last executing test programs:

8.687699523s ago: executing program 2 (id=230):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

8.619589477s ago: executing program 2 (id=231):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0xffff414e)
close(0x3)

8.618521174s ago: executing program 2 (id=233):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

8.535273043s ago: executing program 2 (id=234):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@shortname_mixed}, {@fat=@nfs}, {@utf8no}, {@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@numtail}, {@numtail}, {@numtail}]}, 0x0, 0x2bd, &(0x7f0000000580)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13489, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

8.485093151s ago: executing program 2 (id=235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="840000000000000008000400a1000000280012800b000100697036746e6c0000180002801400030020"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

8.240889169s ago: executing program 2 (id=237):
r0 = syz_io_uring_setup(0x4b9, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100000)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

8.23265346s ago: executing program 32 (id=237):
r0 = syz_io_uring_setup(0x4b9, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100000)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

4.237706411s ago: executing program 0 (id=269):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0xffff, 0x4)
recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x22, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

4.105050141s ago: executing program 0 (id=271):
unshare(0x22020600)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)

2.297703003s ago: executing program 0 (id=278):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff)
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb)
read(r0, &(0x7f0000000100), 0xb)
mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)

1.382411811s ago: executing program 0 (id=281):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x8c, 0x1f, 0x5d, 0x40, 0x2001, 0x3a05, 0xc202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0x7f, 0xe8, 0x1, 0xa9, 0x1c, 0x5, 0x3, [], [{{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xff, 0x10, 0x3}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

591.098027ms ago: executing program 1 (id=293):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="d800000018007b30e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990e00000015000500fec00000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee2a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634cfb6f30e3bb9ad8ffd5e1cace89ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0)

513.24207ms ago: executing program 1 (id=294):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000180)=@canfd={{0x2}, 0x3f, 0x3, 0x0, 0x0, "ba4416acd9ce33980b906cad99f88f6270ed49f55a1c86096d430b9e0fbfdc54ec4a29d7117398df7c350cdf8a14de920f2eebdb13110836f5feb778e64a34eb"}, 0x48}, 0x1, 0x0, 0x0, 0x2400c0d2}, 0x40094)

512.952658ms ago: executing program 3 (id=295):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40040)

510.691983ms ago: executing program 1 (id=296):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x1254, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x470, 0xa7, 0x8, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0xf5, 0x0, 0x4, 0x0, 0xd318, 0x2000000000, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x6, 0x800000, 0x0, 0x101, 0x272f, 0xd721, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x4, 0x5, 0x1, 0x4000000, 0x7, 0x0, 0xdc5d, 0x0, 0x0, 0x1000, 0x0, 0x8000, 0x0, 0x4000000000006fd, 0x0, 0x6, 0x0, 0x0, 0x7, 0x100]})

439.258431ms ago: executing program 3 (id=297):
r0 = socket(0x2d, 0x2, 0x0)
bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
r1 = socket(0x2d, 0x2, 0x0)
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

439.01079ms ago: executing program 1 (id=298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0)

382.094047ms ago: executing program 3 (id=299):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x4e24, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x6, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x7}, 0x4000006, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x2b}, 0xa, @in6=@private0, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

381.808637ms ago: executing program 1 (id=300):
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000000)='./file1\x00', 0x803, &(0x7f0000000980)=ANY=[], 0x1, 0x60d9, &(0x7f0000002080)="$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")

325.182122ms ago: executing program 3 (id=301):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000002180)={0x88}, 0x8)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

324.949677ms ago: executing program 3 (id=302):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xe3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48)

258.393148ms ago: executing program 3 (id=303):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
r1 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r4], 0x50)
capset(0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
fchdir(r2)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
setfsuid(0x0)
r7 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00')
pread64(r7, &(0x7f00000003c0)=""/26, 0x1a, 0x4)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000540)={0x3, 0x0, 0xfff, 0x84, &(0x7f0000000040)=""/132, 0x8d, &(0x7f0000000100)=""/141, 0x56, &(0x7f00000001c0)=""/86})

105.133328ms ago: executing program 0 (id=304):
r0 = getpgrp(0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

48.297358ms ago: executing program 0 (id=305):
syz_usb_connect(0x5, 0x29a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)

0s ago: executing program 1 (id=306):
unshare(0x22020600)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, 0x0, 0x1358)
fdatasync(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22272' (ED25519) to the list of known hosts.
syzkaller login: [   42.462430][ T5526] cgroup: Unknown subsys name 'net'
[   42.545353][ T5526] cgroup: Unknown subsys name 'cpuset'
[   42.549334][ T5526] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   44.046793][ T5526] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.875890][ T4989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.879421][ T4989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.882933][ T4989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.886902][ T4989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.890180][ T4989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.920856][ T4989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.927847][ T4989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.930571][ T4989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.934193][ T4989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.937373][ T4989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.955127][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.959041][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.962523][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.965751][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.968578][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   48.367510][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.370300][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.373379][ T5586] bridge_slave_0: entered allmulticast mode
[   48.376527][ T5586] bridge_slave_0: entered promiscuous mode
[   48.388226][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.390629][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.393069][ T5586] bridge_slave_1: entered allmulticast mode
[   48.395778][ T5586] bridge_slave_1: entered promiscuous mode
[   48.455446][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.478115][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.505975][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.508926][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.511828][ T5595] bridge_slave_0: entered allmulticast mode
[   48.516235][ T5595] bridge_slave_0: entered promiscuous mode
[   48.521119][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.523960][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.526850][ T5595] bridge_slave_1: entered allmulticast mode
[   48.529374][ T5595] bridge_slave_1: entered promiscuous mode
[   48.546419][ T5586] team0: Port device team_slave_0 added
[   48.563738][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.566030][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.568240][ T5592] bridge_slave_0: entered allmulticast mode
[   48.570812][ T5592] bridge_slave_0: entered promiscuous mode
[   48.574646][ T5586] team0: Port device team_slave_1 added
[   48.599866][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.602066][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.604621][ T5592] bridge_slave_1: entered allmulticast mode
[   48.607423][ T5592] bridge_slave_1: entered promiscuous mode
[   48.616794][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.619091][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.627019][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.633278][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.639572][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.650571][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.653716][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.656243][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.663933][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.679326][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.711004][ T5595] team0: Port device team_slave_0 added
[   48.723920][ T5595] team0: Port device team_slave_1 added
[   48.727169][ T5592] team0: Port device team_slave_0 added
[   48.746887][ T5592] team0: Port device team_slave_1 added
[   48.786348][ T5586] hsr_slave_0: entered promiscuous mode
[   48.789543][ T5586] hsr_slave_1: entered promiscuous mode
[   48.794740][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.798034][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.808870][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.814274][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.817133][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.827675][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.846635][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.849530][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.860134][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.865416][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.868058][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.878398][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.966075][ T5595] hsr_slave_0: entered promiscuous mode
[   48.969127][ T5595] hsr_slave_1: entered promiscuous mode
[   48.971907][ T5595] debugfs: 'hsr0' already exists in 'hsr'
[   48.974549][ T5595] Cannot create hsr debugfs directory
[   48.990536][ T5592] hsr_slave_0: entered promiscuous mode
[   48.993000][ T5592] hsr_slave_1: entered promiscuous mode
[   48.995102][ T5592] debugfs: 'hsr0' already exists in 'hsr'
[   48.996812][ T5592] Cannot create hsr debugfs directory
[   49.205950][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.216263][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.219064][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.224694][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.228108][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.233690][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.236955][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.241077][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.306770][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.312886][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.315429][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.319946][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.323090][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.326747][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.330749][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.334658][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.397923][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.402637][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   49.406016][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.414761][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   49.426187][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.431906][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   49.445020][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.451926][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   49.502027][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.542776][ T5586] 8021q: adding VLAN 0 to HW filter on device team0
[   49.561298][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.564673][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.581260][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.585100][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.588024][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.616126][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   49.629797][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.632658][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.644351][ T5586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.651404][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.654446][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.676519][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.723414][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[   49.738875][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.741670][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.753612][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.756443][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.924147][ T4989] Bluetooth: hci0: command tx timeout
[   49.986200][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.002779][ T4989] Bluetooth: hci2: command tx timeout
[   50.012657][ T4989] Bluetooth: hci1: command tx timeout
[   50.020930][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.064305][ T5592] veth0_vlan: entered promiscuous mode
[   50.085129][ T5592] veth1_vlan: entered promiscuous mode
[   50.109830][ T5586] veth0_vlan: entered promiscuous mode
[   50.127360][ T5586] veth1_vlan: entered promiscuous mode
[   50.147243][ T5592] veth0_macvtap: entered promiscuous mode
[   50.165970][ T5592] veth1_macvtap: entered promiscuous mode
[   50.178068][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.199311][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.209786][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.215083][ T5586] veth0_macvtap: entered promiscuous mode
[   50.234225][ T5586] veth1_macvtap: entered promiscuous mode
[   50.257870][ T5595] veth0_vlan: entered promiscuous mode
[   50.266118][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.286845][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.301761][ T5595] veth1_vlan: entered promiscuous mode
[   50.349020][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.361951][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.377681][ T5595] veth0_macvtap: entered promiscuous mode
[   50.391382][ T5595] veth1_macvtap: entered promiscuous mode
[   50.408734][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.417417][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.420118][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.447753][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.454344][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.472896][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.476060][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.484780][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.488816][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.490989][ T5592] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.498715][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.513731][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.565443][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.575769][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.596537][ T5625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.608738][ T5625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.655233][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.655854][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.661929][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.673837][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.694830][ T5698] loop2: detected capacity change from 0 to 512
[   50.705277][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.708801][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.738352][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.745115][ T5698] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   50.756452][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.774830][ T5698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   50.783026][ T5625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.810521][ T5698] EXT4-fs (loop2): 1 truncate cleaned up
[   50.820670][ T5698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.836057][ T5701] netdevsim netdevsim0: Direct firmware load for ./cgroup failed with error -2
[   50.845130][ T5701] netdevsim netdevsim0: Falling back to sysfs fallback for: ./cgroup
[   50.955021][ T5707] loop1: detected capacity change from 0 to 64
[   50.960068][ T5707] =======================================================
[   50.960068][ T5707] WARNING: The mand mount option has been deprecated and
[   50.960068][ T5707]          and is ignored by this kernel. Remove the mand
[   50.960068][ T5707]          option from the mount to silence this warning.
[   50.960068][ T5707] =======================================================
[   50.967877][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.025816][ T5709] loop2: detected capacity change from 0 to 128
[   51.027915][ T5707] Trying to free block not in datazone
[   51.176098][ T5717] trusted_key: syz.1.9 sent an empty control message without MSG_MORE.
[   51.258700][ T5721] capability: warning: `syz.2.11' uses 32-bit capabilities (legacy support in use)
[   51.865310][ T5056] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   51.959916][ T4989] Bluetooth: hci0: command tx timeout
[   52.014221][ T5056] usb 3-1: unable to get BOS descriptor or descriptor too short
[   52.032968][ T5056] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[   52.045132][ T5056] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[   52.050948][ T4989] Bluetooth: hci1: command tx timeout
[   52.051113][   T55] Bluetooth: hci2: command tx timeout
[   52.061993][ T5056] usb 3-1: config 66 has 0 interfaces, different from the descriptor's value: 2
[   52.081145][ T5056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.090872][ T5056] usb 3-1: Product: syz
[   52.096408][ T5056] usb 3-1: Manufacturer: syz
[   52.100806][ T5056] usb 3-1: SerialNumber: syz
[   52.298867][ T5755] loop1: detected capacity change from 0 to 1164
[   52.321352][ T5755] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[   52.352669][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.357994][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.402138][ T5056] usb 3-1: USB disconnect, device number 2
[   52.637768][ T5761] loop1: detected capacity change from 0 to 512
[   52.652406][ T5761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.678286][ T5595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.781428][ T5765] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[   52.785475][ T5765] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   53.160904][ T5799] netlink: 108 bytes leftover after parsing attributes in process `syz.1.45'.
[   53.165670][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'.
[   53.372249][ T5815] FAULT_INJECTION: forcing a failure.
[   53.372249][ T5815] name failslab, interval 1, probability 0, space 0, times 1
[   53.384179][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz.1.53 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   53.384209][ T5815] Tainted: [L]=SOFTLOCKUP
[   53.384213][ T5815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   53.384221][ T5815] Call Trace:
[   53.384227][ T5815]  <TASK>
[   53.384232][ T5815]  dump_stack_lvl+0xe8/0x150
[   53.384254][ T5815]  should_fail_ex+0x410/0x560
[   53.384271][ T5815]  should_failslab+0xa8/0x100
[   53.384293][ T5815]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[   53.384310][ T5815]  ? sw_sync_ioctl+0xd19/0x10f0
[   53.384328][ T5815]  ? do_syscall_64+0x166/0x520
[   53.384345][ T5815]  ? __d_alloc+0x37/0x6f0
[   53.384353][ T5815]  ? __d_alloc+0x37/0x6f0
[   53.384365][ T5815]  __d_alloc+0x37/0x6f0
[   53.384380][ T5815]  d_alloc_pseudo+0x21/0xc0
[   53.384394][ T5815]  alloc_path_pseudo+0x107/0x220
[   53.384413][ T5815]  ? __pfx_alloc_path_pseudo+0x10/0x10
[   53.384434][ T5815]  alloc_file_pseudo+0xa8/0x1e0
[   53.384447][ T5815]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   53.384469][ T5815]  anon_inode_getfile+0xc5/0x1a0
[   53.384489][ T5815]  sync_file_create+0x76/0x1c0
[   53.384507][ T5815]  sw_sync_ioctl+0xd19/0x10f0
[   53.384528][ T5815]  ? __pfx_sw_sync_ioctl+0x10/0x10
[   53.384546][ T5815]  ? __fget_files+0x2a/0x420
[   53.384558][ T5815]  ? __fget_files+0x3a2/0x420
[   53.384590][ T5815]  ? __fget_files+0x2a/0x420
[   53.384605][ T5815]  ? bpf_lsm_file_ioctl+0x9/0x20
[   53.384623][ T5815]  ? __pfx_sw_sync_ioctl+0x10/0x10
[   53.384640][ T5815]  __se_sys_ioctl+0xfc/0x170
[   53.384656][ T5815]  do_syscall_64+0x166/0x520
[   53.384671][ T5815]  ? trace_irq_disable+0x3b/0x140
[   53.384687][ T5815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.384700][ T5815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.384710][ T5815] RIP: 0033:0x7ff825b9e159
[   53.384722][ T5815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.384733][ T5815] RSP: 002b:00007ff8269b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   53.384747][ T5815] RAX: ffffffffffffffda RBX: 00007ff825e25fa0 RCX: 00007ff825b9e159
[   53.384755][ T5815] RDX: 0000200000000b00 RSI: 00000000c0285700 RDI: 0000000000000005
[   53.384763][ T5815] RBP: 00007ff825c3506b R08: 0000000000000000 R09: 0000000000000000
[   53.384770][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.384777][ T5815] R13: 00007ff825e26038 R14: 00007ff825e25fa0 R15: 00007fff16512e68
[   53.384789][ T5815]  </TASK>
[   53.603684][ T5811] loop2: detected capacity change from 0 to 32768
[   53.624940][   T34] audit: type=1800 audit(1789581396.590:2): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.51" name="file1" dev="loop2" ino=4 res=0 errno=0
[   53.716937][ T5811] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[   53.716937][ T5811] 
[   53.721704][ T5811] ERROR: (device loop2): remounting filesystem as read-only
[   53.780439][   T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   53.932557][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   53.938246][   T31] usb 2-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   53.944224][ T4989] Bluetooth: hci0: command tx timeout
[   53.946536][   T31] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   53.950225][   T31] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   53.953963][   T31] usb 2-1: config 1 interface 0 has no altsetting 0
[   53.956531][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.970818][   T31] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[   54.017849][ T4989] Bluetooth: hci1: command tx timeout
[   54.028022][ T4989] Bluetooth: hci2: command tx timeout
[   54.181933][   T31] usb 2-1: USB disconnect, device number 2
[   54.367442][ T5834] loop2: detected capacity change from 0 to 4096
[   55.333383][ T5854] FAULT_INJECTION: forcing a failure.
[   55.333383][ T5854] name failslab, interval 1, probability 0, space 0, times 0
[   55.338158][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.2.70 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   55.338172][ T5854] Tainted: [L]=SOFTLOCKUP
[   55.338176][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   55.338181][ T5854] Call Trace:
[   55.338186][ T5854]  <TASK>
[   55.338190][ T5854]  dump_stack_lvl+0xe8/0x150
[   55.338206][ T5854]  should_fail_ex+0x410/0x560
[   55.338217][ T5854]  should_failslab+0xa8/0x100
[   55.338233][ T5854]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   55.338244][ T5854]  ? kmem_cache_alloc_noprof+0x152/0x5f0
[   55.338253][ T5854]  ? radix_tree_node_alloc+0x82/0x3a0
[   55.338264][ T5854]  ? radix_tree_node_alloc+0x82/0x3a0
[   55.338274][ T5854]  radix_tree_node_alloc+0x82/0x3a0
[   55.338285][ T5854]  idr_get_free+0x28f/0xa10
[   55.338297][ T5854]  idr_alloc_u32+0x18a/0x330
[   55.338310][ T5854]  ? __pfx_idr_alloc_u32+0x10/0x10
[   55.338321][ T5854]  ? net_generic+0x1e/0x240
[   55.338331][ T5854]  ? l2tp_session_register+0xd7/0x11a0
[   55.338342][ T5854]  l2tp_session_register+0x258/0x11a0
[   55.338351][ T5854]  ? __pfx___mutex_lock+0x10/0x10
[   55.338372][ T5854]  ? __pfx_l2tp_session_register+0x10/0x10
[   55.338386][ T5854]  pppol2tp_connect+0xda1/0x18b0
[   55.338401][ T5854]  ? __pfx_pppol2tp_connect+0x10/0x10
[   55.338414][ T5854]  ? __pfx_aa_sk_perm+0x10/0x10
[   55.338425][ T5854]  ? apparmor_socket_connect+0xec/0x1b0
[   55.338439][ T5854]  ? bpf_lsm_socket_connect+0x9/0x20
[   55.338451][ T5854]  __sys_connect+0x323/0x460
[   55.338461][ T5854]  ? __pfx___sys_connect+0x10/0x10
[   55.338473][ T5854]  ? rcu_is_watching+0x16/0xb0
[   55.338484][ T5854]  __x64_sys_connect+0x7a/0x90
[   55.338492][ T5854]  do_syscall_64+0x166/0x520
[   55.338502][ T5854]  ? trace_irq_disable+0x3b/0x140
[   55.338512][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.338522][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.338530][ T5854] RIP: 0033:0x7fac0919e159
[   55.338538][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.338545][ T5854] RSP: 002b:00007fac0a137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   55.338555][ T5854] RAX: ffffffffffffffda RBX: 00007fac09425fa0 RCX: 00007fac0919e159
[   55.338592][ T5854] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 0000000000000004
[   55.338600][ T5854] RBP: 00007fac0923506b R08: 0000000000000000 R09: 0000000000000000
[   55.338608][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.338615][ T5854] R13: 00007fac09426038 R14: 00007fac09425fa0 R15: 00007ffc63d6fd78
[   55.338636][ T5854]  </TASK>
[   55.510957][   T34] audit: type=1400 audit(1789581398.574:3): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=5857 comm="syz.2.73"
[   55.560660][ T5056] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   55.704458][ T5056] usb 2-1: Using ep0 maxpacket: 8
[   55.711686][ T5056] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[   55.721134][ T5056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[   55.724804][ T5056] usb 2-1: Product: syz
[   55.727802][ T5056] usb 2-1: Manufacturer: syz
[   55.729758][ T5056] usb 2-1: SerialNumber: syz
[   55.819522][ T5056] usb 2-1: config 0 descriptor??
[   55.828718][ T5056] gspca_main: sq905-2.14.0 probing 2770:9120
[   55.938615][ T4989] Bluetooth: hci0: command tx timeout
[   55.999306][ T4989] Bluetooth: hci1: command tx timeout
[   56.001615][ T4989] Bluetooth: hci2: command tx timeout
[   56.027822][ T5852] Zero length message leads to an empty skb
[   56.229500][ T5056] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[   56.235875][ T5056] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[   56.240255][ T5056] usb 2-1: USB disconnect, device number 3
[   56.627277][ T5893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87'.
[   56.637978][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.641280][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.770041][ T5903] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET)
[   57.053240][   T34] audit: type=1807 audit(1789581400.191:4): action=measure func=FILE_CHECK res=1
[   57.060244][ T5926] ima: policy update completed
[   57.067002][   T34] audit: type=1802 audit(1789581400.212:5): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.102" res=1 errno=0
[   57.086526][   T34] audit: type=1800 audit(1789581400.233:6): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   57.103089][   T34] audit: type=1800 audit(1789581400.233:7): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   57.112693][   T34] audit: type=1800 audit(1789581400.233:8): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14584 res=0 errno=0
[   57.120547][   T34] audit: type=1800 audit(1789581400.243:9): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14584 res=0 errno=0
[   57.126532][   T34] audit: type=1800 audit(1789581400.264:10): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14830 res=0 errno=0
[   57.137772][   T34] audit: type=1800 audit(1789581400.285:11): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14830 res=0 errno=0
[   57.344868][ T5943] af_packet: packet size is too long (197121 > 2016)
[   57.396143][ T5945] size and base must be multiples of 4 kiB
[   57.398714][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.1.111 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   57.398733][ T5945] Tainted: [L]=SOFTLOCKUP
[   57.398738][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.398746][ T5945] Call Trace:
[   57.398752][ T5945]  <TASK>
[   57.398759][ T5945]  dump_stack_lvl+0xe8/0x150
[   57.398784][ T5945]  mtrr_del+0xc8/0xf0
[   57.398805][ T5945]  mtrr_ioctl+0xcb8/0x13b0
[   57.398826][ T5945]  ? __pfx_mtrr_ioctl+0x10/0x10
[   57.398851][ T5945]  ? __fget_files+0x2a/0x420
[   57.398864][ T5945]  ? __fget_files+0x3a2/0x420
[   57.398896][ T5945]  ? __fget_files+0x2a/0x420
[   57.398908][ T5945]  ? __pfx_mtrr_ioctl+0x10/0x10
[   57.398925][ T5945]  proc_reg_unlocked_ioctl+0x1d6/0x2c0
[   57.398943][ T5945]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[   57.398959][ T5945]  __se_sys_ioctl+0xfc/0x170
[   57.398979][ T5945]  do_syscall_64+0x166/0x520
[   57.398996][ T5945]  ? trace_irq_disable+0x3b/0x140
[   57.399012][ T5945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.399030][ T5945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.399043][ T5945] RIP: 0033:0x7ff825b9e159
[   57.399058][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.399067][ T5945] RSP: 002b:00007ff8269b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   57.399083][ T5945] RAX: ffffffffffffffda RBX: 00007ff825e25fa0 RCX: 00007ff825b9e159
[   57.399091][ T5945] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[   57.399100][ T5945] RBP: 00007ff825c3506b R08: 0000000000000000 R09: 0000000000000000
[   57.399108][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.399114][ T5945] R13: 00007ff825e26038 R14: 00007ff825e25fa0 R15: 00007fff16512e68
[   57.399133][ T5945]  </TASK>
[   57.456481][ T5664] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   57.713957][ T5664] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   57.718625][ T5664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.722593][ T5664] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   57.726015][ T5664] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   57.730728][ T5664] usb 3-1: config 1 interface 0 has no altsetting 0
[   57.735496][ T5664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.738002][ T5664] usb 3-1: Product: syz
[   57.739319][ T5664] usb 3-1: Manufacturer: syz
[   57.742030][ T5664] usb 3-1: SerialNumber: syz
[   57.752681][ T5664] usb-storage 3-1:1.0: USB Mass Storage device detected
[   57.768951][ T5664] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   57.828212][ T5953] loop1: detected capacity change from 0 to 16
[   57.895506][ T5953] erofs (device loop1): mounted with root inode @ nid 36.
[   57.914212][ T5953] erofs (device loop1): bogus i_mode (4355) @ nid 46
[   58.094044][ T5664] usb 3-1: USB disconnect, device number 3
[   58.344828][ T5966] netlink: 1088 bytes leftover after parsing attributes in process `syz.0.118'.
[   58.348732][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'.
[   58.353578][ T5966] netlink: 1088 bytes leftover after parsing attributes in process `syz.0.118'.
[   58.358399][ T5966] netlink: 260 bytes leftover after parsing attributes in process `syz.0.118'.
[   58.412294][ T5968] device-mapper: ioctl: Target spec extends beyond end of parameters
[   58.415599][ T5968] device-mapper: ioctl: unable to find target
[   58.492528][   T34] kauditd_printk_skb: 20 callbacks suppressed
[   58.492540][   T34] audit: type=1800 audit(1789581401.702:32): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   58.522096][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   58.524003][ T5976] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   58.548916][   T34] audit: type=1800 audit(1789581401.765:33): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   58.593710][   T34] audit: type=1800 audit(1789581401.818:34): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   58.626311][   T34] audit: type=1800 audit(1789581401.849:35): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14830 res=0 errno=0
[   58.653473][   T34] audit: type=1800 audit(1789581401.870:36): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14830 res=0 errno=0
[   58.670308][   T34] audit: type=1800 audit(1789581401.891:37): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   58.712923][   T34] audit: type=1800 audit(1789581401.933:38): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14830 res=0 errno=0
[   58.741363][   T34] audit: type=1800 audit(1789581401.965:39): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14830 res=0 errno=0
[   58.757807][   T34] audit: type=1800 audit(1789581401.986:40): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   58.778268][   T34] audit: type=1800 audit(1789581402.007:41): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14830 res=0 errno=0
[   58.786914][ T6000] warning: `syz.2.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.865825][ T6002] nvme nvme0: rdma connection establishment failed (-104)
[   59.038698][ T6021] syzkaller1: entered promiscuous mode
[   59.040433][ T6021] syzkaller1: entered allmulticast mode
[   59.217874][ T6032] gretap1: entered allmulticast mode
[   59.223944][ T6032] team0: Port device gretap1 added
[   59.231628][ T6032] bridge0: port 3(team0) entered blocking state
[   59.244143][ T6032] bridge0: port 3(team0) entered disabled state
[   59.254011][ T6032] team0: entered allmulticast mode
[   59.260808][ T6032] team_slave_0: entered allmulticast mode
[   59.266392][ T6032] team_slave_1: entered allmulticast mode
[   59.266924][ T6034] loop0: detected capacity change from 0 to 64
[   59.284452][ T6032] team0: entered promiscuous mode
[   59.287539][ T6034] syz.0.150: attempt to access beyond end of device
[   59.287539][ T6034] loop0: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[   59.292269][ T6034] Buffer I/O error on dev loop0, logical block 512, async page read
[   59.294729][ T6032] team_slave_0: entered promiscuous mode
[   59.295267][ T6034] syz.0.150: attempt to access beyond end of device
[   59.295267][ T6034] loop0: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[   59.298666][ T6032] team_slave_1: entered promiscuous mode
[   59.302090][ T6034] Buffer I/O error on dev loop0, logical block 56576, async page read
[   59.311537][ T6032] gretap1: entered promiscuous mode
[   59.317216][ T6032] bridge0: port 3(team0) entered blocking state
[   59.320012][ T6032] bridge0: port 3(team0) entered forwarding state
[   59.453162][ T6046] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   59.761321][  T802] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   59.915952][  T802] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[   59.922030][  T802] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   59.926144][  T802] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   59.929292][  T802] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 55, changing to 9
[   59.932771][ T5664] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.933449][  T802] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8496, setting to 1024
[   59.941939][  T802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.945059][  T802] usb 3-1: Product: syz
[   59.946831][  T802] usb 3-1: Manufacturer: syz
[   59.949338][  T802] usb 3-1: SerialNumber: syz
[   59.967587][ T6054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   59.975315][ T6054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   59.981210][  T802] oti6858 3-1:1.0: oti6858 converter detected
[   59.993495][  T802] usb 3-1: oti6858 converter now attached to ttyUSB0
[   60.085307][ T5664] usb 1-1: Using ep0 maxpacket: 16
[   60.087639][ T5664] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[   60.091961][ T5664] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[   60.096261][ T5664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.100892][ T5664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.104725][ T5664] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   60.108984][ T5664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.113477][ T5664] usb 1-1: config 0 descriptor??
[   60.402801][  T802] usb 3-1: USB disconnect, device number 4
[   60.424834][  T802] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[   60.432642][  T802] oti6858 3-1:1.0: device disconnected
[   60.516789][ T5664] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input4
[   60.589974][ T5664] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input5
[   60.659613][ T6073] process 'syz.1.169' launched '/dev/fd/3' with NULL argv: empty string added
[   60.670498][ T5664] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0
[   60.723838][ T5650] usb 1-1: USB disconnect, device number 2
[   61.128690][ T6088] loop2: detected capacity change from 0 to 32768
[   61.137156][ T6088] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.177 (6088)
[   61.164794][ T6088] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   61.169165][ T6088] BTRFS info (device loop2): using sha256 checksum algorithm
[   61.211137][ T6088] BTRFS info (device loop2): enabling ssd optimizations
[   61.213703][ T6088] BTRFS info (device loop2): turning on async discard
[   61.219391][ T6088] BTRFS info (device loop2): enabling free space tree
[   61.343002][ T5650] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   61.496492][ T5650] usb 2-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00
[   61.501464][ T5650] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   61.505885][ T5650] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[   61.512157][ T5650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.515925][ T5650] usb 2-1: Product: syz
[   61.517716][ T5650] usb 2-1: Manufacturer: syz
[   61.519575][ T5650] usb 2-1: SerialNumber: syz
[   61.536891][ T5650] whiteheat 2-1:1.0: Connect Tech - WhiteHEAT converter detected
[   61.729936][ T5650] usb 2-1: Connect Tech - WhiteHEAT: Send command incomplete [0]
[   61.732686][ T5650] usb 2-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging
[   61.737664][ T5650] usb 2-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking)
[   61.742001][ T5650] usb 2-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com
[   61.861649][ T5592] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   61.938727][ T5650] usb 2-1: USB disconnect, device number 4
[   62.035897][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'.
[   62.142196][ T6125] loop2: detected capacity change from 0 to 1024
[   62.149935][ T6125] EXT4-fs: Ignoring removed bh option
[   62.171023][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.187397][ T6125] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   62.193949][ T6125] EXT4-fs (loop2): shut down requested (2)
[   62.213382][ T5592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.413240][ T6136] loop2: detected capacity change from 0 to 32768
[   62.416242][ T6136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.190 (6136)
[   62.447766][ T6136] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   62.470968][ T6136] BTRFS info (device loop2): using sha256 checksum algorithm
[   62.492116][ T6142] misc userio: No port type given on /dev/userio
[   62.570853][ T6136] BTRFS info (device loop2): enabling ssd optimizations
[   62.576993][ T6136] BTRFS info (device loop2): turning on async discard
[   62.584472][ T6136] BTRFS info (device loop2): enabling free space tree
[   62.589258][ T6136] BTRFS info (device loop2): force clearing of disk cache
[   62.594131][ T6136] BTRFS info (device loop2): force zlib compression, level 3
[   62.598958][ T6136] BTRFS info (device loop2): max_inline set to 0
[   62.709392][ T5592] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   63.001012][   T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   63.143738][   T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   63.163054][   T31] usb 2-1: Using ep0 maxpacket: 16
[   63.166324][   T31] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[   63.176081][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.178861][   T31] usb 2-1: Product: syz
[   63.180254][   T31] usb 2-1: Manufacturer: syz
[   63.182279][   T31] usb 2-1: SerialNumber: syz
[   63.186129][   T31] usb 2-1: config 0 descriptor??
[   63.192174][   T31] gspca_main: spca508-2.14.0 probing 041e:4018
[   63.314461][   T32] usb 3-1: Using ep0 maxpacket: 32
[   63.317094][   T32] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   63.321047][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.325666][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.328733][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.333027][   T32] usb 3-1: config 0 descriptor??
[   63.336811][   T34] kauditd_printk_skb: 194 callbacks suppressed
[   63.336820][   T34] audit: type=1800 audit(1789581406.794:236): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=105268 res=0 errno=0
[   63.352787][   T34] audit: type=1800 audit(1789581406.804:237): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=105297 res=0 errno=0
[   63.361991][   T34] audit: type=1800 audit(1789581406.804:238): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=105275 res=0 errno=0
[   63.368511][   T34] audit: type=1800 audit(1789581406.804:239): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=105276 res=0 errno=0
[   63.375225][   T34] audit: type=1800 audit(1789581406.804:240): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=105277 res=0 errno=0
[   63.383271][   T34] audit: type=1800 audit(1789581406.815:241): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=105317 res=0 errno=0
[   63.393332][   T31] gspca_spca508: reg_read err -32
[   63.395994][   T31] gspca_spca508: reg_read err -32
[   63.399438][   T31] gspca_spca508: reg_read err -32
[   63.404052][   T31] gspca_spca508: reg_read err -32
[   63.598504][   T31] gspca_spca508: reg write: error -71
[   63.606306][   T31] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[   63.614948][   T34] audit: type=1800 audit(1789581407.088:242): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=105227 res=0 errno=0
[   63.626997][   T31] usb 2-1: USB disconnect, device number 5
[   63.636687][   T34] audit: type=1800 audit(1789581407.088:243): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=105228 res=0 errno=0
[   63.647139][   T34] audit: type=1800 audit(1789581407.109:244): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=105207 res=0 errno=0
[   63.657320][   T34] audit: type=1800 audit(1789581407.109:245): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=105229 res=0 errno=0
[   63.739450][   T32] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   63.994848][   T31] usb 3-1: USB disconnect, device number 5
[   64.280863][ T6178] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   64.510414][ T6190] loop2: detected capacity change from 0 to 7
[   64.511606][ T6190] Dev loop2: unable to read RDB block 7
[   64.511634][ T6190]  loop2: AHDI p1 p2 p3
[   64.511643][ T6190] loop2: partition table partially beyond EOD, truncated
[   64.511717][ T6190] loop2: p1 start 1601398130 is beyond EOD, truncated
[   64.511725][ T6190] loop2: p2 start 1702059890 is beyond EOD, truncated
[   64.545721][ T6196] input: syz1 as /devices/virtual/input/input6
[   64.705370][ T6204] loop0: detected capacity change from 0 to 16
[   64.728573][ T6204] erofs (device loop0): mounted with root inode @ nid 36.
[   65.181405][   T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   65.343489][   T31] usb 1-1: Using ep0 maxpacket: 8
[   65.348114][   T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   65.353825][   T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   65.356741][   T31] usb 1-1: config 179 has no interface number 0
[   65.358895][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   65.363333][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   65.367253][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   65.370999][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   65.375476][   T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   65.379985][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.386370][ T6219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   65.587237][  T802] usb 1-1: USB disconnect, device number 3
[   65.587253][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   65.591841][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   65.871192][ T6245] loop2: detected capacity change from 0 to 128
[   65.903945][ T5592] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   65.907611][ T5592] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   66.068107][  T802] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   66.120322][ T6247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.236'.
[   66.229240][  T802] usb 2-1: Using ep0 maxpacket: 16
[   66.233077][  T802] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[   66.240265][  T802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.243352][  T802] usb 2-1: Product: syz
[   66.245035][  T802] usb 2-1: Manufacturer: syz
[   66.246904][  T802] usb 2-1: SerialNumber: syz
[   66.253845][  T802] usb 2-1: config 0 descriptor??
[   66.266112][  T802] gspca_main: spca508-2.14.0 probing 041e:4018
[   66.266851][ T4989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.272514][ T4989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.276166][ T4989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.279469][ T4989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.282356][ T4989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.648049][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.651281][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.651988][  T802] gspca_spca508: reg_read err -71
[   66.655906][ T6249] bridge_slave_0: entered allmulticast mode
[   66.656550][  T802] gspca_spca508: reg_read err -71
[   66.664049][  T802] gspca_spca508: reg_read err -71
[   66.666423][  T802] gspca_spca508: reg_read err -71
[   66.667054][ T6249] bridge_slave_0: entered promiscuous mode
[   66.671400][  T802] gspca_spca508: reg write: error -71
[   66.673466][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.675874][  T802] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[   66.676614][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.682579][ T6249] bridge_slave_1: entered allmulticast mode
[   66.685727][  T802] usb 2-1: USB disconnect, device number 6
[   66.686964][ T6249] bridge_slave_1: entered promiscuous mode
[   66.727827][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.733742][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.758292][ T6249] team0: Port device team_slave_0 added
[   66.762588][ T6249] team0: Port device team_slave_1 added
[   66.784503][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.787381][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.797708][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.803836][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.806453][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.816454][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.843818][ T6249] hsr_slave_0: entered promiscuous mode
[   66.846275][ T6249] hsr_slave_1: entered promiscuous mode
[   66.848818][ T6249] debugfs: 'hsr0' already exists in 'hsr'
[   66.850839][ T6249] Cannot create hsr debugfs directory
[   67.006223][ T6249] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   67.013405][ T6249] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.016100][ T6249] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   67.021724][ T6249] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.024465][ T6249] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   67.028676][ T6249] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   67.032393][ T6249] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   67.036286][ T6249] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.093545][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.109305][ T6249] 8021q: adding VLAN 0 to HW filter on device team0
[   67.115319][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.117599][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.123577][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.125854][ T5877] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.209192][ T6281] loop1: detected capacity change from 0 to 16
[   67.223709][ T6281] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   67.237652][ T6281] cramfs: bad root offset 238129228
[   67.325227][ T5667] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   67.432336][ T6294] loop1: detected capacity change from 0 to 128
[   67.453501][ T6294] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   67.460450][ T6294] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.478684][ T5667] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   67.489914][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.490163][ T5667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.497280][ T5595] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.514219][ T5667] usb 1-1: config 0 descriptor??
[   67.530699][ T6249] veth0_vlan: entered promiscuous mode
[   67.533417][ T5667] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   67.546217][ T6249] veth1_vlan: entered promiscuous mode
[   67.585931][ T6249] veth0_macvtap: entered promiscuous mode
[   67.594068][ T6249] veth1_macvtap: entered promiscuous mode
[   67.606262][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.616799][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.641418][ T5625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.645212][ T5625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.687173][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.693498][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.723894][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.733455][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.762034][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.766079][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.880008][ T6304] vivid-006: disconnect
[   67.882440][ T6303] vivid-006: reconnect
[   67.928720][ T6306] Trying to write to read-only block-device nullb0
[   67.999486][ T6307] FAULT_INJECTION: forcing a failure.
[   67.999486][ T6307] name failslab, interval 1, probability 0, space 0, times 0
[   68.005435][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.3.248 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   68.005449][ T6307] Tainted: [L]=SOFTLOCKUP
[   68.005452][ T6307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.005457][ T6307] Call Trace:
[   68.005461][ T6307]  <TASK>
[   68.005466][ T6307]  dump_stack_lvl+0xe8/0x150
[   68.005483][ T6307]  should_fail_ex+0x410/0x560
[   68.005496][ T6307]  should_failslab+0xa8/0x100
[   68.005511][ T6307]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   68.005558][ T6307]  ? kmem_cache_alloc_noprof+0x152/0x5f0
[   68.005569][ T6307]  ? mempool_init_node+0x1f4/0x4f0
[   68.005581][ T6307]  ? mempool_init_node+0x1f4/0x4f0
[   68.005593][ T6307]  ? __pfx_mempool_alloc_slab+0x10/0x10
[   68.005605][ T6307]  mempool_init_node+0x1f4/0x4f0
[   68.005619][ T6307]  ? __pfx_mempool_alloc_slab+0x10/0x10
[   68.005631][ T6307]  mempool_create_node_noprof+0xb8/0x150
[   68.005642][ T6307]  ? __pfx_mempool_free_slab+0x10/0x10
[   68.005655][ T6307]  ceph_osdc_init+0x4fa/0x900
[   68.005670][ T6307]  ceph_create_client+0x246/0x310
[   68.005680][ T6307]  ceph_get_tree+0x1ca/0x1a40
[   68.005693][ T6307]  ? apparmor_capable+0x126/0x170
[   68.005706][ T6307]  vfs_get_tree+0x92/0x2a0
[   68.005717][ T6307]  vfs_cmd_create+0xa2/0x200
[   68.005730][ T6307]  __se_sys_fsconfig+0x6b9/0x810
[   68.005742][ T6307]  ? __pfx___se_sys_fsconfig+0x10/0x10
[   68.005751][ T6307]  ? ksys_write+0x242/0x270
[   68.005760][ T6307]  ? __pfx_ksys_write+0x10/0x10
[   68.005769][ T6307]  ? __x64_sys_fsconfig+0x20/0xc0
[   68.005779][ T6307]  do_syscall_64+0x166/0x520
[   68.005790][ T6307]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.005800][ T6307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.005808][ T6307] RIP: 0033:0x7f316019e159
[   68.005817][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.005823][ T6307] RSP: 002b:00007f315e3d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   68.005833][ T6307] RAX: ffffffffffffffda RBX: 00007f3160426090 RCX: 00007f316019e159
[   68.005838][ T6307] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[   68.005842][ T6307] RBP: 00007f316023506b R08: 0000000000000000 R09: 0000000000000000
[   68.005846][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.005850][ T6307] R13: 00007f3160426128 R14: 00007f3160426090 R15: 00007ffc789a9998
[   68.005862][ T6307]  </TASK>
[   68.267900][   T55] Bluetooth: hci1: command tx timeout
[   68.335864][   T34] kauditd_printk_skb: 92 callbacks suppressed
[   68.335879][   T34] audit: type=1800 audit(1789581412.043:338): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[   68.351320][ T6309] netlink: 10 bytes leftover after parsing attributes in process `syz.3.249'.
[   68.366811][   T34] audit: type=1800 audit(1789581412.053:339): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.246" name="/" dev="fuse" ino=1 res=0 errno=0
[   68.406126][   T34] audit: type=1800 audit(1789581412.116:340): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   68.418988][ T6313] loop1: detected capacity change from 0 to 64
[   68.436850][   T34] audit: type=1800 audit(1789581412.148:341): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   68.442090][ T6313] syz.1.251: attempt to access beyond end of device
[   68.442090][ T6313] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[   68.472085][   T34] audit: type=1800 audit(1789581412.179:342): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[   68.489577][   T34] audit: type=1800 audit(1789581412.200:343): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   68.541675][ T6318] loop1: detected capacity change from 0 to 1024
[   68.580266][ T6320] loop3: detected capacity change from 0 to 128
[   68.580638][   T34] audit: type=1800 audit(1789581412.295:344): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   68.593603][ T6320] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   68.599057][ T6320] hpfs: filesystem error: improperly stopped
[   68.601071][ T6320] hpfs: You really don't want any checks? You are crazy...
[   68.603687][ T6320] hpfs: hpfs_map_sector(): read error
[   68.607884][ T6320] hpfs: code page support is disabled
[   68.609943][   T34] audit: type=1800 audit(1789581412.326:345): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[   68.612966][ T6320] hpfs: filesystem error: map_dirent: not a directory
[   68.625193][ T5625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.629417][ T6320] 
[   68.631262][ T6320] hpfs: hpfs_map_4sectors(): unaligned read
[   68.632675][   T34] audit: type=1800 audit(1789581412.347:346): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[   68.633131][ T6320] hpfs: filesystem error: unable to find root dir
[   68.676062][ T6318] hfsplus: invalid length 1280 has been corrected to 255
[   68.698509][   T34] audit: type=1800 audit(1789581412.421:347): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[   68.738779][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'.
[   68.768800][ T5667] gspca_stv06xx: I2C: Read error writing address: -71
[   68.772389][ T5667] usb 1-1: USB disconnect, device number 4
[   68.809240][ T5625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.889001][ T6327] loop1: detected capacity change from 0 to 512
[   68.889305][   T55] Bluetooth: hci1: hcon ffff8881be538000 sent 1 < count 7
[   68.927190][ T5625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.939640][ T6327] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   68.947078][ T6327] FAT-fs (loop1): Filesystem has been set read-only
[   68.951472][ T6327] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   68.959896][ T6327] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   69.032029][ T5625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.067623][ T6336] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   69.158923][ T5625] team0: left allmulticast mode
[   69.160915][ T5625] team_slave_0: left allmulticast mode
[   69.162670][ T5625] team_slave_1: left allmulticast mode
[   69.165269][ T5625] team0: left promiscuous mode
[   69.166902][ T5625] team_slave_0: left promiscuous mode
[   69.168844][ T5625] team_slave_1: left promiscuous mode
[   69.176304][ T5625] gretap1: left promiscuous mode
[   69.178965][ T5625] bridge0: port 3(team0) entered disabled state
[   69.186370][ T5625] bridge_slave_1: left allmulticast mode
[   69.188212][ T5625] bridge_slave_1: left promiscuous mode
[   69.191102][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.197513][ T5625] bridge_slave_0: left allmulticast mode
[   69.199359][ T5625] bridge_slave_0: left promiscuous mode
[   69.201374][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.574459][ T5664] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   69.653738][ T5625] team0: Port device gretap1 removed
[   69.689618][ T5625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.710737][ T5625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.717205][ T5625] bond0 (unregistering): Released all slaves
[   69.729428][ T5664] usb 4-1: unable to get BOS descriptor or descriptor too short
[   69.733159][ T5664] usb 4-1: not running at top speed; connect to a high speed hub
[   69.737555][ T5664] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   69.743251][ T5664] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[   69.746901][ T5664] usb 4-1: config 0 has no interface number 0
[   69.754072][ T5664] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[   69.761454][ T5664] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   69.770542][ T5664] usb 4-1: config 0 interface 88 has no altsetting 0
[   69.783600][ T5664] usb 4-1: string descriptor 0 read error: -22
[   69.790993][ T5664] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   69.806796][ T5664] usb 4-1: config 0 descriptor??
[   69.848790][ T5664] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input7
[   70.039756][ T6353] block nbd0: NBD_DISCONNECT
[   70.050713][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.063322][ T6353] exFAT-fs (nbd0): unable to read boot sector
[   70.068249][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.076395][ T6353] exFAT-fs (nbd0): failed to read boot sector
[   70.083621][ T5587] udevd[5587]: Error opening device "/dev/input/event3": Input/output error
[   70.088904][ T6353] exFAT-fs (nbd0): failed to recognize exfat type
[   70.092462][ T5587] udevd[5587]: Unable to EVIOCGABS device "/dev/input/event3"
[   70.098421][ T5587] udevd[5587]: Unable to EVIOCGABS device "/dev/input/event3"
[   70.204376][ T6361] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   70.207195][ T6361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.229302][ T5335] 8021q: adding VLAN 0 to HW filter on device eth1
[   70.229407][ T6361] vhci_hcd vhci_hcd.0: Device attached
[   70.249311][ T6362] vhci_hcd: connection closed
[   70.249833][   T55] Bluetooth: hci1: command tx timeout
[   70.255258][   T13] vhci_hcd vhci_hcd.1: stop threads
[   70.260083][   T13] vhci_hcd vhci_hcd.1: release socket
[   70.268601][   T13] vhci_hcd vhci_hcd.1: disconnect device
[   70.332607][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[   70.336313][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[   70.530867][ T5625] hsr_slave_0: left promiscuous mode
[   70.534416][ T5625] hsr_slave_1: left promiscuous mode
[   70.537842][ T5625] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.541089][ T5625] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.545611][ T5625] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.548739][ T5625] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.601406][ T5625] veth1_macvtap: left promiscuous mode
[   70.608158][ T5625] veth0_macvtap: left promiscuous mode
[   70.610561][ T5625] veth1_vlan: left promiscuous mode
[   70.613430][ T5625] veth0_vlan: left promiscuous mode
[   71.321831][ T5625] team0 (unregistering): Port device team_slave_1 removed
[   71.349856][ T5625] team0 (unregistering): Port device team_slave_0 removed
[   71.467320][   T31] usb 4-1: USB disconnect, device number 2
[   71.526043][ T6379] loop3: detected capacity change from 0 to 764
[   71.540985][ T6379] rock: directory entry would overflow storage
[   71.547676][ T6379] rock: sig=0x4654, size=5, remaining=4
[   71.854759][ T5335] 8021q: adding VLAN 0 to HW filter on device eth3
[   71.871457][ T6383] loop3: detected capacity change from 0 to 4096
[   71.936157][ T6383] ntfs3(loop3): Failed to load $Extend (-22).
[   71.938718][ T6383] ntfs3(loop3): Failed to initialize $Extend.
[   72.113214][ T5335] 8021q: adding VLAN 0 to HW filter on device eth4
[   72.241713][   T55] Bluetooth: hci1: command tx timeout
[   72.430297][ T6404] xt_connbytes: Forcing CT accounting to be enabled
[   72.740402][ T5335] 8021q: adding VLAN 0 to HW filter on device eth2
[   72.967136][ T6412] file system registered
[   72.988183][ T6412] ffs_data_put(): freeing
[   73.014703][ T5586] ffs_data_put(): freeing
[   73.209977][   T34] kauditd_printk_skb: 71 callbacks suppressed
[   73.209988][   T34] audit: type=1800 audit(1789581417.155:419): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   73.252996][   T34] audit: type=1800 audit(1789581417.208:420): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   73.269935][   T34] audit: type=1800 audit(1789581417.218:421): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[   73.289339][   T34] audit: type=1800 audit(1789581417.239:422): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.285" name="arp_interval" dev="sysfs" ino=107096 res=0 errno=0
[   73.297660][ T5056] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   73.313036][ T5625] bond0: (slave bond_slave_0): interface is now down
[   73.316943][   T34] audit: type=1800 audit(1789581417.260:423): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   73.335863][ T5625] bond0: (slave bond_slave_1): interface is now down
[   73.353549][ T5625] bond0: now running without any active interface!
[   73.357661][   T34] audit: type=1800 audit(1789581417.313:424): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[   73.399415][   T34] audit: type=1800 audit(1789581417.355:425): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   73.443598][   T34] audit: type=1800 audit(1789581417.407:426): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   73.461490][ T5056] usb 1-1: unable to get BOS descriptor or descriptor too short
[   73.467248][ T5056] usb 1-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=c2.02
[   73.474719][ T5056] usb 1-1: config 114 has an invalid interface number: 127 but max is 0
[   73.480205][ T5056] usb 1-1: config 114 has no interface number 0
[   73.487283][ T5056] usb 1-1: config 114 interface 127 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[   73.491769][   T34] audit: type=1800 audit(1789581417.449:427): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14707 res=0 errno=0
[   73.510920][ T5056] usb 1-1: config 114 interface 127 has no altsetting 0
[   73.520663][ T5056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.523718][ T5056] usb 1-1: Product: syz
[   73.527318][ T5056] usb 1-1: Manufacturer: syz
[   73.532558][ T5056] usb 1-1: SerialNumber: syz
[   73.547686][   T34] audit: type=1800 audit(1789581417.512:428): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=112948 res=0 errno=0
[   73.618856][ T6436] loop1: detected capacity change from 0 to 32768
[   73.629685][ T6436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.290 (6436)
[   73.655448][ T6436] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.660716][ T6436] BTRFS info (device loop1): using sha256 checksum algorithm
[   73.663100][ T6436] BTRFS error (device loop1): ignoresuperflags must be used with ro mount option
[   73.666042][ T6436] BTRFS error (device loop1): open_ctree failed: -22
[   73.778497][ T5056] usb 1-1: Could not find all expected endpoints
[   73.780300][ T6443] capability: warning: `syz.3.292' uses deprecated v2 capabilities in a way that may be insecure
[   73.795405][ T5056] usb 1-1: USB disconnect, device number 5
[   73.845637][ T6445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.848670][ T6445] IPv6: NLM_F_CREATE should be set when creating new route
[   73.850974][ T6445] IPv6: NLM_F_CREATE should be set when creating new route
[   74.178732][ T6458] loop1: detected capacity change from 0 to 32768
[   74.192549][ T6458] Duplicate index:1 in stbl in dtroot
[   74.192549][ T6458] 
[   74.197759][ T6458] ERROR: (device loop1): copy_from_dinode: Corrupt dtroot
[   74.197759][ T6458] 
[   74.212298][   T55] Bluetooth: hci1: command tx timeout
[   74.422749][ T6475] loop1: detected capacity change from 0 to 128
[   74.451059][ T6475] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   74.467841][ T6475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.522012][ T6475] ------------[ cut here ]------------
[   74.524184][ T6475] byte_offset
[   74.524192][ T6475] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd79/0xef0, CPU#0: syz.1.306/6475
[   74.528399][ T6475] Modules linked in:
[   74.530762][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.1.306 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   74.533989][ T6475] Tainted: [L]=SOFTLOCKUP
[   74.535283][ T6475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.538405][ T6475] RIP: 0010:udf_truncate_extents+0xd79/0xef0
[   74.540299][ T6475] Code: d4 0c 10 48 3b 84 24 80 01 00 00 75 7a 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e ee 76 08 cc e8 98 69 65 fe 90 <0f> 0b 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f3 f3 ff ff
[   74.546258][ T6475] RSP: 0018:ffffc900070578c0 EFLAGS: 00010287
[   74.548242][ T6475] RAX: ffffffff83619b98 RBX: 000000000000000a RCX: 0000000000080000
[   74.550720][ T6475] RDX: ffffc90008499000 RSI: 0000000000000c46 RDI: 0000000000000c47
[   74.553172][ T6475] RBP: ffffc90007057a98 R08: ffff88810ae08000 R09: 0000000000000002
[   74.555752][ T6475] R10: 0000000000000001 R11: 0000000000000002 R12: 000000000000000a
[   74.558278][ T6475] R13: 1ffff1102398e80a R14: 0000000000000000 R15: 0000000000000000
[   74.560746][ T6475] FS:  00007ff8269b56c0(0000) GS:ffff88818d939000(0000) knlGS:0000000000000000
[   74.563624][ T6475] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   74.565732][ T6475] CR2: 000000110c441706 CR3: 000000011dcd6000 CR4: 00000000000006f0
[   74.568130][ T6475] Call Trace:
[   74.569218][ T6475]  <TASK>
[   74.570181][ T6475]  ? udf_write_failed+0xcd/0x1b0
[   74.571794][ T6475]  ? udf_write_failed+0xcd/0x1b0
[   74.573359][ T6475]  ? __pfx_udf_truncate_extents+0x10/0x10
[   74.575228][ T6475]  ? do_raw_spin_lock+0x12b/0x2f0
[   74.576898][ T6475]  ? do_raw_spin_unlock+0x4d/0x200
[   74.578594][ T6475]  udf_write_failed+0x168/0x1b0
[   74.580100][ T6475]  udf_write_begin+0x215/0x270
[   74.581732][ T6475]  generic_perform_write+0x2d5/0x8f0
[   74.583411][ T6475]  ? __pfx_generic_perform_write+0x10/0x10
[   74.585475][ T6475]  ? file_update_time_flags+0x3ab/0x440
[   74.587287][ T6475]  ? __generic_file_write_iter+0xf9/0x230
[   74.589062][ T6475]  ? udf_file_write_iter+0x2d6/0x6c0
[   74.590773][ T6475]  udf_file_write_iter+0x2e8/0x6c0
[   74.592372][ T6475]  vfs_write+0x612/0xba0
[   74.594262][ T6475]  ? __pfx_vfs_write+0x10/0x10
[   74.595951][ T6475]  ? __pfx_do_futex+0x10/0x10
[   74.597490][ T6475]  ? kmem_cache_free+0x182/0x650
[   74.599167][ T6475]  ksys_write+0x150/0x270
[   74.600697][ T6475]  ? __pfx_ksys_write+0x10/0x10
[   74.602273][ T6475]  do_syscall_64+0x166/0x520
[   74.604067][ T6475]  ? trace_irq_disable+0x3b/0x140
[   74.605863][ T6475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.607829][ T6475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.609772][ T6475] RIP: 0033:0x7ff825b9e159
[   74.611133][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.617536][ T6475] RSP: 002b:00007ff8269b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   74.620382][ T6475] RAX: ffffffffffffffda RBX: 00007ff825e25fa0 RCX: 00007ff825b9e159
[   74.623010][ T6475] RDX: 0000000000001358 RSI: 0000000000000000 RDI: 0000000000000004
[   74.625454][ T6475] RBP: 00007ff825c3506b R08: 0000000000000000 R09: 0000000000000000
[   74.627934][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.630384][ T6475] R13: 00007ff825e26038 R14: 00007ff825e25fa0 R15: 00007fff16512e68
[   74.632921][ T6475]  </TASK>
[   74.633960][ T6475] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   74.636285][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.1.306 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   74.639558][ T6475] Tainted: [L]=SOFTLOCKUP
[   74.640924][ T6475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.644003][ T6475] Call Trace:
[   74.645057][ T6475]  <TASK>
[   74.645989][ T6475]  vpanic+0x56d/0xa60
[   74.647244][ T6475]  ? __pfx__printk+0x10/0x10
[   74.648704][ T6475]  ? __pfx_vpanic+0x10/0x10
[   74.650118][ T6475]  ? is_bpf_text_address+0x292/0x2b0
[   74.652067][ T6475]  ? is_bpf_text_address+0x26/0x2b0
[   74.653727][ T6475]  panic+0xc5/0xd0
[   74.654920][ T6475]  ? __pfx_panic+0x10/0x10
[   74.656324][ T6475]  __warn+0x315/0x4c0
[   74.657586][ T6475]  ? udf_truncate_extents+0xd79/0xef0
[   74.659268][ T6475]  ? udf_truncate_extents+0xd79/0xef0
[   74.660964][ T6475]  __report_bug+0x276/0x570
[   74.662400][ T6475]  ? udf_truncate_extents+0xd79/0xef0
[   74.664155][ T6475]  ? __pfx___report_bug+0x10/0x10
[   74.665760][ T6475]  ? udf_get_filelongad+0x6e/0x1b0
[   74.667364][ T6475]  ? udf_current_aext+0x6c3/0xc50
[   74.668950][ T6475]  ? udf_next_aext+0x404/0x4f0
[   74.670526][ T6475]  ? udf_truncate_extents+0xd79/0xef0
[   74.672249][ T6475]  report_bug+0x16b/0x220
[   74.673641][ T6475]  ? udf_truncate_extents+0xd79/0xef0
[   74.675327][ T6475]  ? udf_truncate_extents+0xd7b/0xef0
[   74.676994][ T6475]  handle_bug+0x9c/0x200
[   74.678420][ T6475]  exc_invalid_op+0x1a/0x50
[   74.679900][ T6475]  asm_exc_invalid_op+0x1a/0x20
[   74.681402][ T6475] RIP: 0010:udf_truncate_extents+0xd79/0xef0
[   74.683276][ T6475] Code: d4 0c 10 48 3b 84 24 80 01 00 00 75 7a 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e ee 76 08 cc e8 98 69 65 fe 90 <0f> 0b 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f3 f3 ff ff
[   74.689231][ T6475] RSP: 0018:ffffc900070578c0 EFLAGS: 00010287
[   74.691116][ T6475] RAX: ffffffff83619b98 RBX: 000000000000000a RCX: 0000000000080000
[   74.693592][ T6475] RDX: ffffc90008499000 RSI: 0000000000000c46 RDI: 0000000000000c47
[   74.695930][ T6475] RBP: ffffc90007057a98 R08: ffff88810ae08000 R09: 0000000000000002
[   74.698359][ T6475] R10: 0000000000000001 R11: 0000000000000002 R12: 000000000000000a
[   74.700832][ T6475] R13: 1ffff1102398e80a R14: 0000000000000000 R15: 0000000000000000
[   74.703306][ T6475]  ? udf_truncate_extents+0xd78/0xef0
[   74.704975][ T6475]  ? udf_write_failed+0xcd/0x1b0
[   74.706548][ T6475]  ? udf_write_failed+0xcd/0x1b0
[   74.708093][ T6475]  ? __pfx_udf_truncate_extents+0x10/0x10
[   74.709869][ T6475]  ? do_raw_spin_lock+0x12b/0x2f0
[   74.711453][ T6475]  ? do_raw_spin_unlock+0x4d/0x200
[   74.713076][ T6475]  udf_write_failed+0x168/0x1b0
[   74.714592][ T6475]  udf_write_begin+0x215/0x270
[   74.716111][ T6475]  generic_perform_write+0x2d5/0x8f0
[   74.717818][ T6475]  ? __pfx_generic_perform_write+0x10/0x10
[   74.719822][ T6475]  ? file_update_time_flags+0x3ab/0x440
[   74.721582][ T6475]  ? __generic_file_write_iter+0xf9/0x230
[   74.723341][ T6475]  ? udf_file_write_iter+0x2d6/0x6c0
[   74.724999][ T6475]  udf_file_write_iter+0x2e8/0x6c0
[   74.726615][ T6475]  vfs_write+0x612/0xba0
[   74.727957][ T6475]  ? __pfx_vfs_write+0x10/0x10
[   74.729432][ T6475]  ? __pfx_do_futex+0x10/0x10
[   74.730922][ T6475]  ? kmem_cache_free+0x182/0x650
[   74.732484][ T6475]  ksys_write+0x150/0x270
[   74.733841][ T6475]  ? __pfx_ksys_write+0x10/0x10
[   74.735341][ T6475]  do_syscall_64+0x166/0x520
[   74.736811][ T6475]  ? trace_irq_disable+0x3b/0x140
[   74.738392][ T6475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.740290][ T6475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.742131][ T6475] RIP: 0033:0x7ff825b9e159
[   74.743524][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.749439][ T6475] RSP: 002b:00007ff8269b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   74.752021][ T6475] RAX: ffffffffffffffda RBX: 00007ff825e25fa0 RCX: 00007ff825b9e159
[   74.754445][ T6475] RDX: 0000000000001358 RSI: 0000000000000000 RDI: 0000000000000004
[   74.756980][ T6475] RBP: 00007ff825c3506b R08: 0000000000000000 R09: 0000000000000000
[   74.759452][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.761930][ T6475] R13: 00007ff825e26038 R14: 00007ff825e25fa0 R15: 00007fff16512e68
[   74.764318][ T6475]  </TASK>
[   74.765988][ T6475] Kernel Offset: disabled
[   74.767352][ T6475] Rebooting in 86400 seconds..
