last executing test programs:

1m34.522000527s ago: executing program 0 (id=1174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000000600)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc34}, @CTA_FILTER={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)

1m34.521880559s ago: executing program 0 (id=1175):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0))

1m34.52170289s ago: executing program 0 (id=1176):
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})

1m34.471852928s ago: executing program 0 (id=1177):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ca, &(0x7f00000006c0)="$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")
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)

1m34.453591041s ago: executing program 0 (id=1178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4)

1m34.250979098s ago: executing program 0 (id=1179):
mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x9, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x2, 0x7, 0x1)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)

1m34.225034833s ago: executing program 32 (id=1179):
mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x9, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x2, 0x7, 0x1)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)

28.459316542s ago: executing program 2 (id=2430):
unshare(0x8040480)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e)

28.459175577s ago: executing program 2 (id=2431):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

28.391699909s ago: executing program 2 (id=2432):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@errors_remount}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$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")
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0)

28.261097022s ago: executing program 2 (id=2436):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@orlov}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

28.145677365s ago: executing program 2 (id=2440):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/180, 0xb4}], 0x1, 0x47, 0x6)

27.751473223s ago: executing program 2 (id=2441):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"})

27.734096358s ago: executing program 33 (id=2441):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"})

1.851050832s ago: executing program 4 (id=2890):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fedbdf2502207bcb", @ANYRES32=r3, @ANYBLOB="0800080030000000080002006401010208000200ac14e03d080008977a02000008000a00010000000800090005"], 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.850862938s ago: executing program 4 (id=2891):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

1.769289637s ago: executing program 4 (id=2892):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1.769135353s ago: executing program 4 (id=2893):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)
ptrace$setregs(0x1a, r0, 0x4ea, &(0x7f0000000000))

1.69869052s ago: executing program 4 (id=2895):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r0)
r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r1, &(0x7f00000023c0)='attr/keycreate\x00')

1.641261844s ago: executing program 4 (id=2898):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

870.287488ms ago: executing program 3 (id=2914):
r0 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={'\x00', 0x200, 0x6, 0x1, 0x4, 0x0, "000000000000000000002ff6b03900", "000200", '\x00', "dd00", ["95ec1df3a4bfffff00", "ffee4df1aa8d37ba4f00", "070500110800c1024b00", "38a70ed483c99bd24e00d333"]})

870.108786ms ago: executing program 3 (id=2915):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xffff, 0x2)

809.955337ms ago: executing program 3 (id=2917):
keyctl$reject(0x14, 0x0, 0x1ffffffe, 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000080)={&(0x7f00000006c0)=[{0x5, 0x5, 0x1, 0x3}, {0x1f, 0x4, 0x9}], 0x2, 0x20, 0x0, 0x6})

740.224407ms ago: executing program 3 (id=2919):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

740.052183ms ago: executing program 3 (id=2920):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x7, 0x40, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x2, 0x1, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x252, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xb, 0x10000002, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0)

680.797309ms ago: executing program 3 (id=2922):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0)

243.203195ms ago: executing program 1 (id=2932):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000001c0), 0x24, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, r0}, 0x38)

159.898477ms ago: executing program 1 (id=2933):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f00000001c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x3, {0x2, 0xfb}, 0x58, 0xea}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})

110.3031ms ago: executing program 1 (id=2934):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]})
sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="67a873ce195a275eb1b6619e78a7d507dcb99407f421809b7caea286c5a49d313e513ee800b74dae1b396feed9ead90da8ec0806f3cc8c0942416d1022c82a", 0x3f}], 0x1}}], 0x1, 0x810)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x3}}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}], 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e23, 0x9, @private1, 0x106}, 0x1c)

205.882µs ago: executing program 1 (id=2935):
semget$private(0x0, 0x4000, 0x555)

134.012µs ago: executing program 1 (id=2936):
r0 = fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=2937):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0xf00, 0x0)
fanotify_mark(r3, 0x1, 0x10001043, r2, 0x0)
renameat2(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfe, 0x4}]})
socket(0x5, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=2938):
r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {0xfffffffd}, 0x0, 0x1000}, 0x1)

kernel console output (not intermixed with test programs):

op2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  147.102288][ T9313] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1569: couldn't read orphan inode 15 (err -117)
[  147.109042][ T9313] loop2: lost filesystem error report for type 5 error -117
[  147.110236][ T9313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.138284][ T5760] hub 4-1:4.0: config failed, hub has too many ports! (err -19)
[  147.144872][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.333496][ T9327] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1575'.
[  147.362681][ T9329] loop2: detected capacity change from 0 to 1024
[  147.368021][ T9329] hfsplus: invalid secondary volume header
[  147.377365][ T9329] hfsplus: unable to find HFS+ superblock
[  147.451590][ T5760] usb 4-1: USB disconnect, device number 7
[  147.714291][   T34] audit: type=1326 audit(1789986879.439:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.1.1584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  147.731485][   T34] audit: type=1326 audit(1789986879.439:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.1.1584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  147.740364][   T34] audit: type=1326 audit(1789986879.449:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.1.1584" exe="/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  147.749398][   T34] audit: type=1326 audit(1789986879.449:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.1.1584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  147.759246][   T34] audit: type=1326 audit(1789986879.449:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.1.1584" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  147.779166][ T9349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.874263][ T9353] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1588'.
[  148.202588][ T9376] loop3: detected capacity change from 0 to 64
[  148.222540][ T9376] MINIX-fs: bad superblock or unable to read bitmaps
[  148.831187][   T24] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  149.046562][   T24] usb 3-1: unable to read config index 0 descriptor/start: -71
[  149.049036][   T24] usb 3-1: can't read configurations, error -71
[  149.298729][ T9412] loop3: detected capacity change from 0 to 1024
[  149.591327][ T1284] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  149.755093][ T9418] loop2: detected capacity change from 0 to 32768
[  149.764259][ T1284] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  149.769210][ T1284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  149.772702][ T1284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  149.778995][ T1284] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  149.829856][ T1284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.839187][ T1284] usb 4-1: Product: syz
[  149.842094][ T1284] usb 4-1: Manufacturer: syz
[  149.843568][ T1284] usb 4-1: SerialNumber: syz
[  149.850469][ T1284] usb 4-1: config 0 descriptor??
[  149.854169][ T9418] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  149.876212][ T9430] netlink: 1088 bytes leftover after parsing attributes in process `syz.1.1619'.
[  149.877846][ T9418] XFS (loop2): Ending clean mount
[  149.879116][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'.
[  149.884514][ T9430] netlink: 1088 bytes leftover after parsing attributes in process `syz.1.1619'.
[  149.887713][ T9430] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1619'.
[  149.916066][ T5709] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  150.062377][ T1284] powermate: unknown product id 0240
[  150.067400][ T1284] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  150.070489][ T1284] powermate 4-1:0.0: probe with driver powermate failed with error -5
[  150.077551][ T1284] usb 4-1: USB disconnect, device number 8
[  150.596701][ T9444] loop3: detected capacity change from 0 to 512
[  150.620609][ T9444] EXT4-fs: Ignoring removed oldalloc option
[  150.630911][ T9444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  150.642154][ T9444] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1626: invalid indirect mapped block 83886080 (level 1)
[  150.656890][ T9444] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  150.657182][ T9444] EXT4-fs (loop3): Remounting filesystem read-only
[  150.662559][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  150.662569][    C0] EXT4-fs (loop3): initial error at time 1789986882: ext4_free_branches:1023: inode 16
[  150.662582][    C0] EXT4-fs (loop3): last error at time 1789986882: ext4_free_branches:1023: inode 16
[  150.675196][ T9444] EXT4-fs (loop3): 1 orphan inode deleted
[  150.677141][ T9444] EXT4-fs (loop3): 1 truncate cleaned up
[  150.689048][ T9444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.848094][ T8359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.449911][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1633'.
[  151.580083][ T9465] loop3: detected capacity change from 0 to 32768
[  151.624161][ T9465] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  151.637395][ T9465] XFS (loop3): Ending clean mount
[  151.795303][ T9500] sg_write: data in/out 32768/136 bytes for SCSI command 0x0-- guessing data in;
[  151.795303][ T9500]    program syz.2.1647 not setting count and/or reply_len properly
[  152.084767][ T9515] jffs2: notice: (9515) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  152.163158][ T9511] loop2: detected capacity change from 0 to 32768
[  152.172440][ T9511] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1651 (9511)
[  152.186486][ T9511] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  152.189802][ T9511] BTRFS info (device loop2): using blake2b checksum algorithm
[  152.207106][ T9511] BTRFS info (device loop2): enabling ssd optimizations
[  152.209321][ T9511] BTRFS info (device loop2): turning on async discard
[  152.212632][ T9511] BTRFS info (device loop2): enabling free space tree
[  152.214769][ T9511] BTRFS info (device loop2): use zstd compression, level 3
[  152.253206][ T5709] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  152.389030][ T8359] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  152.467716][ T9536] ima: policy update failed
[  152.476673][   T34] audit: type=1802 audit(1789986884.189:167): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1657" res=0 errno=0
[  152.574345][ T9539] FAULT_INJECTION: forcing a failure.
[  152.574345][ T9539] name failslab, interval 1, probability 0, space 0, times 0
[  152.591264][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.2.1658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.591278][ T9539] Tainted: [L]=SOFTLOCKUP
[  152.591281][ T9539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.591292][ T9539] Call Trace:
[  152.591296][ T9539]  <TASK>
[  152.591300][ T9539]  dump_stack_lvl+0xe8/0x150
[  152.591315][ T9539]  should_fail_ex+0x40c/0x560
[  152.591330][ T9539]  should_failslab+0xa8/0x100
[  152.591342][ T9539]  __kmalloc_noprof+0xfe/0x720
[  152.591351][ T9539]  ? __pfx___futex_wait+0x10/0x10
[  152.591359][ T9539]  ? iovec_from_user+0x87/0x250
[  152.591368][ T9539]  ? iovec_from_user+0x87/0x250
[  152.591379][ T9539]  iovec_from_user+0x87/0x250
[  152.591389][ T9539]  __import_iovec+0x15e/0x7e0
[  152.591403][ T9539]  import_iovec+0x73/0xa0
[  152.591413][ T9539]  vfs_writev+0x1cf/0x990
[  152.591425][ T9539]  ? __pfx_vfs_writev+0x10/0x10
[  152.591437][ T9539]  ? __fget_files+0x2a/0x420
[  152.591449][ T9539]  ? __fget_files+0x3a2/0x420
[  152.591457][ T9539]  ? __fget_files+0x2a/0x420
[  152.591469][ T9539]  __se_sys_pwritev2+0x177/0x2a0
[  152.591479][ T9539]  ? __pfx___se_sys_pwritev2+0x10/0x10
[  152.591489][ T9539]  ? __x64_sys_pwritev2+0x20/0xc0
[  152.591496][ T9539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.591504][ T9539]  do_syscall_64+0x174/0x580
[  152.591513][ T9539]  ? trace_irq_disable+0x3b/0x140
[  152.591523][ T9539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.591530][ T9539] RIP: 0033:0x7f305199e159
[  152.591538][ T9539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.591544][ T9539] RSP: 002b:00007f305290f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  152.591553][ T9539] RAX: ffffffffffffffda RBX: 00007f3051c25fa0 RCX: 00007f305199e159
[  152.591559][ T9539] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003
[  152.591564][ T9539] RBP: 00007f3051a3506b R08: 0000000000000000 R09: 0000000000000022
[  152.591568][ T9539] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000
[  152.591573][ T9539] R13: 00007f3051c26038 R14: 00007f3051c25fa0 R15: 00007ffee15b3068
[  152.591584][ T9539]  </TASK>
[  152.728591][ T9546] netlink: 'syz.3.1661': attribute type 3 has an invalid length.
[  152.833689][ T9560] FAULT_INJECTION: forcing a failure.
[  152.833689][ T9560] name failslab, interval 1, probability 0, space 0, times 0
[  152.838716][ T9560] CPU: 0 UID: 0 PID: 9560 Comm: syz.3.1667 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.838729][ T9560] Tainted: [L]=SOFTLOCKUP
[  152.838732][ T9560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.838737][ T9560] Call Trace:
[  152.838741][ T9560]  <TASK>
[  152.838745][ T9560]  dump_stack_lvl+0xe8/0x150
[  152.838760][ T9560]  should_fail_ex+0x40c/0x560
[  152.838774][ T9560]  should_failslab+0xa8/0x100
[  152.838786][ T9560]  __kmalloc_noprof+0xfe/0x720
[  152.838796][ T9560]  ? __kmalloc_noprof+0x1ad/0x720
[  152.838804][ T9560]  ? sock_kmalloc+0xd6/0x160
[  152.838814][ T9560]  ? sock_kmalloc+0xd6/0x160
[  152.838826][ T9560]  sock_kmalloc+0xd6/0x160
[  152.838838][ T9560]  skcipher_accept_parent_nokey+0x97/0x2b0
[  152.838849][ T9560]  ? __pfx_skcipher_accept_parent_nokey+0x10/0x10
[  152.838857][ T9560]  af_alg_accept+0x1ed/0x520
[  152.838870][ T9560]  do_accept+0x521/0x750
[  152.838881][ T9560]  ? __pfx_do_accept+0x10/0x10
[  152.838898][ T9560]  __sys_accept4+0x139/0x230
[  152.838907][ T9560]  ? __pfx___sys_accept4+0x10/0x10
[  152.838919][ T9560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.838927][ T9560]  __x64_sys_accept+0x7d/0x90
[  152.838965][ T9560]  do_syscall_64+0x174/0x580
[  152.838976][ T9560]  ? trace_irq_disable+0x3b/0x140
[  152.838988][ T9560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.838996][ T9560] RIP: 0033:0x7f360b19e159
[  152.839003][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.839010][ T9560] RSP: 002b:00007f360bfd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  152.839020][ T9560] RAX: ffffffffffffffda RBX: 00007f360b425fa0 RCX: 00007f360b19e159
[  152.839026][ T9560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  152.839031][ T9560] RBP: 00007f360b23506b R08: 0000000000000000 R09: 0000000000000000
[  152.839035][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.839040][ T9560] R13: 00007f360b426038 R14: 00007f360b425fa0 R15: 00007ffe0fc89a58
[  152.839052][ T9560]  </TASK>
[  153.242173][ T9585] loop3: detected capacity change from 0 to 32768
[  153.265863][ T9585] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.278968][ T9585] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  153.287869][ T9585] XFS (loop3): Starting recovery (logdev: internal)
[  153.298870][ T9585] XFS (loop3): Ending recovery (logdev: internal)
[  153.304053][ T9585] XFS (loop3): AG 0: Corrupt finobt pointer at level 1 index 0.
[  153.306545][ T9585] loop3: lost filesystem error report for type 5 error -117
[  153.306616][ T9585] XFS (loop3): Failed to initialize disk quotas, err -117.
[  153.323294][ T8359] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.328542][ T8359] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  153.559398][ T9601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1683'.
[  153.659450][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.663807][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.684712][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.686990][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.689424][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.691686][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.694878][ T9607] bridge0: entered promiscuous mode
[  153.698843][ T9607] bridge0: entered allmulticast mode
[  153.730549][ T9613] loop2: detected capacity change from 0 to 256
[  153.770558][ T9617] loop3: detected capacity change from 0 to 512
[  153.778002][ T9617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  153.797006][ T9617] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1691: bg 0: block 393: padding at end of block bitmap is not set
[  153.818119][ T9617] loop3: lost filesystem error report for type 5 error -117
[  153.822516][ T9617] EXT4-fs (loop3): Remounting filesystem read-only
[  153.831138][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  153.833276][    C0] EXT4-fs (loop3): initial error at time 1789986885: ext4_validate_block_bitmap:441
[  153.833968][ T9617] EXT4-fs (loop3): 2 truncates cleaned up
[  153.836148][    C0] EXT4-fs (loop3): last error at time 1789986885: ext4_validate_block_bitmap:441
[  153.844564][ T9617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.867226][ T9617] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  153.904549][ T9628] loop2: detected capacity change from 0 to 512
[  153.907119][ T9628] EXT4-fs: Ignoring removed bh option
[  153.914429][ T9628] EXT4-fs: test_dummy_encryption requires encrypt feature
[  153.927062][ T8359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.169398][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'.
[  154.238144][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'.
[  154.830987][ T9699] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  154.940057][ T9707] overlayfs: conflicting lowerdir path
[  154.942475][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'.
[  154.984711][ T9712] loop3: detected capacity change from 0 to 164
[  154.989652][ T9712] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  155.114178][ T9723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1739'.
[  155.134487][ T9725] loop2: detected capacity change from 0 to 256
[  155.144270][ T9725] exfat: Deprecated parameter 'utf8'
[  155.160434][ T9725] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  155.237693][ T9737] loop3: detected capacity change from 0 to 8
[  155.252895][ T9737] SQUASHFS error: Failed to read block 0x285: -5
[  155.257664][ T9737] SQUASHFS error: Unable to read metadata cache entry [283]
[  155.263074][ T9737] SQUASHFS error: Unable to read symlink [8f:60]
[  155.514398][   T55] Bluetooth: hci0: Malformed MSFT vendor event: 0x02
[  155.544916][ T9772] overlayfs: failed to clone upperpath
[  156.739624][ T9824] set_capacity_and_notify: 1 callbacks suppressed
[  156.739634][ T9824] loop2: detected capacity change from 0 to 32768
[  156.875896][ T9824] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  156.910459][ T9824] XFS (loop2): Ending clean mount
[  157.249233][ T9847] loop3: detected capacity change from 0 to 764
[  157.355872][ T9855] loop3: detected capacity change from 0 to 1024
[  157.366487][ T9855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.425112][ T8359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.545984][ T5709] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  157.900354][ T9903] loop2: detected capacity change from 0 to 4096
[  157.905832][ T9903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  157.908783][ T9903] EXT4-fs (loop2): Test dummy encryption mode enabled
[  157.916874][ T9903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[  157.920316][ T9903] System zones: 0-5
[  157.933227][ T9903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.974718][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.018777][ T9919] loop3: detected capacity change from 0 to 8
[  158.054222][ T9919] SQUASHFS error: Failed to read block 0x6e6: -5
[  158.062226][ T9919] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  158.065300][ T9919] SQUASHFS error: Unable to read directory block [631:26]
[  158.231036][ T9929] loop2: detected capacity change from 0 to 32768
[  158.235645][ T9929] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1829 (9929)
[  158.250427][ T9929] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  158.253719][ T9929] BTRFS info (device loop2): using sha256 checksum algorithm
[  158.273368][ T9946] overlayfs: failed to clone upperpath
[  158.312568][ T9929] BTRFS info (device loop2): turning off barriers
[  158.321347][ T9929] BTRFS info (device loop2): enabling free space tree
[  158.355668][ T5709] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  158.519495][ T9975] netlink: Conntrack attr has 1 unknown bytes
[  158.522057][ T9975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.703758][   T24] Process accounting resumed
[  158.726761][ T9986] Process accounting resumed
[  158.863794][   T34] audit: type=1804 audit(1789986890.589:168): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1852" name="file1" dev="tmpfs" ino=3350 res=1 errno=0
[  158.887022][ T9994] overlayfs: failed to clone upperpath
[  159.291702][ T1284] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  159.351250][ T5813] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  159.442576][ T1284] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.445658][ T1284] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  159.450415][ T1284] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  159.453278][ T1284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.457761][ T1284] usb 4-1: Product: syz
[  159.459173][ T1284] usb 4-1: Manufacturer: syz
[  159.460624][ T1284] usb 4-1: SerialNumber: syz
[  159.469794][ T1284] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  159.471882][ T1284] gspca_mr97310a: reg write [21] error -8
[  159.473746][ T1284] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -8
[  159.502939][ T5813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.509631][ T5813] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.512549][ T5813] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0
[  159.515479][ T5813] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.521311][ T5813] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01
[  159.528409][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.532372][ T5813] usb 3-1: Product: syz
[  159.533671][ T5813] usb 3-1: Manufacturer: syz
[  159.538980][ T5813] usb 3-1: SerialNumber: syz
[  159.546888][ T5813] ipheth 3-1:1.0: Unable to find endpoints
[  159.570807][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'.
[  159.669181][ T5813] usb 4-1: USB disconnect, device number 9
[  159.757779][ T1284] apple-mfi-fastcharge 3-1: USB disconnect, device number 20
[  160.452463][   T34] audit: type=1326 audit(1789986892.179:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.1.1865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7fc00000
[  160.504434][T10043] overlayfs: failed to clone upperpath
[  160.610583][T10049] 9p: Bad value for 'rfdno'
[  161.033544][T10075] fuse: fd is not a fuse device
[  161.669606][   T34] audit: type=1326 audit(1789986893.379:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.3.1886" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f360b19e159 code=0x0
[  162.458372][T10111] loop2: detected capacity change from 0 to 32768
[  162.462385][T10111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1906 (10111)
[  162.486030][T10111] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.492572][T10111] BTRFS info (device loop2): using crc32c checksum algorithm
[  162.571715][T10111] BTRFS info (device loop2): enabling ssd optimizations
[  162.577054][T10111] BTRFS info (device loop2): turning on flush-on-commit
[  162.584574][T10111] BTRFS info (device loop2): enabling free space tree
[  162.590368][T10111] BTRFS info (device loop2): enabling auto defrag
[  162.601321][T10111] BTRFS info (device loop2): use lzo compression, level 1
[  162.604148][T10111] BTRFS info (device loop2): max_inline set to 4096
[  162.652135][ T5709] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.781428][ T1284] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  162.934491][ T1284] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  162.938032][ T1284] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  162.941546][ T1284] usb 4-1: Product: syz
[  162.943096][ T1284] usb 4-1: SerialNumber: syz
[  162.945838][ T1284] usb 4-1: config 0 descriptor??
[  163.031406][ T5813] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  163.153160][ T1284] hso 4-1:0.0: Failed to find BULK eps
[  163.191182][ T5813] usb 3-1: Using ep0 maxpacket: 16
[  163.194155][ T5813] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  163.196898][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.200401][ T5813] usb 3-1: config 0 descriptor??
[  163.206451][ T5813] gspca_main: sonixj-2.14.0 probing 0471:0327
[  163.352918][ T1284] usb 4-1: USB disconnect, device number 10
[  163.952860][T10159] loop3: detected capacity change from 0 to 8192
[  164.961433][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  165.131207][    T9] usb 4-1: Using ep0 maxpacket: 8
[  165.134797][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  165.138293][    T9] usb 4-1: config 4 has an invalid interface number: 133 but max is 0
[  165.141085][    T9] usb 4-1: config 4 has no interface number 0
[  165.146856][    T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59
[  165.149662][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.152342][    T9] usb 4-1: Product: syz
[  165.153661][    T9] usb 4-1: Manufacturer: syz
[  165.155268][    T9] usb 4-1: SerialNumber: syz
[  165.218299][ T5813] gspca_sonixj: reg_r err -71
[  165.220925][ T5813] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  165.225174][ T5813] usb 3-1: USB disconnect, device number 21
[  165.365642][    T9] huawei_cdc_ncm 4-1:4.133: CDC Union missing and no IAD found
[  165.368662][    T9] huawei_cdc_ncm 4-1:4.133: bind() failure
[  165.374754][    T9] usb 4-1: USB disconnect, device number 11
[  165.769730][T10202] jffs2: notice: (10202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  165.978536][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1949'.
[  166.049307][T10210] loop2: detected capacity change from 0 to 32768
[  166.055146][T10210] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1945 (10210)
[  166.066059][T10210] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  166.074742][T10210] BTRFS info (device loop2): using blake2b checksum algorithm
[  166.110913][T10210] BTRFS info (device loop2): enabling ssd optimizations
[  166.115653][T10210] BTRFS info (device loop2): turning on async discard
[  166.117839][T10210] BTRFS info (device loop2): enabling free space tree
[  166.120078][T10210] BTRFS info (device loop2): use zstd compression, level 3
[  166.130629][   T34] audit: type=1800 audit(1789986897.849:171): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1945" name="file1" dev="loop2" ino=260 res=0 errno=0
[  166.321632][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  166.475130][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.478334][    T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  166.480960][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.489767][    T9] usb 4-1: config 0 descriptor??
[  166.698777][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.704055][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.708689][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  166.710735][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  166.718467][    T9] usb 4-1: USB disconnect, device number 12
[  166.841995][ T5709] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.151194][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  167.303073][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.306531][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  167.310541][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.318094][    T9] usb 4-1: config 0 descriptor??
[  167.434595][T10255] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8
[  168.065206][T10272] netlink: 'syz.1.1966': attribute type 2 has an invalid length.
[  168.134938][    T9] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  168.138147][T10274] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.144079][    T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  168.387763][T10298] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  168.390418][T10298] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  168.493217][ T5813] usb 4-1: USB disconnect, device number 13
[  168.495154][    C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  169.033213][T10306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1980'.
[  169.224265][T10314] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.266919][T10318] loop3: detected capacity change from 0 to 512
[  169.285398][T10318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.289519][T10318] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.296582][T10318] Quota error (device loop3): do_check_range: Getting block 773 out of range 1-5
[  169.300093][T10318] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  169.303299][T10318] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1985: Failed to acquire dquot type 1
[  169.307757][T10318] EXT4-fs (loop3): Remounting filesystem read-only
[  169.313514][T10318] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  169.330823][ T8359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.581964][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.607212][T10347] loop2: detected capacity change from 0 to 1024
[  169.610259][T10347] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  169.613685][T10347] EXT4-fs (loop2): stripe (203) is not aligned with cluster size (16), stripe is disabled
[  169.618767][T10347] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: inode #32: comm syz.2.1997: iget: special inode unallocated
[  169.625396][T10347] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  169.625538][T10347] EXT4-fs (loop2): no journal found
[  169.630288][T10347] EXT4-fs (loop2): can't get journal size
[  169.631152][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  169.634242][    C0] EXT4-fs (loop2): initial error at time 1789986901: ext4_get_journal_inode:5900: inode 32
[  169.637371][    C0] EXT4-fs (loop2): last error at time 1789986901: ext4_get_journal_inode:5900: inode 32
[  169.641956][T10347] EXT4-fs (loop2): filesystem is read-only
[  169.647913][T10347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  169.671052][T10347] EXT4-fs (loop2): stripe (227) is not aligned with cluster size (16), stripe is disabled
[  169.712478][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.744616][T10355] netlink: 'syz.1.2000': attribute type 5 has an invalid length.
[  169.897979][T10375] overlayfs: failed to resolve './cgroup': -2
[  170.091184][ T5813] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  170.245128][ T5813] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  170.248029][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.250576][ T5813] usb 3-1: Product: syz
[  170.251960][ T5813] usb 3-1: Manufacturer: syz
[  170.253501][ T5813] usb 3-1: SerialNumber: syz
[  170.256456][ T5813] usb 3-1: config 0 descriptor??
[  170.260461][ T5813] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  170.268598][ T5813] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  170.276350][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  170.471434][ T5813] usb 3-1: USB disconnect, device number 22
[  170.758263][T10405] PKCS7: Unknown OID: [4] (bad)
[  170.765609][T10405] PKCS7: Only support pkcs7_signedData type
[  170.919897][T10421] netlink: Invalid conntrack timeout
[  170.922076][T10421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.203396][T10446] syz_tun: entered allmulticast mode
[  171.212736][T10445] syz_tun: left allmulticast mode
[  171.269219][T10449] loop2: detected capacity change from 0 to 1024
[  171.931239][ T7705] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  172.105125][ T7705] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  172.111424][ T7705] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  172.124159][ T7705] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  172.135329][ T7705] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  172.144886][ T7705] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  172.150439][ T7705] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  172.155660][ T7705] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  172.162647][ T7705] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  172.176889][ T7705] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  172.179713][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.182789][ T7705] usb 4-1: Product: syz
[  172.185504][ T7705] usb 4-1: Manufacturer: syz
[  172.187696][ T7705] usb 4-1: SerialNumber: syz
[  172.201271][ T7705] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected
[  172.208944][ T7705] ti_usb_3410_5052 4-1:2.0: missing endpoints
[  172.353991][T10482] FAULT_INJECTION: forcing a failure.
[  172.353991][T10482] name failslab, interval 1, probability 0, space 0, times 0
[  172.371212][T10482] CPU: 0 UID: 0 PID: 10482 Comm: syz.2.2060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  172.371228][T10482] Tainted: [L]=SOFTLOCKUP
[  172.371230][T10482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.371235][T10482] Call Trace:
[  172.371239][T10482]  <TASK>
[  172.371243][T10482]  dump_stack_lvl+0xe8/0x150
[  172.371259][T10482]  should_fail_ex+0x40c/0x560
[  172.371291][T10482]  should_failslab+0xa8/0x100
[  172.371303][T10482]  __kmalloc_cache_noprof+0xa8/0x660
[  172.371314][T10482]  ? nft_trans_flowtable_add+0x59/0x460
[  172.371325][T10482]  ? nft_trans_flowtable_add+0x59/0x460
[  172.371336][T10482]  nft_trans_flowtable_add+0x59/0x460
[  172.371346][T10482]  ? nf_flow_table_init+0x287/0x2a0
[  172.371358][T10482]  nf_tables_newflowtable+0x1c4f/0x25b0
[  172.371372][T10482]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  172.371382][T10482]  ? nfnl_pernet+0x23/0x240
[  172.371397][T10482]  ? __nla_parse+0x40/0x60
[  172.371408][T10482]  nfnetlink_rcv+0x1288/0x28c0
[  172.371430][T10482]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  172.371446][T10482]  ? ref_tracker_free+0x689/0x830
[  172.371463][T10482]  ? skb_clone+0x246/0x3a0
[  172.371474][T10482]  ? __netlink_deliver_tap+0x811/0x860
[  172.371488][T10482]  ? netlink_deliver_tap+0x2e/0x1b0
[  172.371497][T10482]  ? netlink_deliver_tap+0x2e/0x1b0
[  172.371509][T10482]  netlink_unicast+0x7bb/0x940
[  172.371523][T10482]  netlink_sendmsg+0x813/0xb40
[  172.371537][T10482]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.371548][T10482]  ? aa_sock_msg_perm+0xf1/0x1b0
[  172.371561][T10482]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.371570][T10482]  sock_sendmsg_nosec+0x13a/0x180
[  172.371580][T10482]  ____sys_sendmsg+0x54e/0x850
[  172.371592][T10482]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.371605][T10482]  ? import_iovec+0x73/0xa0
[  172.371615][T10482]  ___sys_sendmsg+0x2a5/0x360
[  172.371629][T10482]  ? __lock_acquire+0x683/0x2cf0
[  172.371640][T10482]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.371652][T10482]  ? futex_wait+0x2a2/0x390
[  172.371670][T10482]  ? __fget_files+0x2a/0x420
[  172.371681][T10482]  ? __fget_files+0x3a2/0x420
[  172.371694][T10482]  __x64_sys_sendmsg+0x1b1/0x290
[  172.371706][T10482]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  172.371724][T10482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.371732][T10482]  do_syscall_64+0x174/0x580
[  172.371741][T10482]  ? trace_irq_disable+0x3b/0x140
[  172.371752][T10482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.371759][T10482] RIP: 0033:0x7f305199e159
[  172.371767][T10482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.371773][T10482] RSP: 002b:00007f305290f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.371782][T10482] RAX: ffffffffffffffda RBX: 00007f3051c25fa0 RCX: 00007f305199e159
[  172.371787][T10482] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000004
[  172.371792][T10482] RBP: 00007f3051a3506b R08: 0000000000000000 R09: 0000000000000000
[  172.371796][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.371801][T10482] R13: 00007f3051c26038 R14: 00007f3051c25fa0 R15: 00007ffee15b3068
[  172.371812][T10482]  </TASK>
[  172.486361][ T7705] usb 4-1: USB disconnect, device number 14
[  172.524200][T10486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2062'.
[  172.770591][T10497] loop2: detected capacity change from 0 to 256
[  173.015428][T10511] loop3: detected capacity change from 0 to 512
[  173.023272][T10511] FAT-fs (loop3): bogus logical sector size 0
[  173.037564][T10511] FAT-fs (loop3): Can't find a valid FAT filesystem
[  173.397843][T10556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2094'.
[  173.429637][T10560] overlayfs: failed to clone upperpath
[  173.552703][T10572] overlayfs: failed to clone upperpath
[  173.592580][T10562] loop3: detected capacity change from 0 to 32768
[  173.614877][T10562] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  173.627316][T10562] XFS (loop3): Ending clean mount
[  173.663163][ T8359] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  173.999605][T10608] FAULT_INJECTION: forcing a failure.
[  173.999605][T10608] name failslab, interval 1, probability 0, space 0, times 0
[  174.004555][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.3.2111 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  174.004569][T10608] Tainted: [L]=SOFTLOCKUP
[  174.004572][T10608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.004577][T10608] Call Trace:
[  174.004580][T10608]  <TASK>
[  174.004584][T10608]  dump_stack_lvl+0xe8/0x150
[  174.004597][T10608]  should_fail_ex+0x40c/0x560
[  174.004614][T10608]  should_failslab+0xa8/0x100
[  174.004625][T10608]  __kmalloc_noprof+0xfe/0x720
[  174.004634][T10608]  ? trace_kmem_cache_alloc+0x29/0xe0
[  174.004642][T10608]  ? security_sk_alloc+0x52/0x360
[  174.004650][T10608]  ? security_sk_alloc+0x52/0x360
[  174.004659][T10608]  security_sk_alloc+0x52/0x360
[  174.004667][T10608]  sk_prot_alloc+0x101/0x210
[  174.004678][T10608]  sk_alloc+0x3a/0x390
[  174.004689][T10608]  unix_create1+0xb0/0x7c0
[  174.004699][T10608]  unix_create+0x14c/0x1d0
[  174.004708][T10608]  __sock_create+0x4b3/0x9d0
[  174.004720][T10608]  __sys_socketpair+0x239/0x560
[  174.004730][T10608]  __x64_sys_socketpair+0x9b/0xb0
[  174.004738][T10608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.004746][T10608]  do_syscall_64+0x174/0x580
[  174.004756][T10608]  ? trace_irq_disable+0x3b/0x140
[  174.004766][T10608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.004773][T10608] RIP: 0033:0x7f360b19e159
[  174.004781][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.004787][T10608] RSP: 002b:00007f360bfd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  174.004796][T10608] RAX: ffffffffffffffda RBX: 00007f360b425fa0 RCX: 00007f360b19e159
[  174.004801][T10608] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
[  174.004805][T10608] RBP: 00007f360b23506b R08: 0000000000000000 R09: 0000000000000000
[  174.004810][T10608] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000
[  174.004814][T10608] R13: 00007f360b426038 R14: 00007f360b425fa0 R15: 00007ffe0fc89a58
[  174.004850][T10608]  </TASK>
[  174.010843][T10595] jffs2: notice: (10595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  174.297969][T10621] loop3: detected capacity change from 0 to 40427
[  174.303073][T10621] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  174.305918][T10621] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  174.309076][T10621] F2FS-fs (loop3): invalid crc value
[  174.339360][T10621] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.351911][T10621] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  174.354319][T10621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  174.365862][   T34] audit: type=1800 audit(1789986906.089:172): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2116" name="file1" dev="loop3" ino=10 res=0 errno=0
[  174.375386][ T8359] syz-executor: attempt to access beyond end of device
[  174.375386][ T8359] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.387648][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  174.387691][ T8359] Tainted: [L]=SOFTLOCKUP
[  174.387695][ T8359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.387703][ T8359] Call Trace:
[  174.387709][ T8359]  <TASK>
[  174.387715][ T8359]  dump_stack_lvl+0xe8/0x150
[  174.387737][ T8359]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  174.387762][ T8359]  f2fs_write_end_io+0x124b/0x1710
[  174.387792][ T8359]  __submit_merged_bio+0x258/0x6a0
[  174.387804][ T8359]  ? rcu_is_watching+0x15/0xb0
[  174.387855][ T8359]  __submit_merged_write_cond+0x3c9/0x4e0
[  174.387883][ T8359]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  174.387918][ T8359]  f2fs_write_data_pages+0x2a27/0x36f0
[  174.387932][ T8359]  ? is_bpf_text_address+0x26/0x2b0
[  174.387973][ T8359]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.387986][ T8359]  ? is_bpf_text_address+0x26/0x2b0
[  174.388011][ T8359]  ? arch_stack_walk+0xfb/0x150
[  174.388044][ T8359]  ? add_lock_to_list+0xc7/0x100
[  174.388065][ T8359]  ? lockdep_unlock+0x5d/0xd0
[  174.388078][ T8359]  ? __lock_acquire+0x13e8/0x2cf0
[  174.388113][ T8359]  ? do_raw_spin_lock+0x12b/0x2f0
[  174.388135][ T8359]  ? do_raw_spin_unlock+0x4d/0x210
[  174.388149][ T8359]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.388173][ T8359]  do_writepages+0x338/0x560
[  174.388198][ T8359]  ? do_raw_spin_unlock+0x4d/0x210
[  174.388216][ T8359]  filemap_fdatawrite+0x1e9/0x2f0
[  174.388236][ T8359]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  174.388283][ T8359]  ? do_raw_spin_unlock+0x4d/0x210
[  174.388299][ T8359]  f2fs_sync_dirty_inodes+0x30e/0x830
[  174.388325][ T8359]  f2fs_write_checkpoint+0xa3d/0x2710
[  174.388363][ T8359]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  174.388414][ T8359]  kill_f2fs_super+0x2f6/0x700
[  174.388433][ T8359]  ? __pfx_kill_f2fs_super+0x10/0x10
[  174.388456][ T8359]  ? call_rcu+0x64b/0x8b0
[  174.388474][ T8359]  ? lockdep_hardirqs_on+0x7a/0x110
[  174.388497][ T8359]  deactivate_locked_super+0xbc/0x130
[  174.388516][ T8359]  cleanup_mnt+0x3d3/0x460
[  174.388537][ T8359]  task_work_run+0x1d9/0x270
[  174.388557][ T8359]  ? __pfx_task_work_run+0x10/0x10
[  174.388583][ T8359]  exit_to_user_mode_loop+0x1fa/0x730
[  174.388598][ T8359]  ? rcu_is_watching+0x15/0xb0
[  174.388616][ T8359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.388630][ T8359]  do_syscall_64+0x353/0x580
[  174.388644][ T8359]  ? trace_irq_disable+0x3b/0x140
[  174.388663][ T8359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.388675][ T8359] RIP: 0033:0x7f360b19f397
[  174.388688][ T8359] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  174.388698][ T8359] RSP: 002b:00007ffe0fc88cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  174.388712][ T8359] RAX: 0000000000000000 RBX: 00007f360b2344bb RCX: 00007f360b19f397
[  174.388720][ T8359] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0fc88d80
[  174.388728][ T8359] RBP: 00007ffe0fc88d80 R08: 00007ffe0fc89d80 R09: 00000000ffffffff
[  174.388736][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0fc89e10
[  174.388743][ T8359] R13: 00007f360b2344bb R14: 000000000002a8ab R15: 00007ffe0fc89e50
[  174.388764][ T8359]  </TASK>
[  174.388929][ T8359] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  174.712762][T10632] loop3: detected capacity change from 0 to 32768
[  174.729868][T10632] ERROR: (device loop3): diAllocAG: numfree > numinos
[  174.729868][T10632] 
[  174.737673][T10632] ERROR: (device loop3): remounting filesystem as read-only
[  174.740444][T10632] ialloc: diAlloc returned -5!
[  175.003434][T10644] loop2: detected capacity change from 0 to 512
[  175.011075][T10644] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2119: corrupted in-inode xattr: invalid ea_ino
[  175.015277][T10644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  175.015464][T10644] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2119: couldn't read orphan inode 15 (err -117)
[  175.021742][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  175.021755][    C0] EXT4-fs (loop2): initial error at time 1789986906: ext4_iget_extra_inode:5180: inode 15
[  175.021771][    C0] EXT4-fs (loop2): last error at time 1789986906: ext4_iget_extra_inode:5180: inode 15
[  175.032083][T10644] loop2: lost filesystem error report for type 5 error -117
[  175.036487][T10644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.702328][T10652] infiniband syz2: set down
[  175.703977][T10652] infiniband syz2: added ipvlan0
[  175.798379][T10652] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  175.804227][T10652] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  175.809475][T10652] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  175.871757][T10652] RDS/IB: syz2: added
[  175.873996][T10652] smc: adding ib device syz2 with port count 1
[  175.875995][T10652] smc:    ib device syz2 port 1 has no pnetid
[  176.246323][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.382280][T10688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2130'.
[  176.462360][T10695] loop2: detected capacity change from 0 to 2048
[  176.485451][T10695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.494228][T10695] ext4 filesystem being mounted at /615/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.708305][T10729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2141'.
[  176.810268][T10735] jffs2: notice: (10735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  176.944213][T10744] loop3: detected capacity change from 0 to 8192
[  176.952263][T10744] syz.3.2146: attempt to access beyond end of device
[  176.952263][T10744] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  176.959922][T10744] buffer_io_error: 11 callbacks suppressed
[  176.959934][T10744] Buffer I/O error on dev loop3, logical block 57847, async page read
[  176.967196][T10744] syz.3.2146: attempt to access beyond end of device
[  176.967196][T10744] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  176.972894][T10744] Buffer I/O error on dev loop3, logical block 57847, async page read
[  176.975686][   T34] audit: type=1800 audit(1789986908.699:173): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2146" name="file2" dev="loop3" ino=1048680 res=0 errno=0
[  176.991468][T10744] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  176.994686][T10744] FAT-fs (loop3): Filesystem has been set read-only
[  176.999725][T10744] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  177.126021][T10756] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1
[  177.141172][T10756] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted
[  177.257477][   T34] audit: type=1800 audit(1789986908.979:174): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2133" name="file0" dev="loop2" ino=13 res=0 errno=0
[  177.337302][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.393422][T10780] syz_tun: entered allmulticast mode
[  177.396454][T10780] lo: entered allmulticast mode
[  177.399293][T10778] syz_tun: left allmulticast mode
[  177.401017][T10778] lo: left allmulticast mode
[  177.546535][T10787] tipc: Started in network mode
[  177.548211][T10787] tipc: Node identity 4, cluster identity 4711
[  177.550618][T10787] tipc: Node number set to 4
[  177.714121][T10796] bridge2: entered promiscuous mode
[  177.911493][   T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  178.064421][   T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  178.067292][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.069765][   T31] usb 4-1: Product: syz
[  178.071733][   T31] usb 4-1: Manufacturer: syz
[  178.073319][   T31] usb 4-1: SerialNumber: syz
[  178.324106][   T31] rtl8150 4-1:1.0: couldn't reset the device
[  178.328093][   T31] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  178.336067][   T31] usb 4-1: USB disconnect, device number 15
[  178.364337][T10833] overlayfs: missing 'lowerdir'
[  178.481350][T10849] xt_ecn: cannot match TCP bits for non-tcp packets
[  178.681254][ T7705] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  178.834891][ T7705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.844402][ T7705] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  178.853400][ T7705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.856656][ T7705] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  178.870566][ T7705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.876285][ T7705] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  178.885079][ T7705] usb 3-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db
[  178.888131][ T7705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.894735][ T7705] usb 3-1: config 0 descriptor??
[  178.935510][T10887] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2194'.
[  178.947573][T10890] loop3: detected capacity change from 0 to 512
[  178.965627][T10890] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  178.974102][T10890] EXT4-fs (loop3): 1 truncate cleaned up
[  178.979250][T10890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.031608][ T8359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.102698][    T9] usb 3-1: USB disconnect, device number 23
[  179.441380][ T7705] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  179.598780][ T7705] usb 4-1: unable to get BOS descriptor or descriptor too short
[  179.607133][ T7705] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 238, changing to 7
[  179.612770][ T7705] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice= 0.40
[  179.615776][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.618488][ T7705] usb 4-1: Product: syz
[  179.619772][ T7705] usb 4-1: Manufacturer: syz
[  179.621984][ T7705] usb 4-1: SerialNumber: syz
[  179.660361][T10948] loop2: detected capacity change from 0 to 512
[  179.670360][T10948] EXT4-fs (loop2): Test dummy encryption mode enabled
[  179.674098][T10948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  179.678665][T10948] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  179.687279][T10948] EXT4-fs (loop2): 1 truncate cleaned up
[  179.690154][T10948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.699070][T10948] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.2212: invalid fast symlink length 39
[  179.706439][T10948] EXT4-fs (loop2): Remounting filesystem read-only
[  179.727001][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.834498][ T7705] usb 4-1: found format II with max.bitrate = 9, frame size=92
[  179.838837][ T7705] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  179.847212][ T7705] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  179.897707][ T7705] usb 4-1: USB disconnect, device number 16
[  179.921192][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.985134][T10996] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2218'.
[  179.988704][T10996] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2218'.
[  180.024559][T10999] syzkaller1: entered promiscuous mode
[  180.026347][T10999] syzkaller1: entered allmulticast mode
[  180.210888][T11014] xt_hashlimit: size too large, truncated to 1048576
[  180.270934][T11014] xt_hashlimit: size too large, truncated to 1048576
[  180.473554][T11025] loop3: detected capacity change from 0 to 164
[  180.477756][T11025] iso9660: Unknown parameter 'ioSF*L{haro8859-1'
[  181.018529][T11067] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  181.503815][ T5760] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  181.654375][ T5760] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  181.658427][ T5760] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.661533][ T5760] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  181.664415][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.673588][ T5760] hub 3-1:4.0: USB hub found
[  181.900383][ T5760] hub 3-1:4.0: 2 ports detected
[  181.904123][ T5760] usb 3-1: selecting invalid altsetting 1
[  181.909409][ T5760] hub 3-1:4.0: Using single TT (err -22)
[  182.308311][ T5760] usb 3-1: USB disconnect, device number 24
[  182.870854][T11194] xt_hashlimit: size too large, truncated to 1048576
[  183.569598][T11203] loop2: detected capacity change from 0 to 16
[  183.582114][T11203] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  184.209182][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'.
[  184.726374][T11302] loop2: detected capacity change from 0 to 512
[  184.745605][T11302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.749883][T11302] ext4 filesystem being mounted at /656/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.777393][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.629316][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'.
[  185.674322][T11399] bond1: entered promiscuous mode
[  185.676352][T11399] bond1: entered allmulticast mode
[  185.746614][   T55] Bluetooth: min 0 < 6
[  186.041232][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  186.212865][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.216122][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  186.220177][    T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  186.223118][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  186.225679][    T9] usb 3-1: Product: syz
[  186.227115][    T9] usb 3-1: Manufacturer: syz
[  186.230142][    T9] usb 3-1: config 0 descriptor??
[  186.439697][ T7705] usb 3-1: USB disconnect, device number 25
[  186.460081][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2342'.
[  186.541283][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  186.715478][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.719881][    T9] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  186.726750][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  186.730618][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.747886][    T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  186.946179][ T5813] usb 4-1: USB disconnect, device number 17
[  187.075475][T11538] io-wq is not configured for unbound workers
[  187.721565][ T7705] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  187.811293][   T55] Bluetooth: hci0: command tx timeout
[  187.874699][ T7705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.878811][ T7705] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  187.883721][ T7705] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.886771][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.889284][ T7705] usb 4-1: Product: syz
[  187.891058][ T7705] usb 4-1: Manufacturer: syz
[  187.895065][ T7705] usb 4-1: SerialNumber: syz
[  187.901337][ T7705] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  187.903508][ T7705] cdc_ncm 4-1:1.0: bind() failure
[  187.908128][ T7705] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  187.910292][ T7705] cdc_ncm 4-1:1.1: bind() failure
[  188.295097][T11576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.543383][T11582] overlayfs: failed to clone upperpath
[  188.782609][T11591] loop2: detected capacity change from 0 to 128
[  188.795159][T11591] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  188.799187][T11591] ext4 filesystem being mounted at /685/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  188.813378][ T5709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.844922][T11599] binder: 11598:11599 ioctl c0306201 2000000001c0 returned -14
[  189.142869][T11622] loop2: detected capacity change from 0 to 2048
[  189.145829][T11622] udf: Bad value for 'fileset'
[  189.451297][   T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  189.601211][   T31] usb 3-1: Using ep0 maxpacket: 8
[  189.604781][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  189.608088][   T31] usb 3-1: config 10 has an invalid interface number: 91 but max is 0
[  189.611863][   T31] usb 3-1: config 10 has no interface number 0
[  189.614640][   T31] usb 3-1: config 10 interface 91 has no altsetting 0
[  189.618480][   T31] usb 3-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a
[  189.621480][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.623928][   T31] usb 3-1: Product: syz
[  189.625698][   T31] usb 3-1: Manufacturer: syz
[  189.627127][   T31] usb 3-1: SerialNumber: syz
[  189.842754][   T31] uvcvideo 3-1:10.91: probe with driver uvcvideo failed with error -22
[  189.848303][   T31] usb 3-1: USB disconnect, device number 26
[  190.430006][T11675] loop2: detected capacity change from 0 to 2048
[  190.443292][T11675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.452114][T11675] ext4 filesystem being mounted at /697/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.498842][    T9] usb 4-1: USB disconnect, device number 18
[  190.536361][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.547280][T11693] netlink: 'syz.3.2408': attribute type 8 has an invalid length.
[  190.787945][T11716] loop3: detected capacity change from 0 to 8
[  191.006471][T11716] SQUASHFS error: xz decompression failed, data probably corrupt
[  191.009202][T11716] SQUASHFS error: Failed to read block 0x108: -5
[  191.012069][T11716] SQUASHFS error: Unable to read metadata cache entry [106]
[  191.015023][T11716] SQUASHFS error: Unable to read inode 0x11f
[  191.127382][T11729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2417'.
[  191.617089][T11716] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  191.623625][T11716] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  191.634501][T11716] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  191.637851][T11716] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  191.637973][T11767] loop2: detected capacity change from 0 to 2048
[  191.641219][T11716] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  191.645061][T11716] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  191.681078][T11767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  191.718378][T11767] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.2432: inline data xattr refers to an external xattr inode
[  191.728925][T11767] EXT4-fs (loop2): Remounting filesystem read-only
[  191.760938][ T5709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  191.810313][T11790] loop2: detected capacity change from 0 to 1024
[  191.825424][T11790] EXT4-fs: Ignoring removed orlov option
[  191.845992][T11790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.857024][T11790] EXT4-fs error (device loop2): __ext4_new_inode:1287: comm syz.2.2436: failed to insert inode 12: doubly allocated?
[  191.883717][T11790] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  191.888320][T11790] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  191.907507][ T5709] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  191.928656][ T5709] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  191.943348][ T5709] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  191.950440][ T5709] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  191.964534][ T5709] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  191.968237][ T5709] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  191.972625][ T5709] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  191.975783][ T5709] EXT4-fs error (device loop2): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 14 (inode size 256)
[  191.982776][ T5709] EXT4-fs error (device loop2): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 14 (inode size 256)
[  192.024455][ T7862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.391425][ T5706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  192.398330][ T5706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  192.403069][ T5706] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  192.405971][ T5706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  192.408567][ T5706] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  192.609949][   T34] audit: type=1326 audit(1789986924.329:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.3.2435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360b19e159 code=0x7fc00000
[  192.845658][T11808] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.847946][T11808] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.850195][T11808] bridge_slave_0: entered allmulticast mode
[  192.857257][ T3416] wlan1: Trigger new scan to find an IBSS to join
[  192.860671][T11808] bridge_slave_0: entered promiscuous mode
[  192.864189][T11808] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.866440][T11808] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.868693][T11808] bridge_slave_1: entered allmulticast mode
[  192.871295][ T7705] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  192.874144][T11808] bridge_slave_1: entered promiscuous mode
[  192.894298][T11808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.898446][T11808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.916960][T11808] team0: Port device team_slave_0 added
[  192.919903][T11808] team0: Port device team_slave_1 added
[  192.938561][T11808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.940685][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.948854][T11808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.954835][T11808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.956940][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.964992][T11808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.002381][T11808] hsr_slave_0: entered promiscuous mode
[  193.004908][T11808] hsr_slave_1: entered promiscuous mode
[  193.006943][T11808] debugfs: 'hsr0' already exists in 'hsr'
[  193.008666][T11808] Cannot create hsr debugfs directory
[  193.023842][ T7705] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  193.031924][ T7705] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.039181][ T7705] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  193.048118][ T7705] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  193.054844][ T7705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.064626][T11827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  193.218194][T11808] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  193.224620][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  193.227398][T11808] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  193.232446][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  193.235761][T11808] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  193.242208][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  193.244917][T11808] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  193.249458][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  193.283079][T11808] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.285904][T11808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.288673][T11808] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.290996][T11808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.293779][   T34] audit: type=1800 audit(1789986925.009:176): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2444" name="file1" dev="tmpfs" ino=4873 res=0 errno=0
[  193.359970][T11808] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.373121][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.376352][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.387696][T11808] 8021q: adding VLAN 0 to HW filter on device team0
[  193.393352][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.395679][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.403482][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.405687][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.586885][T11808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.651809][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  193.695305][T11808] veth0_vlan: entered promiscuous mode
[  193.700871][T11808] veth1_vlan: entered promiscuous mode
[  193.723189][T11808] veth0_macvtap: entered promiscuous mode
[  193.727754][T11808] veth1_macvtap: entered promiscuous mode
[  193.739129][T11808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.747051][T11808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.756242][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.759183][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.771937][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.776357][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.883824][ T8008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.886295][ T8008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.905590][T12124] xt_hashlimit: size too large, truncated to 1048576
[  193.924833][ T8008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.927498][ T8008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.990290][   T34] audit: type=1326 audit(1789986925.709:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.4.2447" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f4359e159 code=0x0
[  194.041796][   T55] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  194.295763][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  194.298799][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  194.451339][   T55] Bluetooth: hci2: command tx timeout
[  195.731408][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  195.746612][ T7705] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  195.753246][ T7705] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input23
[  195.789655][ T7705] usb 4-1: USB disconnect, device number 19
[  195.789782][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  195.891528][   T89] wlan1: Trigger new scan to find an IBSS to join
[  196.601246][   T55] Bluetooth: hci2: command tx timeout
[  196.610092][T12259] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2491'.
[  196.619257][T12256] loop3: detected capacity change from 0 to 32768
[  196.624104][T12256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2490 (12256)
[  196.632455][T12256] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.635840][T12256] BTRFS info (device loop3): using sha256 checksum algorithm
[  196.719188][T12256] BTRFS info (device loop3): enabling ssd optimizations
[  196.721695][T12256] BTRFS info (device loop3): turning on sync discard
[  196.723784][T12256] BTRFS info (device loop3): enabling free space tree
[  196.725849][T12256] BTRFS info (device loop3): use zlib compression, level 3
[  196.746996][   T34] audit: type=1800 audit(1789986928.469:178): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2490" name="file1" dev="loop3" ino=260 res=0 errno=0
[  196.783133][T12284] loop4: detected capacity change from 0 to 1024
[  196.860785][ T8359] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.604301][ T5814] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  197.615485][T12337] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  197.763105][ T5814] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  197.767493][ T5814] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  197.773114][ T5814] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.778668][ T5814] usb 5-1: config 0 interface 0 has no altsetting 0
[  197.780817][ T5814] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  197.784016][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.789223][ T5814] usb 5-1: config 0 descriptor??
[  197.798273][T12323] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  197.804337][T12354] xt_CT: No such helper "pptp"
[  197.821393][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  198.131240][ T7705] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  198.215524][ T5814] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0
[  198.221568][ T5814] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0
[  198.231205][ T5814] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0
[  198.233334][ T5814] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0
[  198.235379][ T5814] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0
[  198.237431][ T5814] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0
[  198.239491][ T5814] lua 0003:1E7D:2C2E.000A: unknown global tag 0xe
[  198.241676][ T5814] lua 0003:1E7D:2C2E.000A: item 0 0 1 14 parsing failed
[  198.244107][ T5814] lua 0003:1E7D:2C2E.000A: parse failed
[  198.245843][ T5814] lua 0003:1E7D:2C2E.000A: probe with driver lua failed with error -22
[  198.283112][ T7705] usb 4-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config
[  198.297392][ T7705] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  198.302515][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.306854][ T7705] usb 4-1: Product: syz
[  198.309837][ T7705] usb 4-1: Manufacturer: syz
[  198.313485][ T7705] usb 4-1: SerialNumber: syz
[  198.324144][ T7705] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  198.422742][   T31] usb 5-1: USB disconnect, device number 2
[  198.522054][ T7705] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  198.524409][ T7705] usb 4-1: 2:1 : unsupported format bits 0x2020000
[  198.550948][ T7705] usb 4-1: USB disconnect, device number 20
[  198.611246][   T55] Bluetooth: hci2: command tx timeout
[  198.941888][   T53] wlan1: Trigger new scan to find an IBSS to join
[  199.016343][T12434] loop4: detected capacity change from 0 to 4096
[  199.024958][T12434] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  199.043339][T12434] ntfs3(loop4): Failed to load $Extend (-22).
[  199.050942][T12434] ntfs3(loop4): Failed to initialize $Extend.
[  199.325735][T12465] loop3: detected capacity change from 0 to 512
[  199.329723][T12465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.345065][T12465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.349400][T12465] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  199.363680][T12465] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.2543: lblock 23 mapped to illegal pblock 18 (length 1)
[  199.378498][ T8359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.461301][ T5760] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  199.611571][ T5760] usb 5-1: Using ep0 maxpacket: 32
[  199.614762][ T5760] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  199.617424][ T5760] usb 5-1: config 0 has no interface number 0
[  199.619549][ T5760] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  199.623157][ T5760] usb 5-1: config 0 interface 1 has no altsetting 0
[  199.627846][ T5760] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  199.630787][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.633629][ T5760] usb 5-1: Product: syz
[  199.635069][ T5760] usb 5-1: Manufacturer: syz
[  199.636649][ T5760] usb 5-1: SerialNumber: syz
[  199.640291][ T5760] usb 5-1: config 0 descriptor??
[  199.833173][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.845608][T12456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.851221][T12456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.858560][ T5760] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  199.865410][ T5760] cx231xx 5-1:0.1: Failed to read PCB config
[  199.867496][ T5760] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71
[  199.873094][ T5760] usb 5-1: USB disconnect, device number 3
[  200.197630][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'.
[  200.384822][T12517] loop4: detected capacity change from 0 to 1764
[  200.535758][T12523] loop4: detected capacity change from 0 to 40427
[  200.539640][T12523] F2FS-fs (loop4): Small segment_count (20 < 1 * 24)
[  200.542645][T12523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  200.545900][T12523] F2FS-fs (loop4): build fault injection rate: 16
[  200.549038][T12523] F2FS-fs (loop4): build fault injection type: 0xed31
[  200.552883][T12523] F2FS-fs (loop4): invalid crc value
[  200.556407][T12523] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30d2/0x4a30
[  200.559551][T12523] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12)
[  200.693131][   T55] Bluetooth: hci2: command tx timeout
[  200.844053][T12554] device-mapper: ioctl: name not supplied when creating device
[  200.887740][T12559] FAULT_INJECTION: forcing a failure.
[  200.887740][T12559] name failslab, interval 1, probability 0, space 0, times 0
[  200.897316][T12559] CPU: 1 UID: 0 PID: 12559 Comm: syz.4.2571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  200.897337][T12559] Tainted: [L]=SOFTLOCKUP
[  200.897342][T12559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.897354][T12559] Call Trace:
[  200.897360][T12559]  <TASK>
[  200.897365][T12559]  dump_stack_lvl+0xe8/0x150
[  200.897388][T12559]  should_fail_ex+0x40c/0x560
[  200.897411][T12559]  should_failslab+0xa8/0x100
[  200.897430][T12559]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  200.897445][T12559]  ? jffs2_prealloc_raw_node_refs+0xf8/0x800
[  200.897463][T12559]  ? jffs2_prealloc_raw_node_refs+0xf8/0x800
[  200.897484][T12559]  jffs2_prealloc_raw_node_refs+0xf8/0x800
[  200.897506][T12559]  jffs2_scan_medium+0x1736/0x70c0
[  200.897570][T12559]  ? __pfx_jffs2_scan_medium+0x10/0x10
[  200.897605][T12559]  ? rcu_is_watching+0x15/0xb0
[  200.897624][T12559]  ? trace_kmalloc+0x2a/0xf0
[  200.897642][T12559]  ? __kmalloc_noprof+0x1ad/0x720
[  200.897656][T12559]  ? jffs2_sum_init+0xb7/0x220
[  200.897698][T12559]  ? jffs2_sum_init+0xb7/0x220
[  200.897740][T12559]  ? jffs2_sum_init+0x112/0x220
[  200.897761][T12559]  jffs2_do_mount_fs+0x775/0x22c0
[  200.897778][T12559]  ? __raw_spin_lock_init+0x45/0x100
[  200.897799][T12559]  jffs2_do_fill_super+0x555/0xc50
[  200.897815][T12559]  ? __pfx_jffs2_fill_super+0x10/0x10
[  200.897824][T12559]  mtd_get_sb+0x18a/0x410
[  200.897834][T12559]  ? __pfx_jffs2_fill_super+0x10/0x10
[  200.897845][T12559]  ? __pfx_jffs2_fill_super+0x10/0x10
[  200.897855][T12559]  get_tree_mtd+0x597/0x7d0
[  200.897866][T12559]  ? __pfx_jffs2_fill_super+0x10/0x10
[  200.897876][T12559]  ? __pfx_get_tree_mtd+0x10/0x10
[  200.897891][T12559]  vfs_get_tree+0x92/0x2a0
[  200.897907][T12559]  do_new_mount+0x319/0xdc0
[  200.897921][T12559]  ? __pfx_do_new_mount+0x10/0x10
[  200.897934][T12559]  ? ns_capable+0x89/0xe0
[  200.897945][T12559]  ? path_mount+0x647/0x1040
[  200.897958][T12559]  ? user_path_at+0xd4/0x160
[  200.897971][T12559]  __se_sys_mount+0x31d/0x420
[  200.897986][T12559]  ? __pfx___se_sys_mount+0x10/0x10
[  200.898000][T12559]  ? __x64_sys_mount+0x20/0xc0
[  200.898010][T12559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.898020][T12559]  do_syscall_64+0x174/0x580
[  200.898031][T12559]  ? trace_irq_disable+0x3b/0x140
[  200.898046][T12559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.898063][T12559] RIP: 0033:0x7f6f4359e159
[  200.898073][T12559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.898081][T12559] RSP: 002b:00007f6f444e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  200.898093][T12559] RAX: ffffffffffffffda RBX: 00007f6f43825fa0 RCX: 00007f6f4359e159
[  200.898100][T12559] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200
[  200.898106][T12559] RBP: 00007f6f4363506b R08: 0000000000000000 R09: 0000000000000000
[  200.898113][T12559] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[  200.898120][T12559] R13: 00007f6f43826038 R14: 00007f6f43825fa0 R15: 00007ffc38b064c8
[  200.898140][T12559]  </TASK>
[  201.003775][    C1] hpet: Lost 6 RTC interrupts
[  201.048305][T12564] loop4: detected capacity change from 0 to 4096
[  201.053134][T12564] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  201.065485][T12564] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  201.067507][T12564] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  201.074176][   T69] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  201.078517][T12564] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  201.080705][T12564] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  201.085617][T12564] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  201.088582][   T69] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  201.438127][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2577'.
[  201.441834][T12581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2577'.
[  201.449760][T12581] geneve2: entered promiscuous mode
[  201.456503][T12581] geneve2: entered allmulticast mode
[  201.528452][T12589] loop4: detected capacity change from 0 to 512
[  201.539499][T12589] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2579: iget: bad extended attribute block 134217728
[  201.544443][T12589] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  201.544639][T12589] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2579: couldn't read orphan inode 15 (err -117)
[  201.551691][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  201.551705][    C1] EXT4-fs (loop4): initial error at time 1789986933: ext4_orphan_get:1399: inode 15
[  201.551723][    C1] EXT4-fs (loop4): last error at time 1789986933: ext4_orphan_get:1399: inode 15
[  201.560324][T12589] loop4: lost filesystem error report for type 5 error -117
[  201.565756][T12589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.584207][   T34] audit: type=1800 audit(1789986933.309:179): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2579" name="file0" dev="loop4" ino=13 res=0 errno=0
[  201.608721][T11808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.752491][T12599] loop4: detected capacity change from 0 to 1024
[  201.756370][T12599] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.759079][T12599] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.777784][T12599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.782465][T12599] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.212236][   T34] audit: type=1326 audit(1789986933.939:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.230218][   T34] audit: type=1326 audit(1789986933.939:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.247549][   T34] audit: type=1326 audit(1789986933.939:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.258223][   T34] audit: type=1326 audit(1789986933.939:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.277686][   T34] audit: type=1326 audit(1789986933.939:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.295049][   T34] audit: type=1326 audit(1789986933.949:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.306169][T11808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  202.309957][   T34] audit: type=1326 audit(1789986933.979:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.334167][   T34] audit: type=1326 audit(1789986933.979:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.1.2585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  202.449808][T12626] xt_connbytes: Forcing CT accounting to be enabled
[  202.455282][T12626] set match dimension is over the limit!
[  202.839060][T12672] loop4: detected capacity change from 0 to 1024
[  202.869414][T12672] hfsplus: xattr exists yet
[  202.937209][T12683] loop4: detected capacity change from 0 to 512
[  202.940734][T12683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  202.956465][T12683] EXT4-fs (loop4): 1 truncate cleaned up
[  202.959013][T12683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.727210][T12713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2616'.
[  203.823741][T11808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.242282][   T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  204.391234][   T31] usb 5-1: Using ep0 maxpacket: 16
[  204.396249][   T31] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  204.399179][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.401937][   T31] usb 5-1: Product: syz
[  204.403368][   T31] usb 5-1: Manufacturer: syz
[  204.405036][   T31] usb 5-1: SerialNumber: syz
[  204.408685][   T31] usb 5-1: config 0 descriptor??
[  204.618520][   T31] speedtch 5-1:0.0: speedtch_bind: wrong device class 10
[  204.622827][   T31] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  204.627299][   T31] usb 5-1: USB disconnect, device number 4
[  204.842277][T12785] loop3: detected capacity change from 0 to 32768
[  204.854132][T12785] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  204.861402][T12785] JBD2: Ignoring recovery information on journal
[  204.898176][T12785] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  205.025587][ T8359] ocfs2: Unmounting device (7,3) on (node local)
[  205.293647][T12809] overlayfs: failed to clone upperpath
[  205.315789][T12811] loop3: detected capacity change from 0 to 256
[  205.323556][T12811] exfat: Deprecated parameter 'namecase'
[  205.341798][T12811] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  205.400131][T12820] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2649'.
[  205.466046][T12825] loop3: detected capacity change from 0 to 4096
[  205.499930][T12825] ntfs3(loop3): Failed to load $Extend (-22).
[  205.506629][T12825] ntfs3(loop3): Failed to initialize $Extend.
[  205.627884][T12848] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2658'.
[  205.635680][T12848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2658'.
[  206.644019][T12895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.528751][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'.
[  207.892308][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  207.910302][T12962] ip_tables: iptables: counters copy to user failed while replacing table
[  208.041243][    T9] usb 4-1: Using ep0 maxpacket: 32
[  208.043780][    T9] usb 4-1: too many configurations: 218, using maximum allowed: 8
[  208.047965][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.053000][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.057999][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.063268][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.068503][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.082139][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.088782][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.094394][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  208.100111][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  208.105563][    T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  208.110394][    T9] usb 4-1: Product: syz
[  208.112703][    T9] usb 4-1: Manufacturer: syz
[  208.127110][    T9] hub 4-1:4.0: Invalid hub with more than one config or interface
[  208.132138][    T9] hub 4-1:4.0: probe with driver hub failed with error -22
[  208.323875][ T5760] usb 4-1: USB disconnect, device number 21
[  208.487598][T13004] loop4: detected capacity change from 0 to 128
[  208.498505][T13004] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  208.505076][T13004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.519799][   T34] kauditd_printk_skb: 2 callbacks suppressed
[  208.519808][   T34] audit: type=1800 audit(1789986940.239:190): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2710" name="file2" dev="loop4" ino=95 res=0 errno=0
[  208.773117][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'.
[  208.776288][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'.
[  208.978737][T13060] loop3: detected capacity change from 0 to 8
[  208.980189][T13059] overlayfs: failed to clone upperpath
[  209.245865][T13096] syz.3.2743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  209.252248][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz.3.2743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  209.252261][T13096] Tainted: [L]=SOFTLOCKUP
[  209.252264][T13096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.252269][T13096] Call Trace:
[  209.252272][T13096]  <TASK>
[  209.252276][T13096]  dump_stack_lvl+0xe8/0x150
[  209.252290][T13096]  warn_alloc+0x24c/0x270
[  209.252300][T13096]  ? stack_depot_save_flags+0x33/0x800
[  209.252310][T13096]  ? __pfx_warn_alloc+0x10/0x10
[  209.252320][T13096]  ? kasan_save_track+0x3e/0x80
[  209.252329][T13096]  ? __kasan_kmalloc+0x93/0xb0
[  209.252338][T13096]  ? xsk_setsockopt+0x52a/0x960
[  209.252344][T13096]  ? do_sock_setsockopt+0x17c/0x1b0
[  209.252354][T13096]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  209.252363][T13096]  ? do_syscall_64+0x174/0x580
[  209.252372][T13096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.252382][T13096]  __vmalloc_node_range_noprof+0x12c/0x1730
[  209.252401][T13096]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  209.252411][T13096]  ? __kasan_kmalloc+0x93/0xb0
[  209.252421][T13096]  ? __kmalloc_cache_noprof+0x32d/0x660
[  209.252431][T13096]  ? __kmalloc_cache_noprof+0x150/0x660
[  209.252441][T13096]  vmalloc_user_noprof+0xad/0xe0
[  209.252450][T13096]  ? xskq_create+0xbf/0x170
[  209.252458][T13096]  xskq_create+0xbf/0x170
[  209.252467][T13096]  xsk_init_queue+0x8a/0xe0
[  209.252475][T13096]  xsk_setsockopt+0x52a/0x960
[  209.252481][T13096]  ? __fget_files+0x2a/0x420
[  209.252491][T13096]  ? __pfx_xsk_setsockopt+0x10/0x10
[  209.252498][T13096]  ? __pfx_aa_sk_perm+0x10/0x10
[  209.252509][T13096]  ? aa_sock_opt_perm+0xff/0x1a0
[  209.252520][T13096]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  209.252527][T13096]  ? __pfx_xsk_setsockopt+0x10/0x10
[  209.252535][T13096]  do_sock_setsockopt+0x17c/0x1b0
[  209.252546][T13096]  __x64_sys_setsockopt+0x13d/0x1b0
[  209.252556][T13096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.252564][T13096]  do_syscall_64+0x174/0x580
[  209.252571][T13096]  ? trace_irq_disable+0x3b/0x140
[  209.252582][T13096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.252589][T13096] RIP: 0033:0x7f360b19e159
[  209.252597][T13096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.252603][T13096] RSP: 002b:00007f360bfb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  209.252611][T13096] RAX: ffffffffffffffda RBX: 00007f360b426090 RCX: 00007f360b19e159
[  209.252617][T13096] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  209.252621][T13096] RBP: 00007f360b23506b R08: 0000000000000004 R09: 0000000000000000
[  209.252626][T13096] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.252654][T13096] R13: 00007f360b426128 R14: 00007f360b426090 R15: 00007ffe0fc89a58
[  209.252666][T13096]  </TASK>
[  209.252670][T13096] Mem-Info:
[  209.345212][T13096] active_anon:6810 inactive_anon:1 isolated_anon:0
[  209.345212][T13096]  active_file:4 inactive_file:57904 isolated_file:0
[  209.345212][T13096]  unevictable:1000 dirty:597 writeback:0
[  209.345212][T13096]  slab_reclaimable:10971 slab_unreclaimable:87625
[  209.345212][T13096]  mapped:19328 shmem:1863 pagetables:1364
[  209.345212][T13096]  sec_pagetables:0 bounce:0
[  209.345212][T13096]  kernel_misc_reclaimable:0
[  209.345212][T13096]  free:1108901 free_pcp:24485 free_cma:0
[  209.360740][T13096] Node 0 active_anon:14044kB inactive_anon:4kB active_file:0kB inactive_file:183992kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:47368kB dirty:796kB writeback:0kB shmem:4324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9856kB pagetables:3392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  209.372374][T13096] Node 1 active_anon:13196kB inactive_anon:0kB active_file:16kB inactive_file:47624kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:29944kB dirty:1592kB writeback:0kB shmem:3128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3244kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  209.396842][T13096] Node 0 DMA free:15328kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB
[  209.416725][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  209.417515][T13096] lowmem_reserve[]:
[  209.419730][ T5706] Bluetooth: hci0: command 0x0c1a tx timeout
[  209.422995][T13096]  0 1583 2113 2113 2113
[  209.426517][T13096] Node 0 DMA32 free:1384368kB boost:0kB min:24976kB low:31220kB high:37464kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10716kB inactive_anon:4kB active_file:0kB inactive_file:55064kB unevictable:0kB writepending:300kB zspages:0kB present:2080636kB managed:1621436kB mlocked:0kB bounce:0kB free_pcp:25320kB local_pcp:64kB free_cma:0kB
[  209.466409][T13096] lowmem_reserve[]: 0 0 530 530 530
[  209.470334][T13096] Node 0 Normal free:10756kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5916kB inactive_anon:0kB active_file:0kB inactive_file:128928kB unevictable:2000kB writepending:496kB zspages:0kB present:1572868kB managed:542748kB mlocked:0kB bounce:0kB free_pcp:3568kB local_pcp:224kB free_cma:0kB
[  209.492709][T13096] lowmem_reserve[]: 0 0 0 0 0
[  209.499249][T13096] Node 1 Normal free:3025152kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13096kB inactive_anon:0kB active_file:16kB inactive_file:47624kB unevictable:2000kB writepending:1592kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:67660kB local_pcp:37560kB free_cma:0kB
[  209.548659][T13096] lowmem_reserve[]: 0 0 0 0 0
[  209.552146][T13096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  209.581575][T13096] Node 0 DMA32: 26*4kB (UM) 58*8kB (UME) 84*16kB (UME) 92*32kB (UME) 26*64kB (UE) 85*128kB (UME) 62*256kB (UME) 27*512kB (UM) 10*1024kB (ME) 8*2048kB (UME) 320*4096kB (UM) = 1384440kB
[  209.605511][T13096] Node 0 Normal: 787*4kB (U) 404*8kB (U) 142*16kB (U) 14*32kB (U) 5*64kB (U) 12*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11212kB
[  209.610080][T13105] netlink: 'syz.4.2747': attribute type 1 has an invalid length.
[  209.626286][T13096] Node 1 Normal: 1382*4kB (UME) 1208*8kB (UME) 397*16kB (UME) 33*32kB (UME) 52*64kB (UME) 52*128kB (UME) 24*256kB (UME) 6*512kB (UME) 1*1024kB (E) 4*2048kB (UM) 726*4096kB (UM) = 3024712kB
[  209.652744][T13096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.661577][T13096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.670322][T13096] 59769 total pagecache pages
[  209.676210][T13105] bond1: (slave gretap1): making interface the new active one
[  209.676269][T13096] 0 pages in swap cache
[  209.680042][T13105] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  209.701574][T13096] Free swap  = 124996kB
[  209.703403][T13096] Total swap = 124996kB
[  209.704749][T13096] 1834877 pages RAM
[  209.718101][T13096] 0 pages HighMem/MovableOnly
[  209.725030][T13096] 391320 pages reserved
[  209.732242][T13096] 0 pages cma reserved
[  210.102848][ T5760] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  210.116200][T13177] loop3: detected capacity change from 0 to 256
[  210.251263][ T5760] usb 5-1: Using ep0 maxpacket: 16
[  210.254850][ T5760] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.258107][ T5760] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  210.262802][ T5760] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  210.269784][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.272415][ T5760] usb 5-1: Product: syz
[  210.273867][ T5760] usb 5-1: Manufacturer: syz
[  210.275340][ T5760] usb 5-1: SerialNumber: syz
[  210.340126][   T34] audit: type=1326 audit(1789986942.059:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.1.2762" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x0
[  210.381228][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  210.543675][    T9] usb 4-1: Using ep0 maxpacket: 16
[  210.549547][    T9] usb 4-1: config 127 has an invalid interface number: 124 but max is 0
[  210.554154][    T9] usb 4-1: config 127 has no interface number 0
[  210.557104][    T9] usb 4-1: config 127 interface 124 has no altsetting 0
[  210.563009][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  210.566757][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.570064][    T9] usb 4-1: Product: syz
[  210.574001][    T9] usb 4-1: Manufacturer: syz
[  210.576325][    T9] usb 4-1: SerialNumber: syz
[  210.698804][ T5760] usb 5-1: USB disconnect, device number 5
[  211.442129][    T9] usb 4-1: reset high-speed USB device number 22 using dummy_hcd
[  211.608022][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  211.611590][    T9] usb 4-1: device firmware changed
[  211.699876][T13251] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions
[  211.704098][T13251] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address
[  211.710267][T13251] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22
[  211.715523][T13251] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01
[  211.746912][    T9] usb 4-1: USB disconnect, device number 22
[  213.068227][T13327] kAFS: unable to lookup cell ''
[  213.068893][T13327] kAFS: unable to lookup cell '(,c'
[  213.222022][T13339] FAULT_INJECTION: forcing a failure.
[  213.222022][T13339] name failslab, interval 1, probability 0, space 0, times 0
[  213.227427][T13339] CPU: 0 UID: 0 PID: 13339 Comm: syz.3.2803 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.227441][T13339] Tainted: [L]=SOFTLOCKUP
[  213.227444][T13339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.227449][T13339] Call Trace:
[  213.227453][T13339]  <TASK>
[  213.227463][T13339]  dump_stack_lvl+0xe8/0x150
[  213.227477][T13339]  should_fail_ex+0x40c/0x560
[  213.227492][T13339]  should_failslab+0xa8/0x100
[  213.227503][T13339]  ? __pfx_ip6_dst_gc+0x10/0x10
[  213.227512][T13339]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  213.227521][T13339]  ? dst_alloc+0x105/0x170
[  213.227528][T13339]  ? dst_alloc+0x105/0x170
[  213.227535][T13339]  ? __pfx_ip6_dst_gc+0x10/0x10
[  213.227544][T13339]  dst_alloc+0x105/0x170
[  213.227552][T13339]  ip6_rt_cache_alloc+0x3ae/0xa10
[  213.227563][T13339]  ? rt6_do_redirect+0x92a/0x10d0
[  213.227573][T13339]  ? __pfx_ip6_rt_cache_alloc+0x10/0x10
[  213.227586][T13339]  rt6_do_redirect+0xc2a/0x10d0
[  213.227600][T13339]  ? __pfx_rt6_do_redirect+0x10/0x10
[  213.227636][T13339]  ? l3mdev_update_flow+0x26/0x610
[  213.227652][T13339]  ? trace_fib6_table_lookup+0x87/0x1f0
[  213.227662][T13339]  ? make_kuid+0x1e5/0x670
[  213.227669][T13339]  ? __pfx___ip6_route_redirect+0x10/0x10
[  213.227681][T13339]  ? __pfx_make_kuid+0x10/0x10
[  213.227689][T13339]  ? ip6_redirect_no_header+0x25c/0x370
[  213.227702][T13339]  ip6_redirect_no_header+0x2a9/0x370
[  213.227715][T13339]  ? __pfx_ip6_redirect_no_header+0x10/0x10
[  213.227729][T13339]  ? ndisc_parse_options+0x80a/0x830
[  213.227738][T13339]  ? ip6_pol_route+0x10f2/0x14d0
[  213.227750][T13339]  ndisc_redirect_rcv+0x52d/0x950
[  213.227761][T13339]  ? __pfx_ndisc_redirect_rcv+0x10/0x10
[  213.227778][T13339]  ? ndisc_rcv+0x474/0x8e0
[  213.227787][T13339]  icmpv6_rcv+0x14d4/0x1f40
[  213.227799][T13339]  ? __pfx_icmpv6_rcv+0x10/0x10
[  213.227807][T13339]  ip6_protocol_deliver_rcu+0xe8c/0x1680
[  213.227825][T13339]  ip6_input_finish+0x191/0x370
[  213.227834][T13339]  NF_HOOK+0x336/0x3c0
[  213.227842][T13339]  ? __pfx_ip6_input_finish+0x10/0x10
[  213.227850][T13339]  ? NF_HOOK+0x9e/0x3c0
[  213.227857][T13339]  ? __pfx_NF_HOOK+0x10/0x10
[  213.227865][T13339]  ? __pfx_ip6_input_finish+0x10/0x10
[  213.227873][T13339]  ? ipv6_chk_mcast_addr+0x2e/0x860
[  213.227885][T13339]  ip6_input+0x16a/0x270
[  213.227892][T13339]  ? ip6_input+0x23/0x270
[  213.227900][T13339]  ip6_mc_input+0x64d/0xbc0
[  213.227907][T13339]  ? lock_acquire+0x106/0x350
[  213.227918][T13339]  ? __pfx_ip6_mc_input+0x10/0x10
[  213.227927][T13339]  ? ip6_rcv_finish+0x265/0x280
[  213.227934][T13339]  NF_HOOK+0x336/0x3c0
[  213.227941][T13339]  ? __pfx_sock_wfree+0x10/0x10
[  213.227951][T13339]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  213.227957][T13339]  ? NF_HOOK+0x9e/0x3c0
[  213.227964][T13339]  ? __pfx_NF_HOOK+0x10/0x10
[  213.227969][T13339]  ? ip6_rcv_core+0xa1/0x1870
[  213.227977][T13339]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  213.227986][T13339]  ? netif_receive_skb+0x102/0xbf0
[  213.227994][T13339]  netif_receive_skb+0x278/0xbf0
[  213.228004][T13339]  ? __pfx_netif_receive_skb+0x10/0x10
[  213.228012][T13339]  ? rcu_is_watching+0x15/0xb0
[  213.228022][T13339]  ? tun_rx_batched+0x185/0x790
[  213.228032][T13339]  tun_rx_batched+0x1de/0x790
[  213.228042][T13339]  ? __pfx_tun_rx_batched+0x10/0x10
[  213.228051][T13339]  ? tun_get_user+0x2717/0x4370
[  213.228059][T13339]  ? tun_get_user+0x2717/0x4370
[  213.228067][T13339]  ? tun_get_user+0x23cb/0x4370
[  213.228075][T13339]  ? tun_get_user+0x23cb/0x4370
[  213.228083][T13339]  ? __local_bh_enable_ip+0xd0/0x130
[  213.228091][T13339]  ? tun_get_user+0x2717/0x4370
[  213.228099][T13339]  ? tun_get_user+0x2717/0x4370
[  213.228106][T13339]  tun_get_user+0x2b44/0x4370
[  213.228122][T13339]  ? aa_file_perm+0x4ed/0x15f0
[  213.228132][T13339]  ? __pfx_tun_get_user+0x10/0x10
[  213.228141][T13339]  ? __lock_acquire+0x683/0x2cf0
[  213.228155][T13339]  ? ref_tracker_alloc+0x341/0x4b0
[  213.228164][T13339]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  213.228172][T13339]  ? tun_get+0x1c/0x2f0
[  213.228180][T13339]  ? tun_get+0x1c/0x2f0
[  213.228189][T13339]  ? tun_get+0x1c/0x2f0
[  213.228197][T13339]  ? tun_get+0x1c/0x2f0
[  213.228206][T13339]  tun_chr_write_iter+0x113/0x200
[  213.228215][T13339]  vfs_write+0x612/0xba0
[  213.228228][T13339]  ? __pfx_vfs_write+0x10/0x10
[  213.228242][T13339]  ? __fget_files+0x2a/0x420
[  213.228254][T13339]  ksys_write+0x150/0x270
[  213.228265][T13339]  ? __pfx_ksys_write+0x10/0x10
[  213.228278][T13339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.228286][T13339]  do_syscall_64+0x174/0x580
[  213.228294][T13339]  ? trace_irq_disable+0x3b/0x140
[  213.228304][T13339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.228311][T13339] RIP: 0033:0x7f360b15e98e
[  213.228319][T13339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  213.228326][T13339] RSP: 002b:00007f360bfd2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  213.228335][T13339] RAX: ffffffffffffffda RBX: 00007f360bfd36c0 RCX: 00007f360b15e98e
[  213.228340][T13339] RDX: 000000000000005e RSI: 0000200000001340 RDI: 00000000000000c8
[  213.228345][T13339] RBP: 00007f360b23506b R08: 0000000000000000 R09: 0000000000000000
[  213.228349][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.228353][T13339] R13: 00007f360b426038 R14: 00007f360b425fa0 R15: 00007ffe0fc89a58
[  213.228364][T13339]  </TASK>
[  213.505065][T13353] devpts: Bad value for 'max'
[  213.653794][T13355] loop4: detected capacity change from 0 to 40427
[  213.656855][T13355] F2FS-fs: heap/no_heap options were deprecated
[  213.693059][T13355] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  213.700959][T13355] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  213.703840][T13355] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  213.707815][T13355] F2FS-fs (loop4): Start checkpoint disabled!
[  213.718069][T13355] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  213.722972][T13355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  213.739006][T13355] syz.4.2807: attempt to access beyond end of device
[  213.739006][T13355] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  213.753892][T13355] syz.4.2807: attempt to access beyond end of device
[  213.753892][T13355] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  213.781654][ T5760] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  213.933202][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.939924][ T5760] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  213.942952][ T5760] usb 4-1: config 1 interface 2 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  213.945837][ T5760] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.949727][ T5760] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  213.952583][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.971366][ T5760] snd-ua101 4-1:1.0: probe with driver snd-ua101 failed with error -12
[  214.170494][ T5760] usb 4-1: USB disconnect, device number 23
[  214.729879][T13387] loop3: detected capacity change from 0 to 256
[  214.832845][ T9127] kworker/u10:7: attempt to access beyond end of device
[  214.832845][ T9127] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  214.846746][ T9127] CPU: 1 UID: 0 PID: 9127 Comm: kworker/u10:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  214.846760][ T9127] Tainted: [L]=SOFTLOCKUP
[  214.846763][ T9127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.846768][ T9127] Workqueue: writeback wb_workfn (flush-7:4)
[  214.846783][ T9127] Call Trace:
[  214.846787][ T9127]  <TASK>
[  214.846790][ T9127]  dump_stack_lvl+0xe8/0x150
[  214.846803][ T9127]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  214.846817][ T9127]  f2fs_write_end_io+0x124b/0x1710
[  214.846832][ T9127]  __submit_merged_bio+0x258/0x6a0
[  214.846839][ T9127]  ? rcu_is_watching+0x15/0xb0
[  214.846851][ T9127]  __submit_merged_write_cond+0x3c9/0x4e0
[  214.846866][ T9127]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  214.846884][ T9127]  f2fs_write_data_pages+0x2a27/0x36f0
[  214.846911][ T9127]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  214.846945][ T9127]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  214.846964][ T9127]  ? lockdep_unlock+0x5d/0xd0
[  214.846974][ T9127]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  214.846988][ T9127]  ? __lock_acquire+0x683/0x2cf0
[  214.847003][ T9127]  ? set_raw_inline+0x28b/0x390
[  214.847013][ T9127]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  214.847024][ T9127]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  214.847032][ T9127]  do_writepages+0x338/0x560
[  214.847045][ T9127]  ? reacquire_held_locks+0x104/0x190
[  214.847055][ T9127]  ? writeback_sb_inodes+0x450/0x1b00
[  214.847066][ T9127]  __writeback_single_inode+0x12e/0xf90
[  214.847077][ T9127]  writeback_sb_inodes+0x9de/0x1b00
[  214.847085][ T9127]  ? __lock_acquire+0x683/0x2cf0
[  214.847103][ T9127]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  214.847127][ T9127]  ? rcu_is_watching+0x15/0xb0
[  214.847137][ T9127]  ? queue_io+0x2d3/0x470
[  214.847147][ T9127]  wb_writeback+0x41c/0xad0
[  214.847156][ T9127]  ? queue_io+0x2b1/0x470
[  214.847167][ T9127]  ? __pfx_wb_writeback+0x10/0x10
[  214.847174][ T9127]  ? do_raw_spin_lock+0x12b/0x2f0
[  214.847188][ T9127]  wb_workfn+0x431/0x10f0
[  214.847202][ T9127]  ? __pfx_wb_workfn+0x10/0x10
[  214.847208][ T9127]  ? rcu_is_watching+0x15/0xb0
[  214.847218][ T9127]  ? trace_hrtimer_start+0x82/0x200
[  214.847230][ T9127]  ? do_raw_spin_lock+0x12b/0x2f0
[  214.847238][ T9127]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  214.847246][ T9127]  ? process_scheduled_works+0xa20/0x14e0
[  214.847255][ T9127]  ? process_scheduled_works+0xa20/0x14e0
[  214.847264][ T9127]  ? rcu_is_watching+0x15/0xb0
[  214.847275][ T9127]  ? process_scheduled_works+0xa20/0x14e0
[  214.847283][ T9127]  process_scheduled_works+0xa8e/0x14e0
[  214.847301][ T9127]  ? __pfx_process_scheduled_works+0x10/0x10
[  214.847311][ T9127]  ? assign_work+0x3cf/0x5d0
[  214.847320][ T9127]  worker_thread+0xa47/0xfb0
[  214.847333][ T9127]  ? __kthread_parkme+0x71/0x1f0
[  214.847345][ T9127]  kthread+0x388/0x470
[  214.847355][ T9127]  ? __pfx_worker_thread+0x10/0x10
[  214.847364][ T9127]  ? __pfx_kthread+0x10/0x10
[  214.847374][ T9127]  ret_from_fork+0x514/0xb70
[  214.847385][ T9127]  ? __pfx_ret_from_fork+0x10/0x10
[  214.847395][ T9127]  ? __switch_to+0xc89/0x1420
[  214.847404][ T9127]  ? __pfx_kthread+0x10/0x10
[  214.847414][ T9127]  ret_from_fork_asm+0x1a/0x30
[  214.847430][ T9127]  </TASK>
[  214.849523][ T9127] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  215.146899][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2818'.
[  215.149618][T13402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2818'.
[  215.505091][T13431] loop4: detected capacity change from 0 to 8192
[  215.569267][   T34] audit: type=1326 audit(1789986947.289:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.1.2831" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x0
[  215.807647][T13467] FAULT_INJECTION: forcing a failure.
[  215.807647][T13467] name failslab, interval 1, probability 0, space 0, times 0
[  215.816361][T13467] CPU: 0 UID: 0 PID: 13467 Comm: syz.3.2841 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  215.816375][T13467] Tainted: [L]=SOFTLOCKUP
[  215.816378][T13467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.816383][T13467] Call Trace:
[  215.816387][T13467]  <TASK>
[  215.816390][T13467]  dump_stack_lvl+0xe8/0x150
[  215.816404][T13467]  should_fail_ex+0x40c/0x560
[  215.816419][T13467]  should_failslab+0xa8/0x100
[  215.816433][T13467]  __kmalloc_cache_noprof+0xa8/0x660
[  215.816444][T13467]  ? fuse_dev_chan_new+0x65/0x4b0
[  215.816453][T13467]  ? fuse_dev_chan_new+0x65/0x4b0
[  215.816463][T13467]  ? __pfx_cuse_channel_open+0x10/0x10
[  215.816489][T13467]  fuse_dev_chan_new+0x65/0x4b0
[  215.816501][T13467]  ? __pfx_cuse_channel_open+0x10/0x10
[  215.816509][T13467]  cuse_channel_open+0x1f/0x7a0
[  215.816518][T13467]  ? __pfx_cuse_channel_open+0x10/0x10
[  215.816524][T13467]  misc_open+0x2d5/0x350
[  215.816534][T13467]  chrdev_open+0x4d9/0x600
[  215.816544][T13467]  ? __pfx_chrdev_open+0x10/0x10
[  215.816551][T13467]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  215.816566][T13467]  ? __pfx_chrdev_open+0x10/0x10
[  215.816573][T13467]  do_dentry_open+0x816/0x1380
[  215.816586][T13467]  vfs_open+0x3b/0x340
[  215.816618][T13467]  ? path_openat+0x2e2d/0x3830
[  215.816638][T13467]  path_openat+0x2e44/0x3830
[  215.816651][T13467]  ? kasan_save_track+0x3e/0x80
[  215.816660][T13467]  ? do_sys_openat2+0xcc/0x200
[  215.816669][T13467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.816684][T13467]  do_file_open+0x23e/0x4a0
[  215.816696][T13467]  ? __pfx_do_file_open+0x10/0x10
[  215.816715][T13467]  ? _raw_spin_unlock+0x28/0x50
[  215.816722][T13467]  ? alloc_fd+0x651/0x6c0
[  215.816734][T13467]  do_sys_openat2+0x115/0x200
[  215.816743][T13467]  ? __se_sys_futex+0x3a8/0x450
[  215.816754][T13467]  ? __pfx_do_sys_openat2+0x10/0x10
[  215.816765][T13467]  ? rcu_is_watching+0x15/0xb0
[  215.816777][T13467]  __x64_sys_openat+0x138/0x170
[  215.816786][T13467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.816794][T13467]  do_syscall_64+0x174/0x580
[  215.816803][T13467]  ? trace_irq_disable+0x3b/0x140
[  215.816814][T13467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.816821][T13467] RIP: 0033:0x7f360b19e159
[  215.816829][T13467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.816835][T13467] RSP: 002b:00007f360bfd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  215.816844][T13467] RAX: ffffffffffffffda RBX: 00007f360b425fa0 RCX: 00007f360b19e159
[  215.816850][T13467] RDX: 0000000000002842 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  215.816855][T13467] RBP: 00007f360b23506b R08: 0000000000000000 R09: 0000000000000000
[  215.816859][T13467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.816863][T13467] R13: 00007f360b426038 R14: 00007f360b425fa0 R15: 00007ffe0fc89a58
[  215.816874][T13467]  </TASK>
[  215.872192][   T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  215.956527][T13473] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2843'.
[  216.029229][T13479] loop3: detected capacity change from 0 to 128
[  216.045917][T13479] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.063825][T13479] ext4 filesystem being mounted at /420/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.071243][   T31] usb 5-1: Using ep0 maxpacket: 16
[  216.075542][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[  216.079394][   T31] usb 5-1: config 4 has an invalid interface number: 251 but max is 0
[  216.082299][   T31] usb 5-1: config 4 has no interface number 0
[  216.084717][   T31] usb 5-1: config 4 interface 251 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  216.088284][   T31] usb 5-1: config 4 interface 251 has no altsetting 0
[  216.093984][   T31] usb 5-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00
[  216.097844][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.100784][   T31] usb 5-1: Product: syz
[  216.102523][   T31] usb 5-1: Manufacturer: syz
[  216.104145][   T31] usb 5-1: SerialNumber: syz
[  216.107092][ T8359] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.284441][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2851'.
[  216.319480][   T31] usb-storage 5-1:4.251: USB Mass Storage device detected
[  216.395140][T13520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2854'.
[  216.408420][   T31] usb 5-1: USB disconnect, device number 6
[  217.782645][T13599] netlink: 'syz.4.2879': attribute type 39 has an invalid length.
[  218.017605][T13618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2884'.
[  218.054461][T13620] jffs2: notice: (13620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  218.098253][T13624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2886'.
[  218.106430][T13624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2886'.
[  218.114306][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'.
[  218.179347][T13634] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2890'.
[  218.205271][T13636] syz_tun: entered allmulticast mode
[  218.213178][T13635] syz_tun: left allmulticast mode
[  218.283675][T13643] fuse: fd is not a fuse device
[  218.633194][ T5760] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  218.664833][T13681] typec_fusb302 0-0022: supply vbus not found, using dummy regulator
[  218.682490][T13681] typec_fusb302 0-0022: failed to request gpio_int_n
[  218.728870][T13681] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2
[  218.735113][T13681] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22
[  218.738816][T13685] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16)
[  218.769468][T13689] FAULT_INJECTION: forcing a failure.
[  218.769468][T13689] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  218.775218][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.3.2907 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  218.775232][T13689] Tainted: [L]=SOFTLOCKUP
[  218.775235][T13689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.775240][T13689] Call Trace:
[  218.775244][T13689]  <TASK>
[  218.775247][T13689]  dump_stack_lvl+0xe8/0x150
[  218.775262][T13689]  should_fail_ex+0x40c/0x560
[  218.775276][T13689]  _copy_from_user+0x2d/0xb0
[  218.775288][T13689]  input_event_from_user+0xb1/0x290
[  218.775298][T13689]  ? __pfx_input_event_from_user+0x10/0x10
[  218.775311][T13689]  evdev_write+0x2c7/0x4c0
[  218.775318][T13689]  ? __lock_acquire+0x683/0x2cf0
[  218.775329][T13689]  ? __pfx_evdev_write+0x10/0x10
[  218.775337][T13689]  ? bpf_lsm_file_permission+0x9/0x20
[  218.775346][T13689]  ? security_file_permission+0x75/0x260
[  218.775356][T13689]  ? rw_verify_area+0x203/0x4c0
[  218.775367][T13689]  ? __pfx_evdev_write+0x10/0x10
[  218.775374][T13689]  vfs_write+0x296/0xba0
[  218.775388][T13689]  ? __pfx_vfs_write+0x10/0x10
[  218.775399][T13689]  ? __fget_files+0x2a/0x420
[  218.775409][T13689]  ? __fget_files+0x2a/0x420
[  218.775417][T13689]  ? __fget_files+0x3a2/0x420
[  218.775426][T13689]  ? __fget_files+0x2a/0x420
[  218.775437][T13689]  ksys_write+0x150/0x270
[  218.775449][T13689]  ? __pfx_ksys_write+0x10/0x10
[  218.775464][T13689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.775471][T13689]  do_syscall_64+0x174/0x580
[  218.775481][T13689]  ? trace_irq_disable+0x3b/0x140
[  218.775491][T13689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.775498][T13689] RIP: 0033:0x7f360b19e159
[  218.775506][T13689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.775512][T13689] RSP: 002b:00007f360bfd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  218.775521][T13689] RAX: ffffffffffffffda RBX: 00007f360b425fa0 RCX: 00007f360b19e159
[  218.775526][T13689] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004
[  218.775531][T13689] RBP: 00007f360b23506b R08: 0000000000000000 R09: 0000000000000000
[  218.775535][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.775539][T13689] R13: 00007f360b426038 R14: 00007f360b425fa0 R15: 00007ffe0fc89a58
[  218.775551][T13689]  </TASK>
[  218.854072][    C1] hpet: Lost 3 RTC interrupts
[  218.861755][ T5760] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  218.864266][ T5760] usb 5-1: config 0 has no interface number 0
[  218.866124][ T5760] usb 5-1: config 0 interface 41 has no altsetting 0
[  218.870098][ T5760] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  218.872890][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.875803][ T5760] usb 5-1: Product: syz
[  218.877069][ T5760] usb 5-1: Manufacturer: syz
[  218.878470][ T5760] usb 5-1: SerialNumber: syz
[  218.881206][ T5760] usb 5-1: config 0 descriptor??
[  219.219848][T13721] loop3: detected capacity change from 0 to 4096
[  219.233640][T13723] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.516264][T13750] 9p: Bad value for 'rfdno'
[  219.692118][ T5760] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  219.776440][   T34] audit: type=1326 audit(1789986951.499:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.783785][   T34] audit: type=1326 audit(1789986951.499:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.790676][   T34] audit: type=1326 audit(1789986951.499:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.798338][   T34] audit: type=1326 audit(1789986951.499:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.808889][   T34] audit: type=1326 audit(1789986951.509:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.817170][   T34] audit: type=1326 audit(1789986951.519:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.825193][   T34] audit: type=1326 audit(1789986951.519:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.831987][   T34] audit: type=1326 audit(1789986951.519:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.1.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb9b5d9e159 code=0x7ffc0000
[  219.899661][ T5760] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  219.908082][ T5760] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  219.914544][ T5760] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  219.925174][ T5760] usb 5-1: USB disconnect, device number 7
[  220.223874][T13779] ------------[ cut here ]------------
[  220.225930][T13779] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[  220.229778][T13779] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x483/0x500, CPU#1: syz.3.2938/13779
[  220.234635][T13779] Modules linked in:
[  220.236511][T13779] CPU: 1 UID: 0 PID: 13779 Comm: syz.3.2938 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  220.240315][T13779] Tainted: [L]=SOFTLOCKUP
[  220.242003][T13779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.245867][T13779] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[  220.248404][T13779] Code: 75 d7 eb dd e8 02 bd 11 f8 90 0f 0b 90 e9 e0 fc ff ff e8 f4 bc 11 f8 48 8d 3d 1d c1 b1 06 48 c7 c6 d2 80 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[  220.255354][T13779] RSP: 0018:ffffc9000825f9e0 EFLAGS: 00010287
[  220.257921][T13779] RAX: ffffffff89b5348c RBX: ffff8881b88aa000 RCX: 0000000000080000
[  220.260940][T13779] RDX: 0000000000000048 RSI: ffffffff8e2880d2 RDI: ffffffff9066f5b0
[  220.264245][T13779] RBP: 0000000000000000 R08: ffffffff90026327 R09: 1ffffffff2004c64
[  220.267969][T13779] R10: dffffc0000000000 R11: fffffbfff2004c65 R12: 0000000000000000
[  220.271002][T13779] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  220.274038][T13779] FS:  00007f360bfd36c0(0000) GS:ffff8882a8f59000(0000) knlGS:0000000000000000
[  220.276777][T13779] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.278783][T13779] CR2: 00007f360bfd2ff8 CR3: 000000010d962000 CR4: 00000000000006f0
[  220.282171][T13779] Call Trace:
[  220.283182][T13779]  <TASK>
[  220.284087][T13779]  zcrx_register_netdev+0x213/0x520
[  220.285676][T13779]  ? io_region_pin_pages+0xbe/0x190
[  220.287359][T13779]  ? __pfx_zcrx_register_netdev+0x10/0x10
[  220.289105][T13779]  ? __asan_memset+0x22/0x50
[  220.290518][T13779]  ? io_allocate_rbuf_ring+0x19c/0x230
[  220.292623][T13779]  io_register_zcrx+0x953/0xc00
[  220.294327][T13779]  ? __pfx_io_register_zcrx+0x10/0x10
[  220.295990][T13779]  ? __mutex_lock+0x30d/0x1550
[  220.298072][T13779]  ? __fget_files+0x2a/0x420
[  220.299507][T13779]  ? __pfx___mutex_lock+0x10/0x10
[  220.301070][T13779]  ? __fget_files+0x3a2/0x420
[  220.302814][T13779]  ? __fget_files+0x2a/0x420
[  220.304471][T13779]  __se_sys_io_uring_register+0xc23/0x1ab0
[  220.306482][T13779]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  220.308393][T13779]  ? __pfx___se_sys_futex+0x10/0x10
[  220.309941][T13779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.311982][T13779]  do_syscall_64+0x174/0x580
[  220.314044][T13779]  ? trace_irq_disable+0x3b/0x140
[  220.315603][T13779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.317359][T13779] RIP: 0033:0x7f360b19e159
[  220.318716][T13779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.324689][T13779] RSP: 002b:00007f360bfd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  220.327165][T13779] RAX: ffffffffffffffda RBX: 00007f360b425fa0 RCX: 00007f360b19e159
[  220.330159][T13779] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[  220.332903][T13779] RBP: 00007f360b23506b R08: 0000000000000000 R09: 0000000000000000
[  220.335639][T13779] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  220.338051][T13779] R13: 00007f360b426038 R14: 00007f360b425fa0 R15: 00007ffe0fc89a58
[  220.340402][T13779]  </TASK>
[  220.341613][T13779] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  220.343786][T13779] CPU: 1 UID: 0 PID: 13779 Comm: syz.3.2938 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  220.346967][T13779] Tainted: [L]=SOFTLOCKUP
[  220.348247][T13779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.351248][T13779] Call Trace:
[  220.352244][T13779]  <TASK>
[  220.353124][T13779]  vpanic+0x56c/0xa60
[  220.354289][T13779]  ? __pfx__printk+0x10/0x10
[  220.355671][T13779]  ? __pfx_vpanic+0x10/0x10
[  220.357062][T13779]  ? is_bpf_text_address+0x292/0x2b0
[  220.358814][T13779]  ? is_bpf_text_address+0x26/0x2b0
[  220.360374][T13779]  panic+0xc5/0xd0
[  220.361503][T13779]  ? __pfx_panic+0x10/0x10
[  220.362929][T13779]  __warn+0x315/0x4c0
[  220.364134][T13779]  ? netdev_queue_get_dma_dev+0x483/0x500
[  220.365785][T13779]  ? netdev_queue_get_dma_dev+0x483/0x500
[  220.367442][T13779]  __report_bug+0x276/0x570
[  220.368757][T13779]  ? netdev_queue_get_dma_dev+0x483/0x500
[  220.370433][T13779]  ? __pfx___report_bug+0x10/0x10
[  220.371915][T13779]  report_bug_entry+0x19a/0x290
[  220.373344][T13779]  ? netdev_queue_get_dma_dev+0x48f/0x500
[  220.374988][T13779]  ? netdev_queue_get_dma_dev+0x494/0x500
[  220.376701][T13779]  handle_bug+0xce/0x200
[  220.377994][T13779]  exc_invalid_op+0x1a/0x50
[  220.379362][T13779]  asm_exc_invalid_op+0x1a/0x20
[  220.380839][T13779] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[  220.382702][T13779] Code: 75 d7 eb dd e8 02 bd 11 f8 90 0f 0b 90 e9 e0 fc ff ff e8 f4 bc 11 f8 48 8d 3d 1d c1 b1 06 48 c7 c6 d2 80 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[  220.388360][T13779] RSP: 0018:ffffc9000825f9e0 EFLAGS: 00010287
[  220.390196][T13779] RAX: ffffffff89b5348c RBX: ffff8881b88aa000 RCX: 0000000000080000
[  220.392558][T13779] RDX: 0000000000000048 RSI: ffffffff8e2880d2 RDI: ffffffff9066f5b0
[  220.394938][T13779] RBP: 0000000000000000 R08: ffffffff90026327 R09: 1ffffffff2004c64
[  220.397271][T13779] R10: dffffc0000000000 R11: fffffbfff2004c65 R12: 0000000000000000
[  220.399590][T13779] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  220.401879][T13779]  ? netdev_queue_get_dma_dev+0x47c/0x500
[  220.403543][T13779]  zcrx_register_netdev+0x213/0x520
[  220.405096][T13779]  ? io_region_pin_pages+0xbe/0x190
[  220.406631][T13779]  ? __pfx_zcrx_register_netdev+0x10/0x10
[  220.408365][T13779]  ? __asan_memset+0x22/0x50
[  220.409789][T13779]  ? io_allocate_rbuf_ring+0x19c/0x230
[  220.411476][T13779]  io_register_zcrx+0x953/0xc00
[  220.412985][T13779]  ? __pfx_io_register_zcrx+0x10/0x10
[  220.414634][T13779]  ? __mutex_lock+0x30d/0x1550
[  220.416111][T13779]  ? __fget_files+0x2a/0x420
[  220.417526][T13779]  ? __pfx___mutex_lock+0x10/0x10
[  220.419075][T13779]  ? __fget_files+0x3a2/0x420
[  220.420524][T13779]  ? __fget_files+0x2a/0x420
[  220.421966][T13779]  __se_sys_io_uring_register+0xc23/0x1ab0
[  220.423743][T13779]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  220.425645][T13779]  ? __pfx___se_sys_futex+0x10/0x10
[  220.427248][T13779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.429092][T13779]  do_syscall_64+0x174/0x580
[  220.430600][T13779]  ? trace_irq_disable+0x3b/0x140
[  220.432184][T13779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.434031][T13779] RIP: 0033:0x7f360b19e159
[  220.435401][T13779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.441180][T13779] RSP: 002b:00007f360bfd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  220.443683][T13779] RAX: ffffffffffffffda RBX: 00007f360b425fa0 RCX: 00007f360b19e159
[  220.446087][T13779] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[  220.448492][T13779] RBP: 00007f360b23506b R08: 0000000000000000 R09: 0000000000000000
[  220.450911][T13779] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  220.453317][T13779] R13: 00007f360b426038 R14: 00007f360b425fa0 R15: 00007ffe0fc89a58
[  220.455722][T13779]  </TASK>
[  220.457438][T13779] Kernel Offset: disabled
[  220.458931][T13779] Rebooting in 86400 seconds..
