] metapage: ffff888171d16830: 8c2c64a0 ffffffff 00000300 00000000
[  694.174667][T20911] metapage: ffff888171d16840: 71d16840 ffff8881 71d16840 ffff8881
[  694.178028][T20911] metapage: ffff888171d16850: 070363c0 ffffea00 bbdfe000 ffff8881
[  694.180591][T20911] metapage: ffff888171d16860: 00001000 000041ec 00000000 00000000
[  694.183410][T20911] metapage: ffff888171d16870: bb010800 ffff8881
[  694.185757][T20911] page: ffffea00070363c0: 057ff0000000403c ffffea0007032588
[  694.188186][T20911] page: ffffea00070363d0: ffff8881bb6e08e8 0000000000000000
[  694.191005][T20911] page: ffffea00070363e0: 0000000000000030 ffff888171d167c0
[  694.193978][T20911] page: ffffea00070363f0: 00000001ffffffff ffff88810ae80e00
[  694.196514][T20911] metapage: ffff8881bb8f37c0: 00001000 00000000 00004078 00000000
[  694.200487][T20911] metapage: ffff8881bb8f37d0: 033539c0 ffff8881 71d167d0 ffff8881
[  694.203603][T20911] metapage: ffff8881bb8f37e0: 00000004 00000000 00000000 00000000
[  694.206610][T20911] metapage: ffff8881bb8f37f0: c0c99000 ffff8881 0000002c 00000000
[  694.210210][T20911] metapage: ffff8881bb8f3800: 00000000 dead4ead ffffffff 00000000
[  694.212755][T20911] metapage: ffff8881bb8f3810: ffffffff ffffffff 9a8e8bc0 ffffffff
[  694.215321][T20911] metapage: ffff8881bb8f3820: 941e3b48 ffffffff 00000000 00000000
[  694.217919][T20911] metapage: ffff8881bb8f3830: 8c2c64a0 ffffffff 00000300 00000000
[  694.220317][T20911] metapage: ffff8881bb8f3840: bb8f3840 ffff8881 bb8f3840 ffff8881
[  694.222760][T20911] metapage: ffff8881bb8f3850: 07032640 ffffea00 bbdfe000 ffff8881
[  694.226588][T20911] metapage: ffff8881bb8f3860: 00001000 000041ec 00000000 00000000
[  694.229930][T20911] metapage: ffff8881bb8f3870: bb010800 ffff8881
[  694.231938][T20911] page: ffffea0007032640: 057ff00000004138 ffffea0007032688
[  694.234209][T20911] page: ffffea0007032650: ffffea00070329c8 0000000000000000
[  694.236451][T20911] page: ffffea0007032660: 000000000000002c ffff8881bb8f37c0
[  694.238832][T20911] page: ffffea0007032670: 00000001ffffffff ffff88810ae80e00
[  694.241124][T20911] metapage: ffff8881033539b0: 00001000 00000000 00004120 00000000
[  694.243784][T20911] metapage: ffff8881033539c0: bb010a20 ffff8881 bb8f37d0 ffff8881
[  694.246628][T20911] metapage: ffff8881033539d0: 00000004 00000000 00000000 00000000
[  694.250095][T20911] metapage: ffff8881033539e0: c0ca7000 ffff8881 0000001c 00000000
[  694.253188][T20911] metapage: ffff8881033539f0: 00000000 dead4ead ffffffff 00000000
[  694.256246][T20911] metapage: ffff888103353a00: ffffffff ffffffff 9a8e8bc0 ffffffff
[  694.259316][T20911] metapage: ffff888103353a10: 941e3b48 ffffffff 00000000 00000000
[  694.261986][T20911] metapage: ffff888103353a20: 8c2c64a0 ffffffff 00000300 00000000
[  694.264552][T20911] metapage: ffff888103353a30: 03353a30 ffff8881 03353a30 ffff8881
[  694.266974][T20911] metapage: ffff888103353a40: 070329c0 ffffea00 bbdfe000 ffff8881
[  694.270701][T20911] metapage: ffff888103353a50: 00001000 000041ec 00000000 00000000
[  694.273747][T20911] metapage: ffff888103353a60: bb010800 ffff8881
[  694.276093][T20911] page: ffffea00070329c0: 057ff00000004138 ffffea0007032648
[  694.279069][T20911] page: ffffea00070329d0: ffff8881bb6e08f8 0000000000000000
[  694.281912][T20911] page: ffffea00070329e0: 000000000000001c ffff8881033539b0
[  694.284696][T20911] page: ffffea00070329f0: 00000001ffffffff ffff88810ae80e00
[  727.735767][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  746.549126][T20911] jfs_flush_journal: synclist not empty
[  746.552214][T20911] metapage: ffff888171d167c0: 00001000 00000000 00003b90 00000000
[  746.555455][T20911] metapage: ffff888171d167d0: bb8f37d0 ffff8881 bb010a20 ffff8881
[  746.558646][T20911] metapage: ffff888171d167e0: 00000004 00000000 00000000 00000000
[  746.561957][T20911] metapage: ffff888171d167f0: c0d8f000 ffff8881 00000030 00000000
[  746.565142][T20911] metapage: ffff888171d16800: 00000000 dead4ead ffffffff 00000000
[  746.568258][T20911] metapage: ffff888171d16810: ffffffff ffffffff 9a8e8bc0 ffffffff
[  746.571535][T20911] metapage: ffff888171d16820: 941e3b48 ffffffff 00000000 00000000
[  746.574538][T20911] metapage: ffff888171d16830: 8c2c64a0 ffffffff 00000300 00000000
[  746.577494][T20911] metapage: ffff888171d16840: 71d16840 ffff8881 71d16840 ffff8881
[  746.580612][T20911] metapage: ffff888171d16850: 070363c0 ffffea00 bbdfe000 ffff8881
[  746.583589][T20911] metapage: ffff888171d16860: 00001000 000041ec 00000000 00000000
[  746.586519][T20911] metapage: ffff888171d16870: bb010800 ffff8881
[  746.588911][T20911] page: ffffea00070363c0: 057ff0000000403c ffffea0007032588
[  746.591922][T20911] page: ffffea00070363d0: ffffea0006f7b308 0000000000000000
[  746.594896][T20911] page: ffffea00070363e0: 0000000000000030 ffff888171d167c0
[  746.597844][T20911] page: ffffea00070363f0: 00000001ffffffff ffff88810ae80e00
[  746.600847][T20911] metapage: ffff8881bb8f37c0: 00001000 00000000 00004078 00000000
[  746.603916][T20911] metapage: ffff8881bb8f37d0: 033539c0 ffff8881 71d167d0 ffff8881
[  746.607053][T20911] metapage: ffff8881bb8f37e0: 00000004 00000000 00000000 00000000
[  746.610267][T20911] metapage: ffff8881bb8f37f0: c0c99000 ffff8881 0000002c 00000000
[  746.613424][T20911] metapage: ffff8881bb8f3800: 00000000 dead4ead ffffffff 00000000
[  746.616513][T20911] metapage: ffff8881bb8f3810: ffffffff ffffffff 9a8e8bc0 ffffffff
[  746.619794][T20911] metapage: ffff8881bb8f3820: 941e3b48 ffffffff 00000000 00000000
[  746.624531][T20911] metapage: ffff8881bb8f3830: 8c2c64a0 ffffffff 00000300 00000000
[  746.628309][T20911] metapage: ffff8881bb8f3840: bb8f3840 ffff8881 bb8f3840 ffff8881
[  746.631553][T20911] metapage: ffff8881bb8f3850: 07032640 ffffea00 bbdfe000 ffff8881
[  746.634652][T20911] metapage: ffff8881bb8f3860: 00001000 000041ec 00000000 00000000
[  746.637841][T20911] metapage: ffff8881bb8f3870: bb010800 ffff8881
[  746.641197][T20911] page: ffffea0007032640: 057ff00000004138 ffffea0005d55148
[  746.644052][T20911] page: ffffea0007032650: ffffea00070329c8 0000000000000000
[  746.646933][T20911] page: ffffea0007032660: 000000000000002c ffff8881bb8f37c0
[  746.649809][T20911] page: ffffea0007032670: 00000001ffffffff ffff88810ae80e00
[  746.652753][T20911] metapage: ffff8881033539b0: 00001000 00000000 00004120 00000000
[  746.655865][T20911] metapage: ffff8881033539c0: bb010a20 ffff8881 bb8f37d0 ffff8881
[  746.658949][T20911] metapage: ffff8881033539d0: 00000004 00000000 00000000 00000000
[  746.663177][T20911] metapage: ffff8881033539e0: c0ca7000 ffff8881 0000001c 00000000
[  746.666321][T20911] metapage: ffff8881033539f0: 00000000 dead4ead ffffffff 00000000
[  746.669579][T20911] metapage: ffff888103353a00: ffffffff ffffffff 9a8e8bc0 ffffffff
[  746.672681][T20911] metapage: ffff888103353a10: 941e3b48 ffffffff 00000000 00000000
[  746.675723][T20911] metapage: ffff888103353a20: 8c2c64a0 ffffffff 00000300 00000000
[  746.678849][T20911] metapage: ffff888103353a30: 03353a30 ffff8881 03353a30 ffff8881
[  746.682331][T20911] metapage: ffff888103353a40: 070329c0 ffffea00 bbdfe000 ffff8881
[  746.685502][T20911] metapage: ffff888103353a50: 00001000 000041ec 00000000 00000000
[  746.688667][T20911] metapage: ffff888103353a60: bb010800 ffff8881
[  746.691283][T20911] page: ffffea00070329c0: 057ff00000004138 ffffea0007032648
[  746.694221][T20911] page: ffffea00070329d0: ffffea0007032a08 0000000000000000
[  746.697228][T20911] page: ffffea00070329e0: 000000000000001c ffff8881033539b0
[  746.700211][T20911] page: ffffea00070329f0: 00000001ffffffff ffff88810ae80e00
[  747.190567][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.312249][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.451217][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.566131][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.689533][   T12] bridge_slave_1: left allmulticast mode
[  747.696769][   T12] bridge_slave_1: left promiscuous mode
[  747.698818][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.704528][   T12] bridge_slave_0: left allmulticast mode
[  747.706493][   T12] bridge_slave_0: left promiscuous mode
[  747.708719][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.886159][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  747.905938][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  747.911628][   T12] bond0 (unregistering): Released all slaves
[  748.138100][ T5343] 8021q: adding VLAN 0 to HW filter on device eth9
[  748.198113][   T12] hsr_slave_0: left promiscuous mode
[  748.200336][   T12] hsr_slave_1: left promiscuous mode
[  748.202856][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  748.205189][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  748.207873][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  748.210184][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  748.219433][   T12] veth1_macvtap: left promiscuous mode
[  748.223579][   T12] veth0_macvtap: left promiscuous mode
[  748.225397][   T12] veth1_vlan: left promiscuous mode
[  748.227133][   T12] veth0_vlan: left promiscuous mode
[  748.400782][   T12] team0 (unregistering): Port device team_slave_1 removed
[  748.409865][   T12] team0 (unregistering): Port device team_slave_0 removed
[  748.499918][ T5343] 8021q: adding VLAN 0 to HW filter on device eth10
[  748.757361][ T5343] 8021q: adding VLAN 0 to HW filter on device eth11
[  748.882950][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  748.885222][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  748.893959][ T5343] 8021q: adding VLAN 0 to HW filter on device eth12
[  781.718417][T22110] Bluetooth: hci3: command 0x0406 tx timeout
[  795.011922][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  810.390024][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  810.393101][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  871.890761][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  871.894307][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  933.361984][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  933.363488][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  933.368448][ T1375] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len

VM DIAGNOSIS:
10:50:43  Registers:
info registers vcpu 0

CPU#0
RAX=000000000064727b RBX=ffffffff819b2d60 RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8e226439 RDI=ffffffff8c4bc280 RBP=ffffffff8e807eb8 RSP=ffffffff8e807de0
R8 =ffff8881210338db R9 =1ffff1102420671b R10=dffffc0000000000 R11=ffffed102420671c
R12=0000000000000000 R13=1ffffffff1d11de8 R14=1ffffffff1d00fc4 R15=dffffc0000000000
RIP=ffffffff8bcf912f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d95d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055617f522680 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000025f2732d 0000000000000023 XMM01=7a797300b6d6bf76 000000000b9a22ea
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0200000000000000 00000000000002ff
XMM06=0200000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000008c2e43 RBX=ffffffff819b2d60 RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8e226439 RDI=ffffffff8c4bc280 RBP=ffffc90000197f10 RSP=ffffc90000197e40
R8 =ffff88823c6338db R9 =1ffff110478c671b R10=dffffc0000000000 R11=ffffed10478c671c
R12=0000000000000000 R13=1ffff1102c096000 R14=1ffff92000032fd0 R15=dffffc0000000000
RIP=ffffffff8bcf912f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055617f521600 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=8080100008808080 04060143c81c1000
XMM02=10000cbf8080040c 0144822c10000880 XMM03=0fffffffffffff04 0480801000018080
XMM04=010410000c10000f ffffffffffff0404 XMM05=8080100001808010 000cbf8080040c01
XMM06=44822c1000088080 8010000880808004 XMM07=060143c81c100004 80808010000c8080
XMM08=0009c00302100009 b0030fffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
