last executing test programs:

3m44.061502199s ago: executing program 2 (id=89):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4)
bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x1, 0x3}, 0x20)

3m44.010754285s ago: executing program 2 (id=90):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='oom_score_adj < -0', 0x12)

3m43.949421913s ago: executing program 2 (id=91):
r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{}, {0x0, <r1=>0x80000000}, {0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x4, [0xffffffff, 0x7]}, {r1, r2, 0x6, [0xa, 0xf7]}, 0x4, [0x3, 0xffffb4b5]})

3m43.890978493s ago: executing program 2 (id=92):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000005c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x7ff}}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8}, {@uni_xlate}, {@utf8}, {@fat=@showexec}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@numtail}]}, 0x0, 0x2c4, &(0x7f0000002880)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

3m43.890755508s ago: executing program 2 (id=93):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)

3m43.602171084s ago: executing program 2 (id=94):
r0 = socket$netlink(0x10, 0x3, 0x14)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001414192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

3m43.561684642s ago: executing program 32 (id=94):
r0 = socket$netlink(0x10, 0x3, 0x14)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001414192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

3m15.380194978s ago: executing program 1 (id=560):
r0 = socket(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xce, 0x0, 0x0)

3m15.380046323s ago: executing program 1 (id=561):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000080)={0x4, 0x17, 0x0, 0x0, 0x7995}, 0x7a9cdb5f657e71b1, 0x0, 0x4, 0x48000000, 0x6, 0x1, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0)

3m15.331507941s ago: executing program 1 (id=563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000080)

3m15.260198441s ago: executing program 1 (id=566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0)

3m15.131362483s ago: executing program 1 (id=568):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20040801)

3m14.681615073s ago: executing program 1 (id=570):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c1000004e2300224e0000", 0x58}], 0x1)

3m14.617876873s ago: executing program 33 (id=570):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c1000004e2300224e0000", 0x58}], 0x1)

3m8.760833001s ago: executing program 4 (id=629):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==")
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2000, 0x2dd8806920477201, 0x0)

3m8.645749125s ago: executing program 4 (id=631):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000640)={[{@utf8}, {@namecase}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}]}, 0x1, 0x153c, &(0x7f00000008c0)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)

3m8.550226247s ago: executing program 4 (id=635):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0xc, 0x0, 0x60000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x50}, 0x1, 0x7}, 0x4004010)

3m8.450524433s ago: executing program 4 (id=636):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000d4, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x243, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c)

3m8.247008747s ago: executing program 4 (id=637):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x8, 0x2, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x7}}, 0x10, 0x0}, 0x0)

3m7.977620025s ago: executing program 4 (id=639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

3m7.86188892s ago: executing program 34 (id=639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

1m48.7389084s ago: executing program 5 (id=1834):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r0, &(0x7f0000000cc0), 0xfd45)

1m48.738684835s ago: executing program 5 (id=1835):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1c, 0x2, @loopback, 0x1}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

1m48.459074135s ago: executing program 5 (id=1837):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a310000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1m48.458450758s ago: executing program 3 (id=1839):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, 0x0, &(0x7f00000006c0)=""/173}, 0x20)

1m48.458280267s ago: executing program 3 (id=1840):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1bc, 0x65, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x190, 0x2, [@TCA_BPF_ACT={0x18c, 0x1, [@m_bpf={0xac, 0x11, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x599, 0x20000000, 0x93e9, 0x1}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xbd, 0x1, 0x9}]}]}, {0x51, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xdc, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x85, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1m48.450534726s ago: executing program 3 (id=1841):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0)

1m48.371363495s ago: executing program 5 (id=1842):
syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d0001000000000904"], 0x0)

1m48.371205767s ago: executing program 3 (id=1843):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0)

1m48.288489292s ago: executing program 3 (id=1844):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)

1m47.971327989s ago: executing program 0 (id=1849):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
close_range(r0, r0, 0x0)

1m47.887027668s ago: executing program 0 (id=1850):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0xa0c01, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="d34edac4", 0x4}], 0x1)

1m47.821552372s ago: executing program 0 (id=1851):
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)

1m47.761470765s ago: executing program 5 (id=1852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014)

1m47.76136404s ago: executing program 0 (id=1853):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f0000000140))

1m47.681205487s ago: executing program 5 (id=1854):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="5338a3848b", 0x5}], 0x1}}], 0x1, 0x20008000)
recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123)
shutdown(r0, 0x0)

1m47.680990487s ago: executing program 0 (id=1855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x25dfdbff, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x480}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x890}, 0x40)

1m41.226762701s ago: executing program 0 (id=1856):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000600, 0x1}}, 0x20)

1m28.251252522s ago: executing program 3 (id=1857):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001600), &(0x7f0000001cc0), 0x2}, 0x20)

46.240587405s ago: executing program 35 (id=1856):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000600, 0x1}}, 0x20)

0s ago: executing program 36 (id=1854):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="5338a3848b", 0x5}], 0x1}}], 0x1, 0x20008000)
recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123)
shutdown(r0, 0x0)

kernel console output (not intermixed with test programs):

ace activated: batadv_slave_0
[  106.106939][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.116352][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.129313][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.132977][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.141953][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.216170][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.222136][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.265625][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.270351][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.515623][   T34] audit: type=1326 audit(1789988453.048:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.527964][   T24] sony 0003:054C:0268.0004: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  106.531041][   T34] audit: type=1326 audit(1789988453.058:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.546426][   T34] audit: type=1326 audit(1789988453.058:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.555494][   T34] audit: type=1326 audit(1789988453.058:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.564853][   T34] audit: type=1326 audit(1789988453.058:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.575867][   T34] audit: type=1326 audit(1789988453.058:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.584727][   T34] audit: type=1326 audit(1789988453.058:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.584751][   T24] sony 0003:054C:0268.0004: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.3-1/input0
[  106.599640][   T34] audit: type=1326 audit(1789988453.058:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.609033][   T24] sony 0003:054C:0268.0004: failed to claim input
[  106.609696][   T34] audit: type=1326 audit(1789988453.058:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.624146][   T34] audit: type=1326 audit(1789988453.058:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.5.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256359e159 code=0x7ffc0000
[  106.632629][   T24] usb 4-1: USB disconnect, device number 8
[  106.681641][ T5649] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  106.833736][ T5649] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  106.836897][ T5649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.045197][ T5649] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  107.051091][ T5952] Bluetooth: hci0: command tx timeout
[  107.205703][ T7526] Invalid ELF header type: 0 != 1
[  107.873562][ T7556] rnbd_client L213: map_device: Parameters missing
[  107.903864][ T7558] loop3: detected capacity change from 0 to 256
[  107.913798][ T7558] exfat: Deprecated parameter 'namecase'
[  107.919955][ T7558] exfat: Deprecated parameter 'namecase'
[  107.935080][ T7558] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  108.387833][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'.
[  109.131855][ T5952] Bluetooth: hci0: command tx timeout
[  109.263667][ T7593] netlink: 'syz.5.693': attribute type 3 has an invalid length.
[  109.556657][ T7610] loop5: detected capacity change from 0 to 128
[  109.587028][ T7610] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  109.592641][ T7610] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.677225][ T5702] kernel write not supported for file /44/net/fib_triestat (pid: 5702 comm: kworker/1:5)
[  109.725341][ T7389] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.803910][ T7607] loop3: detected capacity change from 0 to 32768
[  109.814461][ T7607] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.697 (7607)
[  109.834067][ T7607] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.842614][ T7607] BTRFS info (device loop3): using sha256 checksum algorithm
[  109.908582][ T7607] BTRFS info (device loop3): enabling ssd optimizations
[  109.915884][ T7607] BTRFS info (device loop3): turning on async discard
[  109.920223][ T7607] BTRFS info (device loop3): enabling free space tree
[  109.976300][ T5947] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.211546][ T5952] Bluetooth: hci0: command tx timeout
[  111.248118][ T7679] block nbd3: shutting down sockets
[  111.291773][ T7683] bpf: Bad value for 'mode'
[  111.335394][ T7685] FAULT_INJECTION: forcing a failure.
[  111.335394][ T7685] name failslab, interval 1, probability 0, space 0, times 0
[  111.340587][ T7685] CPU: 0 UID: 60928 PID: 7685 Comm: syz.3.718 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.340628][ T7685] Tainted: [L]=SOFTLOCKUP
[  111.340634][ T7685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.340642][ T7685] Call Trace:
[  111.340647][ T7685]  <TASK>
[  111.340653][ T7685]  dump_stack_lvl+0xe8/0x150
[  111.340676][ T7685]  should_fail_ex+0x40c/0x560
[  111.340698][ T7685]  should_failslab+0xa8/0x100
[  111.340717][ T7685]  __kmalloc_cache_noprof+0xa8/0x660
[  111.340735][ T7685]  ? alloc_ucounts+0xaa/0x4b0
[  111.340750][ T7685]  ? alloc_ucounts+0xaa/0x4b0
[  111.340768][ T7685]  alloc_ucounts+0xaa/0x4b0
[  111.340786][ T7685]  inc_ucount+0x84/0x3b0
[  111.340805][ T7685]  ? __pfx_inc_ucount+0x10/0x10
[  111.340820][ T7685]  ? __pfx_copy_mnt_ns+0x10/0x10
[  111.340837][ T7685]  ? kmem_cache_alloc_noprof+0x308/0x5f0
[  111.340853][ T7685]  copy_ipcs+0x18a/0x6c0
[  111.340869][ T7685]  ? copy_utsname+0x184/0x620
[  111.340884][ T7685]  create_new_namespaces+0x210/0x6b0
[  111.340900][ T7685]  ? security_capable+0x7e/0x2c0
[  111.340921][ T7685]  unshare_nsproxy_namespaces+0x149/0x190
[  111.340937][ T7685]  ksys_unshare+0x57d/0xa00
[  111.340959][ T7685]  ? __pfx_ksys_unshare+0x10/0x10
[  111.340976][ T7685]  ? rcu_is_watching+0x15/0xb0
[  111.340999][ T7685]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.341014][ T7685]  __x64_sys_unshare+0x38/0x50
[  111.341036][ T7685]  do_syscall_64+0x174/0x580
[  111.341052][ T7685]  ? trace_irq_disable+0x3b/0x140
[  111.341070][ T7685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.341084][ T7685] RIP: 0033:0x7fec5b79e159
[  111.341117][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.341128][ T7685] RSP: 002b:00007fec5c6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  111.341143][ T7685] RAX: ffffffffffffffda RBX: 00007fec5ba25fa0 RCX: 00007fec5b79e159
[  111.341152][ T7685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  111.341160][ T7685] RBP: 00007fec5b83506b R08: 0000000000000000 R09: 0000000000000000
[  111.341168][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.341175][ T7685] R13: 00007fec5ba26038 R14: 00007fec5ba25fa0 R15: 00007ffdc8dec018
[  111.341196][ T7685]  </TASK>
[  111.831336][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.727'.
[  111.834915][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.727'.
[  111.934987][ T7706] bond1: option arp_interval: invalid value (18446744073709551614)
[  111.938224][ T7706] bond1: option arp_interval: allowed values 0 - 2147483647
[  111.949226][ T7706] bond1 (unregistering): Released all slaves
[  111.971051][ T7711] loop3: detected capacity change from 0 to 256
[  111.979663][ T7711] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  112.060401][ T7714] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  112.149417][ T7718] ip_tables: iptables: counters copy to user failed while replacing table
[  112.275936][ T7727] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  112.475352][ T7735] loop5: detected capacity change from 0 to 8
[  112.492011][ T7735] SQUASHFS error: xz decompression failed, data probably corrupt
[  112.496806][ T7735] SQUASHFS error: Failed to read block 0x108: -5
[  112.502873][ T7735] SQUASHFS error: Unable to read metadata cache entry [106]
[  112.506751][ T7735] SQUASHFS error: Unable to read inode 0x11f
[  112.591704][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.741'.
[  112.683480][ T7740] loop5: detected capacity change from 0 to 1756
[  112.696587][ T7740] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  112.699088][ T7740] UDF-fs: Scanning with blocksize 512 failed
[  112.715502][ T7740] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  112.718637][ T7740] UDF-fs: Scanning with blocksize 1024 failed
[  112.729630][ T7740] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  112.735335][ T7740] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  112.738631][ T7740] UDF-fs: Scanning with blocksize 2048 failed
[  112.745919][ T7740] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  112.754043][ T7740] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  112.757564][ T7740] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  112.760551][ T7740] UDF-fs: Scanning with blocksize 4096 failed
[  112.763907][ T7740] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  112.944975][ T7746] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  112.949425][ T7746] /dev/nullb0: Can't open blockdev
[  113.033480][ T7752] ipt_REJECT: TCP_RESET invalid for non-tcp
[  113.195823][ T7765] loop5: detected capacity change from 0 to 128
[  113.200951][ T7765] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  113.205943][ T7765] UDF-fs: warning (device loop5): udf_fill_super: No fileset found
[  113.720929][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  113.793253][ T7778] loop5: detected capacity change from 0 to 512
[  113.801516][ T7778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  113.805104][ T7778] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  113.810179][ T7778] EXT4-fs (loop5): orphan cleanup on readonly fs
[  113.814363][ T7778] __quota_error: 9 callbacks suppressed
[  113.814373][ T7778] Quota error (device loop5): v2_read_file_info: Block with free entry 5 out of range (1, 5).
[  113.824455][ T7778] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  113.830718][ T7778] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  113.835960][ T7778] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  113.849587][ T7778] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.759: corrupted inode contents
[  113.854515][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  113.854532][    C0] EXT4-fs (loop5): initial error at time 1789988460: mb_free_blocks:2049: inode 12: block 14
[  113.854558][    C0] EXT4-fs (loop5): last error at time 1789988460: mb_free_blocks:2049: inode 12: block 14
[  113.866420][ T7778] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.870327][ T7778] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #12: comm syz.5.759: mark_inode_dirty error
[  113.882478][ T7778] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.883510][ T7778] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.759: corrupted inode contents
[  113.893361][ T7778] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.893686][ T7778] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.759: mark_inode_dirty error
[  113.902151][ T7778] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.904562][ T7778] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.759: corrupted inode contents
[  113.913979][ T7778] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.915940][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  113.924567][ T7778] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  113.928763][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.932260][    T9] usb 4-1: Product: syz
[  113.936260][    T9] usb 4-1: Manufacturer: syz
[  113.938219][    T9] usb 4-1: SerialNumber: syz
[  113.941109][ T7778] loop5: lost filesystem error report for type 5 error -117
[  113.941713][ T7778] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.759: corrupted inode contents
[  113.951546][ T7778] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.955188][ T7778] EXT4-fs error (device loop5): ext4_truncate:4691: inode #12: comm syz.5.759: mark_inode_dirty error
[  113.959304][    T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  113.961970][ T7778] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  113.967405][ T7778] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  113.973811][ T7778] loop5: lost filesystem error report for type 5 error -117
[  113.974221][ T7778] EXT4-fs (loop5): 1 truncate cleaned up
[  113.984025][ T7778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.001280][   T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  114.035309][ T7389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.102645][ T7781] loop5: detected capacity change from 0 to 4096
[  114.110688][ T7781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.132618][ T7781] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  114.149408][ T7389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.213000][ T7776] random: crng reseeded on system resumption
[  114.246488][ T5702] usb 4-1: USB disconnect, device number 9
[  114.417452][   T33] usb 1-1: USB disconnect, device number 12
[  114.473601][ T7797] netlink: 100 bytes leftover after parsing attributes in process `syz.0.767'.
[  114.480400][ T7797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.767'.
[  114.485487][ T7799] netlink: 40 bytes leftover after parsing attributes in process `syz.5.768'.
[  114.485531][ T7797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.767'.
[  114.848026][ T7818] Bluetooth: MGMT ver 1.23
[  115.056778][   T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  115.076027][   T10] ath9k_htc: Failed to initialize the device
[  115.128708][ T5702] usb 4-1: ath9k_htc: USB layer deinitialized
[  115.216146][ T7823] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[  115.420640][ T7831] mmap: syz.3.783 (7831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  115.523705][ T7835] loop3: detected capacity change from 0 to 512
[  115.610403][ T7835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.632496][ T7835] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.698155][ T5947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.799835][ T7847] bond1: option ad_user_port_key: invalid value (60743)
[  115.807034][ T7847] bond1: option ad_user_port_key: allowed values 0 - 1023
[  115.822522][ T7847] bond1 (unregistering): Released all slaves
[  115.825184][ T7839] loop0: detected capacity change from 0 to 32768
[  115.957241][ T7852] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  115.983755][ T7852] bond1 (unregistering): Released all slaves
[  116.120624][ T7864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.124106][ T7864] IPv6: NLM_F_CREATE should be set when creating new route
[  116.172204][ T7868] loop5: detected capacity change from 0 to 1024
[  116.245734][ T7868] hfsplus: invalid length 1280 has been corrected to 255
[  116.257785][ T7868] hfsplus: invalid length 1280 has been corrected to 255
[  116.266302][ T7868] hfsplus: invalid length 1280 has been corrected to 255
[  116.273773][ T7868] hfsplus: invalid length 1280 has been corrected to 255
[  116.282636][ T7868] hfsplus: invalid length 1280 has been corrected to 255
[  116.395362][ T7889] loop3: detected capacity change from 0 to 128
[  116.400391][ T7889] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  116.407431][ T7889] FAT-fs (loop3): data area starts beyond volume (36 > 6)
[  116.409697][ T7889] FAT-fs (loop3): Can't find a valid FAT filesystem
[  116.521893][ T7901] loop3: detected capacity change from 0 to 512
[  116.528632][ T7901] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  116.540696][ T7901] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -EBUSY
[  116.760614][ T7927] loop3: detected capacity change from 0 to 512
[  116.768338][ T7927] EXT4-fs: Ignoring removed oldalloc option
[  116.786372][ T7927] EXT4-fs (loop3): Test dummy encryption mode enabled
[  116.799861][ T7926] loop5: detected capacity change from 0 to 4096
[  116.827278][ T7927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.883025][ T7931] loop0: detected capacity change from 0 to 2048
[  116.922096][ T7927] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  116.926584][ T7935] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.978404][ T5947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.079719][ T7939] UBIFS error (pid: 7939): cannot open "ubi0:test", error -19
[  117.472841][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  117.597405][ T7989] loop5: detected capacity change from 0 to 512
[  117.628579][ T7989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.634105][    T9] usb 1-1: Using ep0 maxpacket: 32
[  117.636192][ T7989] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.641413][    T9] usb 1-1: config 0 has an invalid interface number: 153 but max is 0
[  117.644298][    T9] usb 1-1: config 0 has no interface number 0
[  117.646326][    T9] usb 1-1: config 0 interface 153 has no altsetting 0
[  117.652588][    T9] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  117.658175][    T9] usb 1-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  117.662867][    T9] usb 1-1: Product: syz
[  117.664178][    T9] usb 1-1: Manufacturer: syz
[  117.665677][    T9] usb 1-1: SerialNumber: syz
[  117.670907][    T9] usb 1-1: config 0 descriptor??
[  117.683779][ T7389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.878129][    T9] hub 1-1:0.153: bad descriptor, ignoring hub
[  117.880480][    T9] hub 1-1:0.153: probe with driver hub failed with error -5
[  117.883890][    T9] sierra 1-1:0.153: Sierra USB modem converter detected
[  117.903190][    T9] usb 1-1: USB disconnect, device number 13
[  117.908149][    T9] sierra 1-1:0.153: device disconnected
[  118.093974][ T8015] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[  118.220952][ T5804] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  118.383541][ T5804] usb 6-1: config 0 has no interfaces?
[  118.390400][ T5804] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  118.400089][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.408722][ T5804] usb 6-1: Product: syz
[  118.410434][ T5804] usb 6-1: Manufacturer: syz
[  118.414015][ T5804] usb 6-1: SerialNumber: syz
[  118.422734][ T5804] usb 6-1: config 0 descriptor??
[  118.449020][ T8017] input: syz0 as /devices/virtual/input/input6
[  118.647640][ T8019] SET target dimension over the limit!
[  118.778957][ T5411] usb 6-1: USB disconnect, device number 2
[  119.433874][ T8028] loop0: detected capacity change from 0 to 512
[  119.442271][ T8028] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  119.452979][ T8028] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  119.460923][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  119.464489][    C0] EXT4-fs (loop0): initial error at time 1789988465: mb_free_blocks:2049: inode 11: block 64
[  119.468482][    C0] EXT4-fs (loop0): last error at time 1789988465: mb_free_blocks:2049: inode 11: block 64
[  119.470937][ T8028] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #11: comm syz.0.860: corrupted inode contents
[  119.477474][ T8028] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  119.477886][ T8028] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #11: comm syz.0.860: mark_inode_dirty error
[  119.491570][ T8028] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  119.491927][ T8028] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.860: invalid indirect mapped block 1 (level 1)
[  119.508694][ T8028] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  119.516985][ T8028] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #11: comm syz.0.860: corrupted inode contents
[  119.529692][ T8028] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  119.529914][ T8028] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  119.537767][ T8028] loop0: lost filesystem error report for type 5 error -117
[  119.537960][ T8028] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #11: comm syz.0.860: corrupted inode contents
[  119.545780][ T8028] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  119.546485][ T8028] EXT4-fs error (device loop0): ext4_truncate:4691: inode #11: comm syz.0.860: mark_inode_dirty error
[  119.576416][ T8028] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  119.576633][ T8028] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  119.585176][ T8028] loop0: lost filesystem error report for type 5 error -117
[  119.585455][ T8028] EXT4-fs (loop0): 1 truncate cleaned up
[  119.590272][ T8028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.612509][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.662372][ T8038] sctp: [Deprecated]: syz.0.864 (pid 8038) Use of int in max_burst socket option.
[  119.662372][ T8038] Use struct sctp_assoc_value instead
[  119.820941][   T33] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  119.905948][ T8047] netlink: 'syz.3.868': attribute type 153 has an invalid length.
[  119.908945][ T8047] netlink: 5316 bytes leftover after parsing attributes in process `syz.3.868'.
[  119.972748][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  119.976565][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.980268][   T33] usb 6-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00
[  119.983927][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.990073][   T33] usb 6-1: config 0 descriptor??
[  120.274461][ T8063] netlink: 'syz.3.875': attribute type 39 has an invalid length.
[  120.277400][ T8063] macvlan1: entered promiscuous mode
[  120.279656][ T8063] macvlan1: entered allmulticast mode
[  120.283305][ T8063] veth1_vlan: entered allmulticast mode
[  120.409089][   T33] hid-generic 0003:0925:8066.0005: unbalanced collection at end of report description
[  120.424111][   T33] hid-generic 0003:0925:8066.0005: probe with driver hid-generic failed with error -22
[  120.620626][ T5804] usb 6-1: USB disconnect, device number 3
[  120.860430][ T8083] set_capacity_and_notify: 1 callbacks suppressed
[  120.860521][ T8083] loop0: detected capacity change from 0 to 2048
[  120.884854][ T8083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.474437][   T34] audit: type=1326 audit(1789988468.008:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.896" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec5b79e159 code=0x0
[  121.496918][ T8108] loop5: detected capacity change from 0 to 64
[  121.502451][   T33] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  121.651838][   T33] usb 1-1: not running at top speed; connect to a high speed hub
[  121.657755][   T33] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.663945][   T33] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  121.667928][   T33] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  121.676402][   T33] usb 1-1: Product: syz
[  121.679348][   T33] usb 1-1: Manufacturer: syz
[  121.696409][ T8118] netlink: 'syz.5.902': attribute type 3 has an invalid length.
[  121.704978][ T8118] netlink: 'syz.5.902': attribute type 1 has an invalid length.
[  121.707386][   T33] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4)
[  121.709598][ T8118] netlink: 224 bytes leftover after parsing attributes in process `syz.5.902'.
[  121.787656][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'.
[  121.803609][ T5628] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.806977][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'.
[  121.812172][ T5628] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.818550][ T5628] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.825735][ T5628] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.892885][   T33] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  121.900308][   T33] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  121.904011][   T33] uvcvideo 1-1:1.1: Failed to initialize the device (-71).
[  121.906603][   T33] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71
[  121.911610][   T33] usb 1-1: USB disconnect, device number 14
[  122.137973][ T8140] loop5: detected capacity change from 0 to 512
[  122.149300][ T8140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  122.158001][ T8140] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  122.164748][ T8140] EXT4-fs (loop5): 1 truncate cleaned up
[  122.170492][ T8140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.179280][ T8140] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6455: inode #12: comm syz.5.912: bad extra_isize 62 (inode size 256)
[  122.193877][ T8140] EXT4-fs (loop5): Remounting filesystem read-only
[  122.219963][ T7389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.295029][ T8146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.913'.
[  122.298639][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.913'.
[  122.676161][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'.
[  123.630293][ T8194] ieee802154 phy0 wpan0: encryption failed: -22
[  123.904354][ T8215] loop5: detected capacity change from 0 to 1024
[  124.459325][ T8232] netlink: 104 bytes leftover after parsing attributes in process `syz.5.952'.
[  124.961568][ T8264] program syz.5.966 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.998526][ T8266] bridge1: the hash_elasticity option has been deprecated and is always 16
[  125.080015][ T8275] loop0: detected capacity change from 0 to 256
[  125.105592][ T8276] loop3: detected capacity change from 0 to 128
[  125.112106][ T8276] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  125.117513][ T8276] FAT-fs (loop3): data area starts beyond volume (36 > 6)
[  125.124888][ T8276] FAT-fs (loop3): Can't find a valid FAT filesystem
[  125.260065][ T8287] loop5: detected capacity change from 0 to 16
[  125.268530][ T8287] erofs (device loop5): DAX unsupported by block device. Turning off DAX.
[  125.272853][ T8287] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  125.277265][ T8287] erofs (device loop5): mounted with root inode @ nid 36.
[  125.286428][ T8287] erofs (device loop5): corrupted dir block 1490945 @ nid 36
[  125.314359][ T8289] loop0: detected capacity change from 0 to 736
[  125.378822][ T8293] ptrace attach of "/syz-executor exec"[7389] was attempted by ""[8293]
[  125.487080][ T8303] syz.0.980: vmalloc error: size 34359742464, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  125.506556][ T8303] CPU: 1 UID: 0 PID: 8303 Comm: syz.0.980 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  125.506579][ T8303] Tainted: [L]=SOFTLOCKUP
[  125.506584][ T8303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.506593][ T8303] Call Trace:
[  125.506598][ T8303]  <TASK>
[  125.506604][ T8303]  dump_stack_lvl+0xe8/0x150
[  125.506628][ T8303]  warn_alloc+0x24c/0x270
[  125.506646][ T8303]  ? stack_depot_save_flags+0x33/0x800
[  125.506662][ T8303]  ? __pfx_warn_alloc+0x10/0x10
[  125.506680][ T8303]  ? kasan_save_track+0x3e/0x80
[  125.506694][ T8303]  ? __kasan_kmalloc+0x93/0xb0
[  125.506711][ T8303]  ? xsk_setsockopt+0x5e0/0x960
[  125.506724][ T8303]  ? do_sock_setsockopt+0x17c/0x1b0
[  125.506741][ T8303]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  125.506757][ T8303]  ? do_syscall_64+0x174/0x580
[  125.506771][ T8303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.506791][ T8303]  __vmalloc_node_range_noprof+0x12c/0x1730
[  125.506827][ T8303]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  125.506846][ T8303]  ? __kasan_kmalloc+0x93/0xb0
[  125.506863][ T8303]  ? __kmalloc_cache_noprof+0x32d/0x660
[  125.506878][ T8303]  ? __kmalloc_cache_noprof+0x150/0x660
[  125.506895][ T8303]  vmalloc_user_noprof+0xad/0xe0
[  125.506911][ T8303]  ? xskq_create+0xbf/0x170
[  125.506925][ T8303]  xskq_create+0xbf/0x170
[  125.506941][ T8303]  xsk_init_queue+0x8a/0xe0
[  125.506956][ T8303]  xsk_setsockopt+0x5e0/0x960
[  125.506968][ T8303]  ? __fget_files+0x2a/0x420
[  125.506992][ T8303]  ? __pfx_xsk_setsockopt+0x10/0x10
[  125.507005][ T8303]  ? __pfx_aa_sk_perm+0x10/0x10
[  125.507024][ T8303]  ? __fget_files+0x2a/0x420
[  125.507038][ T8303]  ? aa_sock_opt_perm+0xff/0x1a0
[  125.507059][ T8303]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  125.507072][ T8303]  ? __pfx_xsk_setsockopt+0x10/0x10
[  125.507085][ T8303]  do_sock_setsockopt+0x17c/0x1b0
[  125.507108][ T8303]  __x64_sys_setsockopt+0x13d/0x1b0
[  125.507128][ T8303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.507143][ T8303]  do_syscall_64+0x174/0x580
[  125.507157][ T8303]  ? trace_irq_disable+0x3b/0x140
[  125.507213][ T8303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.507226][ T8303] RIP: 0033:0x7f6ee699e159
[  125.507239][ T8303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.507251][ T8303] RSP: 002b:00007f6ee789a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  125.507267][ T8303] RAX: ffffffffffffffda RBX: 00007f6ee6c25fa0 RCX: 00007f6ee699e159
[  125.507277][ T8303] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  125.507284][ T8303] RBP: 00007f6ee6a3506b R08: 0000000000000004 R09: 0000000000000000
[  125.507293][ T8303] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.507301][ T8303] R13: 00007f6ee6c26038 R14: 00007f6ee6c25fa0 R15: 00007fff792c2598
[  125.507322][ T8303]  </TASK>
[  125.507328][ T8303] Mem-Info:
[  125.631547][ T8303] active_anon:7412 inactive_anon:0 isolated_anon:0
[  125.631547][ T8303]  active_file:0 inactive_file:57859 isolated_file:0
[  125.631547][ T8303]  unevictable:0 dirty:301 writeback:0
[  125.631547][ T8303]  slab_reclaimable:10495 slab_unreclaimable:82850
[  125.631547][ T8303]  mapped:19139 shmem:636 pagetables:1381
[  125.631547][ T8303]  sec_pagetables:0 bounce:0
[  125.631547][ T8303]  kernel_misc_reclaimable:0
[  125.631547][ T8303]  free:1123775 free_pcp:17488 free_cma:0
[  125.651900][ T8303] Node 0 active_anon:10156kB inactive_anon:0kB active_file:0kB inactive_file:26788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12740kB dirty:892kB writeback:0kB shmem:1520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9104kB pagetables:2620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  125.655444][ T8309] loop3: detected capacity change from 0 to 512
[  125.667088][ T8309] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  125.677541][ T8303] Node 1 active_anon:19792kB inactive_anon:0kB active_file:0kB inactive_file:204648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63816kB dirty:312kB writeback:0kB shmem:1224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3472kB pagetables:3004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  125.691493][ T8303] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.704605][ T8309] EXT4-fs (loop3): 1 truncate cleaned up
[  125.707053][ T8303] lowmem_reserve[]: 0 1583 2113 2113 2113
[  125.709481][ T8303] Node 0 DMA32 free:1602492kB boost:0kB min:24976kB low:31220kB high:37464kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:3056kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1621436kB mlocked:0kB bounce:0kB free_pcp:10632kB local_pcp:0kB free_cma:0kB
[  125.723289][ T8309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.733011][ T8303] lowmem_reserve[]: 0 0 530 530 530
[  125.749779][ T5804] kernel read not supported for file /335/schedstat (pid: 5804 comm: kworker/0:7)
[  125.763329][ T8303] Node 0 Normal free:87092kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10068kB inactive_anon:0kB active_file:0kB inactive_file:23732kB unevictable:0kB writepending:892kB zspages:0kB present:1572868kB managed:542748kB mlocked:0kB bounce:0kB free_pcp:11736kB local_pcp:11232kB free_cma:0kB
[  125.797815][ T8303] lowmem_reserve[]: 0 0 0 0 0
[  125.802383][ T8303] Node 1 Normal free:2787992kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26120kB inactive_anon:0kB active_file:0kB inactive_file:204616kB unevictable:0kB writepending:360kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:43204kB local_pcp:27212kB free_cma:0kB
[  125.833769][ T8303] lowmem_reserve[]: 0 0 0 0 0
[  125.838323][ T8303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  125.891001][ T8303] Node 0 DMA32: 29*4kB (UME) 19*8kB (UME) 21*16kB (UME) 61*32kB (UME) 42*64kB (UM) 15*128kB (UM) 18*256kB (UME) 5*512kB (M) 5*1024kB (UME) 7*2048kB (UME) 383*4096kB (UM) = 1602556kB
[  125.898077][ T8303] Node 0 Normal: 152*4kB (UE) 406*8kB (UME) 570*16kB (UME) 257*32kB (U) 272*64kB (UM) 61*128kB (UME) 10*256kB (UM) 5*512kB (UM) 7*1024kB (UME) 2*2048kB (ME) 4*4096kB (U) = 79184kB
[  125.905361][ T8303] Node 1 Normal: 929*4kB (UME) 382*8kB (UME) 217*16kB (UME) 241*32kB (UME) 92*64kB (UM) 52*128kB (UM) 29*256kB (UM) 17*512kB (UM) 11*1024kB (ME) 1*2048kB (U) 664*4096kB (M) = 2779684kB
[  126.093691][ T8303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  126.096782][ T8303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  126.100123][ T8303] 66008 total pagecache pages
[  126.101933][ T8303] 0 pages in swap cache
[  126.103410][ T8303] Free swap  = 124996kB
[  126.104900][ T8303] Total swap = 124996kB
[  126.106302][ T8303] 1834877 pages RAM
[  126.107607][ T8303] 0 pages HighMem/MovableOnly
[  126.109182][ T8303] 391320 pages reserved
[  126.110550][ T8303] 0 pages cma reserved
[  126.570100][ T5947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.944627][ T8340] loop3: detected capacity change from 0 to 512
[  126.949586][ T8340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  126.960138][ T8340] EXT4-fs (loop3): 1 truncate cleaned up
[  126.967873][ T8340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.980586][ T8340] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  127.005477][ T5947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.409455][ T8369] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1013'.
[  127.621071][ T8388] Bluetooth: MGMT ver 1.23
[  127.622948][ T8388] Bluetooth: hci0: unsupported parameter 5135
[  127.625033][ T8388] Bluetooth: hci0: unsupported parameter 8192
[  127.627352][ T8388] Bluetooth: hci0: unsupported parameter 5135
[  127.629829][ T8388] Bluetooth: hci0: unsupported parameter 8192
[  127.892509][ T5702] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  128.040879][ T5702] usb 4-1: Using ep0 maxpacket: 32
[  128.045109][ T5702] usb 4-1: unable to get BOS descriptor or descriptor too short
[  128.048607][ T5702] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[  128.052084][ T5702] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[  128.054797][ T5702] usb 4-1: config 14 has no interface number 0
[  128.057428][ T5702] usb 4-1: config 14 has no interface number 1
[  128.059585][ T5702] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  128.063974][ T5702] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  128.067961][ T5702] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  128.072253][ T5702] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  128.076274][ T5702] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  128.080434][ T5702] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  128.085031][ T5702] usb 4-1: config 14 interface 57 has no altsetting 0
[  128.087284][ T5702] usb 4-1: config 14 interface 228 has no altsetting 0
[  128.091546][ T5702] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  128.094681][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.097140][ T5702] usb 4-1: Product: syz
[  128.098450][ T5702] usb 4-1: Manufacturer: syz
[  128.099949][ T5702] usb 4-1: SerialNumber: syz
[  128.312875][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  128.323137][ T5702] legousbtower 4-1:14.57: interrupt endpoints not found
[  128.328951][ T5702] legousbtower 4-1:14.228: get version request failed: -71
[  128.332321][ T5702] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71
[  128.338973][ T5702] usb 4-1: USB disconnect, device number 10
[  128.520723][ T8404] netlink: 3596 bytes leftover after parsing attributes in process `syz.0.1029'.
[  128.662837][ T8408] loop0: detected capacity change from 0 to 2048
[  128.671701][ T8408] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129
[  128.677593][ T8408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.880371][ T8414] nvme_rdma: malformed address passed: 1:4420
[  128.949871][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1039'.
[  128.962098][ T8423] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1039'.
[  129.226216][ T8429] loop0: detected capacity change from 0 to 32768
[  129.242104][ T8429] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.309200][ T8429] XFS (loop0): Ending clean mount
[  129.320611][ T8429] XFS (loop0): Quotacheck needed: Please wait.
[  129.453237][ T8459] loop3: detected capacity change from 0 to 128
[  129.627378][ T8429] XFS (loop0): Quotacheck: Done.
[  129.632328][ T8459] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.637604][ T8459] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.696843][ T5599] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.798293][ T8471] loop5: detected capacity change from 0 to 2048
[  129.869731][ T8472] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.913446][ T8471] syz.5.1057: attempt to access beyond end of device
[  129.913446][ T8471] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  129.918620][ T8471] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  129.922053][ T8471] syz.5.1057: attempt to access beyond end of device
[  129.922053][ T8471] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  129.926965][ T8471] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  129.935467][ T8471] syz.5.1057: attempt to access beyond end of device
[  129.935467][ T8471] loop5: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  129.940710][ T8471] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15)
[  129.943806][ T8471] NILFS (loop5): error -5 truncating bmap (ino=16)
[  130.195002][ T5947] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.215039][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'.
[  130.222459][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[  130.699330][ T8518] CIFS: Witness protocol support is experimental
[  130.701940][ T8518] CIFS mount error: No usable UNC path provided in device string!
[  130.701940][ T8518] 
[  130.705077][ T8518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  130.818058][ T8530] FAULT_INJECTION: forcing a failure.
[  130.818058][ T8530] name failslab, interval 1, probability 0, space 0, times 0
[  130.822453][ T8530] CPU: 0 UID: 0 PID: 8530 Comm: syz.3.1082 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  130.822467][ T8530] Tainted: [L]=SOFTLOCKUP
[  130.822470][ T8530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.822475][ T8530] Call Trace:
[  130.822479][ T8530]  <TASK>
[  130.822483][ T8530]  dump_stack_lvl+0xe8/0x150
[  130.822496][ T8530]  should_fail_ex+0x40c/0x560
[  130.822511][ T8530]  should_failslab+0xa8/0x100
[  130.822524][ T8530]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  130.822533][ T8530]  ? can_rx_register+0x6c1/0x7a0
[  130.822545][ T8530]  ? can_rx_register+0x16d/0x7a0
[  130.822555][ T8530]  ? can_rx_register+0x16d/0x7a0
[  130.822567][ T8530]  can_rx_register+0x16d/0x7a0
[  130.822578][ T8530]  ? __pfx_raw_rcv+0x10/0x10
[  130.822586][ T8530]  raw_enable_filters+0x98/0x200
[  130.822595][ T8530]  raw_setsockopt+0xf0e/0x1440
[  130.822605][ T8530]  ? __fget_files+0x2a/0x420
[  130.822617][ T8530]  ? __pfx_aa_sk_perm+0x10/0x10
[  130.822627][ T8530]  ? __pfx_raw_setsockopt+0x10/0x10
[  130.822639][ T8530]  ? __fget_files+0x2a/0x420
[  130.822648][ T8530]  ? aa_sock_opt_perm+0xff/0x1a0
[  130.822659][ T8530]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  130.822667][ T8530]  ? __pfx_raw_setsockopt+0x10/0x10
[  130.822678][ T8530]  do_sock_setsockopt+0x17c/0x1b0
[  130.822690][ T8530]  __x64_sys_setsockopt+0x13d/0x1b0
[  130.822701][ T8530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.822709][ T8530]  do_syscall_64+0x174/0x580
[  130.822717][ T8530]  ? trace_irq_disable+0x3b/0x140
[  130.822728][ T8530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.822735][ T8530] RIP: 0033:0x7fec5b79e159
[  130.822742][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.822749][ T8530] RSP: 002b:00007fec5c6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  130.822758][ T8530] RAX: ffffffffffffffda RBX: 00007fec5ba25fa0 RCX: 00007fec5b79e159
[  130.822763][ T8530] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004
[  130.822767][ T8530] RBP: 00007fec5b83506b R08: 0000000000000f00 R09: 0000000000000000
[  130.822772][ T8530] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  130.822776][ T8530] R13: 00007fec5ba26038 R14: 00007fec5ba25fa0 R15: 00007ffdc8dec018
[  130.822788][ T8530]  </TASK>
[  131.610920][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  131.772625][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  131.776805][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26232, setting to 64
[  131.784016][   T24] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  131.787901][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.796345][   T24] usb 6-1: Product: syz
[  131.799803][   T24] usb 6-1: Manufacturer: syz
[  131.802169][   T24] usb 6-1: SerialNumber: syz
[  131.807050][   T24] usb 6-1: config 0 descriptor??
[  131.821785][   T24] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  131.827043][   T24] usb 6-1: Detected SIO
[  131.830883][   T24] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  131.848409][   T24] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  131.899035][   T34] audit: type=1326 audit(1789988478.428:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.920042][   T34] audit: type=1326 audit(1789988478.448:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.934463][   T34] audit: type=1326 audit(1789988478.448:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.944548][   T34] audit: type=1326 audit(1789988478.448:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.953150][   T34] audit: type=1326 audit(1789988478.448:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.962077][   T34] audit: type=1326 audit(1789988478.448:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.970520][   T34] audit: type=1326 audit(1789988478.448:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.978965][   T34] audit: type=1326 audit(1789988478.448:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.987493][   T34] audit: type=1326 audit(1789988478.448:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  131.996005][   T34] audit: type=1326 audit(1789988478.448:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1096" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x7ffc0000
[  132.025721][ T5411] usb 6-1: USB disconnect, device number 4
[  132.034953][ T5411] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  132.040249][ T5411] ftdi_sio 6-1:0.0: device disconnected
[  132.224913][ T8565] loop9: detected capacity change from 0 to 255852544
[  132.252418][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  132.259174][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  132.264467][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  132.269027][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  132.341598][ T8571] team0: Device wg0 is of different type
[  132.360187][ T8571] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  132.653043][ T8589] xt_CT: No such helper "netbios-ns"
[  132.721942][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'.
[  132.733058][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  132.736214][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  132.895269][ T8583] loop3: detected capacity change from 0 to 40427
[  132.952222][ T8583] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  132.962708][ T8583] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  132.968116][ T8583] F2FS-fs (loop3): invalid crc value
[  133.024495][ T8583] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.042755][ T8583] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  133.046775][ T8583] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  133.501036][   T33] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  133.686848][   T33] usb 1-1: config 129 has an invalid interface number: 6 but max is 1
[  133.690282][   T33] usb 1-1: config 129 has an invalid interface number: 232 but max is 1
[  133.693993][   T33] usb 1-1: config 129 has no interface number 0
[  133.696661][   T33] usb 1-1: config 129 has no interface number 1
[  133.699310][   T33] usb 1-1: config 129 interface 6 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[  133.703757][   T33] usb 1-1: config 129 interface 232 altsetting 124 has an invalid descriptor for endpoint zero, skipping
[  133.708675][   T33] usb 1-1: config 129 interface 6 has no altsetting 0
[  133.712366][   T33] usb 1-1: config 129 interface 232 has no altsetting 0
[  133.717757][   T33] usb 1-1: New USB device found, idVendor=05c6, idProduct=900c, bcdDevice=99.27
[  133.721552][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.725060][   T33] usb 1-1: Product: syz
[  133.726980][   T33] usb 1-1: Manufacturer: syz
[  133.728988][   T33] usb 1-1: SerialNumber: syz
[  133.945831][ T8631] 9p: Could not find request transport: >0_KEۘ%<H@g^:
[  133.984463][   T33] usb 1-1: USB disconnect, device number 15
[  134.150026][ T8649] block2mtd: illegal erase size
[  134.276575][ T8657] loop5: detected capacity change from 0 to 512
[  134.294408][ T8657] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1141: invalid indirect mapped block 256 (level 2)
[  134.299570][ T8657] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  134.300920][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  134.307199][    C1] EXT4-fs (loop5): initial error at time 1789988480: ext4_free_branches:1023: inode 11
[  134.311106][    C1] EXT4-fs (loop5): last error at time 1789988480: ext4_free_branches:1023: inode 11
[  134.317106][ T8657] EXT4-fs (loop5): 2 truncates cleaned up
[  134.326002][ T8657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.360030][ T7389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.405363][ T8663] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1143'.
[  134.486682][ T8669] loop5: detected capacity change from 0 to 256
[  134.599735][ T8671] input: syz1 as /devices/virtual/input/input7
[  134.792562][ T8677] loop0: detected capacity change from 0 to 1024
[  134.797410][ T8677] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  134.810055][ T8665] loop3: detected capacity change from 0 to 32768
[  134.831304][ T8665] 
[  134.831304][ T8665]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.831304][ T8665] 
[  134.835080][ T8677] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.1150: lblock 1 mapped to illegal pblock 1 (length 1)
[  134.841343][ T8677] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  134.842345][ T8677] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1150: Failed to acquire dquot type 0
[  134.848897][ T8677] loop0: lost filesystem error report for type 5 error -117
[  134.850107][ T8677] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1150: Freeing blocks not in datazone - block = 0, count = 4096
[  134.852663][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  134.852672][    C1] EXT4-fs (loop0): initial error at time 1789988481: ext4_map_blocks:833: inode 3: block 1
[  134.852687][    C1] EXT4-fs (loop0): last error at time 1789988481: ext4_acquire_dquot:7041
[  134.869414][ T8677] loop0: lost filesystem error report for type 5 error -117
[  134.877921][ T8677] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.1150: Invalid inode bitmap blk 0 in block_group 0
[  134.887444][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'.
[  134.893008][ T8677] loop0: lost filesystem error report for type 5 error -117
[  134.895367][ T8677] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem
[  134.908446][ T8677] loop0: lost filesystem error report for type 5 error -117
[  134.908593][ T8677] EXT4-fs (loop0): 1 orphan inode deleted
[  134.913652][ T8677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.917855][   T56] ERROR: (device loop3): diWrite: ixpxd invalid
[  134.917855][   T56] 
[  134.924147][   T56] ERROR: (device loop3): remounting filesystem as read-only
[  134.927234][   T56] ERROR: (device loop3): txCommit: 
[  134.927234][   T56] 
[  134.930290][   T56] jfs_write_inode: jfs_commit_inode failed!
[  134.991030][ T6165] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u10:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  135.000679][ T6165] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u10:5: Failed to release dquot type 0
[  135.012633][ T5947] 
[  135.012633][ T5947]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.012633][ T5947] 
[  135.019195][ T5947] 
[  135.019195][ T5947]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.019195][ T5947] 
[  135.296089][ T8689] loop3: detected capacity change from 0 to 8
[  135.303555][ T8689] SQUASHFS error: lzo decompression failed, data probably corrupt
[  135.306151][ T8689] SQUASHFS error: Failed to read block 0x91: -5
[  135.308428][ T8689] SQUASHFS error: Unable to read metadata cache entry [8f]
[  135.311209][ T8689] SQUASHFS error: Unable to read inode 0x11f
[  135.340188][ T8691] loop5: detected capacity change from 0 to 512
[  135.345048][ T8691] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  135.347393][ T8691] UDF-fs: Scanning with blocksize 512 failed
[  135.349880][ T8691] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  135.352798][ T8691] UDF-fs: Scanning with blocksize 1024 failed
[  135.355076][ T8691] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  135.357418][ T8691] UDF-fs: Scanning with blocksize 2048 failed
[  135.359695][ T8691] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  135.366404][ T8691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.690559][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.390929][ T5702] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  136.570936][ T5702] usb 4-1: Using ep0 maxpacket: 16
[  136.943485][ T5702] usb 4-1: config 7 has an invalid interface number: 3 but max is 0
[  137.329682][ T5702] usb 4-1: config 7 has no interface number 0
[  137.332003][ T5702] usb 4-1: config 7 interface 3 has no altsetting 0
[  137.334032][ T5411] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  137.338177][ T5702] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ad.d0
[  137.341739][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.344252][ T5702] usb 4-1: Product: syz
[  137.345537][ T5702] usb 4-1: Manufacturer: syz
[  137.346965][ T5702] usb 4-1: SerialNumber: syz
[  137.507950][ T5411] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  137.511654][ T5411] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  137.515624][ T5411] usb 6-1: config 220 has no interface number 2
[  137.518301][ T5411] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  137.531146][ T5411] usb 6-1: config 220 interface 0 has no altsetting 0
[  137.535024][ T5411] usb 6-1: config 220 interface 76 has no altsetting 0
[  137.542641][ T5411] usb 6-1: config 220 interface 1 has no altsetting 0
[  137.551735][ T5411] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  137.555434][ T5411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.560440][ T5411] usb 6-1: Product: syz
[  137.569128][ T5411] usb 6-1: Manufacturer: syz
[  137.573207][ T5411] usb 6-1: SerialNumber: syz
[  137.809826][ T5411] usb 6-1: selecting invalid altsetting 0
[  137.820875][   T33] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  137.821820][ T5411] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  137.826499][ T5411] uvcvideo 6-1:220.0: No valid video chain found.
[  137.833984][ T5411] usb 6-1: selecting invalid altsetting 0
[  137.836394][ T5411] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  137.844433][ T5411] usb 6-1: USB disconnect, device number 5
[  137.970887][   T33] usb 1-1: Using ep0 maxpacket: 16
[  137.974212][   T33] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.978229][   T33] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  137.982991][ T5702] catc 4-1:7.3: Missing or invalid endpoints
[  137.984920][   T33] usb 1-1: config 0 interface 0 has no altsetting 0
[  137.988404][   T33] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  137.992016][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.997981][   T33] usb 1-1: config 0 descriptor??
[  138.189574][   T24] usb 4-1: USB disconnect, device number 11
[  138.370262][ T8789] loop5: detected capacity change from 0 to 22
[  138.374295][ T8789] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  138.393260][ T8789] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  138.410800][   T33] kye 0003:0458:5015.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  138.421216][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.426057][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.431014][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.438606][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.448225][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.451724][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.454424][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.457084][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.459802][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.465475][   T33] kye 0003:0458:5015.0006: unknown main item tag 0x0
[  138.474457][   T33] kye 0003:0458:5015.0006: hidraw0: USB HID v0.81 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0
[  138.478727][   T33] kye 0003:0458:5015.0006: tablet-enabling feature report not found
[  138.481944][   T33] kye 0003:0458:5015.0006: tablet enabling failed
[  138.620047][   T33] usb 1-1: USB disconnect, device number 16
[  138.743243][ T8801] netlink: 'syz.3.1207': attribute type 1 has an invalid length.
[  138.969850][ T8815] loop3: detected capacity change from 0 to 4096
[  138.973428][ T8815] ntfs3: Unknown parameter 'ntfs3'
[  139.002240][ T8819] ip_tables: iptables: counters copy to user failed while replacing table
[  139.117903][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'.
[  139.256270][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'.
[  139.668515][   T24] IPVS: starting estimator thread 0...
[  139.709200][ T8861] wlan0 speed is unknown, defaulting to 1000
[  139.730181][ T8861] wlan0 speed is unknown, defaulting to 1000
[  139.758603][ T8861] wlan0 speed is unknown, defaulting to 1000
[  139.761218][ T8866] IPVS: using max 48 ests per chain, 115200 per kthread
[  139.780426][ T8861] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  139.806214][ T8861] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  139.845561][ T8861] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  139.865630][ T8871] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1236'.
[  139.878173][ T8861] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  139.921938][ T8861] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  139.982034][ T8873] Unknown options in mask 5
[  140.092700][ T8861] wlan0 speed is unknown, defaulting to 1000
[  140.104555][ T8861] wlan0 speed is unknown, defaulting to 1000
[  140.110345][ T8861] wlan0 speed is unknown, defaulting to 1000
[  141.192400][ T8930] loop3: detected capacity change from 0 to 1024
[  141.511189][   T33] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  141.543255][ T8957] loop0: detected capacity change from 0 to 512
[  141.548544][ T8957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  141.562028][ T8957] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1266: bad orphan inode 11
[  141.565759][ T8957] loop0: lost filesystem error report for type 5 error -117
[  141.567626][ T8957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.578042][ T8957] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.1266: reserved inode found cleared - inode=18
[  141.587499][ T8957] CacheFiles: mkdir cache failed with error -28
[  141.590117][ T8957] CacheFiles: Failed to register: -28
[  141.604801][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.672232][   T33] usb 6-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config
[  141.678250][   T33] usb 6-1: too many endpoints for config 1 interface 0 altsetting 189: 113, using maximum allowed: 30
[  141.686745][   T33] usb 6-1: config 1 interface 0 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 113
[  141.696442][   T33] usb 6-1: config 1 interface 0 has no altsetting 0
[  141.701819][   T33] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  141.705582][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.708363][   T33] usb 6-1: Product: syz
[  141.709721][   T33] usb 6-1: Manufacturer: syz
[  141.716421][   T33] usb 6-1: SerialNumber: syz
[  141.859365][ T8976] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1271'.
[  141.961403][   T33] ums_eneub6250 6-1:1.0: USB Mass Storage device detected
[  142.024809][   T33] usb 6-1: USB disconnect, device number 6
[  142.040725][ T8980] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[  142.062418][ T8980] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  142.074726][ T8980] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  142.079363][ T8980] pci 0000:00:01.0: BAR 2 [mem 0xfebf0000-0xfebf0fff]
[  142.082119][ T8980] pci 0000:00:01.0: ROM [mem 0xfebe0000-0xfebeffff pref]
[  142.084828][ T8980] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  142.098166][ T8980] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  142.100357][ T8980] pci 0000:00:01.0: vgaarb: bridge control possible
[  142.102324][ T8980] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  142.110187][ T8980] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  142.116164][ T8980] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  142.134116][ T8980] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  142.148208][ T8980] [drm] Found bochs VGA, ID 0xb0c5.
[  142.150510][ T8980] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  142.164513][ T8980] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  142.302198][ T8980] Console: switching to colour frame buffer device 160x50
[  142.360504][ T8980] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  142.506301][ T8989] FAULT_INJECTION: forcing a failure.
[  142.506301][ T8989] name failslab, interval 1, probability 0, space 0, times 0
[  142.514234][ T8989] CPU: 1 UID: 0 PID: 8989 Comm: syz.0.1276 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  142.514257][ T8989] Tainted: [L]=SOFTLOCKUP
[  142.514261][ T8989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.514271][ T8989] Call Trace:
[  142.514315][ T8989]  <TASK>
[  142.514321][ T8989]  dump_stack_lvl+0xe8/0x150
[  142.514378][ T8989]  should_fail_ex+0x40c/0x560
[  142.514433][ T8989]  should_failslab+0xa8/0x100
[  142.514452][ T8989]  __kmalloc_node_track_caller_noprof+0x100/0x730
[  142.514472][ T8989]  ? __kmalloc_node_track_caller_noprof+0x2fd/0x730
[  142.514518][ T8989]  ? x509_cert_parse+0x3ea/0x7a0
[  142.514531][ T8989]  ? x509_cert_parse+0x3ea/0x7a0
[  142.514550][ T8989]  kmemdup_noprof+0x2b/0x70
[  142.514566][ T8989]  x509_cert_parse+0x3ea/0x7a0
[  142.514584][ T8989]  x509_key_preparse+0x64/0x6d0
[  142.514599][ T8989]  ? down_read+0x2be/0x330
[  142.514652][ T8989]  asymmetric_key_preparse+0xb9/0x1b0
[  142.514669][ T8989]  __key_create_or_update+0x3a9/0xa80
[  142.514696][ T8989]  ? __pfx___key_create_or_update+0x10/0x10
[  142.514719][ T8989]  ? lookup_user_key+0xb68/0x1150
[  142.514746][ T8989]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  142.514772][ T8989]  key_create_or_update+0x42/0x60
[  142.514795][ T8989]  __se_sys_add_key+0x349/0x420
[  142.514819][ T8989]  ? __pfx___se_sys_add_key+0x10/0x10
[  142.514840][ T8989]  ? __x64_sys_add_key+0x20/0xc0
[  142.514854][ T8989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.514869][ T8989]  do_syscall_64+0x174/0x580
[  142.514885][ T8989]  ? trace_irq_disable+0x3b/0x140
[  142.514906][ T8989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.514920][ T8989] RIP: 0033:0x7f6ee699e159
[  142.514953][ T8989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.514966][ T8989] RSP: 002b:00007f6ee789a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  142.514982][ T8989] RAX: ffffffffffffffda RBX: 00007f6ee6c25fa0 RCX: 00007f6ee699e159
[  142.514992][ T8989] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  142.515002][ T8989] RBP: 00007f6ee6a3506b R08: ffffffffffffffff R09: 0000000000000000
[  142.515011][ T8989] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  142.515019][ T8989] R13: 00007f6ee6c26038 R14: 00007f6ee6c25fa0 R15: 00007fff792c2598
[  142.515042][ T8989]  </TASK>
[  142.611874][ T5804] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  142.795905][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  142.799545][ T5804] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  142.803318][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.811611][ T5804] pegasus 4-1:1.0: Missing or invalid endpoints
[  142.986311][ T9016] input: syz0 as /devices/virtual/input/input8
[  143.017823][   T33] usb 4-1: USB disconnect, device number 12
[  143.311022][ T5702] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  143.462269][ T5702] usb 1-1: Using ep0 maxpacket: 8
[  143.468738][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.473569][ T5702] usb 1-1: config 7 has an invalid interface number: 38 but max is 0
[  143.477262][ T5702] usb 1-1: config 7 has no interface number 0
[  143.479772][ T5702] usb 1-1: config 7 interface 38 has no altsetting 0
[  143.486253][ T5702] usb 1-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=60.ac
[  143.489790][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.494386][ T5702] usb 1-1: Product: syz
[  143.495816][ T5702] usb 1-1: Manufacturer: syz
[  143.497535][ T5702] usb 1-1: SerialNumber: syz
[  143.717965][ T5702] gspca_main: kinect-2.14.0 probing 045e:02ae
[  143.737045][ T5702] usb 1-1: USB disconnect, device number 17
[  143.820922][ T5804] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  143.972961][ T5804] usb 4-1: unable to get BOS descriptor or descriptor too short
[  143.977472][ T5804] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[  143.979913][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.985656][ T5804] usb 4-1: New USB device found, idVendor=2582, idProduct=004c, bcdDevice= 0.40
[  143.988483][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.991568][ T5804] usb 4-1: Product: syz
[  143.993384][ T5804] usb 4-1: Manufacturer: syz
[  143.994959][ T5804] usb 4-1: SerialNumber: syz
[  144.085155][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'.
[  144.224783][ T5804] usb 4-1: unit 4 not found!
[  144.264729][ T5804] usb 4-1: USB disconnect, device number 13
[  144.294535][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.347822][ T9059] loop0: detected capacity change from 0 to 1024
[  144.357163][ T9059] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  144.378596][ T9059] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.1305: lblock 2 mapped to illegal pblock 2 (length 1)
[  144.383914][ T9059] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  144.384114][ T9059] __quota_error: 116 callbacks suppressed
[  144.384123][ T9059] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  144.392714][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  144.392728][    C0] EXT4-fs (loop0): initial error at time 1789988490: ext4_map_blocks:791: inode 3: block 2
[  144.392751][    C0] EXT4-fs (loop0): last error at time 1789988490: ext4_map_blocks:791: inode 3: block 2
[  144.403044][ T9059] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.1305: lblock 0 mapped to illegal pblock 48 (length 1)
[  144.407576][ T9059] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  144.409727][ T9059] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  144.417485][ T9059] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1305: Failed to acquire dquot type 0
[  144.421847][ T9059] loop0: lost filesystem error report for type 5 error -117
[  144.422004][ T9059] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  144.427285][ T9059] loop0: lost filesystem error report for type 5 error -117
[  144.429249][ T9059] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.1305: mark_inode_dirty error
[  144.436331][ T9059] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  144.437463][ T9059] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  144.445952][ T9059] EXT4-fs (loop0): 1 orphan inode deleted
[  144.449460][ T9059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.491321][ T1103] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm kworker/u9:5: lblock 2 mapped to illegal pblock 2 (length 1)
[  144.503988][ T1103] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  144.507808][ T1103] EXT4-fs error (device loop0): ext4_write_dquot:7021: comm kworker/u9:5: Failed to commit dquot type 0
[  144.515964][ T1103] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  144.521568][ T1103] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u9:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  144.527193][ T1103] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  144.530484][ T1103] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u9:5: Failed to release dquot type 0
[  144.540488][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.544819][ T5599] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  144.551386][ T5599] loop0: lost filesystem error report for type 5 error -117
[  144.556200][ T5599] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  144.563264][ T5599] loop0: lost filesystem error report for type 5 error -117
[  144.563471][ T5599] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  144.570566][ T5599] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  145.330916][   T33] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  145.485051][   T33] usb 4-1: unable to get BOS descriptor or descriptor too short
[  145.491984][   T33] usb 4-1: not running at top speed; connect to a high speed hub
[  145.498949][   T33] usb 4-1: config 6 has an invalid interface number: 237 but max is 0
[  145.505491][   T33] usb 4-1: config 6 has no interface number 0
[  145.510566][   T33] usb 4-1: config 6 interface 237 has no altsetting 0
[  145.520233][   T33] usb 4-1: New USB device found, idVendor=a1f6, idProduct=45b9, bcdDevice=e8.af
[  145.532624][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.542123][   T33] usb 4-1: Product: syz
[  145.546781][   T33] usb 4-1: Manufacturer: syz
[  145.553410][   T33] usb 4-1: SerialNumber: syz
[  145.606484][   T33] usb-storage 4-1:6.237: USB Mass Storage device detected
[  145.792235][ T9096] loop5: detected capacity change from 0 to 4096
[  145.805113][ T5804] usb 4-1: USB disconnect, device number 14
[  145.809887][ T9096] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  145.989884][ T9096] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  146.015241][ T9096] ntfs3(loop5): Inode r=b is not in use!
[  146.017821][ T9096] ntfs3(loop5): Failed to load $Extend (-116).
[  146.020491][ T9096] ntfs3(loop5): Failed to initialize $Extend.
[  146.042114][ T9096] ntfs3(loop5): ino=5, "/" fiemap is not supported for directories
[  146.345864][ T9100] loop5: detected capacity change from 0 to 16
[  146.383595][ T9100] erofs (device loop5): mounted with root inode @ nid 36.
[  146.481390][ T9100] syz.5.1322: attempt to access beyond end of device
[  146.481390][ T9100] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  146.526567][ T9100] syz.5.1322: attempt to access beyond end of device
[  146.526567][ T9100] loop5: rw=524288, sector=16, nr_sectors = 8 limit=16
[  146.565286][ T9100] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  146.583529][ T9100] erofs (device loop5): read error -117 @ 1 of nid 89
[  146.591280][   T34] audit: type=1800 audit(1789988493.128:167): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1322" name="file2" dev="loop5" ino=89 res=0 errno=0
[  146.628489][ T9100] syz.5.1322 (9100) used greatest stack depth: 19408 bytes left
[  146.684823][ T9114] loop0: detected capacity change from 0 to 1024
[  146.689425][ T9114] EXT4-fs: Ignoring removed bh option
[  146.709729][ T9114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.748682][ T9119] netlink: 'syz.5.1329': attribute type 8 has an invalid length.
[  146.827270][ T9122] FAULT_INJECTION: forcing a failure.
[  146.827270][ T9122] name failslab, interval 1, probability 0, space 0, times 0
[  146.837761][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.5.1330 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  146.837776][ T9122] Tainted: [L]=SOFTLOCKUP
[  146.837779][ T9122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.837784][ T9122] Call Trace:
[  146.837788][ T9122]  <TASK>
[  146.837793][ T9122]  dump_stack_lvl+0xe8/0x150
[  146.837807][ T9122]  should_fail_ex+0x40c/0x560
[  146.837823][ T9122]  should_failslab+0xa8/0x100
[  146.837836][ T9122]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  146.837846][ T9122]  ? sock_alloc_inode+0x2c/0x1a0
[  146.837854][ T9122]  ? sock_alloc_inode+0x2c/0x1a0
[  146.837863][ T9122]  ? __pfx_sock_alloc_inode+0x10/0x10
[  146.837871][ T9122]  sock_alloc_inode+0x2c/0x1a0
[  146.837879][ T9122]  ? __pfx_sock_alloc_inode+0x10/0x10
[  146.837887][ T9122]  alloc_inode+0x6a/0x1b0
[  146.837896][ T9122]  __sock_create+0x12d/0x9d0
[  146.837906][ T9122]  ? ksys_write+0x242/0x270
[  146.837919][ T9122]  ? __pfx___se_sys_futex+0x10/0x10
[  146.837931][ T9122]  __sys_socket+0xd6/0x1b0
[  146.837940][ T9122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.837950][ T9122]  __x64_sys_socket+0x7a/0x90
[  146.837959][ T9122]  do_syscall_64+0x174/0x580
[  146.837968][ T9122]  ? trace_irq_disable+0x3b/0x140
[  146.837979][ T9122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.837986][ T9122] RIP: 0033:0x7f256359e159
[  146.837994][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.838000][ T9122] RSP: 002b:00007f25644be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  146.838009][ T9122] RAX: ffffffffffffffda RBX: 00007f2563825fa0 RCX: 00007f256359e159
[  146.838014][ T9122] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  146.838019][ T9122] RBP: 00007f256363506b R08: 0000000000000000 R09: 0000000000000000
[  146.838023][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.838028][ T9122] R13: 00007f2563826038 R14: 00007f2563825fa0 R15: 00007ffda27f2228
[  146.838039][ T9122]  </TASK>
[  146.838044][ T9122] socket: no more sockets
[  147.043629][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.279931][ T9137] loop5: detected capacity change from 0 to 32768
[  148.291904][ T9137] xfs: Deprecated parameter 'noattr2'
[  148.300484][ T9137] XFS: noattr2 mount option is deprecated.
[  148.331646][ T9137] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.352578][ T9137] XFS (loop5): Ending clean mount
[  148.558636][ T7389] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.393214][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1357'.
[  149.520963][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  149.636062][ T9208] cgroup: Invalid name
[  149.670935][    T9] usb 1-1: Using ep0 maxpacket: 8
[  149.676170][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  149.684612][    T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  149.689179][    T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  149.693309][    T9] usb 1-1: Product: syz
[  149.694800][    T9] usb 1-1: Manufacturer: syz
[  149.696352][    T9] usb 1-1: SerialNumber: syz
[  149.831275][ T9215] netlink: 'syz.3.1367': attribute type 10 has an invalid length.
[  149.845852][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1367'.
[  149.904899][    T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  149.910789][    T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  149.915794][    T9] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  150.104829][ T9217] loop5: detected capacity change from 0 to 32768
[  150.108012][    T9] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[  150.112001][ T9217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1368 (9217)
[  150.116047][    T9] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  150.123234][    T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  150.127131][ T9217] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.133937][ T9217] BTRFS info (device loop5): using crc32c checksum algorithm
[  150.140221][    T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  150.146751][    T9] usb 1-1: USB disconnect, device number 18
[  150.160101][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  150.178487][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  150.192332][    T9] visor 1-1:1.0: device disconnected
[  150.480792][ T9217] BTRFS info (device loop5): enabling ssd optimizations
[  150.486242][ T9217] BTRFS info (device loop5): turning on async discard
[  150.493421][ T9217] BTRFS info (device loop5): enabling free space tree
[  150.503411][ T9217] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.614085][ T9242] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1372'.
[  150.695427][ T9244] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  151.104350][ T9254] FAULT_INJECTION: forcing a failure.
[  151.104350][ T9254] name failslab, interval 1, probability 0, space 0, times 0
[  151.113887][ T9254] CPU: 1 UID: 0 PID: 9254 Comm: syz.3.1378 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.113904][ T9254] Tainted: [L]=SOFTLOCKUP
[  151.113907][ T9254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.113911][ T9254] Call Trace:
[  151.113932][ T9254]  <TASK>
[  151.113936][ T9254]  dump_stack_lvl+0xe8/0x150
[  151.113951][ T9254]  should_fail_ex+0x40c/0x560
[  151.113965][ T9254]  ? alloc_netdev_mqs+0x8f3/0x12b0
[  151.113974][ T9254]  should_failslab+0xa8/0x100
[  151.113986][ T9254]  __kvmalloc_node_noprof+0x176/0x860
[  151.113996][ T9254]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  151.114006][ T9254]  ? alloc_netdev_mqs+0x8f3/0x12b0
[  151.114016][ T9254]  alloc_netdev_mqs+0x8f3/0x12b0
[  151.114048][ T9254]  ? __pfx_tun_setup+0x10/0x10
[  151.114065][ T9254]  tun_set_iff+0x519/0xec0
[  151.114081][ T9254]  __tun_chr_ioctl+0x7bb/0x1e10
[  151.114094][ T9254]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  151.114105][ T9254]  ? __fget_files+0x2a/0x420
[  151.114116][ T9254]  ? __fget_files+0x3a2/0x420
[  151.114125][ T9254]  ? __fget_files+0x2a/0x420
[  151.114136][ T9254]  ? bpf_lsm_file_ioctl+0x9/0x20
[  151.114145][ T9254]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  151.114154][ T9254]  __se_sys_ioctl+0xfc/0x170
[  151.114162][ T9254]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.114169][ T9254]  do_syscall_64+0x174/0x580
[  151.114177][ T9254]  ? trace_irq_disable+0x3b/0x140
[  151.114188][ T9254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.114195][ T9254] RIP: 0033:0x7fec5b79e159
[  151.114203][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.114210][ T9254] RSP: 002b:00007fec5c6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  151.114219][ T9254] RAX: ffffffffffffffda RBX: 00007fec5ba25fa0 RCX: 00007fec5b79e159
[  151.114225][ T9254] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004
[  151.114230][ T9254] RBP: 00007fec5b83506b R08: 0000000000000000 R09: 0000000000000000
[  151.114234][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.114239][ T9254] R13: 00007fec5ba26038 R14: 00007fec5ba25fa0 R15: 00007ffdc8dec018
[  151.114251][ T9254]  </TASK>
[  151.581699][ T9247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.787433][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'.
[  152.059194][ T9270] IPVS: dh: FWM 3 0x00000003 - no destination available
[  152.062996][    C1] IPVS: dh: FWM 3 0x00000003 - no destination available
[  152.295977][ T9279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.849531][ T9303] macsec1: entered promiscuous mode
[  152.856038][ T9303] macsec1: entered allmulticast mode
[  154.093761][ T9357] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.098301][ T9357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.142925][ T5628] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.147416][ T5628] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.156504][ T5628] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.161359][ T5628] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.257230][   T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  154.411081][    T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  154.412964][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  154.427337][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  154.435717][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  154.444710][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.566074][    T9] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  154.569784][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.574052][    T9] usb 6-1: Product: syz
[  154.575712][    T9] usb 6-1: Manufacturer: syz
[  154.577531][    T9] usb 6-1: SerialNumber: syz
[  154.600708][    T9] usb 6-1: config 0 descriptor??
[  154.609258][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  154.874910][   T24] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0
[  154.942338][   T24] lg-g15 0003:046D:C222.0007: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[  155.074696][   T24] usb 4-1: USB disconnect, device number 15
[  155.214519][    T9] gspca_stk1135: reg_w 0x3 err -71
[  155.219409][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.223701][    T9] gspca_stk1135: Sensor write failed
[  155.225939][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.228490][    T9] gspca_stk1135: Sensor write failed
[  155.230637][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.233687][    T9] gspca_stk1135: Sensor read failed
[  155.235824][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.238107][    T9] gspca_stk1135: Sensor read failed
[  155.239671][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  155.241938][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.244045][    T9] gspca_stk1135: Sensor read failed
[  155.245760][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.248026][    T9] gspca_stk1135: Sensor read failed
[  155.249809][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.253359][    T9] gspca_stk1135: Sensor write failed
[  155.255325][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  155.257880][    T9] gspca_stk1135: Sensor write failed
[  155.259659][    T9] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[  155.265683][    T9] usb 6-1: USB disconnect, device number 7
[  155.704481][ T9393] loop3: detected capacity change from 0 to 16
[  155.713058][ T9393] erofs (device loop3): mounted with root inode @ nid 36.
[  155.727230][ T9393] erofs (device loop3): readahead error at folio 2 @ nid 89
[  155.730693][ T9393] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  155.734743][ T9393] erofs (device loop3): readahead error at folio 1 @ nid 89
[  155.737750][ T9393] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  155.741118][ T9393] erofs (device loop3): readahead error at folio 0 @ nid 89
[  155.744512][ T9393] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  155.747644][ T9393] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  155.750955][ T9393] erofs (device loop3): read error -117 @ 0 of nid 89
[  155.757222][   T34] audit: type=1800 audit(1789988502.288:168): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1433" name="file3" dev="loop3" ino=89 res=0 errno=0
[  155.797588][ T9389] loop0: detected capacity change from 0 to 32768
[  155.984239][ T9389] (syz.0.1431,9389,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  155.988563][ T9389] (syz.0.1431,9389,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  155.988587][ T9389] (syz.0.1431,9389,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  155.999894][ T9389] (syz.0.1431,9389,0):ocfs2_initialize_super:2195 ERROR: status = -22
[  156.004436][ T9389] (syz.0.1431,9389,0):ocfs2_fill_super:1177 ERROR: status = -22
[  156.702027][ T5702] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  156.863105][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.866518][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.869459][ T5702] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  156.872358][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.878113][ T5702] usb 4-1: config 0 descriptor??
[  156.971797][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  157.122583][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.126135][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  157.128863][   T24] usb 6-1: config 1 has no interface number 0
[  157.132467][   T24] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.135746][   T24] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  157.138584][   T24] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  157.142097][   T24] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.149188][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.152240][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.154657][   T24] usb 6-1: Product: syz
[  157.155980][   T24] usb 6-1: Manufacturer: syz
[  157.157430][   T24] usb 6-1: SerialNumber: syz
[  157.488244][ T5702] hid-led 0003:1D34:000A.0008: probe with driver hid-led failed with error -71
[  157.499308][ T5702] usb 4-1: USB disconnect, device number 16
[  157.969355][   T24] cdc_ncm 6-1:1.1: bind() failure
[  157.980487][   T24] usb 6-1: USB disconnect, device number 8
[  158.385431][ T9453] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1457'.
[  158.388382][ T9453] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1457'.
[  158.392096][ T9453] netlink: 'syz.3.1457': attribute type 5 has an invalid length.
[  158.395128][ T9453] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1457'.
[  158.770084][ T9474] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  158.988720][ T9478] loop5: detected capacity change from 0 to 128
[  160.328706][ T9504] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  160.920352][ T9516] loop3: detected capacity change from 0 to 4096
[  160.924828][ T9516] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  160.989668][ T9521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.002615][ T9521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.013200][ T9521] bond0 (unregistering): Released all slaves
[  161.261495][ T9534] netlink: 'syz.0.1491': attribute type 3 has an invalid length.
[  161.366319][ T9543] netlink: 'syz.0.1496': attribute type 11 has an invalid length.
[  161.440878][ T9547] loop0: detected capacity change from 0 to 256
[  161.443483][ T9547] exfat: Invalid uid '0x00000000ffffffff'
[  161.446822][ T9547] bpf: Bad value for 'uid'
[  162.422062][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  162.558945][ T9557] null_blk: rnullb0: using native zone append
[  162.585936][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.600996][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  162.603844][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  162.606684][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.706847][    T9] uvcvideo 4-1:1.0: Found UVC 0.00 device <unnamed> (046d:0825)
[  162.709265][    T9] uvcvideo 4-1:1.0: No valid video chain found.
[  162.849059][ T9557] null_blk: disk rnullb0 created
[  162.906753][    T9] usb 4-1: USB disconnect, device number 17
[  163.272953][ T9574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.469560][ T9588] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1513'.
[  163.537648][ T9599] kAFS: unparsable volume name
[  163.765646][ T9622] loop0: detected capacity change from 0 to 128
[  163.795909][ T9622] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  163.800637][ T9622] hpfs: filesystem error: improperly stopped
[  163.803757][ T9622] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  163.806851][ T9622] hpfs: You really don't want any checks? You are crazy...
[  163.809889][ T9622] hpfs: hpfs_map_sector(): read error
[  163.812412][ T9622] hpfs: code page support is disabled
[  163.815505][ T9622] hpfs: hpfs_map_4sectors(): unaligned read
[  163.817856][ T9622] hpfs: hpfs_map_4sectors(): unaligned read
[  163.819912][ T9622] hpfs: filesystem error: unable to find root dir
[  164.434280][ T9636] loop5: detected capacity change from 0 to 128
[  164.447052][ T9636] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  164.458891][ T9636] ext4 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  164.505507][ T9636] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 5 (only 1 groups)
[  164.524675][ T7389] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.548986][ T9642] loop0: detected capacity change from 0 to 164
[  164.597554][ T9642] iso9660: Corrupted directory entry in block 2 of inode 1792
[  164.864645][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1554'.
[  166.145997][ T9737] loop0: detected capacity change from 0 to 4096
[  166.167734][ T9737] ntfs3(loop0): ino=9, mi_enum_attr
[  166.170052][ T9737] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  166.173119][ T9739] loop3: detected capacity change from 0 to 512
[  166.176495][ T9737] ntfs3(loop0): ino=9, mi_enum_attr
[  166.183674][ T9737] ntfs3(loop0): ino=b, mi_enum_attr
[  166.187095][ T9737] ntfs3(loop0): Failed to load $Extend (-22).
[  166.192588][ T9737] ntfs3(loop0): Failed to initialize $Extend.
[  166.209827][ T9739] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  166.498299][ T9742] __vm_enough_memory: pid: 9742, comm: syz.3.1582, bytes: 4503599627366400 not enough memory for the allocation
[  167.255676][ T9775] loop3: detected capacity change from 0 to 1024
[  167.263057][ T9775] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[  167.266058][ T9775] hfsplus: failed to load root directory
[  167.337914][ T9779] netlink: 'syz.5.1600': attribute type 29 has an invalid length.
[  167.347402][ T9779] netlink: 'syz.5.1600': attribute type 29 has an invalid length.
[  167.422609][    T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  167.458077][ T9789] loop5: detected capacity change from 0 to 256
[  167.470087][ T9789] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  167.490314][ T5952] Bluetooth: hci0: unexpected event for opcode 0x2012
[  167.533845][ T9793] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  167.583396][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  167.587486][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.590721][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.595285][    T9] usb 1-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00
[  167.598533][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.607026][    T9] usb 1-1: config 0 descriptor??
[  168.021482][    T9] hid-generic 0003:093A:8002.0009: collection stack underflow
[  168.024419][    T9] hid-generic 0003:093A:8002.0009: item 0 4 0 12 parsing failed
[  168.028202][    T9] hid-generic 0003:093A:8002.0009: probe with driver hid-generic failed with error -22
[  168.219288][    T9] usb 1-1: USB disconnect, device number 19
[  169.061239][ T9820] loop0: detected capacity change from 0 to 4096
[  169.071669][ T9820] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  169.174233][ T9820] ntfs3(loop0): Failed to load $Extend (-22).
[  169.189226][ T9820] ntfs3(loop0): Failed to initialize $Extend.
[  169.408677][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'.
[  169.552524][   T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  169.628263][ T9837] loop3: detected capacity change from 0 to 32768
[  169.631724][ T9837] xfs: Deprecated parameter 'noikeep'
[  169.633685][ T9837] XFS: noikeep mount option is deprecated.
[  169.645442][ T9837] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  169.656366][ T9837] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.685271][ T9837] XFS (loop3): Ending clean mount
[  169.688916][ T9837] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 
[  169.694616][ T9837] XFS (loop3): Unmount and run xfs_repair
[  169.697311][ T9837] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  169.702868][ T9837] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  169.706240][ T9837] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80  ................
[  169.709191][ T9837] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  169.713099][ T9837] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37  ....7C.L..$@..@7
[  169.716313][ T9837] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  169.719612][ T9837] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  169.723748][   T24] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  169.728502][ T9837] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00  ......0w........
[  169.732172][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.735344][   T24] usb 1-1: Product: syz
[  169.736751][   T24] usb 1-1: Manufacturer: syz
[  169.741150][ T9837] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  169.744434][   T24] usb 1-1: SerialNumber: syz
[  169.747671][ T9837] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x10 len 4 error 74
[  169.752390][ T9837] loop3: lost filesystem error report for type 5 error -117
[  169.752447][ T9837] XFS (loop3): Failed to initialize disk quotas, err -117.
[  169.784673][ T5947] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.791767][ T5947] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  169.961865][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.969400][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.042560][ T9866] loop5: detected capacity change from 0 to 4096
[  170.057796][ T9869] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.059965][ T9866] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  170.074452][ T9866] Remounting filesystem read-only
[  170.299745][ T9871] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1637'.
[  170.445005][ T9877] netlink: 'syz.5.1639': attribute type 2 has an invalid length.
[  170.808567][ T9890] openvswitch: netlink: Duplicate or invalid key (type 0).
[  171.129389][ T9908] loop5: detected capacity change from 0 to 64
[  171.640059][ T9903] loop3: detected capacity change from 0 to 131072
[  171.646222][ T9903] F2FS-fs (loop3): invalid crc value
[  171.702157][ T9903] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  171.716546][ T9903] loop3: lost filesystem error report for type 5 error -117
[  171.719985][ T9903] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  171.729650][ T9903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  172.091113][ T5952] Bluetooth: hci0: command 0x0405 tx timeout
[  172.093809][ T9828] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  172.313598][ T9828] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  172.420376][ T9828] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  172.453382][   T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  172.460698][   T24] usb 1-1: USB disconnect, device number 20
[  172.468225][   T24] usblp0: removed
[  172.671313][   T33] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  172.730301][ T9944] loop3: detected capacity change from 0 to 512
[  172.763034][ T9944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.768333][ T9944] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.810045][ T5947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.852359][   T33] usb 6-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice= 1.00
[  172.858500][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.896403][   T33] gspca_main: nw80x-2.14.0 probing 06a5:d001
[  173.045359][ T9963] loop3: detected capacity change from 0 to 512
[  173.057978][ T9963] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1671: corrupted in-inode xattr: invalid ea_ino
[  173.070902][ T9963] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  173.071331][ T9963] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1671: couldn't read orphan inode 15 (err -117)
[  173.080041][ T9963] loop3: lost filesystem error report for type 5 error -117
[  173.082393][ T9963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.094433][ T9963] EXT4-fs (loop3): shut down requested (2)
[  173.096859][ T9963] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.3.1671: error -EUCLEAN reading directory block
[  173.129382][ T5947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.279668][ T9973] loop0: detected capacity change from 0 to 4096
[  173.287989][ T9973] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  173.290483][ T9973] ntfs3(loop0): Failed to load $LogFile (-22).
[  173.300296][ T9975] loop3: detected capacity change from 0 to 256
[  173.421082][   T33] gspca_nw80x: reg_w err -110
[  173.423761][   T33] gspca_nw80x: Bad webcam type 6 for NW801
[  174.145280][   T31] usb 6-1: USB disconnect, device number 9
[  174.170955][ T5952] Bluetooth: hci0: command 0x0405 tx timeout
[  174.378995][T10006] bond0: option resend_igmp: invalid value (18446744073709551615)
[  174.382486][T10006] bond0: option resend_igmp: allowed values 0 - 255
[  174.386229][T10006] bond0 (unregistering): Released all slaves
[  174.647212][ T4983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.656356][ T4983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.660231][ T4983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.665019][ T4983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.670727][ T4983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.822646][T10013] wlan0 speed is unknown, defaulting to 1000
[  175.039072][T10041] loop5: detected capacity change from 0 to 256
[  175.046377][T10013] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.051874][T10013] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.059280][T10013] bridge_slave_0: entered allmulticast mode
[  175.062528][T10013] bridge_slave_0: entered promiscuous mode
[  175.066483][T10013] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.068953][T10013] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.072048][T10013] bridge_slave_1: entered allmulticast mode
[  175.074970][T10013] bridge_slave_1: entered promiscuous mode
[  175.102063][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.108376][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.129309][T10013] team0: Port device team_slave_0 added
[  175.132427][T10013] team0: Port device team_slave_1 added
[  175.155763][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.158129][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.166953][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.171835][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.174429][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.186594][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.223480][T10047] loop0: detected capacity change from 0 to 2048
[  175.238286][T10013] hsr_slave_0: entered promiscuous mode
[  175.240542][T10013] hsr_slave_1: entered promiscuous mode
[  175.247073][T10013] debugfs: 'hsr0' already exists in 'hsr'
[  175.248992][T10013] Cannot create hsr debugfs directory
[  175.252272][T10047]  loop0: p1 < >
[  175.321465][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  175.333692][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  175.507413][T10013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.517484][T10065] ip_tables: iptables: counters copy to user failed while replacing table
[  175.592888][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1714'.
[  175.604497][T10013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.613714][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1714'.
[  175.707338][T10013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.708062][T10075] loop5: detected capacity change from 0 to 128
[  175.737171][T10075] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.741732][T10075] ext4 filesystem being mounted at /421/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  175.762352][T10079] netlink: 'syz.0.1718': attribute type 4 has an invalid length.
[  175.780211][T10075] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  175.815033][T10013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.850089][ T7389] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.968114][T10085] libceph: resolve 'c' (ret=-3): failed
[  176.089118][T10013] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  176.095629][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  176.098938][T10013] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  176.103801][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  176.106871][T10013] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.111563][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  176.114267][T10013] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.125546][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  176.222409][T10013] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.248389][T10013] 8021q: adding VLAN 0 to HW filter on device team0
[  176.251525][ T5952] Bluetooth: hci0: command 0x0405 tx timeout
[  176.259315][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.261614][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.279458][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.282125][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.638791][T10013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.662675][T10013] veth0_vlan: entered promiscuous mode
[  176.668971][T10013] veth1_vlan: entered promiscuous mode
[  176.726348][T10013] veth0_macvtap: entered promiscuous mode
[  176.733848][ T5952] Bluetooth: hci1: command tx timeout
[  176.753226][T10013] veth1_macvtap: entered promiscuous mode
[  176.813797][T10013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.831935][T10013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.852637][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.859688][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.879006][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.899657][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.993421][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.002403][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.030252][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.033654][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.173795][T10144] bridge_slave_0: default FDB implementation only supports local addresses
[  177.358832][T10152] loop3: detected capacity change from 0 to 64
[  177.476315][T10155] loop3: detected capacity change from 0 to 128
[  177.485726][T10155] ext2: Bad value for 'max_dir_size_kb'
[  177.657292][T10165] tipc: Can't bind to reserved service type 1
[  177.808331][T10179] loop5: detected capacity change from 0 to 512
[  177.820228][T10179] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  177.826009][T10179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  177.833459][T10179] EXT4-fs (loop5): orphan cleanup on readonly fs
[  177.844333][T10179] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.1753: iget: bad i_size value: 12154761577498
[  177.849996][T10185] bridge1: entered promiscuous mode
[  177.869108][T10179] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  177.871002][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  177.876124][    C1] EXT4-fs (loop5): initial error at time 1789988524: ext4_orphan_get:1399: inode 13
[  177.878989][    C1] EXT4-fs (loop5): last error at time 1789988524: ext4_orphan_get:1399: inode 13
[  177.883848][T10179] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1753: couldn't read orphan inode 13 (err -117)
[  177.892777][T10186] xt_hashlimit: size too large, truncated to 1048576
[  177.898101][T10179] loop5: lost filesystem error report for type 5 error -117
[  177.899602][T10179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  177.933504][T10179] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1753: dx entry: limit 65535 != root limit 120
[  177.946926][T10179] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1753: Corrupt directory, running e2fsck is recommended
[  177.975517][ T7389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.831045][ T5952] Bluetooth: hci1: command tx timeout
[  179.331352][   T34] audit: type=1326 audit(1789988525.838:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.0.1779" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee699e159 code=0x0
[  179.575640][T10251] loop0: detected capacity change from 0 to 512
[  179.586142][T10252] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  179.590396][T10251] EXT4-fs: Ignoring removed mblk_io_submit option
[  179.752922][T10264] block2mtd: device name too long
[  179.766035][T10251] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1784: corrupted in-inode xattr: e_value size too large
[  179.780789][T10251] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  179.781447][T10251] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1784: couldn't read orphan inode 15 (err -117)
[  179.795320][T10251] loop0: lost filesystem error report for type 5 error -117
[  179.800316][T10251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.871636][T10268] netlink: 'syz.3.1792': attribute type 2 has an invalid length.
[  179.874409][T10268] netlink: 'syz.3.1792': attribute type 7 has an invalid length.
[  179.914900][T10268] : entered promiscuous mode
[  179.917837][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.027329][T10274] FAULT_INJECTION: forcing a failure.
[  180.027329][T10274] name fail_futex, interval 1, probability 0, space 0, times 1
[  180.038175][T10274] CPU: 1 UID: 0 PID: 10274 Comm: syz.5.1794 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.038195][T10274] Tainted: [L]=SOFTLOCKUP
[  180.038200][T10274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.038216][T10274] Call Trace:
[  180.038222][T10274]  <TASK>
[  180.038229][T10274]  dump_stack_lvl+0xe8/0x150
[  180.038250][T10274]  should_fail_ex+0x40c/0x560
[  180.038275][T10274]  get_futex_key+0x1b3/0x1580
[  180.038298][T10274]  ? rcu_is_watching+0x15/0xb0
[  180.038321][T10274]  ? __pfx_get_futex_key+0x10/0x10
[  180.038338][T10274]  ? __pfx___up_read+0x10/0x10
[  180.038357][T10274]  futex_wake+0x119/0x5f0
[  180.038375][T10274]  ? __pfx_futex_wake+0x10/0x10
[  180.038393][T10274]  ? lookup_user_key+0xb68/0x1150
[  180.038409][T10274]  ? __might_fault+0xaf/0x130
[  180.038425][T10274]  do_futex+0x458/0x4e0
[  180.038447][T10274]  ? __pfx_do_futex+0x10/0x10
[  180.038464][T10274]  ? rcu_is_watching+0x15/0xb0
[  180.038485][T10274]  __se_sys_futex+0x3a8/0x450
[  180.038508][T10274]  ? __pfx___se_sys_futex+0x10/0x10
[  180.038530][T10274]  ? __x64_sys_futex+0x21/0xf0
[  180.038550][T10274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.038566][T10274]  do_syscall_64+0x174/0x580
[  180.038579][T10274]  ? trace_irq_disable+0x3b/0x140
[  180.038597][T10274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.038609][T10274] RIP: 0033:0x7f256359e159
[  180.038623][T10274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.038632][T10274] RSP: 002b:00007f25644be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  180.038649][T10274] RAX: ffffffffffffffda RBX: 00007f2563825fa8 RCX: 00007f256359e159
[  180.038657][T10274] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2563825fac
[  180.038665][T10274] RBP: 00007f2563825fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  180.038675][T10274] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  180.038682][T10274] R13: 00007f2563826038 R14: 00007ffda27f2140 R15: 00007ffda27f2228
[  180.038702][T10274]  </TASK>
[  180.245808][T10278] fuse: Bad value for 'fd'
[  180.388863][   T34] audit: type=1326 audit(1789988526.918:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.3.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44659e159 code=0x7ffc0000
[  180.490402][   T34] audit: type=1326 audit(1789988526.928:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.3.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa44659e159 code=0x7ffc0000
[  180.518847][T10288] netlink: 'syz.5.1801': attribute type 3 has an invalid length.
[  180.525432][   T34] audit: type=1326 audit(1789988526.928:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.3.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44659e159 code=0x7ffc0000
[  180.535024][T10288] netlink: 'syz.5.1801': attribute type 3 has an invalid length.
[  180.545173][   T34] audit: type=1326 audit(1789988526.938:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.3.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44659e159 code=0x7ffc0000
[  180.890914][ T5952] Bluetooth: hci1: command tx timeout
[  180.899928][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1810'.
[  180.904481][T10315] netlink: 'syz.5.1810': attribute type 2 has an invalid length.
[  181.161220][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.167595][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.170642][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.176250][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.179737][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.183041][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.185933][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.188798][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.194542][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1813'.
[  181.475402][T10338] loop0: detected capacity change from 0 to 8
[  181.758556][T10351] netlink: 'syz.3.1827': attribute type 21 has an invalid length.
[  182.018080][T10368] FAULT_INJECTION: forcing a failure.
[  182.018080][T10368] name failslab, interval 1, probability 0, space 0, times 0
[  182.035670][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.3.1836 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  182.035687][T10368] Tainted: [L]=SOFTLOCKUP
[  182.035691][T10368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.035696][T10368] Call Trace:
[  182.035700][T10368]  <TASK>
[  182.035704][T10368]  dump_stack_lvl+0xe8/0x150
[  182.035719][T10368]  should_fail_ex+0x40c/0x560
[  182.035734][T10368]  should_failslab+0xa8/0x100
[  182.035746][T10368]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  182.035756][T10368]  ? futex_wait+0x2a2/0x390
[  182.035765][T10368]  ? prepare_creds+0x30/0x820
[  182.035781][T10368]  ? prepare_creds+0x30/0x820
[  182.035798][T10368]  prepare_creds+0x30/0x820
[  182.035815][T10368]  keyctl_set_reqkey_keyring+0x7e/0x1d0
[  182.035830][T10368]  __se_sys_keyctl+0x667/0x9d0
[  182.035846][T10368]  ? __pfx___se_sys_keyctl+0x10/0x10
[  182.035888][T10368]  ? __pfx_do_futex+0x10/0x10
[  182.035905][T10368]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  182.035921][T10368]  ? __se_sys_futex+0x3a8/0x450
[  182.035940][T10368]  ? ksys_write+0x242/0x270
[  182.035959][T10368]  ? rcu_is_watching+0x15/0xb0
[  182.036001][T10368]  ? __x64_sys_keyctl+0x20/0xc0
[  182.036014][T10368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.036027][T10368]  do_syscall_64+0x174/0x580
[  182.036040][T10368]  ? trace_irq_disable+0x3b/0x140
[  182.036053][T10368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.036060][T10368] RIP: 0033:0x7fa44659e159
[  182.036068][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.036075][T10368] RSP: 002b:00007fa44753c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  182.036085][T10368] RAX: ffffffffffffffda RBX: 00007fa446825fa0 RCX: 00007fa44659e159
[  182.036091][T10368] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e
[  182.036096][T10368] RBP: 00007fa44663506b R08: 0000000000000000 R09: 0000000000000000
[  182.036101][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.036106][T10368] R13: 00007fa446826038 R14: 00007fa446825fa0 R15: 00007ffd57858b08
[  182.036118][T10368]  </TASK>
[  182.667905][T10401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.945539][T10410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.981528][ T5952] Bluetooth: hci1: command tx timeout
[  190.650901][    C1] sched: DL replenish lagged too much
[  195.844235][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  195.854214][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  255.937380][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  255.948118][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  311.422726][ T4983] Bluetooth: hci1: command 0x0406 tx timeout
[  317.822639][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  317.832787][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  378.686478][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  378.695780][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  403.461584][   T35] INFO: task kworker/0:3:5411 blocked for more than 143 seconds.
[  403.463862][   T35]       Tainted: G             L      syzkaller #0
[  403.466145][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  403.469181][   T35] task:kworker/0:3     state:D stack:21128 pid:5411  tgid:5411  ppid:2      task_flags:0x4208060 flags:0x00080000
[  405.683197][   T35] Workqueue: events_power_efficient reg_check_chans_work
[  405.718503][   T35] Call Trace:
[  405.719854][   T35]  <TASK>
[  405.738823][   T35]  __schedule+0x17d9/0x56c0
[  405.759400][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  405.784223][   T35]  ? do_raw_spin_unlock+0x4d/0x210
[  405.806831][   T35]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  405.842872][   T35]  ? __pfx___schedule+0x10/0x10
[  405.867908][   T35]  ? schedule+0x90/0x2b0
[  405.890963][   T35]  schedule+0x164/0x2b0
[  405.916677][   T35]  schedule_preempt_disabled+0x13/0x30
[  405.949940][   T35]  __mutex_lock+0x7bf/0x1550
[  405.972579][   T35]  ? arch_stack_walk+0x11b/0x150
[  405.996014][   T35]  ? __mutex_lock+0x5d4/0x1550
[  406.023934][   T35]  ? reg_check_chans_work+0x1a1/0x1110
[  406.048130][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  406.077169][   T35]  ? cfg80211_reg_check_beaconing+0xcf3/0x11d0
[  406.105284][   T35]  ? add_lock_to_list+0xc7/0x100
[  406.128197][   T35]  reg_check_chans_work+0x1a1/0x1110
[  406.149535][   T35]  ? __pfx_reg_check_chans_work+0x10/0x10
[  406.171725][   T35]  ? process_scheduled_works+0xa20/0x14e0
[  406.195835][   T35]  ? rcu_is_watching+0x15/0xb0
[  406.210981][   T35]  ? process_scheduled_works+0xa20/0x14e0
[  406.237915][   T35]  process_scheduled_works+0xa8e/0x14e0
[  406.253891][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  406.271674][   T35]  ? assign_work+0x3cf/0x5d0
[  406.287054][   T35]  worker_thread+0xa47/0xfb0
[  406.305994][   T35]  ? __kthread_parkme+0x71/0x1f0
[  406.320438][   T35]  kthread+0x388/0x470
[  406.321777][   T35]  ? __pfx_worker_thread+0x10/0x10
[  406.373765][   T35]  ? __pfx_kthread+0x10/0x10
[  406.375185][   T35]  ret_from_fork+0x514/0xb70
[  406.394196][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  406.395759][   T35]  ? __switch_to+0xc89/0x1420
[  406.400701][   T35]  ? __pfx_kthread+0x10/0x10
[  406.414037][   T35]  ret_from_fork_asm+0x1a/0x30
[  406.415488][   T35]  </TASK>
[  406.434363][   T35] 
[  406.434363][   T35] Showing all locks held in the system:
[  406.436709][   T35] 3 locks held by kworker/u8:0/12:
[  406.541034][   T35]  #0: ffff8881120f6940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  406.640893][   T35]  #1: ffffc90000117c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  406.662439][   T35]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  406.698167][   T35] 3 locks held by kworker/u9:0/26:
[  406.715995][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  406.760228][   T35]  #1: ffffc90000a17c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  406.793629][   T35]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  406.832234][   T35] 3 locks held by kworker/1:1/31:
[  406.850024][   T35]  #0: ffff88823c63b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  406.884979][   T35]  #1: ffff88823c624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  406.913091][   T35]  #2: ffff88823c626058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0
[  406.938557][   T35] 1 lock held by khungtaskd/35:
[  406.949881][   T35]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  406.980902][   T35] 1 lock held by kcompactd0/39:
[  406.994819][   T35] 5 locks held by kworker/u9:7/1105:
[  407.008310][   T35] 2 locks held by syslogd/5025:
[  407.022524][   T35] 2 locks held by klogd/5032:
[  407.038932][   T35] 4 locks held by udevd/5043:
[  407.056163][   T35] 1 lock held by dhcpcd/5338:
[  407.069472][   T35] 4 locks held by dhcpcd/5339:
[  407.081335][   T35] 2 locks held by getty/5421:
[  407.093099][   T35]  #0: ffff88816049d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  407.113537][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  407.137596][   T35] 2 locks held by syz-executor/5581:
[  407.154419][   T35] 3 locks held by kworker/1:5/5702:
[  407.169466][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  407.196255][   T35]  #1: ffffc9000617fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  407.229612][   T35]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  407.272406][   T35] 1 lock held by syz.5.687/7571:
[  407.287206][   T35]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  407.307920][   T35] 2 locks held by syz.0.1443/9418:
[  407.318352][   T35]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  407.341817][   T35]  #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  407.373911][   T35] 2 locks held by syz-executor/10013:
[  407.399847][   T35] 2 locks held by syz-executor/10426:
[  407.413385][   T35] 
[  407.414179][   T35] =============================================
[  407.414179][   T35] 
[  407.473794][   T35] NMI backtrace for cpu 1
[  407.473811][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  407.473827][   T35] Tainted: [L]=SOFTLOCKUP
[  407.473830][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.473834][   T35] Call Trace:
[  407.473838][   T35]  <TASK>
[  407.473841][   T35]  dump_stack_lvl+0xe8/0x150
[  407.473856][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  407.473869][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  407.473881][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  407.473893][   T35]  sys_info+0x135/0x170
[  407.473903][   T35]  watchdog+0xfd7/0x1030
[  407.473914][   T35]  ? watchdog+0x1c7/0x1030
[  407.473924][   T35]  kthread+0x388/0x470
[  407.473934][   T35]  ? __pfx_watchdog+0x10/0x10
[  407.473941][   T35]  ? __pfx_kthread+0x10/0x10
[  407.473951][   T35]  ret_from_fork+0x514/0xb70
[  407.473961][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  407.473975][   T35]  ? __switch_to+0xc89/0x1420
[  407.473985][   T35]  ? __pfx_kthread+0x10/0x10
[  407.473994][   T35]  ret_from_fork_asm+0x1a/0x30
[  407.474009][   T35]  </TASK>
[  407.474012][   T35] Sending NMI from CPU 1 to CPUs 0:
[  407.525984][    C0] NMI backtrace for cpu 0
[  407.525996][    C0] CPU: 0 UID: 0 PID: 1103 Comm: kworker/u9:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  407.526006][    C0] Tainted: [L]=SOFTLOCKUP
[  407.526008][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.526013][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  407.526026][    C0] RIP: 0010:unwind_next_frame+0x153/0x2550
[  407.526035][    C0] Code: 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9b 1c 00 00 f6 03 03 0f 85 fa 19 00 00 49 8d 5e 35 48 89 d8 48 c1 e8 03 <48> 89 04 24 42 0f b6 04 20 84 c0 0f 85 92 1c 00 00 4c 89 7c 24 10
[  407.526041][    C0] RSP: 0018:ffffc90000007900 EFLAGS: 00000a03
[  407.526046][    C0] RAX: 1ffff92000000f3b RBX: ffffc900000079dd RCX: 0000000080000102
[  407.526052][    C0] RDX: 00000000b42d3af8 RSI: ffffffff8c4bb560 RDI: ffffffff8c4bb520
[  407.526056][    C0] RBP: 1ffff92000000f3c R08: ffffffff8177727f R09: 0000000000000000
[  407.526061][    C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000
[  407.526065][    C0] R13: ffffffff8177727f R14: ffffc900000079a8 R15: 1ffff92000000f35
[  407.526070][    C0] FS:  0000000000000000(0000) GS:ffff88818d959000(0000) knlGS:0000000000000000
[  407.526076][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  407.526080][    C0] CR2: 000055555fc5ce38 CR3: 00000001717b0000 CR4: 00000000000006f0
[  407.526108][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  407.526113][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  407.526117][    C0] Call Trace:
[  407.526120][    C0]  <IRQ>
[  407.526125][    C0]  ? rcu_core+0x78b/0x10a0
[  407.526134][    C0]  ? unwind_next_frame+0x8f/0x2550
[  407.526141][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  407.526149][    C0]  arch_stack_walk+0x11b/0x150
[  407.526160][    C0]  ? rcu_core+0x78b/0x10a0
[  407.526169][    C0]  stack_trace_save+0xa9/0x100
[  407.526176][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  407.526183][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  407.526194][    C0]  ? __lock_acquire+0x683/0x2cf0
[  407.526203][    C0]  kasan_save_track+0x3e/0x80
[  407.526211][    C0]  ? kasan_save_track+0x3e/0x80
[  407.526218][    C0]  ? kasan_save_free_info+0x40/0x50
[  407.526224][    C0]  ? __kasan_slab_free+0x5c/0x80
[  407.526231][    C0]  ? kmem_cache_free+0x182/0x650
[  407.526240][    C0]  ? dst_destroy+0x22f/0x340
[  407.526246][    C0]  ? rcu_core+0x78b/0x10a0
[  407.526262][    C0]  ? dst_destroy+0x22f/0x340
[  407.526268][    C0]  kasan_save_free_info+0x40/0x50
[  407.526274][    C0]  __kasan_slab_free+0x5c/0x80
[  407.526282][    C0]  kmem_cache_free+0x182/0x650
[  407.526290][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  407.526298][    C0]  dst_destroy+0x22f/0x340
[  407.526304][    C0]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  407.526310][    C0]  ? rcu_core+0x70d/0x10a0
[  407.526318][    C0]  rcu_core+0x78b/0x10a0
[  407.526329][    C0]  ? __pfx_rcu_core+0x10/0x10
[  407.526338][    C0]  ? sched_balance_domains+0xe8/0x880
[  407.526346][    C0]  handle_softirqs+0x225/0x840
[  407.526353][    C0]  ? do_softirq+0x76/0xd0
[  407.526361][    C0]  ? cfg80211_inform_single_bss_data+0x1491/0x1be0
[  407.526370][    C0]  do_softirq+0x76/0xd0
[  407.526377][    C0]  </IRQ>
[  407.526379][    C0]  <TASK>
[  407.526381][    C0]  __local_bh_enable_ip+0xf8/0x130
[  407.526388][    C0]  cfg80211_inform_single_bss_data+0x1491/0x1be0
[  407.526399][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  407.526412][    C0]  ? _ieee802_11_parse_elems_full+0x2c0/0x4950
[  407.526422][    C0]  ? cfg80211_inform_bss_data+0x248/0x3d50
[  407.526432][    C0]  cfg80211_inform_bss_data+0x25b/0x3d50
[  407.526445][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  407.526460][    C0]  ? __lock_acquire+0x683/0x2cf0
[  407.526471][    C0]  ? cfg80211_defragment_element+0x3e/0x360
[  407.526481][    C0]  ? ieee80211_bss_info_update+0x30f/0xa50
[  407.526490][    C0]  cfg80211_inform_bss_frame_data+0x3c7/0x840
[  407.526500][    C0]  ? ieee80211_bss_info_update+0x30f/0xa50
[  407.526509][    C0]  ieee80211_bss_info_update+0x791/0xa50
[  407.526517][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  407.526525][    C0]  ? sta_info_get+0x4f/0x300
[  407.526535][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40
[  407.526544][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40
[  407.526554][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40
[  407.526562][    C0]  ? __lock_acquire+0x683/0x2cf0
[  407.526570][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  407.526578][    C0]  ? __mutex_trylock_common+0x15f/0x270
[  407.526589][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  407.526599][    C0]  ? __lock_acquire+0x683/0x2cf0
[  407.526608][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  407.526616][    C0]  ? kcov_remote_start+0x181/0x790
[  407.526625][    C0]  ieee80211_iface_work+0x78a/0x1010
[  407.526635][    C0]  cfg80211_wiphy_work+0x29e/0x420
[  407.526673][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  407.526682][    C0]  process_scheduled_works+0xa8e/0x14e0
[  407.526693][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  407.526700][    C0]  ? assign_work+0x3cf/0x5d0
[  407.526707][    C0]  worker_thread+0xa47/0xfb0
[  407.526719][    C0]  kthread+0x388/0x470
[  407.526728][    C0]  ? __pfx_worker_thread+0x10/0x10
[  407.526734][    C0]  ? __pfx_kthread+0x10/0x10
[  407.526743][    C0]  ret_from_fork+0x514/0xb70
[  407.526753][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  407.526761][    C0]  ? __switch_to+0xc89/0x1420
[  407.526769][    C0]  ? __pfx_kthread+0x10/0x10
[  407.526777][    C0]  ret_from_fork_asm+0x1a/0x30
[  407.526789][    C0]  </TASK>
[  409.602962][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  409.605134][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  409.608403][   T35] Tainted: [L]=SOFTLOCKUP
[  409.609740][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  409.613026][   T35] Call Trace:
[  409.614068][   T35]  <TASK>
[  409.615037][   T35]  vpanic+0x56c/0xa60
[  409.616271][   T35]  ? __pfx___schedule+0x10/0x10
[  409.617783][   T35]  ? __pfx_vpanic+0x10/0x10
[  409.619212][   T35]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  409.621103][   T35]  panic+0xc5/0xd0
[  409.622434][   T35]  ? __pfx_panic+0x10/0x10
[  409.624236][   T35]  ? preempt_schedule_common+0x82/0xd0
[  409.626468][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  409.628607][   T35]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  409.630542][   T35]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  409.632385][   T35]  watchdog+0x1030/0x1030
[  409.633692][   T35]  ? watchdog+0x1c7/0x1030
[  409.635064][   T35]  kthread+0x388/0x470
[  409.636342][   T35]  ? __pfx_watchdog+0x10/0x10
[  409.637845][   T35]  ? __pfx_kthread+0x10/0x10
[  409.639318][   T35]  ret_from_fork+0x514/0xb70
[  409.640721][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  409.642275][   T35]  ? __switch_to+0xc89/0x1420
[  409.643739][   T35]  ? __pfx_kthread+0x10/0x10
[  409.645147][   T35]  ret_from_fork_asm+0x1a/0x30
[  409.646615][   T35]  </TASK>
[  409.648250][   T35] Kernel Offset: disabled
[  409.649775][   T35] Rebooting in 86400 seconds..
