last executing test programs:

6m15.893290887s ago: executing program 1 (id=5):
syz_emit_ethernet(0x92, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "b7c071", 0x5c, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[@dstopts={0x2c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x80, 0x1, 0x0, 0x0, 0x5, 0xb5}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0x4, 0x2, 0x1, 0x1, 0x5, 0x6}, 0x2, {0x10000, 0xcdb, 0x2, 0x6, 0x1, 0x0, 0x2}}}}}}}}}, 0x0)

6m15.829005416s ago: executing program 1 (id=7):
socket$inet6_sctp(0xa, 0x5, 0x84)
clock_gettime(0xa, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

6m15.769218561s ago: executing program 1 (id=9):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e)

6m15.617097505s ago: executing program 1 (id=11):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f0000000280)={0x2, 0x0, @loopback, 0xffffffff}, 0x8)
timer_create(0x8, 0x0, &(0x7f0000000080))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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")
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3ea, 0x4, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20008010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x1f, &(0x7f0000000080)='size=4K%')
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
syz_ublk_setup_io_uring(0x801df8, &(0x7f00000000c0)={0x0, 0xa1db, 0x2000, 0x1, 0x16b}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180), &(0x7f0000000240))
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000000, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
msgget(0x3, 0x41a)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)

6m15.440293294s ago: executing program 1 (id=13):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50)

6m14.48700317s ago: executing program 1 (id=17):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x50}}, 0x48040)

6m14.304356247s ago: executing program 32 (id=17):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x50}}, 0x48040)

4m43.501249433s ago: executing program 2 (id=1656):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000640)='#', 0x1}], 0x1}}], 0x3, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x4, 0x20}, 0xc)

4m43.441406481s ago: executing program 2 (id=1659):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4m43.383479184s ago: executing program 2 (id=1661):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0xa, 0x2})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000200)={0x1})

4m43.382707142s ago: executing program 2 (id=1663):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x200)

4m43.309458549s ago: executing program 2 (id=1665):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x4a, 0x0, 0x6}, 0x28)

4m43.104748109s ago: executing program 2 (id=1672):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}})

4m42.892097155s ago: executing program 33 (id=1672):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}})

3m9.310078534s ago: executing program 4 (id=3369):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

3m9.309889525s ago: executing program 4 (id=3370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)

3m9.24867685s ago: executing program 4 (id=3371):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x13}})

3m9.248383523s ago: executing program 4 (id=3372):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x1c4, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17019583}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x7dc414a2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5424c1c8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x144, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22e2cf5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d34ff87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3453eee0}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f8acf3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d2ccd74}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55328418}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48aab083}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ddd3fbe}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x388878ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2457d848}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b04646f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e08106f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x441c00bb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14a111b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x7, 0x5, 0x605d34db}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xebbb06a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b125135}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x515e053f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x368c4bc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46c088b1}]}]}]}, 0x1c4}}, 0x400c800)

3m9.189918126s ago: executing program 4 (id=3373):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)

3m9.181547615s ago: executing program 4 (id=3374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x42, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180), 0x500}, 0x20)

2m54.288242576s ago: executing program 34 (id=3374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x42, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180), 0x500}, 0x20)

1.886783642s ago: executing program 3 (id=6593):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="b47b693fb8be1e856e", 0x9}], 0x1)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0)
sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="381a54130b1e0ab100", 0x9}, 0x1, 0x0, 0x0, 0x4004}, 0x8010)

1.820369342s ago: executing program 5 (id=6596):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x6, 0x6374, &(0x7f000003fd40)="$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")

1.524997492s ago: executing program 5 (id=6605):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800058004000580"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000)

1.52370921s ago: executing program 5 (id=6607):
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f04000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)

1.0153691s ago: executing program 3 (id=6618):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='-# -3 -4\n', 0x9)

1.013778298s ago: executing program 3 (id=6619):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12002, 0x0)

956.516676ms ago: executing program 5 (id=6620):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}], 0x2)
pipe2(&(0x7f0000001cc0)={<r4=>0xffffffffffffffff}, 0x800)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937e, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x200000008, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000180)=0x7, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_QUERY(0x18, r7, 0x0, &(0x7f00000000c0)='\x00', 0x0)

856.603705ms ago: executing program 3 (id=6621):
r0 = io_uring_setup(0x143, &(0x7f0000000100)={0x0, 0x301e, 0x400, 0x3, 0x10064})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1)

856.453918ms ago: executing program 3 (id=6622):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xbe43, 0xde}, {0x0, 0x0, 0x10, 0x2, 0x8}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})

286.448713ms ago: executing program 0 (id=6626):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000240)={0x3})

286.378074ms ago: executing program 0 (id=6627):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000006b00)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x80)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0)

216.827249ms ago: executing program 0 (id=6628):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40d5}, 0x20040080)

156.170753ms ago: executing program 0 (id=6629):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, 0x0, 0x0)
sendmmsg$inet(r1, 0x0, 0x0, 0xf00)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0)

90.920828ms ago: executing program 5 (id=6630):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000008000000000000000000000085000000a200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

36.19914ms ago: executing program 0 (id=6631):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x101, 0x181902)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000340)={0x3, 0x0, 0x9, 0x8001, 0x8, {0x6, 0x6}})

35.980234ms ago: executing program 5 (id=6632):
semget$private(0x0, 0x93845309c6cf2148, 0x200)

33.009305ms ago: executing program 0 (id=6633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f0000000d80)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000780)}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='lzo', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='1', 0x1)

0s ago: executing program 3 (id=6634):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='select <kernel>\n', 0x10)
write(r0, &(0x7f0000000100)='file read \\+tc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c)

kernel console output (not intermixed with test programs):

ed to get link speed/duplex
[  323.309002][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  323.315775][T17074] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4792'.
[  323.418956][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  323.502325][ T3277] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  323.532877][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  323.562043][T17091] xt_CONNSECMARK: invalid mode: 66
[  323.638979][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  323.649348][ T3277] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  323.653893][ T3277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  323.657302][ T3277] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  323.661287][ T3277] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  323.669647][ T3277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  323.669688][ T3277] usb 4-1: Product: syz
[  323.669733][ T3277] usb 4-1: Manufacturer: syz
[  323.669766][ T3277] usb 4-1: SerialNumber: syz
[  323.749051][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  323.791734][T17099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  323.859443][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  323.889779][ T3277] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  323.914475][T17068] loop3: detected capacity change from 0 to 2048
[  323.967310][T17068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.979883][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  323.995164][ T3277] usb 4-1: USB disconnect, device number 67
[  324.007160][ T3277] usblp0: removed
[  324.629243][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.752705][T17121] loop3: detected capacity change from 0 to 64
[  325.027321][T17136] loop3: detected capacity change from 0 to 128
[  325.041540][T17136] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  325.060293][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  325.403323][T17148] loop3: detected capacity change from 0 to 32768
[  325.407532][T17148] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4823 (17148)
[  325.415466][T17148] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  325.422200][T17148] BTRFS info (device loop3): using blake2b checksum algorithm
[  325.462967][T17148] BTRFS info (device loop3): enabling ssd optimizations
[  325.465635][T17148] BTRFS info (device loop3): turning on async discard
[  325.468751][T17148] BTRFS info (device loop3): enabling free space tree
[  325.478628][ T5660] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  325.498036][ T5765] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  325.640132][ T5660] usb 6-1: Using ep0 maxpacket: 16
[  325.649352][ T5660] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40
[  325.655041][ T5660] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7
[  325.689512][ T5660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.689563][ T5660] usb 6-1: Product: syz
[  325.689643][ T5660] usb 6-1: Manufacturer: syz
[  325.689674][ T5660] usb 6-1: SerialNumber: syz
[  325.945475][T17181] sock: sock_timestamping_bind_phc: sock not bind to device
[  325.957283][T17182] loop3: detected capacity change from 0 to 512
[  325.999293][ T5660] usb 6-1: interface 3 not found
[  326.013118][T17182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.028594][ T5660] usb 6-1: USB disconnect, device number 19
[  326.072086][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.144925][T17191] loop3: detected capacity change from 0 to 64
[  326.198243][T17195] loop3: detected capacity change from 0 to 512
[  326.199630][T17195] EXT4-fs: Ignoring removed orlov option
[  326.213104][T17195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  326.249217][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.295336][    T9] kernel write not supported for file /snd/midiC2D0 (pid: 9 comm: kworker/0:0)
[  326.544646][ T5602] Bluetooth: hci2: unexpected event for opcode 0x2043
[  326.642267][T17228] loop3: detected capacity change from 0 to 512
[  326.651657][T17231] CIFS mount error: No usable UNC path provided in device string!
[  326.651657][T17231] 
[  326.651705][T17231] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  326.661412][T17228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.697657][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.018878][ T5630] net_ratelimit: 36 callbacks suppressed
[  328.018962][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  328.045090][T17287] loop5: detected capacity change from 0 to 2048
[  328.066964][T17287] NILFS (loop5): The specified checkpoint is not a snapshot (checkpoint number=2)
[  328.075869][T17289] pimreg: entered allmulticast mode
[  328.128992][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  328.240411][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  328.273404][T17300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.277716][T17301] netlink: 'syz.3.4881': attribute type 15 has an invalid length.
[  328.358676][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  328.478509][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  328.590587][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  328.699115][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  328.808431][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  328.898495][ T3277] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  328.918395][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  329.051383][ T3277] usb 4-1: Using ep0 maxpacket: 8
[  329.057653][ T3277] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  329.067284][ T3277] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  329.072577][ T3277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  329.072600][ T3277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  329.072615][ T3277] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  329.072647][ T3277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.208606][T17324] loop5: detected capacity change from 0 to 40427
[  329.210143][T17324] F2FS-fs (loop5): invalid crc value
[  329.249816][T17324] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  329.259640][T17324] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  329.259695][T17324] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  329.259733][T17324] F2FS-fs (loop5): Start checkpoint disabled!
[  329.307935][ T3277] usb 4-1: GET_CAPABILITIES returned 0
[  329.310434][ T3277] usbtmc 4-1:16.0: can't read capabilities
[  329.316609][T17324] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  329.318206][T17324] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  329.352280][T14846] kworker/u10:33: attempt to access beyond end of device
[  329.352280][T14846] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  329.352376][T14846] CPU: 1 UID: 0 PID: 14846 Comm: kworker/u10:33 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  329.352414][T14846] Tainted: [L]=SOFTLOCKUP
[  329.352421][T14846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  329.352428][T14846] Workqueue: writeback wb_workfn (flush-7:5)
[  329.352454][T14846] Call Trace:
[  329.352460][T14846]  <TASK>
[  329.352466][T14846]  dump_stack_lvl+0xe8/0x150
[  329.352533][T14846]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  329.352565][T14846]  f2fs_write_end_bio+0x1211/0x16e0
[  329.352581][T14846]  ? blkg_put+0x22/0x240
[  329.352607][T14846]  __submit_merged_bio+0x258/0x6a0
[  329.352627][T14846]  ? rcu_is_watching+0x16/0xb0
[  329.352647][T14846]  __submit_merged_write_cond+0x3c9/0x4e0
[  329.352671][T14846]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  329.352700][T14846]  f2fs_write_data_pages+0x2a27/0x36f0
[  329.352734][T14846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  329.352775][T14846]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  329.352810][T14846]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  329.352836][T14846]  ? __lock_acquire+0x6df/0x2e50
[  329.352860][T14846]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  329.352873][T14846]  ? f2fs_update_inode+0x1394/0x25c0
[  329.352887][T14846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  329.352899][T14846]  do_writepages+0x338/0x560
[  329.352920][T14846]  ? reacquire_held_locks+0x117/0x1a0
[  329.352933][T14846]  ? writeback_sb_inodes+0x450/0x1b00
[  329.352947][T14846]  __writeback_single_inode+0x136/0x1220
[  329.352960][T14846]  ? do_raw_spin_unlock+0x4d/0x200
[  329.352978][T14846]  writeback_sb_inodes+0x9de/0x1b00
[  329.352989][T14846]  ? __lock_acquire+0x6df/0x2e50
[  329.353013][T14846]  ? lock_acquire+0x115/0x350
[  329.353030][T14846]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  329.353065][T14846]  ? rcu_is_watching+0x16/0xb0
[  329.353080][T14846]  ? queue_io+0x2d3/0x470
[  329.353094][T14846]  wb_writeback+0x41c/0xad0
[  329.353109][T14846]  ? queue_io+0x1e1/0x470
[  329.353125][T14846]  ? __pfx_wb_writeback+0x10/0x10
[  329.353136][T14846]  ? do_raw_spin_lock+0x12b/0x2f0
[  329.353159][T14846]  wb_workfn+0x431/0x10f0
[  329.353185][T14846]  ? __pfx_wb_workfn+0x10/0x10
[  329.353199][T14846]  ? rcu_is_watching+0x16/0xb0
[  329.353210][T14846]  ? trace_hrtimer_start+0x82/0x200
[  329.353226][T14846]  ? do_raw_spin_lock+0x12b/0x2f0
[  329.353242][T14846]  ? lock_acquire+0x115/0x350
[  329.353264][T14846]  ? rcu_is_watching+0x16/0xb0
[  329.353275][T14846]  ? process_scheduled_works+0x97a/0x1630
[  329.353288][T14846]  process_scheduled_works+0xc3d/0x1630
[  329.353315][T14846]  ? __pfx_process_scheduled_works+0x10/0x10
[  329.353330][T14846]  ? assign_work+0x3cf/0x5d0
[  329.353345][T14846]  worker_thread+0xa47/0xfb0
[  329.353375][T14846]  kthread+0x38b/0x480
[  329.353386][T14846]  ? __pfx_worker_thread+0x10/0x10
[  329.353401][T14846]  ? __pfx_kthread+0x10/0x10
[  329.353412][T14846]  ret_from_fork+0x514/0xb70
[  329.353428][T14846]  ? __pfx_ret_from_fork+0x10/0x10
[  329.353440][T14846]  ? __switch_to+0xc89/0x1420
[  329.353459][T14846]  ? __pfx_kthread+0x10/0x10
[  329.353472][T14846]  ret_from_fork_asm+0x1a/0x30
[  329.353493][T14846]  </TASK>
[  329.390026][T14846] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  329.516021][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  329.516091][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  329.516120][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  329.516146][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  329.516172][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  329.516198][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  329.516225][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  329.580424][    T9] usb 4-1: USB disconnect, device number 68
[  329.809496][T17345] loop5: detected capacity change from 0 to 32768
[  329.819460][T17345] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.844397][T17345] XFS (loop5): Ending clean mount
[  329.864375][T14032] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  330.245154][T17377] loop5: detected capacity change from 0 to 4096
[  330.251441][T17377] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  330.287639][T17377] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  330.468659][T17391] FAULT_INJECTION: forcing a failure.
[  330.468659][T17391] name failslab, interval 1, probability 0, space 0, times 0
[  330.474100][T17391] CPU: 1 UID: 0 PID: 17391 Comm: syz.5.4918 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  330.474142][T17391] Tainted: [L]=SOFTLOCKUP
[  330.474148][T17391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  330.474156][T17391] Call Trace:
[  330.474164][T17391]  <TASK>
[  330.474170][T17391]  dump_stack_lvl+0xe8/0x150
[  330.474195][T17391]  should_fail_ex+0x410/0x560
[  330.474216][T17391]  should_failslab+0xa8/0x100
[  330.474234][T17391]  __kmalloc_cache_noprof+0xa3/0x600
[  330.474247][T17391]  ? trace_syscall_enter+0x58/0x110
[  330.474263][T17391]  ? do_eventfd+0x79/0x2a0
[  330.474277][T17391]  ? do_eventfd+0x79/0x2a0
[  330.474293][T17391]  do_eventfd+0x79/0x2a0
[  330.474308][T17391]  __x64_sys_eventfd2+0x5a/0x70
[  330.474323][T17391]  do_syscall_64+0x166/0x520
[  330.474337][T17391]  ? trace_irq_disable+0x3b/0x140
[  330.474350][T17391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.474366][T17391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.474381][T17391] RIP: 0033:0x7f75e599e159
[  330.474394][T17391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.474405][T17391] RSP: 002b:00007f75e689c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[  330.474422][T17391] RAX: ffffffffffffffda RBX: 00007f75e5c25fa0 RCX: 00007f75e599e159
[  330.474432][T17391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffff9
[  330.474439][T17391] RBP: 00007f75e5a35024 R08: 0000000000000000 R09: 0000000000000000
[  330.474447][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.474454][T17391] R13: 00007f75e5c26038 R14: 00007f75e5c25fa0 R15: 00007ffcc6287738
[  330.474473][T17391]  </TASK>
[  330.550672][ T5602] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  330.550879][ T5602] Bluetooth: hci2: Injecting HCI hardware error event
[  330.553945][ T5602] Bluetooth: hci2: hardware error 0x00
[  330.780520][T17407] netlink: 'syz.5.4926': attribute type 11 has an invalid length.
[  331.030925][T17418] vxcan3: entered promiscuous mode
[  331.033429][T17418] vxcan3: entered allmulticast mode
[  331.338906][ T5596] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  331.488924][ T5596] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  331.495170][ T5596] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  331.495252][ T5596] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.495364][ T5596] usb 6-1: config 0 has no interface number 0
[  331.508543][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.511889][ T5596] usb 6-1: Product: syz
[  331.511904][ T5596] usb 6-1: Manufacturer: syz
[  331.511913][ T5596] usb 6-1: SerialNumber: syz
[  331.526828][ T5596] usb 6-1: config 0 descriptor??
[  331.938944][ T5596] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  331.939003][ T5596] uvcvideo 6-1:0.64: No valid video chain found.
[  332.153722][    T9] usb 6-1: USB disconnect, device number 20
[  332.627973][ T5602] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  332.732127][T17441] bond2: entered allmulticast mode
[  332.732585][T17441] 8021q: adding VLAN 0 to HW filter on device bond2
[  333.013236][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  333.013401][   T33] audit: type=1326 audit(524621.377:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.0.4947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  333.026735][   T33] audit: type=1326 audit(524621.387:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.0.4947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  333.039102][   T33] audit: type=1326 audit(524621.397:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.0.4947" exe="/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  333.039186][   T33] audit: type=1326 audit(524621.397:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.0.4947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  333.039215][   T33] audit: type=1326 audit(524621.397:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.0.4947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  333.077868][ T5630] net_ratelimit: 36 callbacks suppressed
[  333.078012][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  333.198084][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  333.297971][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  333.407931][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  333.433004][ T5659] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  333.518196][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  333.578921][ T5659] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  333.580040][ T5659] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.580061][ T5659] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.580075][ T5659] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  333.580102][ T5659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.584280][ T5659] usb 6-1: config 0 descriptor??
[  333.625875][T17493] loop3: detected capacity change from 0 to 4096
[  333.639634][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  333.644003][T17493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.682420][T17493] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  333.687590][T17493] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  333.691681][T17493] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.4962: Failed to acquire dquot type 1
[  333.725819][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.758340][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  333.878387][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  333.948570][T17503] tmpfs: Bad value for 'mpol'
[  333.999751][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  334.017186][ T5659] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  334.107901][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  334.112874][   T33] audit: type=1326 audit(524622.477:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.3.4968" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8edf9e159 code=0x0
[  334.971325][T17519] loop3: detected capacity change from 0 to 128
[  334.994747][T17519] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  335.088757][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'.
[  335.108226][T17524] loop3: detected capacity change from 0 to 1764
[  335.134081][T17527] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4975'.
[  335.233704][T17533] TCP: TCP_TX_DELAY enabled
[  335.262614][T17535] netlink: 'syz.0.4979': attribute type 1 has an invalid length.
[  335.336591][T17535] bond5: (slave geneve3): making interface the new active one
[  335.347542][T17535] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  335.368240][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  335.368471][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  335.368495][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  335.368515][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  335.470904][T17551] batadv_slave_1: entered promiscuous mode
[  335.474456][T17550] batadv_slave_1: left promiscuous mode
[  336.090071][    T9] usb 6-1: USB disconnect, device number 21
[  336.302555][   T33] audit: type=1326 audit(524624.667:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.0.4991" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  336.302636][   T33] audit: type=1326 audit(524624.667:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.0.4991" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  336.352614][T17563] netlink: 'syz.3.4992': attribute type 23 has an invalid length.
[  336.421420][T17571] loop5: detected capacity change from 0 to 64
[  336.425724][T17571] minix: Unknown parameter 'SޱmMf'
[  336.522230][T17580] program syz.3.5000 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  336.634488][T17583] loop3: detected capacity change from 0 to 4096
[  336.651225][T17583] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  336.669748][T17583] ntfs3(loop3): ino=19, mi_enum_attr
[  336.671639][T17583] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  336.766910][T17587] loop3: detected capacity change from 0 to 4096
[  336.774485][T17587] NILFS (loop3): invalid segment: Checksum error in segment payload
[  336.778866][T17587] NILFS (loop3): trying rollback from an earlier position
[  336.793585][T17587] NILFS (loop3): recovery complete
[  336.802620][T17590] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  337.687169][T17652] program syz.3.5035 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.021096][T17675] dlm: non-version read from control device 4096
[  338.067028][T17677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5047'.
[  338.076135][T17663] loop5: detected capacity change from 0 to 32768
[  338.088701][   T13] net_ratelimit: 34 callbacks suppressed
[  338.088760][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  338.096767][T17663] JBD2: Ignoring recovery information on journal
[  338.135529][T17663] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  338.218109][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  338.253352][T14032] ocfs2: Unmounting device (7,5) on (node local)
[  338.311181][    T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  338.316689][    T9] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  338.327608][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  338.450843][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  338.453776][T17688] loop5: detected capacity change from 0 to 2048
[  338.461528][T17688] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  338.465025][T17688] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  338.469706][T17688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.555066][T17694] loop5: detected capacity change from 0 to 512
[  338.559691][T17694] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.5054: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  338.559745][T17694] loop5: lost filesystem error report for type 5 error -117
[  338.565624][T17694] EXT4-fs (loop5): 1 orphan inode deleted
[  338.566700][T17694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.570777][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  338.588497][T14032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.677586][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  338.707793][T17698] loop5: detected capacity change from 0 to 32768
[  338.713061][T17698] JBD2: Ignoring recovery information on journal
[  338.717788][ T5596] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  338.731025][T17698] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  338.783883][T14032] ocfs2: Unmounting device (7,5) on (node local)
[  338.787747][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  338.869330][ T5596] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  338.874752][ T5596] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.880191][ T5596] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.880250][ T5596] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  338.880292][ T5596] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  338.897014][ T5596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.900701][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  338.903699][ T5596] usb 4-1: Product: syz
[  338.905630][ T5596] usb 4-1: Manufacturer: syz
[  338.907743][ T5596] usb 4-1: SerialNumber: syz
[  338.919123][ T5596] usb 4-1: NFC: intf ffff8881a8ad1000 id ffffffff8f85d6c0
[  338.975814][T17706] FAULT_INJECTION: forcing a failure.
[  338.975814][T17706] name failslab, interval 1, probability 0, space 0, times 0
[  338.975881][T17706] CPU: 0 UID: 0 PID: 17706 Comm: syz.5.5058 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  338.975919][T17706] Tainted: [L]=SOFTLOCKUP
[  338.975925][T17706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  338.975934][T17706] Call Trace:
[  338.975940][T17706]  <TASK>
[  338.975946][T17706]  dump_stack_lvl+0xe8/0x150
[  338.975970][T17706]  should_fail_ex+0x410/0x560
[  338.975990][T17706]  should_failslab+0xa8/0x100
[  338.976008][T17706]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  338.976022][T17706]  ? __lock_acquire+0x6df/0x2e50
[  338.976036][T17706]  ? __kernfs_new_node+0xa9/0x980
[  338.976052][T17706]  ? __kernfs_new_node+0xa9/0x980
[  338.976072][T17706]  kstrdup+0x42/0x100
[  338.976086][T17706]  __kernfs_new_node+0xa9/0x980
[  338.976109][T17706]  ? __pfx___kernfs_new_node+0x10/0x10
[  338.976124][T17706]  ? kernfs_root+0x1c/0x230
[  338.976144][T17706]  ? kernfs_root+0x1c/0x230
[  338.976161][T17706]  ? kernfs_root+0x1c/0x230
[  338.976175][T17706]  ? kernfs_root+0x1c/0x230
[  338.976194][T17706]  kernfs_new_node+0xea/0x140
[  338.976213][T17706]  kernfs_create_link+0xa7/0x200
[  338.976228][T17706]  sysfs_do_create_link_sd+0x83/0x110
[  338.976244][T17706]  device_create_sys_dev_entry+0x122/0x190
[  338.976261][T17706]  ? __pfx_device_create_sys_dev_entry+0x10/0x10
[  338.976275][T17706]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  338.976293][T17706]  ? device_create_file+0xf4/0x1b0
[  338.976309][T17706]  device_add+0x71e/0xb80
[  338.976326][T17706]  tty_register_device_attr+0x425/0x990
[  338.976383][T17706]  ? __pfx_tty_register_device_attr+0x10/0x10
[  338.976405][T17706]  ? tty_port_init+0x136/0x1a0
[  338.976421][T17706]  ? gsm_dlci_alloc+0x330/0x640
[  338.976440][T17706]  gsm_activate_mux+0x110/0x2a0
[  338.976460][T17706]  gsmld_ioctl+0xcf5/0x1930
[  338.976480][T17706]  ? __pfx_gsmld_ioctl+0x10/0x10
[  338.976502][T17706]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  338.976526][T17706]  ? ldsem_down_read+0x12/0x40
[  338.976542][T17706]  ? __pfx_gsmld_ioctl+0x10/0x10
[  338.976556][T17706]  tty_ioctl+0x9bd/0xdd0
[  338.976569][T17706]  ? __pfx_tty_ioctl+0x10/0x10
[  338.976582][T17706]  __se_sys_ioctl+0xfc/0x170
[  338.976599][T17706]  do_syscall_64+0x166/0x520
[  338.976614][T17706]  ? trace_irq_disable+0x3b/0x140
[  338.976626][T17706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.976642][T17706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.976655][T17706] RIP: 0033:0x7f75e599e159
[  338.976668][T17706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.976680][T17706] RSP: 002b:00007f75e689c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.976696][T17706] RAX: ffffffffffffffda RBX: 00007f75e5c25fa0 RCX: 00007f75e599e159
[  338.976704][T17706] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000004
[  338.976714][T17706] RBP: 00007f75e5a35024 R08: 0000000000000000 R09: 0000000000000000
[  338.976723][T17706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.976731][T17706] R13: 00007f75e5c26038 R14: 00007f75e5c25fa0 R15: 00007ffcc6287738
[  338.976753][T17706]  </TASK>
[  339.008466][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  339.117534][   T13] bond3: (slave bridge3): failed to get link speed/duplex
[  339.140724][ T5596] usb 4-1: USB disconnect, device number 69
[  339.268802][T17725] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  339.273069][T17725] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  339.331017][T17729] loop5: detected capacity change from 0 to 128
[  339.335650][T17729] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  339.420132][T17737] loop5: detected capacity change from 0 to 128
[  339.425172][T17737] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  339.437918][T17737] syz.5.5071 (pid 17737) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  339.475423][T14032] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  340.254958][T17793] loop3: detected capacity change from 0 to 8
[  340.276611][T17793] squashfs image failed sanity check
[  340.462775][T17799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x850c instead
[  340.466978][T17799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead
[  340.476553][T17799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead
[  340.481783][T17799] jffs2: notice: (17799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  340.502451][T17799] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  340.818140][T17806] loop3: detected capacity change from 0 to 128
[  340.833347][T17806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  340.833476][T17806] System zones: 1-3, 19-19, 35-36
[  340.839130][T17806] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  340.921688][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  341.163819][T17818] loop3: detected capacity change from 0 to 512
[  341.175968][T17818] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  341.192648][T17818] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  341.201109][T17818] EXT4-fs (loop3): mount failed
[  341.638143][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5117'.
[  341.693737][T17853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5120'.
[  342.085122][T17870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5127'.
[  342.297501][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  342.497385][    T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  342.647376][    T9] usb 4-1: Using ep0 maxpacket: 16
[  342.652027][    T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  342.669243][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  342.673796][    T9] usb 4-1: config 0 has no interfaces?
[  342.715708][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.719079][    T9] usb 4-1: Product: syz
[  342.721609][    T9] usb 4-1: Manufacturer: syz
[  342.721643][    T9] usb 4-1: SerialNumber: syz
[  342.728851][    T9] usb 4-1: config 0 descriptor??
[  342.941834][ T3277] usb 4-1: USB disconnect, device number 70
[  343.197567][ T5650] net_ratelimit: 37 callbacks suppressed
[  343.197691][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  343.310647][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  343.419209][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  343.561069][T17922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5149'.
[  343.615086][T17926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  343.637479][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  343.749234][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  343.857341][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  343.912854][T17941] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  343.967738][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  344.004924][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5161'.
[  344.010508][T17947] veth0_to_bond: entered allmulticast mode
[  344.015393][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5161'.
[  344.077801][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  344.191008][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  344.297533][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  344.374946][T17971] xt_hashlimit: size too large, truncated to 1048576
[  345.428506][ T5659] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  345.514410][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5190'.
[  345.546426][T18020] fuse: fd is not a fuse device
[  345.578958][ T5659] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  345.584537][ T5659] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  345.584601][ T5659] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  345.584628][ T5659] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0
[  345.584668][ T5659] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  345.584702][ T5659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.606763][ T5659] usb 4-1: probing VID:PID(0424:012C)   
[  345.613783][ T5659] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[  345.616097][ T5659] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[  345.618637][ T5659] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[  345.620866][ T5659] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  345.626718][ T5659] vub300 4-1:1.0: probe with driver vub300 failed with error -22
[  345.812834][ T5659] usb 4-1: USB disconnect, device number 71
[  346.487455][ T5659] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  346.648822][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5206'.
[  346.651820][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5206'.
[  346.662395][ T5659] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08
[  346.671929][ T5659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.671965][ T5659] usb 6-1: Product: syz
[  346.672007][ T5659] usb 6-1: Manufacturer: syz
[  346.672032][ T5659] usb 6-1: SerialNumber: syz
[  346.737989][T18058] overlayfs: failed to clone upperpath
[  346.769075][T18060] netlink: 'syz.0.5210': attribute type 4 has an invalid length.
[  346.822775][T18062] loop3: detected capacity change from 0 to 512
[  346.848346][T18062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.871849][ T5659] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  347.036521][T18062] syz.3.5208 (18062) used greatest stack depth: 17160 bytes left
[  347.050367][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.140628][    T9] usb 6-1: driver   API: 1.9.9 2016-02-15 [1-1]
[  347.152247][    T9] usb 6-1: firmware API: 1.9.6 2012-07-07
[  347.250717][T18087] loop3: detected capacity change from 0 to 512
[  347.251764][T18087] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  347.260327][T18087] EXT4-fs (loop3): 1 truncate cleaned up
[  347.273617][T18087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.284053][T18087] EXT4-fs error (device loop3): ext4_empty_dir:3103: inode #2: block 13: comm syz.3.5219: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1
[  347.284565][T18087] EXT4-fs (loop3): Remounting filesystem read-only
[  347.284578][T18087] EXT4-fs warning (device loop3): ext4_empty_dir:3106: inode #2: comm syz.3.5219: directory missing '..'
[  347.311516][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.411741][    C0] usb 6-1: received invalid command response:got -4, instead of 0
[  347.411811][    C0] usb 6-1: restart device (9)
[  347.612297][ T5596] usb 6-1: USB disconnect, device number 22
[  347.612964][    C0] device 6-1 is not registered
[  347.642263][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5227'.
[  347.697131][ T5660] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  347.847653][ T5660] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  347.848771][ T5660] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  347.848800][ T5660] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.848814][ T5660] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  347.848827][ T5660] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  347.852342][ T5660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.852356][ T5660] usb 4-1: Product: syz
[  347.852364][ T5660] usb 4-1: Manufacturer: syz
[  347.852373][ T5660] usb 4-1: SerialNumber: syz
[  347.859859][ T5660] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  347.859871][ T5660] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  347.859899][ T5660] usbserial_generic 4-1:1.0: generic converter detected
[  347.867428][ T5660] usb 4-1: generic converter now attached to ttyUSB0
[  348.073080][ T5660] usb 4-1: USB disconnect, device number 72
[  348.075346][ T5660] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  348.075559][ T5660] usbserial_generic 4-1:1.0: device disconnected
[  348.227192][ T5651] net_ratelimit: 34 callbacks suppressed
[  348.227287][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  348.233588][    T9] usb 6-1: firmware upload failed (-110).
[  348.337299][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  348.447284][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  348.531658][T17961] syz.3.5166 (17961) used greatest stack depth: 15392 bytes left
[  348.777143][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  348.887181][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  349.014359][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  349.161053][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  349.291536][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  349.447672][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  349.557333][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  349.880692][T18163] xt_MASQUERADE: bad MAP_IPS.
[  349.904802][T18165] loop3: detected capacity change from 0 to 512
[  349.905375][T18165] EXT4-fs: Ignoring removed nobh option
[  349.928509][T18165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.940708][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5253'.
[  349.959723][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.166005][T18181] loop3: detected capacity change from 0 to 4096
[  350.176778][T18181] ntfs3(loop3): Failed to load $Extend (-22).
[  350.176841][T18181] ntfs3(loop3): Failed to initialize $Extend.
[  351.131958][T18229] loop5: detected capacity change from 0 to 4096
[  351.136193][T18229] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  351.149400][T18229] ntfs3(loop5): try to read out of volume at offset 0x103000
[  351.149485][T18229] ntfs3(loop5): Failed to load $Volume (-5).
[  351.286564][T18233] loop5: detected capacity change from 0 to 1024
[  351.289501][T18233] EXT4-fs: Ignoring removed bh option
[  351.312077][T18233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.383913][T14032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.488929][T18247] loop3: detected capacity change from 0 to 1024
[  351.491931][T18247] EXT4-fs: Ignoring removed mblk_io_submit option
[  351.498476][T18247] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  351.541385][T18247] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.5286: lblock 2 mapped to illegal pblock 2 (length 1)
[  351.541454][T18247] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  351.546975][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  351.547022][    C1] EXT4-fs (loop3): initial error at time 524639: ext4_map_blocks:790: inode 3: block 2
[  351.547166][    C1] EXT4-fs (loop3): last error at time 524639: ext4_map_blocks:790: inode 3: block 2
[  351.561300][T18247] EXT4-fs (loop3): Remounting filesystem read-only
[  351.561313][T18247] __quota_error: 7 callbacks suppressed
[  351.561318][T18247] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  351.561343][T18247] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  351.561396][T18247] EXT4-fs (loop3): 1 orphan inode deleted
[  351.562207][T18247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.579648][T18247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.763056][T18260] cgroup: release_agent respecified
[  353.001157][T18310] xt_CT: You must specify a L4 protocol and not use inversions on it
[  353.297660][ T5650] net_ratelimit: 32 callbacks suppressed
[  353.302014][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  353.420385][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  353.528275][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  353.644333][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  353.757459][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  353.867165][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  353.984272][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  354.097211][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  354.207203][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  354.317018][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  354.333735][T18318] loop5: detected capacity change from 0 to 256
[  354.810932][T18336] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5328'.
[  354.842818][T18336] bond3: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms
[  354.853271][T18336] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5328'.
[  354.864395][T18336] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  355.385241][T18370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5342'.
[  355.427354][T18348] loop5: detected capacity change from 0 to 32768
[  355.435781][T18348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5333 (18348)
[  355.443043][T18348] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.447049][T18348] BTRFS info (device loop5): using sha256 checksum algorithm
[  355.522989][T18348] BTRFS info (device loop5): enabling ssd optimizations
[  355.523041][T18348] BTRFS info (device loop5): turning on async discard
[  355.523108][T18348] BTRFS info (device loop5): enabling free space tree
[  355.548445][T18348] BTRFS critical (device loop5 state E): emergency shutdown
[  355.583111][T14032] BTRFS info (device loop5 state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.859331][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5353'.
[  355.859381][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5353'.
[  355.859408][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5353'.
[  356.103055][T18421] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  356.890250][T18461] netlink: 'syz.5.5377': attribute type 10 has an invalid length.
[  356.902019][T18461] team0: Device veth0_vlan failed to register rx_handler
[  357.227133][    T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  357.379667][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  357.380909][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.385598][    T9] usb 6-1: config 0 descriptor??
[  357.389113][    T9] cp210x 6-1:0.0: cp210x converter detected
[  357.795095][    T9] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  357.804521][T18463] loop5: detected capacity change from 0 to 512
[  357.805719][T18463] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  357.820086][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[  358.035165][ T5596] usb 6-1: USB disconnect, device number 23
[  358.045712][ T5596] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  358.077906][ T5596] cp210x 6-1:0.0: device disconnected
[  358.407943][ T5651] net_ratelimit: 35 callbacks suppressed
[  358.408009][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  358.466885][T18520] loop3: detected capacity change from 0 to 32768
[  358.467903][T18520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5402 (18520)
[  358.472948][T18520] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  358.472962][T18520] BTRFS info (device loop3): using crc32c checksum algorithm
[  358.516999][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  358.522056][T18520] BTRFS info (device loop3): setting nodatasum
[  358.524820][T18520] BTRFS info (device loop3): setting nodatacow
[  358.524887][T18520] BTRFS info (device loop3): disabling tree log
[  358.524920][T18520] BTRFS info (device loop3): turning on async discard
[  358.524953][T18520] BTRFS info (device loop3): enabling free space tree
[  358.524989][T18520] BTRFS info (device loop3): max_inline set to 0
[  358.632194][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  358.737506][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  358.776734][ T5765] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  358.854543][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  358.963890][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  359.032643][   T33] audit: type=1326 audit(524648.375:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x0
[  359.067758][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  359.139574][   T33] audit: type=1326 audit(524648.505:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  359.139654][   T33] audit: type=1326 audit(524648.505:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fef9e159 code=0x7ffc0000
[  359.140389][   T33] audit: type=1326 audit(524648.505:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59fef5e98e code=0x7ffc0000
[  359.143261][   T33] audit: type=1326 audit(524648.505:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59fef5e98e code=0x7ffc0000
[  359.146077][   T33] audit: type=1326 audit(524648.505:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59fef5e98e code=0x7ffc0000
[  359.149291][   T33] audit: type=1326 audit(524648.515:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59fef5e98e code=0x7ffc0000
[  359.150792][   T33] audit: type=1326 audit(524648.515:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59fef5e98e code=0x7ffc0000
[  359.153148][   T33] audit: type=1326 audit(524648.515:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59fef5e98e code=0x7ffc0000
[  359.154811][   T33] audit: type=1326 audit(524648.515:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.5406" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59fef5e98e code=0x7ffc0000
[  359.188591][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  359.287746][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  359.341418][ T5602] Bluetooth: hci0: status 0xcf
[  359.397233][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  359.616976][ T5596] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  359.768701][ T5596] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  359.774100][ T5596] usb 6-1: config 0 has an invalid interface number: 205 but max is 0
[  359.777267][ T5596] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.777283][ T5596] usb 6-1: config 0 has no interface number 0
[  359.777303][ T5596] usb 6-1: config 0 interface 205 has no altsetting 0
[  359.791420][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.794874][ T5596] usb 6-1: Product: syz
[  359.794888][ T5596] usb 6-1: Manufacturer: syz
[  359.794897][ T5596] usb 6-1: SerialNumber: syz
[  359.814209][ T5596] usb 6-1: config 0 descriptor??
[  359.821949][ T5596] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  359.825672][ T5596] dvb-usb: bulk message failed: -22 (3/0)
[  359.854741][ T5596] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  359.859227][ T5596] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  359.865435][ T5596] usb 6-1: media controller created
[  359.870143][ T5596] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  359.882550][ T5596] dvb-usb: bulk message failed: -22 (6/0)
[  359.886095][ T5596] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  359.897804][ T5596] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23
[  359.909357][ T5596] dvb-usb: schedule remote query interval to 150 msecs.
[  359.912748][ T5596] dvb-usb: bulk message failed: -22 (3/0)
[  359.936944][ T5596] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  360.025197][    T9] usb 6-1: USB disconnect, device number 24
[  360.073299][    T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  360.583159][T18612] bond0: Error: CAN devices cannot be enslaved
[  360.607036][ T5596] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  360.758612][ T5596] usb 4-1: Using ep0 maxpacket: 8
[  360.762473][ T5596] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  360.770343][ T5596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  360.781782][ T5596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.781830][ T5596] usb 4-1: Product: syz
[  360.781869][ T5596] usb 4-1: Manufacturer: syz
[  360.781901][ T5596] usb 4-1: SerialNumber: syz
[  360.850931][ T5596] usb 4-1: config 0 descriptor??
[  360.955411][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5440'.
[  361.095821][ T3277] usb 4-1: USB disconnect, device number 73
[  362.226372][T18661] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  362.226406][T18661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  362.229186][T18661] vhci_hcd vhci_hcd.0: Device attached
[  362.467067][ T5659] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  362.472443][    T9] usb 6-1: new low-speed USB device number 25 using dummy_hcd
[  362.627887][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  362.632584][    T9] usb 6-1: config 0 has no interfaces?
[  362.635650][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.643881][    T9] usb 6-1: config 0 descriptor??
[  362.852160][T18662] usb 43-1: recv xbuf, 0
[  362.859526][    T9] usb 6-1: USB disconnect, device number 25
[  362.908233][ T5650] vhci_hcd vhci_hcd.5: stop threads
[  362.910748][ T5650] vhci_hcd vhci_hcd.5: release socket
[  362.916653][ T5650] vhci_hcd vhci_hcd.5: disconnect device
[  362.957337][ T5659] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  363.143560][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5464'.
[  363.340777][T18699] binder: 18698:18699 ioctl c00c620f 0 returned -14
[  363.942424][ T5651] net_ratelimit: 35 callbacks suppressed
[  363.942478][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  364.049619][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  364.098769][T18712] loop5: detected capacity change from 0 to 128
[  364.131971][T18712] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  364.158055][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  364.179537][T18712] fscrypt (loop5, inode 12): Unsupported encryption flags (0x10)
[  364.239645][T14032] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  364.269264][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  364.387183][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  364.458177][T18727] loop5: detected capacity change from 0 to 512
[  364.458872][T18727] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  364.490351][T18729] loop3: detected capacity change from 0 to 1024
[  364.491147][T18729] EXT4-fs: Ignoring removed bh option
[  364.497223][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  364.507850][T18729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.519887][T18729] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #12: block 7: comm syz.3.5482: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  364.541510][T18729] EXT4-fs (loop3): Remounting filesystem read-only
[  364.570499][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.607391][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  364.640615][T18737] loop5: detected capacity change from 0 to 2048
[  364.748170][T18741] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  364.748331][T18741] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  364.778692][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  364.795970][T18742] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  364.890571][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  364.909349][T18737] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=3096, name_len=5
[  364.980539][T18737] Remounting filesystem read-only
[  364.998846][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  365.586991][ T5596] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  365.747235][ T5596] usb 6-1: Using ep0 maxpacket: 32
[  365.751813][ T5596] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  365.777423][ T5596] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  365.782890][ T5596] usb 6-1: config 0 has no interface number 0
[  365.805982][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.810196][ T5596] usb 6-1: Product: syz
[  365.813023][ T5596] usb 6-1: Manufacturer: syz
[  365.815637][ T5596] usb 6-1: SerialNumber: syz
[  365.873408][ T5596] usb 6-1: config 0 descriptor??
[  365.953217][ T5596] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  366.178285][ T5596] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  366.193432][ T5596] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  366.527826][T18763] loop3: detected capacity change from 0 to 32768
[  366.562758][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  366.563234][ T3277] usb 6-1: USB disconnect, device number 26
[  366.594637][ T3277] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  366.605638][ T3277] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  366.610983][ T3277] quatech2 6-1:0.51: device disconnected
[  366.619920][T18769] loop3: detected capacity change from 0 to 512
[  367.242097][T18794] loop3: detected capacity change from 0 to 32768
[  367.407611][T18820] FAULT_INJECTION: forcing a failure.
[  367.407611][T18820] name fail_futex, interval 1, probability 0, space 0, times 1
[  367.407679][T18820] CPU: 0 UID: 0 PID: 18820 Comm: syz.5.5525 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  367.407714][T18820] Tainted: [L]=SOFTLOCKUP
[  367.407720][T18820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.407727][T18820] Call Trace:
[  367.407732][T18820]  <TASK>
[  367.407738][T18820]  dump_stack_lvl+0xe8/0x150
[  367.407763][T18820]  should_fail_ex+0x410/0x560
[  367.407784][T18820]  futex_lock_pi_atomic+0xc0/0xae0
[  367.407807][T18820]  futex_lock_pi+0x30a/0xac0
[  367.407822][T18820]  ? futex_unqueue+0x211/0x240
[  367.407852][T18820]  ? __pfx_futex_lock_pi+0x10/0x10
[  367.407875][T18820]  ? rb_read_data_buffer+0x52f/0x5b0
[  367.407924][T18820]  ? __pfx_trace_clock_local+0x10/0x10
[  367.407940][T18820]  ? __pfx_futex_wake_mark+0x10/0x10
[  367.407965][T18820]  ? rb_commit+0x787/0x7e0
[  367.407982][T18820]  do_futex+0x3b0/0x4e0
[  367.408001][T18820]  ? __pfx_do_futex+0x10/0x10
[  367.408020][T18820]  __se_sys_futex+0x3a8/0x450
[  367.408035][T18820]  ? trace_syscall_enter+0x58/0x110
[  367.408048][T18820]  ? __pfx___se_sys_futex+0x10/0x10
[  367.408065][T18820]  ? trace_syscall_enter+0x58/0x110
[  367.408080][T18820]  ? rcu_is_watching+0x16/0xb0
[  367.408093][T18820]  ? __x64_sys_futex+0x21/0xf0
[  367.408109][T18820]  do_syscall_64+0x166/0x520
[  367.408125][T18820]  ? trace_irq_disable+0x3b/0x140
[  367.408137][T18820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.408152][T18820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.408165][T18820] RIP: 0033:0x7f75e599e159
[  367.408179][T18820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.408189][T18820] RSP: 002b:00007f75e689c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  367.408205][T18820] RAX: ffffffffffffffda RBX: 00007f75e5c25fa0 RCX: 00007f75e599e159
[  367.408213][T18820] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200
[  367.408220][T18820] RBP: 00007f75e5a35024 R08: 0000000000000000 R09: 0000000034fffffd
[  367.408226][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  367.408233][T18820] R13: 00007f75e5c26038 R14: 00007f75e5c25fa0 R15: 00007ffcc6287738
[  367.408248][T18820]  </TASK>
[  367.501266][T18826] loop3: detected capacity change from 0 to 128
[  367.820801][T18848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5537'.
[  367.904926][T18854] bridge0: left allmulticast mode
[  367.987147][ T5596] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  368.137216][ T5596] usb 6-1: Using ep0 maxpacket: 8
[  368.139295][ T5596] usb 6-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[  368.146554][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.146590][ T5596] usb 6-1: Product: syz
[  368.146620][ T5596] usb 6-1: Manufacturer: syz
[  368.146644][ T5596] usb 6-1: SerialNumber: syz
[  368.158403][ T5596] usb 6-1: config 0 descriptor??
[  368.163159][ T5596] upd78f0730 6-1:0.0: upd78f0730 converter detected
[  368.169029][ T5596] usb 6-1: upd78f0730 converter now attached to ttyUSB0
[  368.366156][ T5596] usb 6-1: USB disconnect, device number 27
[  368.372885][ T5596] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  368.373135][ T5596] upd78f0730 6-1:0.0: device disconnected
[  368.569673][T18872] loop3: detected capacity change from 0 to 4096
[  368.758886][T18883] netlink: 'syz.3.5554': attribute type 63 has an invalid length.
[  369.057165][ T5650] net_ratelimit: 37 callbacks suppressed
[  369.057227][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  369.154483][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5571'.
[  369.167725][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  369.277914][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  369.277996][ T5659] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  369.331365][T18915] loop5: detected capacity change from 0 to 32768
[  369.343907][T18915] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  369.367091][T18915] XFS (loop5): Ending clean mount
[  369.387685][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  369.430053][T14032] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  369.448740][ T5659] usb 4-1: Using ep0 maxpacket: 16
[  369.449257][ T5659] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  369.450149][ T5659] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  369.450176][ T5659] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  369.452525][ T5659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.452540][ T5659] usb 4-1: Product: syz
[  369.452549][ T5659] usb 4-1: Manufacturer: syz
[  369.452557][ T5659] usb 4-1: SerialNumber: syz
[  369.490054][ T5659] usb 4-1: 0:2 : does not exist
[  369.503046][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  369.617622][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  369.682015][T18946] fuse: fd is not a fuse device
[  369.731257][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  369.847136][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  369.960340][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  370.069924][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  370.331519][T18954] overlayfs: missing 'lowerdir'
[  370.384503][T18978] overlayfs: conflicting lowerdir path
[  370.680608][ T5659] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  370.809851][ T5659] usb 4-1: USB disconnect, device number 74
[  370.951773][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.404347][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'.
[  371.404401][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'.
[  371.414384][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'.
[  371.414489][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'.
[  371.427521][T19009] loop3: detected capacity change from 0 to 128
[  371.527758][T19019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5615'.
[  371.533575][T19019] syz_tun: entered promiscuous mode
[  371.535554][T19019] macvlan2: entered promiscuous mode
[  371.541277][T19019] syz_tun: left promiscuous mode
[  371.897143][ T5659] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  372.058976][ T5659] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  372.059921][ T5659] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  372.059934][ T5659] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  372.061250][ T5659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  372.061260][ T5659] usb 4-1: Product: syz
[  372.061265][ T5659] usb 4-1: Manufacturer: syz
[  372.067273][ T5659] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  372.428011][T19060] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5635'.
[  372.674269][ T5659] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[  372.684731][ T5659] usb 4-1: USB disconnect, device number 75
[  372.695039][ T5659] mos7840 4-1:1.0: device disconnected
[  373.163457][T19081] loop5: detected capacity change from 0 to 64
[  373.322014][T19085] UBIFS error (pid: 19085): cannot open "ubi0", error -19
[  374.067139][ T5650] net_ratelimit: 34 callbacks suppressed
[  374.067212][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  374.177130][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  374.287090][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  374.313749][T19105] loop3: detected capacity change from 0 to 32768
[  374.330221][T19105] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  374.345434][T19105] XFS (loop3): Ending clean mount
[  374.399475][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  374.407470][ T5765] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  374.429505][T19094] loop5: detected capacity change from 0 to 32768
[  374.507105][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  374.515450][T19094] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  374.559876][T19123] loop3: detected capacity change from 0 to 256
[  374.571639][T19123] overlay: Unknown parameter '\ame'
[  374.617042][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  374.718812][T14032] ocfs2: Unmounting device (7,5) on (node local)
[  374.721239][T19129] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x850c instead
[  374.721252][T19129] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead
[  374.721259][T19129] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead
[  374.721521][T19129] jffs2: notice: (19129) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  374.728511][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  374.847048][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  374.956981][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  375.067042][   T12] bond3: (slave bridge3): failed to get link speed/duplex
[  375.266433][T19146] nvme nvme0: rdma connection establishment failed (-104)
[  376.022114][T19168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5680'.
[  376.081213][    T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0)
[  376.265355][T19186] loop3: detected capacity change from 0 to 256
[  376.271197][T19186] exfat: Deprecated parameter 'utf8'
[  376.271260][T19186] exfat: Deprecated parameter 'namecase'
[  376.271323][T19186] exfat: Deprecated parameter 'namecase'
[  376.271381][T19186] exfat: Deprecated parameter 'utf8'
[  376.286604][T19186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  376.287300][T19186] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  376.397210][    T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  376.557692][    T9] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  376.558820][    T9] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  376.558834][    T9] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  376.558843][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  376.558857][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.563016][    T9] usb 6-1: config 0 descriptor??
[  376.778394][T19180] fuse: Unknown parameter 'default_permissions '
[  377.033506][    T9] input: HID 18b1:0037 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:18B1:0037.0015/input/input24
[  377.124571][    T9] petalynx 0003:18B1:0037.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.5-1/input0
[  377.265669][    T9] usb 6-1: USB disconnect, device number 28
[  377.657311][T19255] loop3: detected capacity change from 0 to 256
[  377.673346][T19255] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  377.858783][T19261] loop3: detected capacity change from 0 to 1024
[  377.859603][T19261] EXT4-fs: Ignoring removed nomblk_io_submit option
[  377.878875][T19261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.035960][T19273] loop5: detected capacity change from 0 to 8192
[  378.141667][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  378.141778][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  378.284475][T19286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5735'.
[  378.284576][T19284] gadgetfs: bound to dummy_udc driver
[  378.291353][T19286] netlink: 'syz.0.5735': attribute type 7 has an invalid length.
[  378.291400][T19286] netlink: 'syz.0.5735': attribute type 8 has an invalid length.
[  378.291425][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5735'.
[  378.310366][T19286] ip6gretap0: entered promiscuous mode
[  378.316472][T19286] ip6gretap0: left promiscuous mode
[  378.589734][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.657141][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  378.809142][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  378.809191][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  378.815965][    T9] usb 6-1: config 1 has an invalid interface number: 97 but max is 1
[  378.818665][    T9] usb 6-1: config 1 has no interface number 1
[  378.820994][    T9] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  378.825757][    T9] usb 6-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30
[  378.829825][    T9] usb 6-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  378.834240][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  378.838633][    T9] usb 6-1: config 1 interface 97 has no altsetting 0
[  378.850381][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.853243][    T9] usb 6-1: Product: syz
[  378.854886][    T9] usb 6-1: Manufacturer: syz
[  378.857287][    T9] usb 6-1: SerialNumber: syz
[  379.137117][ T5651] net_ratelimit: 35 callbacks suppressed
[  379.137200][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  379.147048][    T9] smsusb:smsusb_probe: board id=8, interface number 0
[  379.156784][    T9] smsusb:smsusb_probe: board id=8, interface number 97
[  379.160671][    T9] usb 6-1: USB disconnect, device number 29
[  379.247410][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  379.357210][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  379.467102][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  379.578900][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  379.688043][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  379.735004][T19324] input: syz1 as /devices/virtual/input/input25
[  379.798337][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  379.907548][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  380.027289][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  380.087656][T19340] loop5: detected capacity change from 0 to 512
[  380.091955][T19340] ext4: Unknown parameter 'appraise_type'
[  380.096034][T19340] mtrr: base(0x1a7000) is not aligned on a size(0x0000) boundary
[  380.137334][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  380.167068][    T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  380.329243][    T9] usb 4-1: Using ep0 maxpacket: 32
[  380.330091][    T9] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  380.333284][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.333302][    T9] usb 4-1: Product: syz
[  380.333312][    T9] usb 4-1: Manufacturer: syz
[  380.333321][    T9] usb 4-1: SerialNumber: syz
[  380.340453][    T9] usb 4-1: config 0 descriptor??
[  380.350781][    T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  380.350898][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  380.352945][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  380.353040][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  380.353049][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  380.356627][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  380.360984][    T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  380.361023][    T9] usb 4-1: media controller created
[  380.389139][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  380.414593][    T9] usb 4-1: selecting invalid altsetting 3
[  380.414660][    T9] ttusb2: set interface to alts=3 failed
[  380.463768][    T9] DVB: Unable to find symbol tda10086_attach()
[  380.463826][    T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  380.466453][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  380.466467][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  380.466545][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  380.466554][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  380.466598][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  380.572888][    T9] usb 4-1: USB disconnect, device number 76
[  380.620656][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  382.145454][T19382] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5775'.
[  382.377318][   T25] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  382.529120][   T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  382.533888][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  382.533953][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.080049][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.083024][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.085943][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.088889][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.088908][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.088923][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.088937][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.088954][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.088968][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.088982][   T25] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0
[  383.089003][   T25] lg-g15 0003:046D:C222.0016: unbalanced collection at end of report description
[  383.089608][   T25] lg-g15 0003:046D:C222.0016: probe with driver lg-g15 failed with error -22
[  383.570275][T19404] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x850c instead
[  383.573929][T19404] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead
[  383.577811][T19404] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead
[  383.581644][T19404] jffs2: notice: (19404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  384.177071][ T5651] net_ratelimit: 33 callbacks suppressed
[  384.178705][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  384.287039][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  384.397147][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  384.506927][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  384.617045][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  384.726954][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  384.855804][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  384.968214][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  385.030553][T19442] loop3: detected capacity change from 0 to 128
[  385.076942][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  385.163284][    T9] usb 6-1: USB disconnect, device number 30
[  385.187402][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  385.194687][T19450] loop3: detected capacity change from 0 to 4096
[  385.215214][T19450] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  385.240089][T19450] ntfs3(loop3): Failed to load $Extend (-22).
[  385.240208][T19450] ntfs3(loop3): Failed to initialize $Extend.
[  385.391047][T19464] loop3: detected capacity change from 0 to 128
[  385.396764][T19464] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4702: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  385.402686][T19464] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  386.668585][T19508] loop5: detected capacity change from 0 to 1024
[  386.677554][T19508] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  386.677800][T19508] JBD2: no valid journal superblock found
[  386.693430][T19508] EXT4-fs (loop5): Could not load journal inode
[  387.562113][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5845'.
[  389.227014][T17885] net_ratelimit: 36 callbacks suppressed
[  389.227445][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  389.347040][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  389.377015][ T5596] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  389.457055][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  389.526942][ T5596] usb 4-1: Using ep0 maxpacket: 16
[  389.529372][ T5596] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  389.534069][ T5596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  389.539886][ T5596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.542960][ T5596] usb 4-1: Product: syz
[  389.545176][ T5596] usb 4-1: Manufacturer: syz
[  389.547178][ T5596] usb 4-1: SerialNumber: syz
[  389.558580][ T5596] usb 4-1: config 0 descriptor??
[  389.559354][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5870'.
[  389.566988][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  389.598592][ T5596] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  389.677241][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  389.772754][ T5596] usb 4-1: USB disconnect, device number 77
[  389.787313][ T5651] usb 4-1: Failed to submit usb control message: -71
[  389.792169][ T5651] usb 4-1: unable to send the bmi data to the device: -71
[  389.795141][ T5651] usb 4-1: unable to get target info from device
[  389.801383][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  389.816956][ T5651] usb 4-1: could not get target info (-71)
[  389.817282][ T5651] usb 4-1: could not probe fw (-71)
[  389.877533][T19610] netlink: 'syz.0.5876': attribute type 8 has an invalid length.
[  389.926955][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  390.037604][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  390.147140][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  390.176991][    T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  390.257333][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  390.338530][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  390.338593][    T9] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  390.346628][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.346695][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.346757][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.361132][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.364192][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.369914][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.374874][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.374948][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.375008][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.385147][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.385196][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.385241][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.387335][T19622] loop3: detected capacity change from 0 to 2048
[  390.392077][T19622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  390.399367][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.399413][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.399462][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.406482][   T33] kauditd_printk_skb: 222 callbacks suppressed
[  390.406494][   T33] audit: type=1800 audit(524679.765:501): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5882" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  390.420416][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.424221][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.424241][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.435759][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.439326][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.442562][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.447234][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.450114][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  390.450126][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.457032][    T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  390.459720][    T9] usb 6-1: Product: syz
[  390.459728][    T9] usb 6-1: Manufacturer: syz
[  390.459734][    T9] usb 6-1: SerialNumber: syz
[  390.465294][    T9] usb 6-1: config 0 descriptor??
[  390.468827][    T9] yurex 6-1:0.0: Could not find endpoints
[  390.691945][ T5596] usb 6-1: USB disconnect, device number 31
[  393.124212][   T33] audit: type=1326 audit(524682.485:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.124262][   T33] audit: type=1326 audit(524682.485:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.124303][   T33] audit: type=1326 audit(524682.485:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.124394][   T33] audit: type=1326 audit(524682.485:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.146230][   T33] audit: type=1326 audit(524682.495:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.146255][   T33] audit: type=1326 audit(524682.495:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.146270][   T33] audit: type=1326 audit(524682.495:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.146284][   T33] audit: type=1326 audit(524682.495:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.5.5911" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75e599e159 code=0x7ffc0000
[  393.208804][T19696] loop3: detected capacity change from 0 to 256
[  393.216423][T19696] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  393.319082][T19705] bridge0: port 3(veth0) entered blocking state
[  393.319232][T19705] bridge0: port 3(veth0) entered disabled state
[  393.319402][T19705] veth0: entered allmulticast mode
[  393.328413][T19705] veth0: entered promiscuous mode
[  393.328871][T19705] bridge0: port 3(veth0) entered blocking state
[  393.328946][T19705] bridge0: port 3(veth0) entered forwarding state
[  393.429099][T19712] typec_fusb302 0-0022: supply vbus not found, using dummy regulator
[  393.460199][T19712] typec_fusb302 0-0022: failed to request gpio_int_n
[  393.558891][T19712] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2
[  393.559121][T19712] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22
[  393.567115][T19718] typec_fusb302 1-0022: I2C/SMBus block functionality not supported!
[  393.567358][T19718] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22
[  393.642610][T19727] loop5: detected capacity change from 0 to 64
[  393.731708][T19731] FAULT_INJECTION: forcing a failure.
[  393.731708][T19731] name failslab, interval 1, probability 0, space 0, times 0
[  393.731771][T19731] CPU: 1 UID: 0 PID: 19731 Comm: syz.5.5930 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  393.731810][T19731] Tainted: [L]=SOFTLOCKUP
[  393.731816][T19731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.731823][T19731] Call Trace:
[  393.731829][T19731]  <TASK>
[  393.731836][T19731]  dump_stack_lvl+0xe8/0x150
[  393.731862][T19731]  should_fail_ex+0x410/0x560
[  393.731882][T19731]  should_failslab+0xa8/0x100
[  393.731899][T19731]  __kmalloc_cache_noprof+0xa3/0x600
[  393.731934][T19731]  ? __kmalloc_cache_noprof+0x14d/0x600
[  393.731948][T19731]  ? resv_map_alloc+0x88/0x2c0
[  393.731960][T19731]  ? resv_map_alloc+0x88/0x2c0
[  393.731976][T19731]  resv_map_alloc+0x88/0x2c0
[  393.731991][T19731]  hugetlbfs_get_inode+0x5f/0x660
[  393.732010][T19731]  hugetlb_file_setup+0x21d/0x630
[  393.732033][T19731]  ksys_mmap_pgoff+0x1ec/0x760
[  393.732057][T19731]  do_syscall_64+0x166/0x520
[  393.732074][T19731]  ? trace_irq_disable+0x3b/0x140
[  393.732088][T19731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.732104][T19731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.732118][T19731] RIP: 0033:0x7f75e599e159
[  393.732131][T19731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.732145][T19731] RSP: 002b:00007f75e689c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  393.732161][T19731] RAX: ffffffffffffffda RBX: 00007f75e5c25fa0 RCX: 00007f75e599e159
[  393.732170][T19731] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000
[  393.732180][T19731] RBP: 00007f75e5a35024 R08: ffffffffffffffff R09: 0000000000000000
[  393.732188][T19731] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000
[  393.732196][T19731] R13: 00007f75e5c26038 R14: 00007f75e5c25fa0 R15: 00007ffcc6287738
[  393.732216][T19731]  </TASK>
[  394.207293][T19755] netlink: 'syz.3.5941': attribute type 11 has an invalid length.
[  394.210190][T19755] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5941'.
[  394.277362][ T5630] net_ratelimit: 35 callbacks suppressed
[  394.277430][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  394.388670][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  394.497942][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  394.597304][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5952'.
[  394.607018][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  394.727776][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  394.837104][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  394.947514][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  394.980610][T19787] netlink: 'syz.5.5956': attribute type 4 has an invalid length.
[  394.980654][T19787] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5956'.
[  395.059923][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  395.168742][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  395.278083][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  395.334791][T19799] bridge0: port 4(macvlan2) entered blocking state
[  395.339038][T19799] bridge0: port 4(macvlan2) entered disabled state
[  395.342950][T19799] macvlan2: entered allmulticast mode
[  395.345334][T19799] ip6gretap0: entered allmulticast mode
[  395.351546][T19799] macvlan2: entered promiscuous mode
[  395.354962][T19799] bridge0: port 4(macvlan2) entered blocking state
[  395.355107][T19799] bridge0: port 4(macvlan2) entered forwarding state
[  395.628733][T19815] loop5: detected capacity change from 0 to 128
[  395.643250][T19815] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  395.678289][T14032] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  395.834543][T19823] busy
[  396.167535][ T5659] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  396.324002][T19849] loop9: detected capacity change from 0 to 7
[  396.332485][ T5659] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  396.334090][ T5659] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.334121][ T5659] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  396.347932][ T5659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.347994][ T5659] usb 6-1: Product: syz
[  396.348033][ T5659] usb 6-1: Manufacturer: syz
[  396.348064][ T5659] usb 6-1: SerialNumber: syz
[  396.354923][ T5659] cdc_mbim 6-1:1.0: skipping garbage
[  396.400875][T19849] Dev loop9: unable to read RDB block 7
[  396.401041][T19849]  loop9: unable to read partition table
[  396.401276][T19849] loop9: partition table beyond EOD, truncated
[  396.401308][T19849] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  396.558605][T19830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  396.704219][T19852] loop3: detected capacity change from 0 to 32768
[  396.722260][T19852] JBD2: Ignoring recovery information on journal
[  396.729770][T19852] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[  396.733782][T19852] JBD2: bad block at offset 32
[  396.742213][T19852] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  396.814286][ T5765] ocfs2: Unmounting device (7,3) on (node local)
[  397.020296][T19861] loop3: detected capacity change from 0 to 128
[  397.067304][T19861] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  397.072449][T19861] qnx6: wrong signature (magic) in superblock #1.
[  397.074755][T19861] qnx6: unable to read the first superblock
[  397.164558][T19830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  397.165780][ T5659] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  397.170038][ T5659] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  397.192591][ T5659] wwan wwan0: port wwan0mbim0 attached
[  397.199412][ T5659] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 02:46:90:f5:3b:5d
[  397.378795][ T5659] usb 6-1: USB disconnect, device number 32
[  397.379469][ T5659] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  397.452318][ T5659] wwan wwan0: port wwan0mbim0 disconnected
[  397.966964][ T5596] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  398.039463][T19920] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  398.039463][T19920] The task syz.5.6010 (19920) triggered the difference, watch for misbehavior.
[  398.116912][ T5596] usb 4-1: Using ep0 maxpacket: 32
[  398.124478][ T5596] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  398.130120][ T5596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  398.130175][ T5596] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  398.139430][ T5596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.139469][ T5596] usb 4-1: Product: syz
[  398.139510][ T5596] usb 4-1: Manufacturer: syz
[  398.139533][ T5596] usb 4-1: SerialNumber: syz
[  398.149619][ T5596] usb 4-1: config 0 descriptor??
[  398.153454][ T5596] hub 4-1:0.0: bad descriptor, ignoring hub
[  398.155939][ T5596] hub 4-1:0.0: probe with driver hub failed with error -5
[  398.164082][ T5596] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26
[  398.176233][ T5596] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[  398.183890][ T5596] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90
[  398.477128][ T5596] usb 4-1: USB disconnect, device number 78
[  398.896776][T19938] loop3: detected capacity change from 0 to 128
[  398.900967][T19938] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  398.905560][T19938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.179207][T19952] loop3: detected capacity change from 0 to 1024
[  399.201820][T19952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  399.211443][T19952] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.6024: lblock 0 mapped to illegal pblock 0 (length 1)
[  399.216572][T19952] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  399.221100][T19952] EXT4-fs (loop3): This should not happen!! Data will be lost
[  399.221100][T19952] 
[  399.234555][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  399.337632][ T5650] net_ratelimit: 35 callbacks suppressed
[  399.337686][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  399.447023][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  399.557645][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  399.609466][T19964] loop3: detected capacity change from 0 to 8
[  399.677258][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  399.793502][T19968] loop3: detected capacity change from 0 to 32768
[  399.797316][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  399.808677][T19968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6030 (19968)
[  399.818689][T19968] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  399.822098][T19968] BTRFS info (device loop3): using sha256 checksum algorithm
[  399.906987][T19968] BTRFS info (device loop3): enabling ssd optimizations
[  399.907028][T19968] BTRFS info (device loop3): turning on async discard
[  399.907059][T19968] BTRFS info (device loop3): enabling free space tree
[  399.908463][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  399.977686][ T5765] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  400.037109][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  400.093955][    C0] Remote OS is not known: 127.0.0.1:34454 -> 127.0.0.1:20002
[  400.093955][    C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=64 TOS=0x00 PREC=0x00 TTL=64 ID=29446 DF PROTO=TCP SPT=34454 DPT=20002 SEQ=1013042358 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080A4319BCEC000000000103030A1E040101) 
[  400.094274][    C0] Remote OS is not known: 127.0.0.1:20002 -> 127.0.0.1:34454
[  400.094274][    C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=72 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=20002 DPT=34454 SEQ=125236021 ACK=1013042359 WINDOW=65483 RES=0x00 ACK SYN URGP=0 OPT (0204FFD70402080A9D19DF714319BCEC0103030A1E0C01013083BAC1C354371B) 
[  400.149845][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  400.267381][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  400.377079][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  400.513321][T20019] F2FS-fs: Conflicting test_dummy_encryption options
[  400.839602][T20022] infiniband syz0: set active
[  400.839645][T20022] infiniband syz0: added bond0
[  400.901226][T20022] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  400.901567][T20022] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  400.901584][T20022] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  400.926947][T20022] RDS/IB: syz0: added
[  400.927453][T20022] smc: adding ib device syz0 with port count 1
[  400.927527][T20022] smc:    ib device syz0 port 1 has no pnetid
[  402.424151][   T33] audit: type=1800 audit(524691.785:510): pid=20077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6073" name="file1" dev="tmpfs" ino=3469 res=0 errno=0
[  402.885927][T20115] loop3: detected capacity change from 0 to 40427
[  402.889925][T20115] F2FS-fs (loop3): invalid crc value
[  402.959925][T20115] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  402.968551][T20115] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  402.968618][T20115] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  402.968677][T20115] F2FS-fs (loop3): Start checkpoint disabled!
[  402.981460][T20115] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  402.985686][T20115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  403.005368][T20115] syz.3.6093: attempt to access beyond end of device
[  403.005368][T20115] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  403.015569][T20115] syz.3.6093: attempt to access beyond end of device
[  403.015569][T20115] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  403.032467][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6096'.
[  403.046107][T13082] kworker/u9:24: attempt to access beyond end of device
[  403.046107][T13082] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  403.046182][T13082] CPU: 0 UID: 0 PID: 13082 Comm: kworker/u9:24 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  403.046210][T13082] Tainted: [L]=SOFTLOCKUP
[  403.046214][T13082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.046219][T13082] Workqueue: writeback wb_workfn (flush-7:3)
[  403.046236][T13082] Call Trace:
[  403.046239][T13082]  <TASK>
[  403.046243][T13082]  dump_stack_lvl+0xe8/0x150
[  403.046256][T13082]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  403.046269][T13082]  f2fs_write_end_bio+0x1211/0x16e0
[  403.046280][T13082]  ? blkg_put+0x22/0x240
[  403.046319][T13082]  __submit_merged_bio+0x258/0x6a0
[  403.046330][T13082]  ? rcu_is_watching+0x16/0xb0
[  403.046342][T13082]  __submit_merged_write_cond+0x3c9/0x4e0
[  403.046356][T13082]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  403.046375][T13082]  f2fs_write_data_pages+0x2a27/0x36f0
[  403.046396][T13082]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  403.046409][T13082]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  403.046430][T13082]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  403.046444][T13082]  ? __lock_acquire+0x6df/0x2e50
[  403.046457][T13082]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  403.046467][T13082]  ? f2fs_update_inode+0x1394/0x25c0
[  403.046477][T13082]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  403.046485][T13082]  do_writepages+0x338/0x560
[  403.046499][T13082]  ? reacquire_held_locks+0x117/0x1a0
[  403.046508][T13082]  ? writeback_sb_inodes+0x450/0x1b00
[  403.046518][T13082]  __writeback_single_inode+0x136/0x1220
[  403.046526][T13082]  ? do_raw_spin_unlock+0x4d/0x200
[  403.046538][T13082]  writeback_sb_inodes+0x9de/0x1b00
[  403.046545][T13082]  ? __lock_acquire+0x6df/0x2e50
[  403.046557][T13082]  ? lock_acquire+0x115/0x350
[  403.046567][T13082]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  403.046590][T13082]  ? rcu_is_watching+0x16/0xb0
[  403.046598][T13082]  ? queue_io+0x2d3/0x470
[  403.046607][T13082]  wb_writeback+0x41c/0xad0
[  403.046615][T13082]  ? queue_io+0x1e1/0x470
[  403.046624][T13082]  ? __pfx_wb_writeback+0x10/0x10
[  403.046630][T13082]  ? do_raw_spin_lock+0x12b/0x2f0
[  403.046646][T13082]  wb_workfn+0x431/0x10f0
[  403.046662][T13082]  ? __pfx_wb_workfn+0x10/0x10
[  403.046672][T13082]  ? rcu_is_watching+0x16/0xb0
[  403.046681][T13082]  ? trace_hrtimer_start+0x82/0x200
[  403.046694][T13082]  ? do_raw_spin_lock+0x12b/0x2f0
[  403.046707][T13082]  ? lock_acquire+0x115/0x350
[  403.046717][T13082]  ? rcu_is_watching+0x16/0xb0
[  403.046726][T13082]  ? process_scheduled_works+0x97a/0x1630
[  403.046736][T13082]  process_scheduled_works+0xc3d/0x1630
[  403.046757][T13082]  ? __pfx_process_scheduled_works+0x10/0x10
[  403.046769][T13082]  ? assign_work+0x3cf/0x5d0
[  403.046780][T13082]  worker_thread+0xa47/0xfb0
[  403.046817][T13082]  kthread+0x38b/0x480
[  403.046829][T13082]  ? __pfx_worker_thread+0x10/0x10
[  403.046838][T13082]  ? __pfx_kthread+0x10/0x10
[  403.046846][T13082]  ret_from_fork+0x514/0xb70
[  403.046854][T13082]  ? __pfx_ret_from_fork+0x10/0x10
[  403.046862][T13082]  ? __switch_to+0xc89/0x1420
[  403.046873][T13082]  ? __pfx_kthread+0x10/0x10
[  403.046880][T13082]  ret_from_fork_asm+0x1a/0x30
[  403.046894][T13082]  </TASK>
[  403.053531][T13082] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  403.084882][    T9] loop3: lost filesystem error report for type 5 error -108
[  403.714813][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6101'.
[  404.438345][ T5650] net_ratelimit: 35 callbacks suppressed
[  404.438412][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  404.546487][T20183] netlink: 'syz.3.6123': attribute type 7 has an invalid length.
[  404.549476][T20183] netlink: 'syz.3.6123': attribute type 5 has an invalid length.
[  404.553726][T20183] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6123'.
[  404.557138][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  404.667003][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  404.755216][T20197] sctp: [Deprecated]: syz.3.6130 (pid 20197) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.755216][T20197] Use struct sctp_sack_info instead
[  404.777082][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  404.887108][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  405.007107][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  405.117203][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  405.211762][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6139'.
[  405.211804][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6139'.
[  405.237109][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  405.322743][T20207] loop3: detected capacity change from 0 to 131072
[  405.324158][T20207] F2FS-fs (loop3): invalid crc value
[  405.347555][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  405.360155][T20207] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  405.364625][T20207] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  405.408095][T20225] cifs: Unknown parameter '5ser_xattr'
[  405.459310][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  406.008808][T20243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6151'.
[  406.012336][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  406.346739][T20264] netlink: 'syz.3.6159': attribute type 2 has an invalid length.
[  406.383731][T20268] input: syz0 as /devices/virtual/input/input27
[  406.565423][T20278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6164'.
[  406.746491][T20291] loop3: detected capacity change from 0 to 2048
[  406.767019][T20291] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  406.768075][T20291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  407.033941][   T33] audit: type=1800 audit(524696.375:511): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6170" name="file1" dev="loop3" ino=1346 res=0 errno=0
[  407.147830][T20295] 9p: Bad value for 'port'
[  407.730463][T20312] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x850c instead
[  407.734139][T20312] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead
[  407.737752][T20312] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead
[  407.750373][T20312] jffs2: notice: (20312) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  407.763178][T20312] overlayfs: missing 'lowerdir'
[  407.874674][T20320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6177'.
[  408.093574][T20347] loop3: detected capacity change from 0 to 24
[  408.099388][T20347] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  408.154752][T20347] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  408.534546][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'.
[  408.998079][T20373] loop3: detected capacity change from 0 to 256
[  408.998964][T20373] exfat: Deprecated parameter 'namecase'
[  408.998982][T20373] exfat: Deprecated parameter 'namecase'
[  409.010591][T20373] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  409.315140][T20380] bond4: option all_slaves_active: invalid value (8)
[  409.325609][T20380] bond4 (unregistering): Released all slaves
[  409.456997][ T5630] net_ratelimit: 27 callbacks suppressed
[  409.457084][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  409.567909][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  409.571737][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6211'.
[  409.577233][    T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  409.577300][    T9] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  409.581310][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout
[  409.728433][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  409.898402][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  410.007320][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  410.039623][T20420] trusted_key: encrypted_key: insufficient parameters specified
[  410.091783][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6225'.
[  410.105686][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6226'.
[  410.117401][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  410.125888][    T9] hid-generic FFFF:8001:0002.0017: item fetching failed at offset 0/1
[  410.126195][    T9] hid-generic FFFF:8001:0002.0017: probe with driver hid-generic failed with error -22
[  410.226995][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  410.253536][T20433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6231'.
[  410.337290][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  410.338840][T20442] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  410.448190][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  410.556936][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  410.686928][    T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  410.695200][T20466] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6246'.
[  410.837062][    T9] usb 4-1: Using ep0 maxpacket: 32
[  410.837588][    T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  410.840678][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.840689][    T9] usb 4-1: Product: syz
[  410.840695][    T9] usb 4-1: Manufacturer: syz
[  410.840700][    T9] usb 4-1: SerialNumber: syz
[  410.855931][    T9] usb 4-1: config 0 descriptor??
[  411.270573][    T9] airspy 4-1:0.0: Board ID: 00
[  411.270619][    T9] airspy 4-1:0.0: Firmware version: 
[  411.679460][    T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e
[  411.720123][    T9] airspy 4-1:0.0: Registered as swradio24
[  411.720192][    T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  411.725607][    T9] usb 4-1: USB disconnect, device number 79
[  412.447621][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6287'.
[  412.481437][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6288'.
[  412.514284][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6290'.
[  412.556438][T20560] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6292'.
[  413.207166][ T5660] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  413.218217][   T33] audit: type=1800 audit(524702.585:512): pid=20601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6311" name="nullb0" dev="tmpfs" ino=6013 res=0 errno=0
[  413.337193][ T5660] usb 4-1: device descriptor read/64, error -71
[  413.581040][ T5660] usb 4-1: new full-speed USB device number 81 using dummy_hcd
[  413.707018][ T5660] usb 4-1: device descriptor read/64, error -71
[  413.818726][ T5660] usb usb4-port1: attempt power cycle
[  414.158296][ T5660] usb 4-1: new full-speed USB device number 82 using dummy_hcd
[  414.177788][ T5660] usb 4-1: device descriptor read/8, error -71
[  414.417161][ T5660] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  414.438368][ T5660] usb 4-1: device descriptor read/8, error -71
[  414.487683][ T5651] net_ratelimit: 34 callbacks suppressed
[  414.490194][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  414.547446][ T5660] usb usb4-port1: unable to enumerate USB device
[  414.597052][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  414.707144][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  414.817041][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  414.895687][T20672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6345'.
[  414.895859][T20672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6345'.
[  414.922204][T20674] openvswitch: netlink: IP tunnel dst address not specified
[  414.922260][T20674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.939487][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  415.047282][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  415.079425][T20692] fuse: fd is not a fuse device
[  415.079977][T20692] overlayfs: failed to clone lowerpath
[  415.167176][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  415.243574][T20710] netlink: 'syz.0.6364': attribute type 5 has an invalid length.
[  415.277835][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  415.338546][T20723] overlay: ./file0 is not a directory
[  416.005242][T20764] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20005
[  416.483443][T20801] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  416.483680][T20800] loop3: detected capacity change from 0 to 512
[  416.504427][T20800] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  416.569879][T20800] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.6402: bg 0: block 4: invalid block bitmap
[  416.594908][T20800] loop3: lost filesystem error report for type 5 error -117
[  416.597848][    C1] EXT4-fs (loop3): initial error at time 524705: ext4_validate_block_bitmap:436
[  416.598976][    C1] EXT4-fs (loop3): last error at time 524705: ext4_validate_block_bitmap:436
[  416.633187][T20800] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  416.636683][T20800] loop3: lost filesystem error report for type 5 error -117
[  416.639748][T20800] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6402: invalid indirect mapped block 1 (level 1)
[  416.646579][T20800] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  416.665383][T20800] EXT4-fs (loop3): 1 truncate cleaned up
[  416.668625][T20815] sch_tbf: burst 274 is lower than device lo mtu (11337746) !
[  416.688466][T20800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.960014][ T5596] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  417.173523][ T5596] usb 4-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db
[  417.194430][ T5596] usb 4-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config
[  417.218781][ T5596] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  417.242940][ T5596] usb 4-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config
[  417.250249][ T5596] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  417.263721][ T5596] usb 4-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config
[  417.268256][ T5596] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  417.273916][ T5596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.329740][ T5596] usb 4-1: config 0 descriptor??
[  417.444579][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6417'.
[  417.556282][ T5596] usb 4-1: string descriptor 0 read error: -71
[  417.562139][ T5596] rndis_host 4-1:0.0: skipping garbage
[  417.564816][ T5596] rndis_host 4-1:0.0: rndis: master #0/ffff88817331c000 slave #1/0000000000000000
[  417.571889][ T5596] usb 4-1: USB disconnect, device number 84
[  418.223279][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.379997][T20863] loop3: detected capacity change from 0 to 32768
[  418.391104][T20863] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  418.409843][T20863] XFS (loop3): Ending clean mount
[  418.413445][T20863] XFS (loop3): Quotacheck needed: Please wait.
[  418.460211][T20863] XFS (loop3): Quotacheck: Done.
[  418.514443][ T5765] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  418.820164][T20882] netlink: 'syz.0.6433': attribute type 4 has an invalid length.
[  419.497125][T17885] net_ratelimit: 38 callbacks suppressed
[  419.497429][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  419.609767][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  419.626194][T20957] can0: slcan on ttyS3.
[  419.738107][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  419.775760][T20957] can0 (unregistered): slcan off ttyS3.
[  419.847146][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  419.957140][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  420.077703][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  420.197356][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  420.307647][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  420.417131][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  420.625549][T21010] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6488'.
[  420.810036][ T5650] bond3: (slave bridge3): failed to get link speed/duplex
[  420.837733][T21012] overlayfs: failed to clone upperpath
[  421.325080][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6502'.
[  421.475685][T21051] binfmt_misc: register: failed to install interpreter ./file0
[  422.040303][T21113] fuse: Bad value for 'fd'
[  422.147698][T21123] netlink: 'syz.5.6533': attribute type 1 has an invalid length.
[  422.165177][T21123] bond4: entered promiscuous mode
[  422.165422][T21123] 8021q: adding VLAN 0 to HW filter on device bond4
[  422.180853][T21123] 8021q: adding VLAN 0 to HW filter on device bond4
[  422.181072][T21123] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  422.181082][T21123] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  422.188330][T21123] bond4: (slave ip6gre1): making interface the new active one
[  422.188344][T21123] ip6gre1: entered promiscuous mode
[  422.189190][T21123] bond4: (slave ip6gre1): Enslaving as an active interface with an up link
[  422.247098][ T5659] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  422.356024][T21132] sctp: [Deprecated]: syz.5.6537 (pid 21132) Use of struct sctp_assoc_value in delayed_ack socket option.
[  422.356024][T21132] Use struct sctp_sack_info instead
[  422.407944][ T5659] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  422.413209][ T5659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.625667][    C0] dln2 4-1:1.0: size mismatch: handle 0 cmd 0 echo 0 size 14 actual 8
[  422.628778][ T5659] dln2 4-1:1.0: USB write failed: -110
[  422.629120][ T5659] dln2 4-1:1.0: failed to initialize hardware
[  422.637314][ T5659] dln2 4-1:1.0: probe with driver dln2 failed with error -110
[  422.828557][ T5596] usb 4-1: USB disconnect, device number 85
[  423.402174][T21165] sg_read: process 4118 (syz.3.6551) changed security contexts after opening file descriptor, this is not allowed.
[  423.885728][T21199] loop3: detected capacity change from 0 to 1024
[  423.892830][T21199] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  423.896497][T21199] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  423.902898][T21199] EXT4-fs (loop3): invalid journal inode
[  423.904891][T21199] EXT4-fs (loop3): can't get journal size
[  423.910808][T21199] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 17104912: comm syz.3.6567: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  423.910862][T21199] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  423.914845][T21199] EXT4-fs (loop3): failed to initialize system zone (-117)
[  423.914881][T21199] EXT4-fs (loop3): mount failed
[  423.918404][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  423.918413][    C1] EXT4-fs (loop3): initial error at time 524713: ext4_map_blocks:790: inode 3: block 17104912
[  423.918428][    C1] EXT4-fs (loop3): last error at time 524713: ext4_map_blocks:790: inode 3: block 17104912
[  423.944141][T21205] /dev/nullb0: Can't lookup blockdev
[  424.119730][T21220] 9p: Bad value for 'rfdno'
[  424.514379][T21242] loop3: detected capacity change from 0 to 764
[  424.554106][T21242] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  424.607225][ T5630] net_ratelimit: 34 callbacks suppressed
[  424.607290][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  424.657375][T21246] loop3: detected capacity change from 0 to 1024
[  424.661907][T21246] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  424.717089][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  424.771610][T21250] loop3: detected capacity change from 0 to 64
[  424.832503][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  424.947237][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  425.057572][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  425.167110][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  425.277501][ T5651] bond3: (slave bridge3): failed to get link speed/duplex
[  425.387273][ T5630] bond3: (slave bridge3): failed to get link speed/duplex
[  425.497385][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  425.607092][T17885] bond3: (slave bridge3): failed to get link speed/duplex
[  425.907672][T21318] loop3: detected capacity change from 0 to 2048
[  425.920350][T21318] NILFS (loop3): invalid segment: Magic number mismatch
[  425.920400][T21318] NILFS (loop3): trying rollback from an earlier position
[  425.923820][T21318] NILFS (loop3): recovery complete
[  425.924428][T21319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  425.948875][   T33] audit: type=1800 audit(524715.305:513): pid=21318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6622" name="file1" dev="loop3" ino=12 res=0 errno=0
[  426.040774][T21318] NILFS (loop3): nilfs_dat_move: invalid vblocknr = 9, [0, 0)
[  426.044673][T21318] NILFS error (device loop3): nilfs_bmap_assign: broken bmap (inode number=3)
[  426.073767][T21318] Remounting filesystem read-only
[  426.073839][T21318] NILFS (loop3): error -5 cleaning segments
[  426.584784][T21336] xt_hashlimit: size too large, truncated to 1048576
[  426.745110][T21318] NILFS (loop3): error -30 cleaning segments
[  426.761875][ T5765] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  426.779098][ T5765] VFS: Busy inodes after unmount of loop3 (nilfs2)
[  426.779242][ T5765] ------------[ cut here ]------------
[  426.779281][ T5765] kernel BUG at fs/super.c:765!
[  426.779311][ T5765] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  426.787303][ T5765] CPU: 0 UID: 0 PID: 5765 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  426.791188][ T5765] Tainted: [L]=SOFTLOCKUP
[  426.792706][ T5765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  426.796166][ T5765] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0
[  426.798511][ T5765] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 d3 2d eb ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 00 dc 1f 8c 48 89 de e8 fa f8 da fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90
[  426.804781][ T5765] RSP: 0018:ffffc9000645fd10 EFLAGS: 00010246
[  426.806670][ T5765] RAX: 0000000000000030 RBX: ffff8881ab41e6a8 RCX: b84579226df1ca00
[  426.809149][ T5765] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  426.811573][ T5765] RBP: 1ffff11035683cf7 R08: ffffc9000645fa87 R09: 1ffff92000c8bf50
[  426.814028][ T5765] R10: dffffc0000000000 R11: fffff52000c8bf51 R12: 0000000000000000
[  426.816377][ T5765] R13: dffffc0000000000 R14: ffffffff8f318940 R15: ffff8881ab41e7b8
[  426.818915][ T5765] FS:  000055555de7d500(0000) GS:ffff88818d6cc000(0000) knlGS:0000000000000000
[  426.821628][ T5765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  426.823703][ T5765] CR2: 00007f75e5c21188 CR3: 000000010db4c000 CR4: 00000000000006f0
[  426.826201][ T5765] DR0: 0000000000010002 DR1: 0000000000000000 DR2: 0000000000000000
[  426.828648][ T5765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  426.831097][ T5765] Call Trace:
[  426.832167][ T5765]  <TASK>
[  426.833190][ T5765]  kill_block_super+0x44/0xa0
[  426.834678][ T5765]  deactivate_locked_super+0xbc/0x110
[  426.836449][ T5765]  cleanup_mnt+0x3d3/0x460
[  426.838087][ T5765]  task_work_run+0x1d9/0x270
[  426.839889][ T5765]  ? __pfx_task_work_run+0x10/0x10
[  426.841603][ T5765]  exit_to_user_mode_loop+0x204/0x770
[  426.843266][ T5765]  ? rcu_is_watching+0x16/0xb0
[  426.844703][ T5765]  do_syscall_64+0x328/0x520
[  426.846118][ T5765]  ? trace_irq_disable+0x3b/0x140
[  426.848078][ T5765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.850479][ T5765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.852454][ T5765] RIP: 0033:0x7fd8edf9f397
[  426.853876][ T5765] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  426.859922][ T5765] RSP: 002b:00007ffc41790548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  426.862874][ T5765] RAX: 0000000000000000 RBX: 00007fd8ee034474 RCX: 00007fd8edf9f397
[  426.865360][ T5765] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc41790600
[  426.868307][ T5765] RBP: 00007ffc41790600 R08: 00007ffc41791600 R09: 00000000ffffffff
[  426.871254][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc41791690
[  426.874325][ T5765] R13: 00007fd8ee034474 R14: 000000000006845f R15: 00007ffc417916d0
[  426.877363][ T5765]  </TASK>
[  426.878590][ T5765] Modules linked in:
[  426.881096][ T5765] ---[ end trace 0000000000000000 ]---
[
** replaying previous printk message **
[  426.885964][ T5765] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0
[  426.886011][ T5765] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 d3 2d eb ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 00 dc 1f 8c 48 89 de e8 fa f8 da fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90
[  426.886049][ T5765] RSP: 0018:ffffc9000645fd10 EFLAGS: 00010246
[  426.886091][ T5765] RAX: 0000000000000030 RBX: ffff8881ab41e6a8 RCX: b84579226df1ca00
[  426.886114][ T5765] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  426.886121][ T5765] RBP: 1ffff11035683cf7 R08: ffffc9000645fa87 R09: 1ffff92000c8bf50
[  426.886126][ T5765] R10: dffffc0000000000 R11: fffff52000c8bf51 R12: 0000000000000000
[  426.886131][ T5765] R13: dffffc0000000000 R14: ffffffff8f318940 R15: ffff8881ab41e7b8
[  426.886136][ T5765] FS:  000055555de7d500(0000) GS:ffff88818d6cc000(0000) knlGS:0000000000000000
[  426.886142][ T5765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  426.886148][ T5765] CR2: 00007f75e5c21188 CR3: 000000010db4c000 CR4: 00000000000006f0
[  426.886175][ T5765] DR0: 0000000000010002 DR1: 0000000000000000 DR2: 0000000000000000
[  426.886182][ T5765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  426.886188][ T5765] Kernel panic - not syncing: Fatal exception
[  426.925987][ T5765] Kernel Offset: disabled
[  426.927508][ T5765] Rebooting in 86400 seconds..
